Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft
File:                     5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft (raw, json)
Hash identifier:          7GQPrAYuksw27d4O6fh+K+NS6JsIviji7VllT1Z8ToA=
Subject key identifier:   56:40:26:93:3F:3A:FE:0B:A6:65:C3:47:40:3E:EA:C3:73:04:4C:25
Authority key identifier: E5:B1:CE:1D:45:39:18:19:5B:EB:5C:D9:0F:6D:87:9E:FE:99:10:A2
Certificate issuer:       /CN=A91DE5E8/serialNumber=E5B1CE1D453918195BEB5CD90F6D879EFE9910A2
Certificate serial:       024F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bHOHUU5GBlb61zZD22Hnv6ZEKI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft
Manifest number:          0243
Signing time:             Mon 02 Mar 2026 01:12:04 +0000
Manifest this update:     Mon 02 Mar 2026 01:12:02 +0000
Manifest next update:     Mon 09 Mar 2026 01:12:02 +0000
Files and hashes:         1: 5bHOHUU5GBlb61zZD22Hnv6ZEKI.crl (hash: 9Hqq0hHIc7k+k61irHFlAi4cjFEfufCa7l7FDsymvDU=)
                          2: 785B44D6F2AF11EF97443030C4F9AE02.roa (hash: yzmWg50nzv8Dnad8AXsujO//BFKjYq1nis/lix16bcM=)
                          3: B264EB66A30911ED99A82087C4F9AE02.roa (hash: Qsg2AMGaV0HzjGdO1Hutn0CHA9Q/KYFBqKZc552p7Mk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.crl
                          rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bHOHUU5GBlb61zZD22Hnv6ZEKI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:11:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 591 (0x24f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE5E8, serialNumber=E5B1CE1D453918195BEB5CD90F6D879EFE9910A2
        Validity
            Not Before: Mar  2 01:12:02 2026 GMT
            Not After : Mar  9 01:12:02 2026 GMT
        Subject: CN=69a4e3e3-15b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:20:ac:ca:87:e5:3d:2d:9b:aa:39:79:ba:69:
                    2e:d3:64:54:3c:9f:d5:d0:3d:40:42:4b:76:91:59:
                    b5:fd:33:71:37:29:58:fc:1b:c2:c1:cb:62:14:03:
                    17:59:4d:48:f2:59:8c:2e:5a:9d:03:18:b8:fe:77:
                    c0:7a:a9:d8:9c:1d:8b:cd:21:7b:9f:4e:0f:c7:ae:
                    92:d0:71:84:00:f8:1f:5d:c3:f3:47:96:e9:71:d6:
                    42:3a:dd:6e:27:cc:12:91:dc:0c:69:d1:24:c6:c9:
                    1d:a8:ad:f0:31:07:fb:52:33:82:ab:9f:79:2c:76:
                    f5:38:25:9c:13:5e:f8:fa:b2:1a:d2:98:3f:e8:67:
                    57:77:15:6c:36:a9:31:02:7c:e7:71:4a:cf:24:3c:
                    f7:9e:1c:c2:c5:31:7d:c3:56:9d:9b:ff:32:0d:23:
                    51:55:ce:da:77:24:55:30:f7:ea:89:db:d2:9a:2c:
                    fe:aa:2d:80:36:bc:29:ac:1b:7d:77:2a:82:75:13:
                    52:dc:c5:7c:dd:7d:fa:bc:14:2e:72:9f:fb:96:2f:
                    82:17:14:07:35:01:8e:a1:96:16:b0:0f:ae:b9:ce:
                    27:65:f8:1a:0a:da:03:47:19:ce:9a:fc:58:2d:d4:
                    13:2d:13:99:f6:ed:3e:a6:2e:78:4d:05:1f:1e:2a:
                    72:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:40:26:93:3F:3A:FE:0B:A6:65:C3:47:40:3E:EA:C3:73:04:4C:25
            X509v3 Authority Key Identifier:
                keyid:E5:B1:CE:1D:45:39:18:19:5B:EB:5C:D9:0F:6D:87:9E:FE:99:10:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bHOHUU5GBlb61zZD22Hnv6ZEKI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:57:30:4e:bf:ad:bf:1c:02:c1:a8:ca:53:80:1d:ec:52:18:
         4e:10:af:4b:06:f3:48:a7:9e:0d:7c:a9:43:0d:81:9b:4a:59:
         49:e3:ae:6d:16:08:dd:f1:d7:79:4e:ff:3f:93:1e:40:80:1d:
         24:34:15:dc:62:78:3e:39:0f:57:21:3a:df:84:5a:d6:71:10:
         63:5c:a9:6f:63:d2:e6:d7:d2:80:50:1b:71:56:e9:7a:5a:90:
         5f:e7:67:76:1c:14:67:97:7f:4e:c0:20:31:72:e5:23:ff:5b:
         43:4c:b4:b5:f8:da:14:39:23:80:f2:70:36:3f:e8:d7:75:58:
         48:09:58:2e:b9:ee:c8:5d:32:0b:7e:44:2f:a3:7e:64:4c:74:
         b9:e2:11:6e:5d:b2:01:62:da:bf:5c:72:5f:8c:59:5f:94:bc:
         bb:ad:3c:4a:f9:21:3b:fa:da:0f:45:b4:c0:62:5a:93:c8:ee:
         9e:b2:36:6a:3c:3b:e9:73:fd:15:f6:ea:08:92:b5:1b:9c:25:
         1a:c5:89:23:81:54:03:e5:2c:80:be:dc:05:83:ca:27:49:59:
         f5:72:3a:2a:98:d3:18:7a:31:b3:38:39:96:c4:a1:28:4c:b7:
         e1:e0:4f:0a:f1:b1:05:61:13:59:bf:67:66:ed:b6:b7:9d:d1:
         25:4e:b8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:20:34 2026 by rpki-client