Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.mft
File:                     E5zB22udJLk7FJKKdRjQTrOyajo.mft (raw, json)
Hash identifier:          7iwqgSkx+Z8wXW68C7mJjE1GMVWK/hPtiFjrE54zX+c=
Subject key identifier:   11:E3:CE:C5:DB:0B:56:10:97:71:1D:17:AB:40:54:2D:5C:96:F1:84
Authority key identifier: 13:9C:C1:DB:6B:9D:24:B9:3B:14:92:8A:75:18:D0:4E:B3:B2:6A:3A
Certificate issuer:       /CN=A919DAF2/serialNumber=139CC1DB6B9D24B93B14928A7518D04EB3B26A3A
Certificate serial:       2297
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5zB22udJLk7FJKKdRjQTrOyajo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.mft
Manifest number:          225B
Signing time:             Sat 28 Feb 2026 15:53:43 +0000
Manifest this update:     Sat 28 Feb 2026 15:53:43 +0000
Manifest next update:     Sat 07 Mar 2026 15:53:43 +0000
Files and hashes:         1: E5zB22udJLk7FJKKdRjQTrOyajo.crl (hash: 30PMw46GNwGh+uwPndUcpx/zo3UFw07Q70SXWvvQv1s=)
                          2: FF59EC70144911EFA2053B27C4F9AE02.roa (hash: 87Wd3ufHux4x6En79V3HJ0yy+yl6nx7Qh9e0Kc4SLtA=)
                          3: 5AE16D9A386F11EFABF4E132C4F9AE02.roa (hash: 9Ncc5eO7lsxHhsxCWRYMxRGSAkh2VnH6ZKESuNAQzvA=)
                          4: A20F01CCE1E511EEA0477018C4F9AE02.roa (hash: XEA5HBhsYH3LIGpBqjlOM3tEelRDYUoKK//5he1LRJg=)
                          5: C4F05AA6144911EF85E2DC26C4F9AE02.roa (hash: j3DVuY32luQDVa/vF1hOJNJXMyj5FRS3jyl06+nliBE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.crl
                          rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5zB22udJLk7FJKKdRjQTrOyajo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 15:53:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8855 (0x2297)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DAF2, serialNumber=139CC1DB6B9D24B93B14928A7518D04EB3B26A3A
        Validity
            Not Before: Feb 28 15:53:43 2026 GMT
            Not After : Mar  7 15:53:43 2026 GMT
        Subject: CN=69a30f87-f995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0e:9e:07:12:0a:56:f2:28:ba:7f:37:29:40:
                    af:41:c9:d9:5e:7c:38:17:23:90:dd:eb:6e:40:a9:
                    04:7f:a8:f0:a4:d2:fd:e6:ab:39:12:7b:87:13:cd:
                    73:56:af:4f:48:be:63:e2:2f:4d:1a:2b:39:40:93:
                    78:b8:d9:3e:db:ce:9e:27:01:39:8d:11:4d:54:43:
                    fc:2c:cd:bb:0e:ac:67:e5:00:a5:e5:06:5e:19:87:
                    1f:a2:ff:f1:c9:cf:8d:c4:75:8e:88:4c:ce:79:7c:
                    cf:06:9a:12:95:a3:42:03:b7:c4:2a:d9:cb:2c:76:
                    97:ae:95:c6:f0:b7:5a:9d:ac:54:a4:d3:84:66:65:
                    b2:08:9f:9e:12:43:76:67:8c:15:3d:3c:56:f6:b7:
                    dd:22:8f:90:7b:1b:3b:57:e0:85:5b:c8:72:cf:58:
                    9f:cc:f7:73:8f:13:cb:60:ce:f4:1c:ac:52:7d:45:
                    a0:6b:68:7d:6b:3a:ab:72:c7:db:a1:ec:3a:25:00:
                    d7:73:fa:d0:6c:a3:2d:4d:9c:ee:cf:59:10:d6:47:
                    ad:04:fa:d2:0f:d9:d3:26:84:bc:b8:43:b1:fb:fc:
                    5d:d3:b7:b7:79:d8:ca:40:06:46:03:7b:12:d5:11:
                    f7:ab:94:d7:f7:3c:6b:2b:dd:da:68:e2:57:99:33:
                    74:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E3:CE:C5:DB:0B:56:10:97:71:1D:17:AB:40:54:2D:5C:96:F1:84
            X509v3 Authority Key Identifier:
                keyid:13:9C:C1:DB:6B:9D:24:B9:3B:14:92:8A:75:18:D0:4E:B3:B2:6A:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5zB22udJLk7FJKKdRjQTrOyajo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:aa:fc:24:72:90:15:35:ba:aa:49:84:77:1b:e0:39:ce:d4:
         cb:6d:0c:7c:8e:92:94:61:3b:b9:b9:35:73:74:07:4d:ef:75:
         ce:db:44:9d:00:f6:cc:d1:3f:8a:51:cb:df:0a:bb:31:ff:7e:
         63:41:d7:26:ae:e2:33:16:b9:37:08:4e:66:2d:c5:50:aa:df:
         68:5b:80:fd:93:00:a5:0b:fe:d0:a6:f8:96:ed:40:36:71:96:
         84:eb:0f:f1:44:0d:41:db:c1:c1:07:7c:70:b8:8c:4b:1b:26:
         e4:f9:3f:f7:14:2a:8f:f6:b9:51:e9:ec:75:e5:24:70:8f:fd:
         33:13:64:d9:64:75:d2:b3:49:18:71:41:27:82:76:43:8c:62:
         28:ca:cf:60:73:08:65:9d:af:d9:08:d0:02:fa:68:b8:ed:6b:
         4e:8e:b9:90:4c:7c:d9:11:96:00:ef:3a:b9:04:e9:18:b8:7d:
         c6:ba:3f:28:b6:1e:cb:41:dd:62:60:eb:34:5d:8c:a8:9a:1b:
         f6:3a:45:d0:31:61:46:be:f4:a3:63:e6:af:4e:33:e3:2e:d7:
         e3:4a:f0:9f:ea:fc:16:9f:77:0c:77:c4:9c:05:fa:b4:cc:28:
         cd:4c:d0:69:a4:78:a2:18:e4:fe:77:f2:9a:49:00:96:e4:24:
         ca:ba:87:f1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICIpcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OURBRjIxMTAvBgNVBAUTKDEzOUNDMURCNkI5RDI0QjkzQjE0OTI4QTc1MThEMDRF
QjNCMjZBM0EwHhcNMjYwMjI4MTU1MzQzWhcNMjYwMzA3MTU1MzQzWjAYMRYwFAYD
VQQDDA02OWEzMGY4Ny1mOTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnQ6eBxIKVvIoun83KUCvQcnZXnw4FyOQ3etuQKkEf6jwpNL95qs5EnuHE81z
Vq9PSL5j4i9NGis5QJN4uNk+286eJwE5jRFNVEP8LM27Dqxn5QCl5QZeGYcfov/x
yc+NxHWOiEzOeXzPBpoSlaNCA7fEKtnLLHaXrpXG8LdanaxUpNOEZmWyCJ+eEkN2
Z4wVPTxW9rfdIo+Qexs7V+CFW8hyz1ifzPdzjxPLYM70HKxSfUWga2h9azqrcsfb
oew6JQDXc/rQbKMtTZzuz1kQ1ketBPrSD9nTJoS8uEOx+/xd07e3edjKQAZGA3sS
1RH3q5TX9zxrK93aaOJXmTN0qQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBHjzsXb
C1YQl3EdF6tAVC1clvGEMB8GA1UdIwQYMBaAFBOcwdtrnSS5OxSSinUY0E6zsmo6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REFGMi8yNkVDNkREQUQz
REExMUU1OEM1Q0Q0MEZDNEY5QUUwMi9FNXpCMjJ1ZEpMazdGSktLZFJqUVRyT3lh
am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0U1ekIyMnVkSkxrN0ZKS0tkUmpRVHJPeWFqby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
REFGMi8yNkVDNkREQUQzREExMUU1OEM1Q0Q0MEZDNEY5QUUwMi9FNXpCMjJ1ZEpM
azdGSktLZFJqUVRyT3lham8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXqr8JHKQFTW6qkmEdxvgOc7Uy20MfI6SlGE7ubk1c3QHTe91zttEnQD2zNE/
ilHL3wq7Mf9+Y0HXJq7iMxa5NwhOZi3FUKrfaFuA/ZMApQv+0Kb4lu1ANnGWhOsP
8UQNQdvBwQd8cLiMSxsm5Pk/9xQqj/a5UensdeUkcI/9MxNk2WR10rNJGHFBJ4J2
Q4xiKMrPYHMIZZ2v2QjQAvpouO1rTo65kEx82RGWAO86uQTpGLh9xro/KLYey0Hd
YmDrNF2MqJob9jpF0DFhRr70o2Pmr04z4y7X40rwn+r8Fp93DHfEnAX6tMwozUzQ
aaR4ohjk/nfymkkAluQkyrqH8Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:26:44 2026 by rpki-client