Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft
File:                     M5P50HCy5wlJrKKqzI5l6JDnQJk.mft (raw, json)
Hash identifier:          gx2LUnBX7MEypq0DAv6r9nPgJH0osuLSp0lJgn4u0m8=
Subject key identifier:   DB:F4:78:EE:3A:BD:FD:95:6A:51:CE:E4:69:A0:E9:EE:E2:2E:38:07
Authority key identifier: 33:93:F9:D0:70:B2:E7:09:49:AC:A2:AA:CC:8E:65:E8:90:E7:40:99
Certificate issuer:       /CN=A916DB72/serialNumber=3393F9D070B2E70949ACA2AACC8E65E890E74099
Certificate serial:       0154
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft
Manifest number:          0147
Signing time:             Thu 19 Mar 2026 04:16:41 +0000
Manifest this update:     Thu 19 Mar 2026 04:16:40 +0000
Manifest next update:     Thu 26 Mar 2026 04:16:40 +0000
Files and hashes:         1: M5P50HCy5wlJrKKqzI5l6JDnQJk.crl (hash: L+c1C6hcM8iptWwzyUADPE3IX6Y3lH60qYLDP8NpQoM=)
                          2: 81C87DDE6C8311EFB20D5276C4F9AE02.roa (hash: npEv0GL7n1EnWpzfcHXymx9nG0SCeEVvS7H50YyGOdA=)
                          3: 92F925C231F511EFA1744F0EC4F9AE02.roa (hash: MdsgxtSVf/cKPbVHpzAfXZzC0tIBREHraRN4Ts8algE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.crl
                          rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Mar 2026 04:16:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 340 (0x154)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DB72, serialNumber=3393F9D070B2E70949ACA2AACC8E65E890E74099
        Validity
            Not Before: Mar 19 04:16:40 2026 GMT
            Not After : Mar 26 04:16:40 2026 GMT
        Subject: CN=69bb78a9-ede3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:73:19:49:17:eb:00:6d:89:cd:5b:29:c1:be:
                    71:dd:ab:18:f5:d4:4f:92:1a:25:7b:eb:61:44:78:
                    fc:ff:3d:c9:61:60:d7:94:df:86:a7:8a:ef:91:44:
                    25:d5:4e:3c:9c:8a:19:a8:3b:78:bf:b1:fa:6d:15:
                    3a:10:55:33:7c:9e:60:be:f9:50:08:13:9d:73:a7:
                    b9:a8:23:62:1c:a4:33:4d:38:17:b5:a8:12:07:7a:
                    08:da:df:0d:98:76:9e:60:06:a6:2b:83:14:dc:24:
                    3e:d9:b6:9d:19:ee:e8:fc:8f:03:7e:45:d9:e1:06:
                    c1:05:ab:52:6d:6e:97:63:e8:7b:4f:eb:61:cf:72:
                    37:ca:d7:1c:3d:7a:96:c7:6c:fe:39:30:2a:24:a8:
                    c3:93:d2:cf:52:f3:a9:b4:b9:06:2b:11:63:b3:bf:
                    c0:55:0e:a1:c0:04:09:78:e9:18:44:7a:58:9f:ff:
                    07:e7:bb:b5:b1:1d:8a:9a:a5:a3:3f:6a:27:23:45:
                    cd:28:db:5b:68:ac:cd:13:81:2c:e9:50:73:a9:58:
                    55:df:00:8d:26:bf:f9:0d:ad:04:0a:4b:7f:78:27:
                    8c:1b:c4:75:1a:49:16:47:c8:04:7c:3e:75:f4:04:
                    06:ea:77:80:55:06:0f:1e:fa:ae:9e:71:52:27:90:
                    35:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:F4:78:EE:3A:BD:FD:95:6A:51:CE:E4:69:A0:E9:EE:E2:2E:38:07
            X509v3 Authority Key Identifier:
                keyid:33:93:F9:D0:70:B2:E7:09:49:AC:A2:AA:CC:8E:65:E8:90:E7:40:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:53:03:af:f0:2a:2d:58:01:80:f0:71:61:46:3d:22:6e:02:
         6b:35:d5:bf:b3:4b:13:8b:25:e3:8b:8b:86:6e:36:57:d6:14:
         94:09:fc:71:3c:37:90:ad:6d:15:35:2c:b0:87:a4:43:89:ec:
         49:3e:58:b2:ef:05:7c:69:a7:36:b3:34:e6:15:50:bb:ca:2c:
         c3:f6:1e:aa:ed:e1:0d:9c:ce:26:8e:a7:5f:d2:26:ac:b2:45:
         10:56:90:23:11:fa:91:63:a7:1a:fb:6d:ed:70:8a:c6:5c:56:
         3c:5b:8e:41:f8:34:58:40:3e:06:25:28:f6:c4:d2:c3:b8:a0:
         62:b3:63:9d:83:8b:82:46:7d:68:ee:8f:45:9f:c7:b6:7b:31:
         3f:98:71:e6:dc:da:93:dd:76:a2:94:be:cd:53:c7:91:86:66:
         b3:f6:5e:f5:64:8f:6e:5e:c4:1c:25:e0:e3:c6:bb:9d:ca:56:
         5c:47:20:fa:d3:5b:53:04:c3:3a:1f:86:19:1e:e2:a6:8b:39:
         a3:00:7b:35:7f:a5:54:dc:42:17:6c:42:e4:23:41:3f:64:3e:
         bc:e1:dc:5e:04:df:cd:1d:97:ff:51:1c:25:24:74:db:31:4c:
         e3:d3:d8:ed:d0:af:4f:a0:ad:41:86:55:45:f1:c4:ce:1a:a3:
         48:fa:9b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 17:24:16 2026 by rpki-client