Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft
File:                     _gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft (raw, json)
Hash identifier:          OyRjVIi5a7TPom5YQQ7ZRFbk18/y2GjP/G9oJk13in4=
Subject key identifier:   D1:A9:9A:24:23:5D:18:CA:D3:BB:2A:88:A8:D7:47:4A:27:D0:34:B3
Authority key identifier: FE:05:EF:B7:01:25:D5:20:47:6F:63:BC:60:9F:55:4D:C4:9A:C5:9C
Certificate issuer:       /CN=A919A3F0/serialNumber=FE05EFB70125D520476F63BC609F554DC49AC59C
Certificate serial:       01FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft
Manifest number:          01F5
Signing time:             Sun 01 Mar 2026 04:06:38 +0000
Manifest this update:     Sun 01 Mar 2026 04:06:37 +0000
Manifest next update:     Sun 08 Mar 2026 04:06:37 +0000
Files and hashes:         1: _gXvtwEl1SBHb2O8YJ9VTcSaxZw.crl (hash: TaA67BOoKwGqHZgVDB4KwiE9ifNMeGGFSbSjXo9bL/Q=)
                          2: 37D03D8CC48111F0BA91643FC4F9AE02.roa (hash: RetyQblwcd4ST+I6H1q28mp6Zq67zv2ACfTggQIeETs=)
                          3: 4ADADBB8C48011F08D2DA33DC4F9AE02.roa (hash: 8670TEfg83gHunVz4oJN8k2ojcMsTWOzQ8uTKh3Qr3U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.crl
                          rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 04:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 510 (0x1fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A3F0, serialNumber=FE05EFB70125D520476F63BC609F554DC49AC59C
        Validity
            Not Before: Mar  1 04:06:37 2026 GMT
            Not After : Mar  8 04:06:37 2026 GMT
        Subject: CN=69a3bb4d-c8fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7e:0a:12:35:bb:b6:c8:45:06:8e:26:dc:2e:
                    68:cc:70:7a:d2:82:79:2a:ec:2e:c9:0a:52:81:9d:
                    15:72:57:9a:89:f6:20:1c:cb:e2:07:c2:bf:2c:2c:
                    4b:dd:0b:8d:91:a1:07:d3:32:29:39:04:24:8e:8d:
                    9f:28:ea:f1:f2:6d:a0:e7:f6:a6:85:24:56:8f:86:
                    46:db:f1:16:99:0a:a1:e4:7c:66:86:f0:a6:ce:65:
                    f9:20:0a:1e:cb:ae:3a:29:ba:0d:c3:c0:4c:8d:04:
                    df:5c:c0:57:cb:12:b6:1b:32:b6:a4:32:8d:72:f1:
                    d4:e8:1a:8a:10:a3:9a:4d:b1:6e:73:d2:06:bb:fc:
                    1b:09:25:5b:c9:9f:c2:60:12:52:96:fd:46:72:68:
                    11:73:e4:e4:79:52:f6:7e:15:4a:31:f3:06:d6:e9:
                    b0:b3:df:bc:2e:d1:ae:93:22:29:ba:5c:18:e7:f8:
                    63:9d:1d:90:2d:c9:ba:41:3a:e6:90:3c:67:2e:d6:
                    63:45:1d:e8:ae:ba:c9:e8:84:c5:dd:5a:32:26:a8:
                    8f:13:95:88:7f:6c:14:8d:76:ac:73:74:2d:86:f2:
                    e4:92:aa:8e:91:f0:0a:41:30:9e:4f:2a:31:6b:a7:
                    72:3e:9b:99:06:5a:48:4a:3d:0a:e0:07:1f:b2:a9:
                    1b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:A9:9A:24:23:5D:18:CA:D3:BB:2A:88:A8:D7:47:4A:27:D0:34:B3
            X509v3 Authority Key Identifier:
                keyid:FE:05:EF:B7:01:25:D5:20:47:6F:63:BC:60:9F:55:4D:C4:9A:C5:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:84:4e:68:26:49:d0:8c:db:e5:0b:e5:cc:9e:25:50:04:b7:
         9d:ff:98:ef:40:fa:5e:c0:96:85:d0:be:53:ed:de:f4:4c:02:
         fd:c0:18:97:33:18:4f:1a:5f:94:d3:89:9d:23:a9:42:fa:7e:
         ff:5b:34:34:a0:80:93:c7:b6:0b:80:34:9e:22:d9:71:da:5f:
         ed:56:19:e0:30:ab:2c:c0:b9:a5:f3:d8:24:a0:e6:8b:fc:29:
         f9:34:cc:05:a1:74:16:7f:fd:c3:c2:b5:c0:b9:6d:ce:90:9f:
         b1:c8:1d:ce:31:30:b0:ea:e9:8d:9b:75:57:7c:fc:32:73:75:
         97:96:0c:2a:cf:f2:24:1f:98:bc:1c:d7:de:a9:88:65:c4:e4:
         a1:2a:76:97:d3:1b:6f:ea:89:bb:d2:d6:86:3d:c2:59:11:f9:
         51:d0:b7:aa:78:f2:cc:2e:0c:91:8d:b1:54:ff:70:1e:12:9c:
         49:da:24:08:81:99:de:5d:67:6d:72:92:6e:dd:75:f7:d5:5d:
         b3:f3:9e:bb:9a:51:21:25:9d:02:fa:68:42:58:e7:09:34:cf:
         2c:0c:9c:16:40:18:c6:2c:31:41:2d:51:5d:50:05:79:bb:2f:
         ec:fb:c3:47:a6:68:26:6e:ce:dc:ce:39:12:cd:ef:ff:81:75:
         f6:25:46:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:12:24 2026 by rpki-client