Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DB08/3886E8B808F911F18084D086313D8C67/I5H7TZrtRKuA5q_Y2CChwGRDmCg.mft
File:                     I5H7TZrtRKuA5q_Y2CChwGRDmCg.mft (raw, json)
Hash identifier:          pWXkDEI4AoPBf3EGLQuDVwsh/FsjzMuBPu2pJhPLCr8=
Subject key identifier:   7A:BB:7C:48:7E:B0:FE:FB:D5:CD:F5:2C:03:56:E9:FF:4B:2E:76:A0
Authority key identifier: 23:91:FB:4D:9A:ED:44:AB:80:E6:AF:D8:D8:20:A1:C0:64:43:98:28
Certificate issuer:       /CN=A919DB08/serialNumber=2391FB4D9AED44AB80E6AFD8D820A1C064439828
Certificate serial:       11
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I5H7TZrtRKuA5q_Y2CChwGRDmCg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DB08/3886E8B808F911F18084D086313D8C67/I5H7TZrtRKuA5q_Y2CChwGRDmCg.mft
Manifest number:          0E
Signing time:             Sun 01 Mar 2026 10:38:54 +0000
Manifest this update:     Sun 01 Mar 2026 10:38:54 +0000
Manifest next update:     Sun 08 Mar 2026 10:38:54 +0000
Files and hashes:         1: I5H7TZrtRKuA5q_Y2CChwGRDmCg.crl (hash: +BBXRDL/vVyjKje2eosN25vRqmaLveyMO7FDfvjhUz8=)
                          2: 3F7E724808FA11F1B69E3FD3313D8C67.roa (hash: 4VW6RAno3y0GfbXAVymMa7lwcHpijLHhwRaIDmRY9yo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DB08/3886E8B808F911F18084D086313D8C67/I5H7TZrtRKuA5q_Y2CChwGRDmCg.crl
                          rsync://rpki.apnic.net/member_repository/A919DB08/3886E8B808F911F18084D086313D8C67/I5H7TZrtRKuA5q_Y2CChwGRDmCg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I5H7TZrtRKuA5q_Y2CChwGRDmCg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:38:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DB08, serialNumber=2391FB4D9AED44AB80E6AFD8D820A1C064439828
        Validity
            Not Before: Mar  1 10:38:54 2026 GMT
            Not After : Mar  8 10:38:54 2026 GMT
        Subject: CN=69a4173e-5bff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ce:e1:45:57:01:26:b6:e3:3e:28:38:9b:3d:
                    bb:3c:c2:46:fa:12:78:46:45:84:8a:7c:cb:0e:8f:
                    c3:bc:ca:a9:e3:ec:9f:73:07:14:13:71:a9:6a:66:
                    36:bf:5a:c7:4e:7d:8d:42:e0:87:6d:f9:d2:7a:60:
                    85:4e:63:52:7d:f9:88:c1:d7:e0:18:17:a7:ce:12:
                    21:79:46:b9:4d:06:82:b3:7b:fa:69:6c:0a:cc:0b:
                    51:b1:6b:52:ca:b6:e4:c3:2c:6c:9e:62:f3:df:6d:
                    e9:d4:ca:9f:34:0e:cf:a6:c5:dc:27:17:a5:e5:84:
                    6a:19:44:71:75:e5:46:d8:59:29:01:30:ef:a9:f2:
                    47:91:d7:99:c8:b8:03:98:56:de:ed:cb:e3:af:2b:
                    27:23:5c:e2:e5:cc:0e:86:e1:e5:99:3f:62:1b:71:
                    b9:e2:47:5a:83:0a:0f:c6:94:97:14:fe:31:c3:5b:
                    be:34:42:82:bb:36:68:5a:41:2d:88:f6:c7:97:8a:
                    e4:31:b0:ba:db:42:6c:2a:b3:d9:07:ee:f9:c7:b0:
                    8a:32:ca:d1:32:ab:85:9a:1e:95:7b:8b:26:b8:64:
                    fb:33:d9:87:cc:4a:d1:b9:51:a2:48:37:f9:53:36:
                    d7:cd:bc:b2:30:37:95:05:a3:46:92:bd:da:f6:a1:
                    7d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:BB:7C:48:7E:B0:FE:FB:D5:CD:F5:2C:03:56:E9:FF:4B:2E:76:A0
            X509v3 Authority Key Identifier:
                keyid:23:91:FB:4D:9A:ED:44:AB:80:E6:AF:D8:D8:20:A1:C0:64:43:98:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DB08/3886E8B808F911F18084D086313D8C67/I5H7TZrtRKuA5q_Y2CChwGRDmCg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I5H7TZrtRKuA5q_Y2CChwGRDmCg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DB08/3886E8B808F911F18084D086313D8C67/I5H7TZrtRKuA5q_Y2CChwGRDmCg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:0f:68:3a:29:0f:fc:03:37:65:6e:d8:6b:c4:76:fa:10:a3:
         e3:a4:eb:4e:4f:4f:37:2d:33:36:40:27:39:d1:1e:15:98:7c:
         7b:48:16:53:31:ee:a0:4c:00:6a:0c:37:f5:0f:01:ef:07:26:
         a7:20:25:b1:50:27:61:1c:e1:d6:bd:97:69:28:74:7e:09:f6:
         19:56:83:c1:e0:9f:0c:ff:88:bb:a4:4e:0d:09:8d:be:35:96:
         77:5e:5b:b6:cf:2b:bb:82:50:6d:4c:27:4e:7e:ff:d5:ff:8a:
         ce:19:55:8f:0b:27:00:d7:cb:c2:b6:a5:f3:af:62:a9:d8:2c:
         b1:eb:d8:51:82:6f:b4:c5:c2:0d:ca:44:81:07:4a:da:e4:a4:
         ac:fe:61:7f:b0:6d:d4:29:60:a5:ba:0e:a2:31:88:73:7d:44:
         11:f8:56:4f:4f:b2:79:b3:95:f3:7f:ea:85:4e:0e:82:75:0c:
         6e:57:b3:70:33:d0:7f:ff:4d:69:c0:76:c5:3a:d5:6d:09:3f:
         7d:45:bb:d3:56:bb:9e:6f:5f:6a:b0:e3:ab:17:38:62:30:5e:
         70:99:a1:22:a9:af:8a:a3:95:a6:6b:c2:71:66:47:06:ac:40:
         19:56:6b:2e:76:7b:97:1e:86:c3:8c:4a:72:29:d8:51:f7:5a:
         bc:9c:78:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:44:26 2026 by rpki-client