Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft
File:                     5VbchrlOkc-bLilEqF9xaS2glNI.mft (raw, json)
Hash identifier:          d0tkwL891Gij4XHmrpxA+3C3cjmAze2TikO8my3HXR0=
Subject key identifier:   04:E2:A3:FF:F1:84:59:F6:48:03:1B:DD:2A:E5:67:6E:62:79:7C:FF
Authority key identifier: E5:56:DC:86:B9:4E:91:CF:9B:2E:29:44:A8:5F:71:69:2D:A0:94:D2
Certificate issuer:       /CN=A919B20D/serialNumber=E556DC86B94E91CF9B2E2944A85F71692DA094D2
Certificate serial:       01AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VbchrlOkc-bLilEqF9xaS2glNI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft
Manifest number:          01A6
Signing time:             Sun 01 Mar 2026 04:57:47 +0000
Manifest this update:     Sun 01 Mar 2026 04:57:47 +0000
Manifest next update:     Sun 08 Mar 2026 04:57:47 +0000
Files and hashes:         1: 5VbchrlOkc-bLilEqF9xaS2glNI.crl (hash: W3yqd3TU0HOfoYvtuUvT0kZ+M+nzJgPlSKnqLZP+9vA=)
                          2: 4B3E4A0693DE11EE81D1045FC4F9AE02.roa (hash: Lg11zjVs27vb2oJIfdyoCpLaTBOQjwIoy8A24z6T1mQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.crl
                          rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VbchrlOkc-bLilEqF9xaS2glNI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 04:57:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 427 (0x1ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B20D, serialNumber=E556DC86B94E91CF9B2E2944A85F71692DA094D2
        Validity
            Not Before: Mar  1 04:57:47 2026 GMT
            Not After : Mar  8 04:57:47 2026 GMT
        Subject: CN=69a3c74b-8f53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2c:67:e7:1b:72:80:91:3f:9f:84:ae:7f:90:
                    b5:cd:d9:ce:f8:5e:47:7a:73:2b:77:33:58:bf:85:
                    07:06:eb:78:3c:75:b2:19:5b:2a:ff:3c:24:67:fc:
                    2c:64:5e:d4:96:26:0c:99:c0:c3:9c:91:df:42:a9:
                    49:d5:7d:64:d9:4b:82:62:82:36:f5:83:04:77:3a:
                    59:a4:4c:ac:7f:10:5a:5f:2c:0b:20:7a:ab:b7:e1:
                    a7:81:b0:91:6f:91:69:62:46:f4:75:4b:4c:6d:38:
                    ca:15:9c:6f:f7:06:c7:c2:4d:52:7f:72:b1:b6:80:
                    e3:0d:a3:ed:69:03:34:9f:57:a8:0a:6a:b3:65:c8:
                    4d:95:68:07:88:f8:e3:fe:e6:c3:e9:69:8c:3c:41:
                    dc:0f:02:48:f9:f2:c7:ab:f1:a8:91:e6:02:4c:35:
                    be:48:5c:30:27:ab:7a:2d:49:37:e5:15:5d:c5:58:
                    9d:5b:fb:6a:0a:fe:0d:24:c5:1c:cd:42:37:30:ad:
                    9f:cc:f5:6f:2f:a1:a5:6f:5a:a6:18:ab:46:55:5d:
                    9e:27:1a:fb:d0:fa:46:c6:a9:9a:e3:f7:9c:a6:44:
                    2c:62:e8:cd:86:dc:d1:89:ae:57:99:1c:ec:f9:4a:
                    b2:ab:81:63:85:bd:c7:4e:46:c8:50:ed:02:e7:a0:
                    9c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E2:A3:FF:F1:84:59:F6:48:03:1B:DD:2A:E5:67:6E:62:79:7C:FF
            X509v3 Authority Key Identifier:
                keyid:E5:56:DC:86:B9:4E:91:CF:9B:2E:29:44:A8:5F:71:69:2D:A0:94:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VbchrlOkc-bLilEqF9xaS2glNI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:be:95:73:ed:51:66:eb:68:6a:93:8f:46:47:2a:50:eb:bf:
         6b:56:d4:a2:bf:a6:37:9c:70:53:0f:78:9b:db:05:71:1f:6d:
         17:ff:fe:e7:81:40:37:bd:f0:90:74:8c:cc:89:38:b9:1c:ee:
         34:71:58:07:2c:cf:03:e3:4f:6d:6c:c0:6b:7a:b5:5f:0b:97:
         5a:8f:43:cb:c3:e4:7a:9d:a4:50:1f:cd:59:1b:f6:ff:11:f4:
         66:fb:96:82:06:90:4f:bd:97:84:87:ff:ea:57:28:af:84:f7:
         1e:f9:7d:83:a8:f0:ea:6b:9d:ec:fd:ee:8e:db:bc:35:58:86:
         ca:5c:29:7b:9e:df:6e:dd:97:16:14:05:97:b8:ee:13:45:34:
         78:af:61:0a:ce:88:c0:f2:35:b2:7e:db:c4:6f:ee:40:fd:e4:
         2f:c6:d9:49:34:32:c8:98:fc:e1:d0:81:c1:49:57:a2:1a:87:
         64:f1:a5:12:2a:5d:3c:0a:10:51:3d:89:c3:e0:33:d3:f5:e6:
         75:21:d2:ac:f7:31:e4:72:e7:5e:15:62:c9:90:0c:07:b6:13:
         81:c3:9d:20:e0:fc:f8:26:70:20:5a:67:74:78:5e:06:49:d4:
         0d:7a:5a:07:ab:62:42:77:7b:94:c4:34:44:61:b2:60:74:ab:
         c2:cf:e1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:06:25 2026 by rpki-client