Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft
File:                     5wYBKhBr0JRljmBMVgMFDxTcP0w.mft (raw, json)
Hash identifier:          ZZTnRih5n3b7t3fPlXOk93fPUorrN7GH68c3bSC1I+o=
Subject key identifier:   7A:B7:0B:D5:2E:44:73:5F:D5:A5:28:A9:F5:27:BB:41:20:D1:19:7B
Authority key identifier: E7:06:01:2A:10:6B:D0:94:65:8E:60:4C:56:03:05:0F:14:DC:3F:4C
Certificate issuer:       /CN=A91D94CD/serialNumber=E706012A106BD094658E604C5603050F14DC3F4C
Certificate serial:       5A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft
Manifest number:          52
Signing time:             Sun 01 Mar 2026 09:39:37 +0000
Manifest this update:     Sun 01 Mar 2026 09:39:37 +0000
Manifest next update:     Sun 08 Mar 2026 09:39:37 +0000
Files and hashes:         1: 5wYBKhBr0JRljmBMVgMFDxTcP0w.crl (hash: BHWl0ZjWuE5SvRnEWtWGUdizT2ndkY8iHROU/NKeEJU=)
                          2: 67D535ACA32311F0A8D9D520C4F9AE02.roa (hash: BSzgTNzVd1eSvTFBsG3dgq89V/tbKxGI5pw6hlS/4GY=)
                          3: 6767E894A32311F0A8D9D520C4F9AE02.roa (hash: EHyz2xRZs5VYv9OanUFyye7p3N/wXAHiJq/ekOSOYZA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.crl
                          rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:39:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D94CD, serialNumber=E706012A106BD094658E604C5603050F14DC3F4C
        Validity
            Not Before: Mar  1 09:39:37 2026 GMT
            Not After : Mar  8 09:39:37 2026 GMT
        Subject: CN=69a40959-8cb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d2:6a:11:c4:db:92:8d:d2:9a:08:dd:66:52:
                    6e:4c:95:bc:6e:9f:05:e6:ca:c4:fd:4d:83:c8:c5:
                    b1:8e:cc:d4:be:dc:eb:5d:9f:b4:e6:2d:a2:8c:7b:
                    03:b9:9f:62:be:19:35:8c:6b:83:48:76:68:75:e3:
                    61:b8:1d:b8:e7:59:af:6f:34:c3:8f:6c:20:0a:54:
                    2c:78:3b:c8:f8:60:3f:d3:4a:4c:bb:aa:a0:ba:e6:
                    9f:af:fe:53:f5:56:da:65:1a:95:aa:a0:48:63:6b:
                    49:c6:72:a7:4a:e1:1a:68:b6:cd:6c:6c:59:6e:99:
                    88:75:c8:27:f6:f2:f0:44:6d:c8:7d:68:50:25:3e:
                    40:a5:3f:91:5c:08:a7:c1:8f:27:2f:c1:8a:00:6e:
                    6e:25:9e:e0:18:81:d1:3e:e5:ce:ed:8a:62:ba:48:
                    1a:2b:b9:99:52:c3:84:70:b4:08:88:1f:5a:0b:2c:
                    9c:75:95:cc:d5:96:16:5a:06:f1:5c:55:dd:0f:c2:
                    9d:56:f9:f3:12:c6:d4:7d:c3:77:4d:14:64:be:4a:
                    c6:2e:5f:c3:3b:f5:fe:59:b4:a3:c8:d7:77:dd:60:
                    40:8d:dd:c4:20:ec:77:db:26:12:12:88:44:31:4b:
                    cf:ce:33:d4:64:47:4e:dc:e8:b5:bf:1e:f9:95:c0:
                    71:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:B7:0B:D5:2E:44:73:5F:D5:A5:28:A9:F5:27:BB:41:20:D1:19:7B
            X509v3 Authority Key Identifier:
                keyid:E7:06:01:2A:10:6B:D0:94:65:8E:60:4C:56:03:05:0F:14:DC:3F:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:6a:fa:16:7f:2d:f6:c5:cb:d3:b1:2e:b8:c6:4a:b7:ef:f8:
         22:43:82:5c:31:76:ac:37:5f:aa:4f:09:0d:40:0a:94:16:36:
         8b:0b:9e:5a:d6:59:55:8b:fb:d5:5e:cf:13:ca:33:de:b4:1b:
         40:26:cc:8a:a6:24:f7:f2:6b:03:26:c7:e8:c7:ad:10:90:6e:
         5e:ee:e7:9e:82:1d:9d:e7:bf:ac:4a:15:9c:1e:00:89:fb:e5:
         7c:d9:11:09:00:88:ca:91:cf:80:32:f0:07:11:9b:15:bd:d6:
         fc:91:60:1c:30:ce:e4:95:74:d5:66:d6:5e:83:4a:5a:f0:49:
         b1:d7:d8:77:be:0c:a9:7e:a6:f1:da:b4:3a:1a:80:36:9b:f6:
         b9:21:b3:67:8b:52:0a:1b:a4:76:71:b0:ad:30:0c:08:fc:1d:
         72:f2:44:9f:03:a3:24:fd:7a:a1:3c:7c:32:c2:1f:cf:ae:a8:
         a8:30:96:7d:da:44:65:39:15:b7:e2:00:03:88:c1:8a:86:e4:
         d8:dd:d3:bb:e2:eb:d9:ad:a9:22:4f:b6:fd:a3:35:1f:cb:ee:
         52:f6:b9:aa:24:6a:d3:1e:e1:71:a4:07:83:8f:bf:6c:20:55:
         5a:29:09:1c:fc:f1:00:0e:a0:7f:45:c9:36:89:66:83:41:91:
         89:cd:1a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:52:47 2026 by rpki-client