Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F515/3D3CA30874A711EF8EA2C53DC4F9AE02/-1rPvPn87wNLipO9MZ5iBELWZn8.mft
File:                     -1rPvPn87wNLipO9MZ5iBELWZn8.mft (raw, json)
Hash identifier:          bvdC18jDYFDlO+/hsoYwAquiKjAEDansXXTzh0KIzgE=
Subject key identifier:   9C:A5:C9:5F:DB:BC:FB:A2:D8:FE:69:72:2A:8E:27:6D:F1:FA:0F:EF
Authority key identifier: FB:5A:CF:BC:F9:FC:EF:03:4B:8A:93:BD:31:9E:62:04:42:D6:66:7F
Certificate issuer:       /CN=A912F515/serialNumber=FB5ACFBCF9FCEF034B8A93BD319E620442D6667F
Certificate serial:       0132
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-1rPvPn87wNLipO9MZ5iBELWZn8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F515/3D3CA30874A711EF8EA2C53DC4F9AE02/-1rPvPn87wNLipO9MZ5iBELWZn8.mft
Manifest number:          0128
Signing time:             Sun 05 Apr 2026 05:05:26 +0000
Manifest this update:     Sun 05 Apr 2026 05:05:26 +0000
Manifest next update:     Sun 12 Apr 2026 05:05:26 +0000
Files and hashes:         1: -1rPvPn87wNLipO9MZ5iBELWZn8.crl (hash: p1GWiVDeuVtYa0MY9mz2UFYl1cZ0goYfxgYBJslbBEI=)
                          2: 6A8E3C9474A811EFA3123A41C4F9AE02.roa (hash: Qt2yG5ssIGyzu69EVskhzxUhIEVC6DHMm7qjK2IfraU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F515/3D3CA30874A711EF8EA2C53DC4F9AE02/-1rPvPn87wNLipO9MZ5iBELWZn8.crl
                          rsync://rpki.apnic.net/member_repository/A912F515/3D3CA30874A711EF8EA2C53DC4F9AE02/-1rPvPn87wNLipO9MZ5iBELWZn8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-1rPvPn87wNLipO9MZ5iBELWZn8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:05:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 306 (0x132)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F515, serialNumber=FB5ACFBCF9FCEF034B8A93BD319E620442D6667F
        Validity
            Not Before: Apr  5 05:05:26 2026 GMT
            Not After : Apr 12 05:05:26 2026 GMT
        Subject: CN=69d1ed96-bb48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:0f:8c:4d:41:69:94:10:bd:24:ba:ef:36:44:
                    54:8b:d4:fb:b8:4e:65:91:c8:25:e6:fb:09:e8:b6:
                    a7:3f:4e:f2:89:21:b7:32:fb:19:90:e9:e9:ec:95:
                    e8:b1:0b:5a:8d:9b:06:24:12:0d:8e:97:81:44:d1:
                    0b:85:1b:dc:bd:57:8d:b1:fe:26:ce:6b:95:39:d0:
                    1f:d1:3c:6d:0e:98:80:d8:5b:ef:c8:db:c3:20:ee:
                    d5:f9:c0:93:3c:31:d6:2a:a5:a5:17:d9:91:0d:70:
                    5b:a5:17:b3:96:8f:45:97:a5:6e:1a:f0:18:c2:b8:
                    ab:4a:a7:48:73:48:61:4c:a6:85:6c:e4:24:a4:6c:
                    aa:ac:43:1e:6b:be:ac:de:ef:c7:3b:cc:5c:20:30:
                    d4:a8:ee:d2:03:6d:45:04:51:60:9e:53:22:ac:ba:
                    95:b9:24:56:a8:d3:f8:89:6f:5b:c3:c8:e3:f1:08:
                    5c:a4:83:30:dc:a7:42:a0:25:21:62:af:eb:dc:3e:
                    6a:b5:70:f9:be:f9:76:9c:c1:f1:d6:89:0c:f7:75:
                    23:1f:2d:ed:3f:9d:2e:30:b3:29:b1:df:34:91:23:
                    65:cb:1e:fe:88:93:27:07:87:e1:93:d8:d9:82:2a:
                    b7:52:96:ae:86:e6:c7:a1:82:4e:36:ac:1b:20:09:
                    58:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:A5:C9:5F:DB:BC:FB:A2:D8:FE:69:72:2A:8E:27:6D:F1:FA:0F:EF
            X509v3 Authority Key Identifier:
                keyid:FB:5A:CF:BC:F9:FC:EF:03:4B:8A:93:BD:31:9E:62:04:42:D6:66:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F515/3D3CA30874A711EF8EA2C53DC4F9AE02/-1rPvPn87wNLipO9MZ5iBELWZn8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-1rPvPn87wNLipO9MZ5iBELWZn8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F515/3D3CA30874A711EF8EA2C53DC4F9AE02/-1rPvPn87wNLipO9MZ5iBELWZn8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:13:2b:1b:31:cd:14:4b:49:c1:7f:32:a5:89:5a:68:84:05:
         47:a0:cb:93:c9:5f:2d:d5:f4:71:d3:f3:a6:11:62:85:a4:1e:
         d9:cf:05:e7:69:b8:4e:8d:82:6c:30:37:2a:09:ec:c3:76:cb:
         73:89:a3:29:78:b0:af:1f:70:85:e2:78:19:b5:85:56:da:f8:
         c8:cb:53:db:f9:8f:e3:0a:a6:e5:4e:f6:4a:e9:fe:75:8d:5a:
         6f:06:15:62:41:64:07:f4:a3:f0:cb:76:3c:98:2d:04:be:a5:
         6c:f8:65:c7:1b:7a:98:4d:d2:e3:9d:46:ce:15:35:9a:03:ec:
         f8:d3:cd:70:76:c6:f1:91:48:66:7b:b3:84:e0:1c:d3:81:57:
         eb:ed:5d:e6:90:c7:6d:ec:cd:b8:21:3b:39:93:3a:86:2b:89:
         2b:b6:f3:39:03:ed:59:6a:44:43:cc:f8:ab:22:47:71:12:5b:
         72:32:84:d5:58:1b:33:1b:6a:8c:bf:41:62:82:2f:e5:83:45:
         e1:d6:55:a3:5f:de:7b:22:c1:2f:b9:44:3f:9e:6f:25:6b:97:
         de:a2:23:32:dc:d6:23:bb:26:a1:d7:6c:d4:f7:02:9c:fc:d7:
         23:86:f1:28:c7:3e:3a:b6:73:83:63:09:fe:a3:8b:c2:07:b3:
         fb:ea:e0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 14:14:26 2026 by rpki-client