Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft
File:                     5hI_ServZkwi-UzV67rqztOHoW8.mft (raw, json)
Hash identifier:          0revvVNHQAuJfJEyEQxohvKxRBf7eycMGKA857vZiak=
Subject key identifier:   F7:77:68:4E:3B:5F:43:EC:A7:6A:92:24:76:F6:C4:C5:0C:B1:69:DC
Authority key identifier: E6:12:3F:49:EA:EF:66:4C:22:F9:4C:D5:EB:BA:EA:CE:D3:87:A1:6F
Certificate issuer:       /CN=A91B861D/serialNumber=E6123F49EAEF664C22F94CD5EBBAEACED387A16F
Certificate serial:       0696
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft
Manifest number:          068C
Signing time:             Sun 01 Mar 2026 23:48:20 +0000
Manifest this update:     Sun 01 Mar 2026 23:48:19 +0000
Manifest next update:     Sun 08 Mar 2026 23:48:19 +0000
Files and hashes:         1: 5hI_ServZkwi-UzV67rqztOHoW8.crl (hash: kgHLmFWoTaIe3lFD8oDXqm39SXa+AXB0P3eYMj/zJWY=)
                          2: 1D0BA0FC57EB11F096357F7CC4F9AE02.roa (hash: qYnHpPQuWWyQUppUZeSoLqg0pl5Eo+MYWVanyVnMZyM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.crl
                          rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1686 (0x696)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B861D, serialNumber=E6123F49EAEF664C22F94CD5EBBAEACED387A16F
        Validity
            Not Before: Mar  1 23:48:19 2026 GMT
            Not After : Mar  8 23:48:19 2026 GMT
        Subject: CN=69a4d044-3e29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4e:ec:50:5e:b6:2f:38:03:e2:fc:ba:a2:9e:
                    53:d7:74:f8:df:ea:c9:a0:07:49:d7:03:65:67:ab:
                    69:b5:73:84:93:80:9b:86:ab:f4:67:3a:48:e3:b5:
                    7c:9a:57:6e:aa:82:25:b8:2f:1a:b9:06:89:b9:39:
                    f8:73:a1:dd:46:32:cf:f9:bd:4e:54:74:bd:5e:fa:
                    e8:6c:b6:82:7a:07:1e:34:1b:f2:41:7f:48:c8:2b:
                    0b:58:0d:d7:ed:fc:80:da:99:55:17:3f:10:c1:a7:
                    a8:93:d3:e3:cd:8c:86:4f:88:b7:13:6b:f9:bf:eb:
                    2a:20:23:91:94:ca:63:6c:c0:9f:26:df:bc:c6:6a:
                    6e:49:61:7b:ab:93:59:6c:0c:b4:a8:0e:15:00:0a:
                    13:49:6d:e2:fa:06:92:98:43:51:34:ca:41:2c:19:
                    1a:ca:9d:c1:18:8d:ce:1e:5a:e7:b6:18:99:3b:01:
                    97:6c:61:48:27:f6:7d:f2:9f:69:60:10:65:c5:4a:
                    40:7f:f8:f3:d6:56:a4:47:da:92:60:77:dc:0b:7a:
                    64:a1:7c:16:d0:67:31:47:15:c3:e1:c3:25:2a:87:
                    8f:55:3e:f9:32:d7:6f:47:de:63:aa:15:43:ca:b7:
                    83:6e:63:f5:50:cc:65:9a:55:97:48:73:7e:dc:de:
                    ac:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:77:68:4E:3B:5F:43:EC:A7:6A:92:24:76:F6:C4:C5:0C:B1:69:DC
            X509v3 Authority Key Identifier:
                keyid:E6:12:3F:49:EA:EF:66:4C:22:F9:4C:D5:EB:BA:EA:CE:D3:87:A1:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:65:32:6a:e1:f0:35:28:8b:fe:da:e4:46:90:4b:53:16:7d:
         4d:0a:e8:67:c1:a0:f2:3c:fa:0a:7d:f9:19:72:c1:f6:4a:48:
         b1:e6:33:80:cd:2c:08:1e:df:77:f1:9c:40:1c:30:38:59:d9:
         f3:4b:68:ac:8f:b1:eb:8d:cc:33:99:86:65:4e:e0:a4:73:fa:
         d9:95:ec:8f:8e:c2:ca:49:a1:f5:7e:4f:33:73:ac:e6:ee:e6:
         67:93:2b:1d:57:5d:b6:58:73:13:3b:57:7b:0f:3c:5d:c2:40:
         02:3c:43:1e:3e:61:98:4e:a4:7f:01:67:ff:eb:cc:dc:19:3a:
         b6:02:22:8b:bb:1b:35:d2:d5:3b:4c:18:ae:8b:19:34:43:fa:
         dd:d4:54:cc:93:65:b0:62:00:09:a3:8a:c7:ed:15:e5:ad:99:
         f8:41:4c:60:d7:b7:fe:9d:11:1d:fe:76:88:7c:0d:34:b2:51:
         d3:ff:b4:fb:73:3f:72:39:56:7c:b5:24:f2:e4:c2:fd:06:75:
         b3:cc:58:82:57:73:5d:ec:fc:ae:37:28:49:04:fc:22:42:a2:
         4a:a7:70:f6:11:cf:8d:f1:bd:56:1a:66:aa:2b:72:b6:d2:55:
         ea:5b:97:92:9c:99:25:e7:b2:ee:66:c1:e0:c9:da:2f:ae:a8:
         e1:9f:dd:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:30:43 2026 by rpki-client