Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft
File:                     pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft (raw, json)
Hash identifier:          uh5lJ43U2YifPv6vB53ymIUCI3DhEngPAwx4ynwnxFs=
Subject key identifier:   D6:54:89:1E:B8:45:FC:66:0F:FC:9C:0F:FA:F7:CB:BF:C8:60:B8:85
Authority key identifier: A5:FE:51:29:D4:81:ED:1A:00:E5:5E:99:CE:30:E0:08:B6:3D:6C:EE
Certificate issuer:       /CN=A918FF9D/serialNumber=A5FE5129D481ED1A00E55E99CE30E008B63D6CEE
Certificate serial:       09BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft
Manifest number:          09B7
Signing time:             Mon 02 Mar 2026 00:30:00 +0000
Manifest this update:     Mon 02 Mar 2026 00:29:58 +0000
Manifest next update:     Mon 09 Mar 2026 00:29:58 +0000
Files and hashes:         1: pf5RKdSB7RoA5V6ZzjDgCLY9bO4.crl (hash: cI+0wialeib7HEcKeIA18Jj7ieTRzud2vibX3sYtNFw=)
                          2: 2A1AD3BA9FE711EAAFA97B81C4F9AE02.roa (hash: pZwvBdoaPR7hFViJEv+Bxbp/Jlp7eJmoUNr0vXBOYdY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.crl
                          rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:29:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2494 (0x9be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FF9D, serialNumber=A5FE5129D481ED1A00E55E99CE30E008B63D6CEE
        Validity
            Not Before: Mar  2 00:29:58 2026 GMT
            Not After : Mar  9 00:29:58 2026 GMT
        Subject: CN=69a4da07-7e2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:87:cb:87:f3:51:32:e8:04:11:38:43:f4:3a:
                    d7:b9:1f:5a:20:67:54:7d:32:0b:4a:0a:39:83:4e:
                    2f:f3:b8:84:5a:7c:ef:2c:11:a8:0e:00:c6:22:74:
                    b8:9a:20:fb:11:51:7d:c5:ab:64:a7:b1:9a:99:9a:
                    d5:55:f7:28:28:fe:ef:cf:73:b6:14:5d:c1:39:58:
                    f9:ca:cb:36:d6:50:41:6e:bf:e1:92:0c:a6:d7:c4:
                    58:e6:87:ae:0c:60:c4:c0:62:c6:71:44:99:81:6e:
                    df:c7:4e:eb:5b:c3:fc:90:75:e3:61:32:3c:ed:30:
                    50:e5:d5:5f:0e:14:e5:ae:e7:b3:77:b6:fb:13:26:
                    ef:3f:b6:68:1f:30:a8:5a:67:f1:c1:de:6e:c7:8b:
                    22:81:17:70:e6:14:88:c2:cc:09:44:a6:ff:2c:4d:
                    ad:0a:2e:e3:33:69:1b:a6:c1:cb:74:3c:00:f4:1e:
                    95:b3:78:8b:f1:63:b2:33:9d:f3:38:ab:c1:65:3a:
                    0c:dc:a2:5a:c3:7d:57:33:2d:24:49:3c:df:9e:26:
                    0f:0f:f6:cd:fb:96:2c:92:08:7f:37:1a:9d:b0:c6:
                    3d:54:08:41:7c:1d:c4:0c:23:4b:28:cd:d9:35:ba:
                    b2:65:11:e3:a5:5f:6a:52:08:c0:12:c9:00:da:7e:
                    42:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:54:89:1E:B8:45:FC:66:0F:FC:9C:0F:FA:F7:CB:BF:C8:60:B8:85
            X509v3 Authority Key Identifier:
                keyid:A5:FE:51:29:D4:81:ED:1A:00:E5:5E:99:CE:30:E0:08:B6:3D:6C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:16:02:9c:bd:30:04:e2:51:e6:f4:7d:f5:9c:a9:5e:3a:c2:
         1a:d4:2e:40:ac:b4:50:77:cd:a9:9a:da:f4:a0:5c:6c:d4:71:
         a9:b9:35:1f:2f:5a:2f:8d:4e:67:32:42:ae:7a:d8:87:85:69:
         08:e4:76:1b:f1:c2:de:3a:4b:f0:fd:66:8f:1a:13:73:36:de:
         8f:73:a2:35:7b:47:e8:92:80:54:e7:26:5a:42:b8:18:da:d4:
         23:43:4f:ae:77:53:33:78:56:00:fd:ad:db:76:01:3b:b6:57:
         09:9f:c0:b8:b1:25:56:da:70:f7:8d:f1:31:6a:f6:53:ca:92:
         a6:5e:3a:0a:d7:d3:b5:45:20:06:03:52:c4:53:f7:b0:85:c2:
         a0:ba:2a:1f:af:1f:25:ea:a1:55:db:8c:dd:b5:60:52:f5:cf:
         73:8b:3e:e1:28:26:50:2f:3b:09:cd:60:a5:10:41:1b:ca:bf:
         c6:a8:06:03:ff:a6:52:f6:61:33:47:78:6f:f1:c7:33:50:1e:
         74:bf:a7:ef:8a:cb:c0:19:ce:a8:0c:88:38:02:0c:e6:d2:95:
         11:97:2d:31:df:ea:6b:60:10:2a:2b:57:f6:59:87:c8:aa:58:
         40:79:1e:58:f1:39:d3:24:70:98:ce:03:76:21:54:77:77:cf:
         cf:99:c5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:12 2026 by rpki-client