Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft
File:                     M5IbTpqJQaWGu92a-LGIWo8iX6I.mft (raw, json)
Hash identifier:          jLjg5B4HCMeXLnn02/bUJ2hgyAzfEWPhjancwdYSRPU=
Subject key identifier:   7B:5D:3D:9D:8D:50:F7:08:A0:22:A2:03:33:98:C9:8A:86:A4:12:8F
Authority key identifier: 33:92:1B:4E:9A:89:41:A5:86:BB:DD:9A:F8:B1:88:5A:8F:22:5F:A2
Certificate issuer:       /CN=A9195A3A/serialNumber=33921B4E9A8941A586BBDD9AF8B1885A8F225FA2
Certificate serial:       3514
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5IbTpqJQaWGu92a-LGIWo8iX6I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft
Manifest number:          3514
Signing time:             Sat 28 Feb 2026 15:02:48 +0000
Manifest this update:     Sat 28 Feb 2026 15:02:47 +0000
Manifest next update:     Sat 07 Mar 2026 15:02:47 +0000
Files and hashes:         1: M5IbTpqJQaWGu92a-LGIWo8iX6I.crl (hash: R+DXHNkZa4n8WJmWsEnhn6WBsmfHP2Lnw3gLupDzUdc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.crl
                          rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5IbTpqJQaWGu92a-LGIWo8iX6I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 15:02:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13588 (0x3514)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9195A3A, serialNumber=33921B4E9A8941A586BBDD9AF8B1885A8F225FA2
        Validity
            Not Before: Feb 28 15:02:47 2026 GMT
            Not After : Mar  7 15:02:47 2026 GMT
        Subject: CN=69a30398-63e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:99:02:14:c5:de:9b:81:9c:69:a3:0d:e2:c0:
                    12:6e:8d:00:4e:44:10:c2:05:d2:d7:58:1f:26:3c:
                    ee:95:ab:48:3b:27:14:2e:d7:01:79:2a:ce:e8:c5:
                    5f:73:00:a2:bd:fd:c1:67:76:e4:ed:c1:0f:52:37:
                    99:c5:65:dc:72:9e:2f:48:de:a6:3d:76:85:b1:52:
                    ad:1e:8f:30:76:93:44:ce:12:4b:0f:61:96:99:e3:
                    02:f6:35:94:34:a1:ff:5c:9d:2a:5f:a1:52:c6:f3:
                    e2:73:75:35:1f:8c:3a:58:93:59:48:00:21:67:e6:
                    dd:c1:69:e1:9e:56:83:d3:de:a7:2b:7f:39:32:c4:
                    d7:97:0e:ad:97:0f:bc:a5:16:84:6f:50:2b:ee:bc:
                    3f:2c:3b:5d:b2:00:0e:76:19:b3:93:41:29:f0:0f:
                    21:7e:95:67:e9:e6:9e:d1:ee:0f:e3:92:2d:ff:e8:
                    28:bc:45:e2:55:77:9c:d7:be:f6:09:97:c2:c2:3f:
                    f7:c3:4b:92:d7:b2:38:7f:8b:79:78:df:e3:ed:70:
                    33:f8:c3:77:50:60:8d:61:a2:41:98:fd:57:5e:bf:
                    0a:1f:41:b5:ca:36:d5:1f:30:b0:62:0e:7d:b0:9d:
                    a9:e2:e0:64:58:e4:9d:b0:b7:b2:5c:d9:17:cf:c3:
                    51:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:5D:3D:9D:8D:50:F7:08:A0:22:A2:03:33:98:C9:8A:86:A4:12:8F
            X509v3 Authority Key Identifier:
                keyid:33:92:1B:4E:9A:89:41:A5:86:BB:DD:9A:F8:B1:88:5A:8F:22:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5IbTpqJQaWGu92a-LGIWo8iX6I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:23:0b:99:4a:0b:92:29:d6:f2:31:22:95:4e:9e:82:2f:ac:
         9e:d8:f5:74:07:b6:04:a1:65:db:a8:0d:10:f4:cd:07:ef:86:
         f8:18:d3:3e:20:c8:77:71:b6:b2:11:19:53:2d:b5:ac:17:77:
         11:a1:fa:6e:fd:98:08:73:98:4d:38:1d:95:5d:93:45:a5:5d:
         92:84:ad:c9:62:3a:bc:26:65:68:bd:e6:18:e9:46:fe:03:6f:
         d8:a1:b8:9c:4a:a5:bd:73:0f:44:41:95:20:af:a0:30:df:0b:
         c7:00:72:d2:2f:8c:9c:b8:2e:f3:c4:a2:cb:8b:51:66:ed:da:
         ad:2d:d7:35:bb:a2:6e:69:0a:a5:b0:e6:03:02:24:1b:60:8d:
         8e:d6:7c:37:ae:c8:bf:1e:79:35:56:ba:d6:bc:54:16:e0:cb:
         a2:04:95:8e:2b:ce:38:54:65:42:6e:59:9c:49:e1:83:5d:06:
         5a:b2:b8:5f:b0:76:fe:e3:be:01:d1:2b:2b:03:c6:e0:48:ec:
         5f:20:5d:b8:97:5c:84:3b:cb:b3:83:f6:c8:9e:eb:a5:3d:59:
         26:72:ba:d0:ee:81:2b:96:fe:bd:e6:0e:d7:ff:61:1d:cd:91:
         16:f6:24:8a:53:bd:12:8b:ce:69:c2:89:9b:7d:1f:00:0b:2f:
         40:bd:13:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:43:52 2026 by rpki-client