Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft
File:                     S-7HT0dvsXHcjtr5SR1swnv4Di8.mft (raw, json)
Hash identifier:          1R5U4TCIA9wD2UYl7U+gvaMFusD4HA7h8HatLGCOwpw=
Subject key identifier:   73:15:BC:1A:01:EF:4D:30:7B:BB:69:FF:B6:85:27:DB:26:1E:6C:D6
Authority key identifier: 4B:EE:C7:4F:47:6F:B1:71:DC:8E:DA:F9:49:1D:6C:C2:7B:F8:0E:2F
Certificate issuer:       /CN=A918F961/serialNumber=4BEEC74F476FB171DC8EDAF9491D6CC27BF80E2F
Certificate serial:       BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft
Manifest number:          B8
Signing time:             Sun 01 Mar 2026 08:14:59 +0000
Manifest this update:     Sun 01 Mar 2026 08:14:58 +0000
Manifest next update:     Sun 08 Mar 2026 08:14:58 +0000
Files and hashes:         1: S-7HT0dvsXHcjtr5SR1swnv4Di8.crl (hash: mKM1NmNu3kiClevQxqVt//c2rljojWViZzWB1zrN/6g=)
                          2: D0D1D812FB0D11EFABB24730C4F9AE02.roa (hash: XIXAdlf2Wapfr3aA+RYeScI/7J0gFTrDr34LwCofapU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.crl
                          rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:14:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186 (0xba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F961, serialNumber=4BEEC74F476FB171DC8EDAF9491D6CC27BF80E2F
        Validity
            Not Before: Mar  1 08:14:58 2026 GMT
            Not After : Mar  8 08:14:58 2026 GMT
        Subject: CN=69a3f583-3ec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:87:a4:4d:d9:0f:dc:a4:a8:22:98:06:56:88:
                    a4:11:ef:95:37:87:d4:f9:3d:de:3e:93:2b:e2:4a:
                    0a:8e:3d:4e:4a:0d:5b:a4:18:94:d5:f8:c6:4a:5f:
                    f9:97:34:e4:4f:32:d4:ab:02:2e:c8:17:aa:f5:4a:
                    c2:f3:24:88:b4:17:be:7e:7d:93:7b:bd:8d:d8:57:
                    a5:c7:79:06:5b:bb:e6:45:e5:20:87:c0:3a:bd:0a:
                    00:54:58:56:c4:9c:d2:2d:36:03:e9:66:9b:f1:d0:
                    6b:33:f3:ad:86:52:93:e6:8c:94:48:1f:3c:c4:5b:
                    3d:7a:fc:21:3e:98:ea:12:03:8b:49:0f:d6:34:35:
                    17:f1:5c:52:40:04:d9:e5:b0:f1:ce:1c:25:d1:d8:
                    f6:37:b5:f4:8a:00:55:ba:32:81:be:2c:e4:d2:44:
                    b3:ba:35:7f:12:ba:bd:d3:e3:65:e4:90:77:3a:d3:
                    60:f6:c6:5e:22:02:b4:1a:15:bf:6b:55:2f:b7:8e:
                    60:dc:cc:91:40:a2:7f:1e:a7:02:a1:aa:f0:00:d2:
                    5e:f9:98:2b:cf:9b:e9:11:99:2e:8e:d7:39:4a:9a:
                    d8:f9:ff:17:44:ab:0d:be:dd:d7:1d:e9:f6:5e:f3:
                    df:3a:96:09:f3:2f:d7:49:7c:cc:53:55:a7:88:65:
                    a0:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:15:BC:1A:01:EF:4D:30:7B:BB:69:FF:B6:85:27:DB:26:1E:6C:D6
            X509v3 Authority Key Identifier:
                keyid:4B:EE:C7:4F:47:6F:B1:71:DC:8E:DA:F9:49:1D:6C:C2:7B:F8:0E:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:37:88:23:a4:f0:1c:3e:5a:57:d9:81:26:9c:2d:45:30:24:
         85:69:61:0b:ab:9a:47:dc:84:01:0c:2c:f2:5a:f6:b5:8e:9f:
         c3:14:c0:55:a0:f8:b9:65:a7:f9:c8:20:5d:ef:31:d6:f3:74:
         bd:32:89:e1:09:d1:41:52:9f:71:77:26:f7:95:89:5b:22:23:
         10:ba:07:dd:78:3f:82:98:c2:aa:9a:e6:ca:92:d0:13:4d:91:
         0d:35:e2:7e:63:ac:ec:c8:df:fd:63:24:dd:e3:d8:ab:0a:c7:
         57:a0:4c:9f:6d:d9:dc:e7:54:9e:a0:d3:37:02:ea:47:a0:e9:
         50:57:f9:09:81:65:e5:28:e1:26:1c:26:b4:ca:88:dc:d9:ff:
         69:4f:59:a1:c4:43:d5:8c:ef:16:da:73:8c:c9:f7:a8:1e:b7:
         0e:7e:2b:3f:53:61:6d:40:6e:3c:ee:27:a8:ea:aa:f6:ab:75:
         59:22:66:f6:87:05:0e:a3:86:b8:09:07:c1:2b:a7:1f:ea:19:
         f3:37:2c:84:e3:56:57:5f:3f:70:50:90:65:d0:a1:5b:44:50:
         42:b3:de:0b:f0:0c:06:6a:f4:09:60:27:fb:57:72:46:2c:58:
         01:bc:f3:d5:3b:87:96:7c:24:3c:ec:b8:d1:df:41:07:a3:28:
         81:94:16:12
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEY5NjExMTAvBgNVBAUTKDRCRUVDNzRGNDc2RkIxNzFEQzhFREFGOTQ5MUQ2Q0My
N0JGODBFMkYwHhcNMjYwMzAxMDgxNDU4WhcNMjYwMzA4MDgxNDU4WjAYMRYwFAYD
VQQDEw02OWEzZjU4My0zZWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApYekTdkP3KSoIpgGVoikEe+VN4fU+T3ePpMr4koKjj1OSg1bpBiU1fjGSl/5
lzTkTzLUqwIuyBeq9UrC8ySItBe+fn2Te72N2Felx3kGW7vmReUgh8A6vQoAVFhW
xJzSLTYD6Wab8dBrM/OthlKT5oyUSB88xFs9evwhPpjqEgOLSQ/WNDUX8VxSQATZ
5bDxzhwl0dj2N7X0igBVujKBvizk0kSzujV/Erq90+Nl5JB3OtNg9sZeIgK0GhW/
a1Uvt45g3MyRQKJ/HqcCoarwANJe+Zgrz5vpEZkujtc5SprY+f8XRKsNvt3XHen2
XvPfOpYJ8y/XSXzMU1WniGWgNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHMVvBoB
700we7tp/7aFJ9smHmzWMB8GA1UdIwQYMBaAFEvux09Hb7Fx3I7a+UkdbMJ7+A4v
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Rjk2MS8wNUIyMUIxMEZC
MEQxMUVGQjI0NjQzMjdDNEY5QUUwMi9TLTdIVDBkdnNYSGNqdHI1U1Ixc3dudjRE
aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1MtN0hUMGR2c1hIY2p0cjVTUjFzd252NERpOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
Rjk2MS8wNUIyMUIxMEZCMEQxMUVGQjI0NjQzMjdDNEY5QUUwMi9TLTdIVDBkdnNY
SGNqdHI1U1Ixc3dudjREaTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAITeII6TwHD5aV9mBJpwtRTAkhWlhC6uaR9yEAQws8lr2tY6fwxTAVaD4uWWn
+cggXe8x1vN0vTKJ4QnRQVKfcXcm95WJWyIjELoH3Xg/gpjCqprmypLQE02RDTXi
fmOs7Mjf/WMk3ePYqwrHV6BMn23Z3OdUnqDTNwLqR6DpUFf5CYFl5SjhJhwmtMqI
3Nn/aU9ZocRD1YzvFtpzjMn3qB63Dn4rP1NhbUBuPO4nqOqq9qt1WSJm9ocFDqOG
uAkHwSunH+oZ8zcshONWV18/cFCQZdChW0RQQrPeC/AMBmr0CWAn+1dyRixYAbzz
1TuHlnwkPOy40d9BB6MogZQWEg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:25:25 2026 by rpki-client