Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA58E/908DB4C88C6811F0BCEEB171C4F9AE02/P3JyYLCUlEIN1npzBNggXUL_P_E.mft
File:                     P3JyYLCUlEIN1npzBNggXUL_P_E.mft (raw, json)
Hash identifier:          0cVl4Cz9ew+dCZc0MF26HlJ+k3P0t8/lZ+qnxMZjPOk=
Subject key identifier:   41:1A:95:20:3C:CF:DA:B4:DA:55:26:AE:6F:D9:73:1A:C2:F2:51:12
Authority key identifier: 3F:72:72:60:B0:94:94:42:0D:D6:7A:73:04:D8:20:5D:42:FF:3F:F1
Certificate issuer:       /CN=A91CA58E/serialNumber=3F727260B09494420DD67A7304D8205D42FF3FF1
Certificate serial:       5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3JyYLCUlEIN1npzBNggXUL_P_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA58E/908DB4C88C6811F0BCEEB171C4F9AE02/P3JyYLCUlEIN1npzBNggXUL_P_E.mft
Manifest number:          5A
Signing time:             Sun 01 Mar 2026 09:29:40 +0000
Manifest this update:     Sun 01 Mar 2026 09:29:39 +0000
Manifest next update:     Sun 08 Mar 2026 09:29:39 +0000
Files and hashes:         1: P3JyYLCUlEIN1npzBNggXUL_P_E.crl (hash: GBey+TrZxsuS0BYl7qMN5GUi8PsAkh0EfhZaozU2DsI=)
                          2: 3DC1FF148C6911F08611A235C4F9AE02.roa (hash: H7bTNR9e6JUVDLggIpGg5EM1qrYQVGxo8ckcLbi2lxE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CA58E/908DB4C88C6811F0BCEEB171C4F9AE02/P3JyYLCUlEIN1npzBNggXUL_P_E.crl
                          rsync://rpki.apnic.net/member_repository/A91CA58E/908DB4C88C6811F0BCEEB171C4F9AE02/P3JyYLCUlEIN1npzBNggXUL_P_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3JyYLCUlEIN1npzBNggXUL_P_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:29:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA58E, serialNumber=3F727260B09494420DD67A7304D8205D42FF3FF1
        Validity
            Not Before: Mar  1 09:29:39 2026 GMT
            Not After : Mar  8 09:29:39 2026 GMT
        Subject: CN=69a40704-97af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:55:38:f5:d4:b7:93:a7:f4:26:1b:83:ab:88:
                    9e:50:71:2a:aa:d3:e8:0d:c9:0a:b3:0b:1f:e1:08:
                    40:c3:a0:dc:fc:86:c1:2f:8e:ca:7f:66:f8:87:4f:
                    44:da:b7:58:97:9e:7d:00:55:bf:a3:9a:5b:96:e7:
                    bd:bc:10:c1:b4:aa:d9:02:91:da:1c:fe:30:8b:bf:
                    ee:92:f2:74:bc:fa:ec:80:68:7e:f2:6a:57:7b:f3:
                    33:4e:3a:6b:94:33:f4:e3:ba:e8:90:29:91:ce:a3:
                    5d:a7:6f:a1:d4:57:4a:f5:f1:4d:71:d4:99:c9:ab:
                    03:a9:4a:a7:b6:d4:88:27:be:5f:5f:8f:4c:36:bb:
                    34:9e:c7:e9:df:63:3c:81:d6:7f:d9:56:90:84:61:
                    ba:48:a2:bf:26:2e:95:4a:b8:b2:6b:b4:df:5a:cc:
                    2f:6f:e2:9b:1b:1d:97:01:87:d8:c8:9d:de:4c:91:
                    6a:58:cb:f0:ab:3d:20:ab:75:00:50:a7:87:ee:b0:
                    4a:40:28:01:98:ef:76:f1:af:4c:e2:a8:67:d5:78:
                    94:8a:9e:2e:bd:9f:5f:84:81:56:e7:4c:dc:8a:47:
                    d3:19:22:8f:c6:57:9d:36:30:74:60:4d:17:8b:34:
                    f6:03:55:e2:cb:69:98:7c:3a:5c:5a:c0:09:82:86:
                    7c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:1A:95:20:3C:CF:DA:B4:DA:55:26:AE:6F:D9:73:1A:C2:F2:51:12
            X509v3 Authority Key Identifier:
                keyid:3F:72:72:60:B0:94:94:42:0D:D6:7A:73:04:D8:20:5D:42:FF:3F:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA58E/908DB4C88C6811F0BCEEB171C4F9AE02/P3JyYLCUlEIN1npzBNggXUL_P_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3JyYLCUlEIN1npzBNggXUL_P_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA58E/908DB4C88C6811F0BCEEB171C4F9AE02/P3JyYLCUlEIN1npzBNggXUL_P_E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:18:12:40:99:2c:c2:d6:81:6b:56:9c:1e:66:f9:ff:de:16:
         10:65:02:bc:09:9b:00:08:4f:c1:af:39:40:bf:f0:ba:78:c5:
         ff:16:f8:3b:00:31:7e:68:88:dc:1a:e4:2e:64:97:4e:74:ed:
         0c:be:1f:19:27:e4:4a:3e:39:da:fe:d8:f8:2f:48:d8:bb:e5:
         28:d9:ef:fe:e1:b9:0c:7e:d3:8b:b5:9f:16:d4:7a:d6:9d:87:
         0c:bc:81:5e:4e:c8:e7:55:79:e6:6e:b5:50:b5:ec:6a:88:f7:
         81:a7:29:8f:6c:d7:07:ea:26:01:57:35:37:9d:a4:3b:31:a2:
         cb:1b:83:29:34:fb:64:36:65:37:2c:82:1e:7d:cc:dd:73:b6:
         27:c8:25:70:d8:ee:84:92:1d:e8:93:07:eb:87:6b:02:ee:47:
         fa:68:1c:11:65:7e:3f:b3:34:84:88:2c:ba:78:4e:bc:2f:fb:
         4d:c9:9a:78:a3:e1:e3:33:1c:c9:c1:90:91:a9:ce:de:12:76:
         bb:2d:5c:64:6c:3e:a5:9e:c6:a6:80:ab:bb:ca:73:47:b3:a8:
         e2:db:c4:4e:e8:f3:2f:80:1b:53:18:57:d8:3f:2f:58:41:4b:
         fd:92:a6:4a:b0:f9:c3:bb:66:21:8f:f4:f3:53:32:7d:71:63:
         10:8a:ba:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:56:48 2026 by rpki-client