Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.mft
File:                     slUrOLjFywk1yUD6YJgOpvUQz4Y.mft (raw, json)
Hash identifier:          ixko5XaKA3hX+cvPV4Xfs6wGWtbuGq/SL0T84aE7wjw=
Subject key identifier:   5F:7C:E4:B7:15:5A:8A:0D:0F:8E:E1:FC:C3:79:12:8F:BA:C7:92:F9
Authority key identifier: B2:55:2B:38:B8:C5:CB:09:35:C9:40:FA:60:98:0E:A6:F5:10:CF:86
Certificate issuer:       /CN=A91F5786/serialNumber=B2552B38B8C5CB0935C940FA60980EA6F510CF86
Certificate serial:       0131
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/slUrOLjFywk1yUD6YJgOpvUQz4Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.mft
Manifest number:          0127
Signing time:             Mon 02 Mar 2026 13:10:00 +0000
Manifest this update:     Mon 02 Mar 2026 13:10:00 +0000
Manifest next update:     Mon 09 Mar 2026 13:10:00 +0000
Files and hashes:         1: slUrOLjFywk1yUD6YJgOpvUQz4Y.crl (hash: S6xZuZ+L07s/jIoLwC5rF/UFW7K6DqvibqKQ/3WHJWM=)
                          2: 6A1352D0ABF311F08AAF8C15C4F9AE02.roa (hash: +UtQoGpilvtG1qoTPs/5jgLYowTqDUkkJwS5bjtwnxw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.crl
                          rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/slUrOLjFywk1yUD6YJgOpvUQz4Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 13:09:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 305 (0x131)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5786, serialNumber=B2552B38B8C5CB0935C940FA60980EA6F510CF86
        Validity
            Not Before: Mar  2 13:10:00 2026 GMT
            Not After : Mar  9 13:10:00 2026 GMT
        Subject: CN=69a58c28-d7ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:81:f5:05:eb:dd:ce:74:8f:13:a1:4b:9f:c9:
                    23:44:41:09:b0:9a:8d:31:f6:06:ec:a6:a6:5e:77:
                    9f:e3:79:04:6b:d1:03:8f:b4:cb:a0:37:3b:f5:4f:
                    77:29:5b:cd:82:f1:e9:20:6f:86:62:bf:1f:0f:14:
                    87:67:2e:97:bf:df:36:52:cb:55:0b:d5:17:83:8c:
                    79:29:0b:ce:f9:99:d8:77:c7:8a:34:80:1c:c5:7b:
                    ac:53:ca:95:ce:eb:af:82:13:7b:9f:fd:f2:cd:89:
                    bb:6f:9a:0d:68:5d:82:86:5c:6b:ab:05:d4:ca:d9:
                    48:05:0f:22:e3:98:e8:2f:1f:84:b5:7d:e6:b5:41:
                    f0:69:a9:71:0b:e3:92:46:0c:d8:21:54:19:93:81:
                    19:89:7b:7f:4e:1a:b5:b5:2a:88:2c:48:2f:c2:01:
                    dd:2a:9a:7e:ec:38:2a:e7:b5:c6:1a:ce:09:d6:f5:
                    fc:34:82:9e:e4:05:c0:2b:a9:85:e4:78:54:2e:49:
                    ee:fe:d3:37:5c:35:7e:6c:63:82:ee:c5:51:05:1a:
                    30:b8:eb:43:36:01:e6:04:a2:1c:73:00:a5:5b:0e:
                    85:e5:77:3a:3b:59:aa:a8:a2:00:01:d2:eb:fd:9c:
                    87:ec:ed:39:eb:13:bf:eb:4a:8c:d1:3d:15:df:d0:
                    6e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:7C:E4:B7:15:5A:8A:0D:0F:8E:E1:FC:C3:79:12:8F:BA:C7:92:F9
            X509v3 Authority Key Identifier:
                keyid:B2:55:2B:38:B8:C5:CB:09:35:C9:40:FA:60:98:0E:A6:F5:10:CF:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/slUrOLjFywk1yUD6YJgOpvUQz4Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:41:2d:52:6d:bc:ac:a8:60:0b:4b:54:10:ae:24:e2:3c:f2:
         a4:aa:53:96:8c:7d:1b:20:c1:ed:3a:3d:2c:99:74:24:53:97:
         8a:7a:bf:cd:a5:97:27:c9:34:5e:d2:3f:a5:1c:be:16:37:80:
         35:c7:ef:75:06:60:4b:e5:19:dd:ce:22:91:0e:85:bf:9e:38:
         82:e6:27:cd:dd:29:08:13:b0:10:74:90:6c:b4:ea:fd:bd:29:
         5b:eb:b4:ba:b8:dc:00:b9:c2:10:cd:f3:86:90:b4:d9:98:07:
         c5:43:47:58:04:b0:6e:cd:54:5e:de:10:0f:4b:25:40:51:f7:
         93:a0:37:62:1d:73:13:1a:06:d8:53:6d:9f:48:23:eb:a1:2c:
         e6:e7:05:58:aa:ff:a1:0e:9c:a4:d2:6d:c3:c3:bd:9c:31:32:
         9c:63:95:aa:43:9c:a8:d8:5b:e7:1e:81:d2:cd:1f:33:b4:80:
         a2:ec:0c:3a:f5:5c:d0:18:80:39:1a:ee:d3:15:a2:5e:96:c0:
         6e:a4:29:94:5f:55:98:2b:b0:8a:8d:ad:25:1f:23:bc:6f:99:
         e9:df:a9:9b:de:5b:b3:1e:01:9e:1a:43:ed:c7:eb:2d:b8:81:
         ab:ed:ce:31:53:e0:55:02:7c:25:e9:41:98:3b:e1:3e:a8:6d:
         5a:91:67:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:49:26 2026 by rpki-client