Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.mft
File:                     J5KVmyX7-evckzm6nH01VXJpaas.mft (raw, json)
Hash identifier:          N8+GoxQiv48qA60XnmKu/CBQrIsu/Rj5XoR2y/ZWhsQ=
Subject key identifier:   8F:BB:58:1F:B3:06:E2:0B:BF:29:7E:BA:BD:04:82:80:74:DC:E7:3F
Authority key identifier: 27:92:95:9B:25:FB:F9:EB:DC:93:39:BA:9C:7D:35:55:72:69:69:AB
Certificate issuer:       /CN=A9189261/serialNumber=2792959B25FBF9EBDC9339BA9C7D3555726969AB
Certificate serial:       06ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5KVmyX7-evckzm6nH01VXJpaas.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.mft
Manifest number:          06E5
Signing time:             Sun 01 Mar 2026 23:06:47 +0000
Manifest this update:     Sun 01 Mar 2026 23:06:46 +0000
Manifest next update:     Sun 08 Mar 2026 23:06:46 +0000
Files and hashes:         1: J5KVmyX7-evckzm6nH01VXJpaas.crl (hash: /0iPWCFVQqhktOaIdEFzHdHAWM39hS0Bdt5AbwW3m1c=)
                          2: CDACEC3686AD11EBBDFD106EC4F9AE02.roa (hash: NuZ0V56C6Hli1WMtvi5fxImBApK6WDo7ku/N8isp6hQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.crl
                          rsync://rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5KVmyX7-evckzm6nH01VXJpaas.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:06:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1773 (0x6ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189261, serialNumber=2792959B25FBF9EBDC9339BA9C7D3555726969AB
        Validity
            Not Before: Mar  1 23:06:46 2026 GMT
            Not After : Mar  8 23:06:46 2026 GMT
        Subject: CN=69a4c686-44c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:47:b1:22:3a:34:68:18:ab:8b:41:95:53:37:
                    21:64:80:ec:6e:29:bb:af:19:40:2e:55:c5:b3:82:
                    b1:6e:ba:ed:38:29:d4:ed:38:a4:1a:71:2e:fd:b5:
                    c0:3f:48:78:89:81:39:f4:a2:0f:90:23:b0:12:d7:
                    b3:39:1f:af:29:c6:a9:47:f2:29:d7:f5:47:b0:31:
                    40:22:34:4a:09:71:ef:ec:8d:49:3a:64:9b:c4:69:
                    4e:91:8f:8b:5a:bf:1b:a9:4c:04:d6:f0:bc:17:bb:
                    d6:4a:87:cb:53:be:95:d6:53:61:0e:5a:92:48:97:
                    47:d2:6f:c1:d9:5c:41:e6:a2:bb:d2:dd:37:d2:7f:
                    fb:72:9f:b5:aa:9f:58:d9:bc:77:0d:6e:4d:42:d7:
                    3e:7e:b8:03:cd:d8:3f:14:8c:b9:89:fb:9e:7c:22:
                    c1:b5:46:43:2c:cc:f0:27:c7:b4:f1:5f:da:79:4e:
                    61:6a:2c:2a:78:73:60:32:51:03:cc:d0:8c:6c:e8:
                    b9:b5:1a:36:79:d4:a7:c7:9d:4a:37:00:ca:55:89:
                    6d:31:dc:4a:52:ff:48:1c:3a:47:66:b6:3a:0d:e3:
                    1d:cc:3f:c9:9a:2d:5f:af:0a:4b:fb:fc:12:f3:e3:
                    cc:b2:c9:cc:00:ea:4f:3e:f8:1d:51:1b:5f:ad:7d:
                    c9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:BB:58:1F:B3:06:E2:0B:BF:29:7E:BA:BD:04:82:80:74:DC:E7:3F
            X509v3 Authority Key Identifier:
                keyid:27:92:95:9B:25:FB:F9:EB:DC:93:39:BA:9C:7D:35:55:72:69:69:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5KVmyX7-evckzm6nH01VXJpaas.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189261/90B6F72E86AB11EBA9086350C4F9AE02/J5KVmyX7-evckzm6nH01VXJpaas.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:e5:eb:aa:cf:5e:73:12:c2:9f:f2:cf:29:cf:a7:4d:7a:8b:
         f2:c5:97:dd:f0:0e:c7:6d:8b:01:3c:60:48:99:7b:1e:ef:e1:
         95:b7:f3:79:5a:c1:8c:de:d5:91:7a:bf:2b:cc:30:77:31:90:
         4e:dd:b4:97:45:82:2b:89:74:76:ae:12:64:15:37:87:f5:71:
         e0:6b:e6:e8:3f:65:76:a4:0e:c3:71:26:6d:91:59:bc:b2:2d:
         22:9c:46:51:ad:76:61:f7:4a:e7:63:c8:11:ad:82:d9:f9:f6:
         79:61:0a:12:54:17:4b:ab:79:cd:8a:f9:64:b7:4d:18:82:de:
         1e:69:4d:be:90:1f:90:b8:df:21:8d:b2:83:2b:07:97:05:7a:
         92:6a:cd:be:7c:39:40:03:b0:5a:a8:01:f6:6f:bd:48:59:77:
         89:98:6a:ac:d5:13:1f:0e:f8:1c:b3:9e:2b:48:49:db:86:8b:
         2d:98:76:ce:72:c4:b1:bb:54:89:17:b3:0c:9b:60:dd:c4:96:
         81:84:11:41:2b:1d:8a:f4:b8:aa:ec:71:0b:63:8d:6e:bd:2b:
         b7:7f:cf:89:6c:fd:34:a7:8f:25:30:9c:48:98:07:e5:ba:30:
         c7:86:df:8f:37:6d:b9:2f:e7:18:14:49:4f:28:0d:af:ea:3b:
         f5:c5:3e:a2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBu0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODkyNjExMTAvBgNVBAUTKDI3OTI5NTlCMjVGQkY5RUJEQzkzMzlCQTlDN0QzNTU1
NzI2OTY5QUIwHhcNMjYwMzAxMjMwNjQ2WhcNMjYwMzA4MjMwNjQ2WjAYMRYwFAYD
VQQDEw02OWE0YzY4Ni00NGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkkexIjo0aBiri0GVUzchZIDsbim7rxlALlXFs4KxbrrtOCnU7TikGnEu/bXA
P0h4iYE59KIPkCOwEtezOR+vKcapR/Ip1/VHsDFAIjRKCXHv7I1JOmSbxGlOkY+L
Wr8bqUwE1vC8F7vWSofLU76V1lNhDlqSSJdH0m/B2VxB5qK70t030n/7cp+1qp9Y
2bx3DW5NQtc+frgDzdg/FIy5ifuefCLBtUZDLMzwJ8e08V/aeU5haiwqeHNgMlED
zNCMbOi5tRo2edSnx51KNwDKVYltMdxKUv9IHDpHZrY6DeMdzD/Jmi1frwpL+/wS
8+PMssnMAOpPPvgdURtfrX3J9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI+7WB+z
BuILvyl+ur0EgoB03Oc/MB8GA1UdIwQYMBaAFCeSlZsl+/nr3JM5upx9NVVyaWmr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTI2MS85MEI2RjcyRTg2
QUIxMUVCQTkwODYzNTBDNEY5QUUwMi9KNUtWbXlYNy1ldmNrem02bkgwMVZYSnBh
YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0o1S1ZteVg3LWV2Y2t6bTZuSDAxVlhKcGFhcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OTI2MS85MEI2RjcyRTg2QUIxMUVCQTkwODYzNTBDNEY5QUUwMi9KNUtWbXlYNy1l
dmNrem02bkgwMVZYSnBhYXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjeXrqs9ecxLCn/LPKc+nTXqL8sWX3fAOx22LATxgSJl7Hu/hlbfzeVrBjN7V
kXq/K8wwdzGQTt20l0WCK4l0dq4SZBU3h/Vx4Gvm6D9ldqQOw3EmbZFZvLItIpxG
Ua12YfdK52PIEa2C2fn2eWEKElQXS6t5zYr5ZLdNGILeHmlNvpAfkLjfIY2ygysH
lwV6kmrNvnw5QAOwWqgB9m+9SFl3iZhqrNUTHw74HLOeK0hJ24aLLZh2znLEsbtU
iRezDJtg3cSWgYQRQSsdivS4quxxC2ONbr0rt3/PiWz9NKePJTCcSJgH5bowx4bf
jzdtuS/nGBRJTygNr+o79cU+og==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:39:05 2026 by rpki-client