Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.mft
File:                     THCMnrGnIEQyp34ljBbNGCB8VXM.mft (raw, json)
Hash identifier:          5JcZJVGQCf7f/0/HVApy3JJNT+7y07+Fy2P8oJ7Aqko=
Subject key identifier:   8D:67:4E:4C:C9:35:C9:5A:0B:09:43:C3:30:61:C2:06:6E:88:2B:36
Authority key identifier: 4C:70:8C:9E:B1:A7:20:44:32:A7:7E:25:8C:16:CD:18:20:7C:55:73
Certificate issuer:       /CN=A91880A4/serialNumber=4C708C9EB1A7204432A77E258C16CD18207C5573
Certificate serial:       5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THCMnrGnIEQyp34ljBbNGCB8VXM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.mft
Manifest number:          5A
Signing time:             Sun 01 Mar 2026 09:31:34 +0000
Manifest this update:     Sun 01 Mar 2026 09:31:34 +0000
Manifest next update:     Sun 08 Mar 2026 09:31:34 +0000
Files and hashes:         1: THCMnrGnIEQyp34ljBbNGCB8VXM.crl (hash: wEBy2SjiFnZFoY7feo53g5KY1BtzdRD2G2Ojx0vvkj0=)
                          2: 006500928EE611F094A24C77C4F9AE02.roa (hash: JvNAPDalguuZAryPwlyPinfBOmbcTwSQAasxzcL/9JE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.crl
                          rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THCMnrGnIEQyp34ljBbNGCB8VXM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:31:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91880A4, serialNumber=4C708C9EB1A7204432A77E258C16CD18207C5573
        Validity
            Not Before: Mar  1 09:31:34 2026 GMT
            Not After : Mar  8 09:31:34 2026 GMT
        Subject: CN=69a40776-f8f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:cb:ce:38:4f:d2:ef:b4:1b:25:c2:9b:3e:82:
                    80:a5:a7:17:98:61:7c:ce:72:0b:57:46:5c:ec:57:
                    54:ef:9f:c5:db:13:81:f6:2d:ea:17:22:4d:9c:bb:
                    64:44:90:48:88:79:a3:7b:09:99:d7:eb:4d:e3:56:
                    77:b2:bc:6d:a9:c9:ed:9a:78:4a:b8:75:35:49:79:
                    e4:8f:60:1c:06:29:e6:ca:78:ab:22:5a:4c:93:8d:
                    19:1b:aa:52:bf:fe:78:09:08:14:9c:ac:bb:77:ec:
                    05:d8:f2:bd:fc:00:f7:90:4b:f3:38:1a:b2:d3:83:
                    06:9f:47:18:99:ea:1e:cc:8c:60:22:37:63:f0:b2:
                    2b:fb:c3:e0:9c:0b:23:4a:d4:23:f4:04:22:8b:a3:
                    61:30:3a:94:a4:67:a2:c3:97:6b:a5:7b:28:14:2e:
                    79:5e:1c:de:86:1e:36:e9:83:a1:2a:4d:0d:76:18:
                    1e:06:5d:ea:e4:e3:f6:3b:a1:ba:33:d1:a3:66:11:
                    44:d3:e6:36:42:3e:df:e5:73:a9:0a:1f:27:d7:af:
                    53:e0:56:54:5d:aa:0e:66:0f:30:3f:47:95:81:45:
                    b1:15:6c:59:34:ff:9a:c4:d0:be:a3:3e:7b:e0:cc:
                    dc:3d:eb:9d:83:c6:af:46:33:06:2a:d8:0e:6b:da:
                    3a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:67:4E:4C:C9:35:C9:5A:0B:09:43:C3:30:61:C2:06:6E:88:2B:36
            X509v3 Authority Key Identifier:
                keyid:4C:70:8C:9E:B1:A7:20:44:32:A7:7E:25:8C:16:CD:18:20:7C:55:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THCMnrGnIEQyp34ljBbNGCB8VXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91880A4/78D2693E8E5011F0873DEB0CC4F9AE02/THCMnrGnIEQyp34ljBbNGCB8VXM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:3b:1f:95:59:30:ef:db:d2:a3:ba:5b:65:ef:c0:e7:bb:35:
         dd:6e:69:31:a5:5e:15:a2:9f:b9:ce:ec:82:80:79:5f:f4:a6:
         46:fc:a9:ce:96:47:e9:0d:91:1d:9a:8d:52:6f:15:cc:55:14:
         55:b4:46:73:9e:ef:6e:97:58:1c:a5:54:8e:19:a5:ef:cd:4d:
         e9:25:0d:0f:35:b9:ee:a1:16:69:3a:21:20:03:d1:ce:8c:33:
         4f:86:a6:71:60:d4:d8:d8:8e:ae:2c:99:a3:ba:dc:3c:03:20:
         7f:6b:3c:bf:e6:c5:22:11:f3:ab:40:b7:c9:06:1b:d3:8d:a7:
         db:2b:da:b5:1c:7d:d0:d6:ec:32:29:b1:43:ea:55:17:b1:68:
         e4:e8:63:dc:71:e4:ae:05:61:d7:80:a7:a8:ef:ee:d6:be:be:
         06:95:f7:5a:f5:fb:ac:19:1b:0d:07:de:13:1d:0f:8c:81:88:
         36:a6:8c:d6:58:8d:e7:0f:5c:a7:1a:ca:34:ff:72:62:f6:ad:
         6e:d5:d4:8a:76:6e:81:15:6a:ef:47:40:3e:cb:0f:28:e0:a4:
         19:80:35:1c:4b:d5:22:6e:59:fb:db:f2:4f:8b:e0:71:4a:33:
         81:61:fa:52:60:a9:57:75:ea:eb:fa:d4:13:3e:da:e9:eb:6b:
         41:5c:25:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:46:04 2026 by rpki-client