Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft
File:                     D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft (raw, json)
Hash identifier:          qrHLBanVI0pPstQ2e+mOXplb0vLz2U9fe90uaoK9Co0=
Subject key identifier:   B0:C8:94:30:9E:5C:94:D7:66:05:7D:C9:33:7B:77:2A:FB:DF:F3:E3
Authority key identifier: 0F:99:B1:FE:CF:A5:70:04:F6:43:D8:2B:F5:11:CD:D4:74:78:6D:A0
Certificate issuer:       /CN=A9185413/serialNumber=0F99B1FECFA57004F643D82BF511CDD474786DA0
Certificate serial:       019C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5mx_s-lcAT2Q9gr9RHN1HR4baA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft
Manifest number:          0198
Signing time:             Sun 01 Mar 2026 05:11:54 +0000
Manifest this update:     Sun 01 Mar 2026 05:11:54 +0000
Manifest next update:     Sun 08 Mar 2026 05:11:54 +0000
Files and hashes:         1: D5mx_s-lcAT2Q9gr9RHN1HR4baA.crl (hash: c4KMBWiE6evggWacg6ZSd2jGtnxRmSdyVRU/iF9uKF8=)
                          2: C1D49C12AEDF11EE96155C68C4F9AE02.roa (hash: EH9Ecs3l16GCiHR30STE9VxjfuPqLau85IhtMpZldhM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.crl
                          rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5mx_s-lcAT2Q9gr9RHN1HR4baA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 05:11:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 412 (0x19c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185413, serialNumber=0F99B1FECFA57004F643D82BF511CDD474786DA0
        Validity
            Not Before: Mar  1 05:11:54 2026 GMT
            Not After : Mar  8 05:11:54 2026 GMT
        Subject: CN=69a3ca9a-10a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a1:8f:bb:d2:1c:49:f9:57:fa:58:dc:e4:4a:
                    c7:9d:d5:a0:00:05:40:66:08:10:5b:73:a3:b4:24:
                    7b:57:cb:1c:92:dd:f9:ec:00:56:df:3d:55:d8:b5:
                    7e:18:93:9f:5f:fb:af:68:3a:5a:49:f7:92:c9:34:
                    eb:01:8a:db:08:4c:b1:e1:5f:53:1e:44:27:ac:6a:
                    8f:42:30:aa:cc:b2:42:5a:cd:1d:67:b8:27:4b:c5:
                    23:06:e3:6d:15:bd:c2:3c:e7:f4:09:4d:9e:94:76:
                    d7:10:3c:07:35:82:5e:10:a2:f8:42:ba:df:bb:30:
                    fd:f3:46:99:3f:0e:ae:9c:28:36:78:3f:32:e2:b8:
                    1d:39:3f:92:d9:98:a6:4f:1b:da:8b:f8:c0:85:99:
                    ea:05:cf:f7:f5:58:99:41:b9:cf:4b:54:b1:3c:97:
                    9e:3e:fa:40:b4:df:5d:83:a0:43:5d:36:b2:ae:60:
                    d2:ff:a9:bf:79:ba:81:84:a0:b7:79:fb:b2:73:ef:
                    de:62:04:ef:4b:a8:95:2f:a0:3d:d8:8e:81:16:4a:
                    7e:56:ce:73:03:da:52:a4:23:26:48:95:06:29:fb:
                    44:33:f2:79:81:86:19:fc:cd:58:d4:95:a5:75:27:
                    0b:c0:0a:25:ca:48:25:88:99:bd:43:28:96:96:ac:
                    09:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C8:94:30:9E:5C:94:D7:66:05:7D:C9:33:7B:77:2A:FB:DF:F3:E3
            X509v3 Authority Key Identifier:
                keyid:0F:99:B1:FE:CF:A5:70:04:F6:43:D8:2B:F5:11:CD:D4:74:78:6D:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5mx_s-lcAT2Q9gr9RHN1HR4baA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:93:74:b2:c2:3e:a8:b7:6b:b2:00:78:54:e6:83:4d:ff:f0:
         b0:b7:82:37:ec:4c:71:1d:3a:23:6f:56:82:09:aa:55:31:2e:
         cb:80:ae:35:dd:3e:a8:6c:5c:f4:6d:89:cd:6c:81:4d:61:c3:
         5d:5d:7f:62:89:47:85:48:5b:1f:d8:a3:f5:e7:8f:81:70:15:
         f3:81:49:46:09:7b:82:bb:4e:38:97:85:e7:83:2e:df:35:4b:
         1d:8d:aa:e9:e3:a0:7c:bc:1b:fd:1e:78:f8:dd:bc:17:2d:e1:
         64:04:8f:2d:30:4c:fc:d7:3a:0e:82:93:69:9b:76:4c:db:9a:
         1d:96:ff:c9:3c:09:cb:6d:8c:9e:ab:5b:cd:0e:df:2a:ac:2c:
         0f:f7:60:b6:ec:6a:47:84:de:b9:d2:5b:6d:9d:30:69:c3:5f:
         da:86:2e:8b:d4:4c:85:22:37:37:b9:65:09:8c:c7:61:ab:30:
         63:4c:74:d1:0f:97:eb:2d:63:55:9d:bb:46:46:9f:6a:25:27:
         0b:11:7b:44:3c:93:d5:18:0c:1a:9e:23:97:f2:9f:c6:46:5b:
         c5:2d:77:1b:6b:86:30:d9:a8:e9:99:71:16:5d:1e:a6:e4:53:
         68:8b:e6:97:c7:94:b8:b6:4b:96:aa:2f:7e:92:0f:1f:be:07:
         52:48:d0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:16 2026 by rpki-client