Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5CEA/28A77B6864EE11EDA4A34513C4F9AE02/_U5c-75RNAFgOW1ZbhsySM_IHMQ.mft
File:                     _U5c-75RNAFgOW1ZbhsySM_IHMQ.mft (raw, json)
Hash identifier:          1hlsJDb28zS3hm8uE4KbMShX4xaMlh/+SCTUVNIo/ZQ=
Subject key identifier:   C2:13:86:32:79:99:B5:2A:91:AA:E1:21:63:2B:85:F9:A7:B3:7F:DF
Authority key identifier: FD:4E:5C:FB:BE:51:34:01:60:39:6D:59:6E:1B:32:48:CF:C8:1C:C4
Certificate issuer:       /CN=A91B5CEA/serialNumber=FD4E5CFBBE51340160396D596E1B3248CFC81CC4
Certificate serial:       027A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U5c-75RNAFgOW1ZbhsySM_IHMQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5CEA/28A77B6864EE11EDA4A34513C4F9AE02/_U5c-75RNAFgOW1ZbhsySM_IHMQ.mft
Manifest number:          0272
Signing time:             Sun 01 Mar 2026 23:55:29 +0000
Manifest this update:     Sun 01 Mar 2026 23:55:27 +0000
Manifest next update:     Sun 08 Mar 2026 23:55:27 +0000
Files and hashes:         1: _U5c-75RNAFgOW1ZbhsySM_IHMQ.crl (hash: gZKiz5LI9zKXXAFfja7NAieSAv4Duu6I8sG/nACyGLA=)
                          2: B42198DC64F211ED9AEC046FC4F9AE02.roa (hash: D1G789F7QO5EUSaHtpBz9qFV89CyiPWE00spTrcS29Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5CEA/28A77B6864EE11EDA4A34513C4F9AE02/_U5c-75RNAFgOW1ZbhsySM_IHMQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B5CEA/28A77B6864EE11EDA4A34513C4F9AE02/_U5c-75RNAFgOW1ZbhsySM_IHMQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U5c-75RNAFgOW1ZbhsySM_IHMQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:55:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 634 (0x27a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5CEA, serialNumber=FD4E5CFBBE51340160396D596E1B3248CFC81CC4
        Validity
            Not Before: Mar  1 23:55:27 2026 GMT
            Not After : Mar  8 23:55:27 2026 GMT
        Subject: CN=69a4d1f0-749d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:12:08:7f:a9:96:43:e8:b6:94:06:45:5e:f7:
                    1b:62:7d:92:5d:ce:cf:df:22:a1:90:eb:84:74:d2:
                    24:45:05:7f:8d:4c:2a:ae:f6:2f:0c:96:85:23:5a:
                    09:57:99:d4:36:95:de:23:ff:17:24:e0:15:a2:9e:
                    b7:7c:6b:13:34:b9:39:2b:29:c7:37:10:08:1e:c1:
                    35:29:6d:94:d5:38:0e:d2:42:76:c3:b5:2b:60:4b:
                    d1:28:97:bf:67:b6:dc:48:cb:e3:c2:72:36:aa:6b:
                    45:66:90:c2:0e:11:ab:ec:15:83:21:93:64:48:5d:
                    e3:e4:6c:77:75:dd:b0:27:1b:df:3e:91:2a:ab:2f:
                    bf:d5:e4:02:ce:16:a9:56:59:3b:1e:7e:9b:6a:43:
                    0c:70:34:ef:00:13:3c:87:61:8d:f3:80:4d:aa:ef:
                    e3:a8:1d:ce:9e:17:16:16:7a:d1:3c:c0:ce:1f:cd:
                    71:64:4a:07:31:d8:61:0d:b7:0c:30:f0:95:6a:ea:
                    ce:f7:8b:09:6d:8d:ad:31:d7:59:c2:cb:89:ec:9a:
                    85:66:eb:52:08:d9:01:07:df:9a:38:85:4d:93:f9:
                    05:29:bc:82:b1:5a:53:be:48:61:6b:b8:d9:a7:18:
                    88:3a:34:17:2d:36:01:75:65:a2:6d:3a:7b:24:37:
                    18:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:13:86:32:79:99:B5:2A:91:AA:E1:21:63:2B:85:F9:A7:B3:7F:DF
            X509v3 Authority Key Identifier:
                keyid:FD:4E:5C:FB:BE:51:34:01:60:39:6D:59:6E:1B:32:48:CF:C8:1C:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5CEA/28A77B6864EE11EDA4A34513C4F9AE02/_U5c-75RNAFgOW1ZbhsySM_IHMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U5c-75RNAFgOW1ZbhsySM_IHMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5CEA/28A77B6864EE11EDA4A34513C4F9AE02/_U5c-75RNAFgOW1ZbhsySM_IHMQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:e0:8c:d8:2e:c7:47:85:ad:6a:46:3d:b6:47:23:c8:fc:0a:
         2c:0d:c4:a2:18:82:ba:5e:a1:b2:93:5e:34:93:88:f4:04:56:
         ad:30:47:62:ed:71:ef:54:bf:59:06:0e:d3:0e:d2:6c:d5:62:
         b2:3c:7e:f5:1e:e8:41:76:d9:29:a2:b2:1d:5a:c7:49:5e:9b:
         2f:31:3e:1e:64:80:bd:30:98:57:a6:85:8c:52:03:88:cb:96:
         5c:b0:05:1d:dd:36:6a:73:57:92:fd:69:9d:e5:85:d1:fe:1f:
         16:b7:7d:d5:a7:7f:09:ff:10:3f:f9:f7:86:aa:98:fe:c4:af:
         32:8b:07:bd:b5:ed:d1:1e:ae:76:ed:94:89:ab:37:53:87:88:
         bc:29:b4:4e:eb:f3:80:d6:83:5c:c3:7f:4a:93:ee:f6:6c:25:
         84:0c:08:d7:5d:b4:6a:3d:19:b1:0f:ed:9a:38:3c:7f:4f:c8:
         7e:31:70:2b:6f:0d:e1:95:33:55:90:42:57:75:af:22:07:dd:
         c2:9a:d3:e2:49:86:f0:fb:55:bc:38:d4:67:7f:ce:24:22:41:
         a8:e9:8d:36:71:bc:dd:2d:37:87:09:93:0e:eb:df:09:44:45:
         3e:b8:85:59:75:12:6f:4f:f1:58:2e:ba:53:fd:b5:2d:63:ef:
         88:a4:03:77
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjVDRUExMTAvBgNVBAUTKEZENEU1Q0ZCQkU1MTM0MDE2MDM5NkQ1OTZFMUIzMjQ4
Q0ZDODFDQzQwHhcNMjYwMzAxMjM1NTI3WhcNMjYwMzA4MjM1NTI3WjAYMRYwFAYD
VQQDEw02OWE0ZDFmMC03NDlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkRIIf6mWQ+i2lAZFXvcbYn2SXc7P3yKhkOuEdNIkRQV/jUwqrvYvDJaFI1oJ
V5nUNpXeI/8XJOAVop63fGsTNLk5KynHNxAIHsE1KW2U1TgO0kJ2w7UrYEvRKJe/
Z7bcSMvjwnI2qmtFZpDCDhGr7BWDIZNkSF3j5Gx3dd2wJxvfPpEqqy+/1eQCzhap
Vlk7Hn6bakMMcDTvABM8h2GN84BNqu/jqB3OnhcWFnrRPMDOH81xZEoHMdhhDbcM
MPCVaurO94sJbY2tMddZwsuJ7JqFZutSCNkBB9+aOIVNk/kFKbyCsVpTvkhha7jZ
pxiIOjQXLTYBdWWibTp7JDcYtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMIThjJ5
mbUqkarhIWMrhfmns3/fMB8GA1UdIwQYMBaAFP1OXPu+UTQBYDltWW4bMkjPyBzE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUNFQS8yOEE3N0I2ODY0
RUUxMUVEQTRBMzQ1MTNDNEY5QUUwMi9fVTVjLTc1Uk5BRmdPVzFaYmhzeVNNX0lI
TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19VNWMtNzVSTkFGZ09XMVpiaHN5U01fSUhNUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NUNFQS8yOEE3N0I2ODY0RUUxMUVEQTRBMzQ1MTNDNEY5QUUwMi9fVTVjLTc1Uk5B
RmdPVzFaYmhzeVNNX0lITVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAweCM2C7HR4WtakY9tkcjyPwKLA3EohiCul6hspNeNJOI9ARWrTBHYu1x71S/
WQYO0w7SbNVisjx+9R7oQXbZKaKyHVrHSV6bLzE+HmSAvTCYV6aFjFIDiMuWXLAF
Hd02anNXkv1pneWF0f4fFrd91ad/Cf8QP/n3hqqY/sSvMosHvbXt0R6udu2Uias3
U4eIvCm0TuvzgNaDXMN/SpPu9mwlhAwI1120aj0ZsQ/tmjg8f0/IfjFwK28N4ZUz
VZBCV3WvIgfdwprT4kmG8PtVvDjUZ3/OJCJBqOmNNnG83S03hwmTDuvfCURFPriF
WXUSb0/xWC66U/21LWPviKQDdw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:00:28 2026 by rpki-client