Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.mft
File:                     J6Ci3fNcGX1PwmKQwpV9SWjPFY8.mft (raw, json)
Hash identifier:          Q/EJ76FSusTlUmCiB4sHQZRJ+lo+yCV/N200BDr0KT0=
Subject key identifier:   0E:43:2E:C2:FA:DF:B3:08:06:C5:0B:90:97:4A:1E:C9:FD:C9:C3:C7
Authority key identifier: 27:A0:A2:DD:F3:5C:19:7D:4F:C2:62:90:C2:95:7D:49:68:CF:15:8F
Certificate issuer:       /CN=A917A2E5/serialNumber=27A0A2DDF35C197D4FC26290C2957D4968CF158F
Certificate serial:       5D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.mft
Manifest number:          5B
Signing time:             Tue 03 Mar 2026 07:44:11 +0000
Manifest this update:     Tue 03 Mar 2026 07:44:11 +0000
Manifest next update:     Tue 10 Mar 2026 07:44:11 +0000
Files and hashes:         1: J6Ci3fNcGX1PwmKQwpV9SWjPFY8.crl (hash: b17Fw6yKxF05MnTFgbDYuuFKC1GmN59XqlDV293k7M0=)
                          2: 173F9AAC8C9811F0B7F99E73C4F9AE02.roa (hash: dtOyJXL7fADe0DAPUWAD6cAvQxtHj2xT44MMlwLS1gs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.crl
                          rsync://rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 07:44:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A2E5, serialNumber=27A0A2DDF35C197D4FC26290C2957D4968CF158F
        Validity
            Not Before: Mar  3 07:44:11 2026 GMT
            Not After : Mar 10 07:44:11 2026 GMT
        Subject: CN=69a6914b-9453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:60:6b:2b:d2:7a:bb:d0:ee:2c:63:38:5e:cf:
                    9b:8d:42:06:40:7d:d6:30:f5:6c:01:ae:94:ba:80:
                    df:26:80:40:48:32:72:fc:de:11:a7:9c:a8:5c:8f:
                    05:49:ca:39:d8:b2:04:35:2f:ad:96:59:d4:fe:f4:
                    26:be:bd:af:9c:f1:ae:af:d1:48:10:e6:16:bf:0c:
                    7a:4a:36:b8:85:13:00:07:67:0a:39:bd:1e:8a:a9:
                    b4:44:f9:cf:f9:66:bc:c9:ff:93:d5:8e:ed:02:10:
                    e8:83:2f:86:0b:73:49:09:de:6a:5f:24:b2:18:7f:
                    83:dc:6c:fe:34:e2:a6:fb:b7:75:e5:35:af:89:0d:
                    ef:a7:06:c1:cc:32:4c:69:a0:bb:53:95:62:7a:03:
                    8e:93:6f:b1:66:81:54:3e:59:37:ab:ae:a3:33:51:
                    82:e3:01:a0:81:f5:11:8f:59:31:c0:00:dc:56:4f:
                    95:7b:c0:2b:62:e5:1d:f5:c6:cd:49:83:3e:93:22:
                    e1:1f:b4:78:74:d3:ee:99:38:d8:44:75:5b:bd:5c:
                    ec:02:f9:a4:18:1b:15:7a:5b:c9:ac:6e:d4:d0:5e:
                    58:23:96:3f:49:13:0e:d5:84:99:03:6f:06:ae:1d:
                    aa:60:f4:55:eb:61:b6:94:34:3b:42:e4:f3:6e:65:
                    6d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:43:2E:C2:FA:DF:B3:08:06:C5:0B:90:97:4A:1E:C9:FD:C9:C3:C7
            X509v3 Authority Key Identifier:
                keyid:27:A0:A2:DD:F3:5C:19:7D:4F:C2:62:90:C2:95:7D:49:68:CF:15:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:54:81:a7:b4:b6:93:b2:0d:2c:53:67:77:a2:d2:d7:36:fb:
         d7:d3:c3:1e:1c:be:88:a1:39:c1:50:07:6d:b5:76:42:7b:45:
         38:af:09:b3:71:b4:f3:29:62:be:22:89:b4:f5:5f:e7:64:39:
         74:32:a0:64:d7:9a:b6:db:2e:18:d8:c7:a6:95:90:81:a0:94:
         18:73:f5:24:89:33:87:74:5a:04:e7:66:e2:94:84:d4:17:90:
         6d:98:a4:c9:30:89:a6:a2:8f:f4:08:ff:95:34:83:bf:52:6d:
         90:8f:46:ba:39:a8:cc:22:42:fd:01:db:92:47:40:4e:21:32:
         c1:ab:83:e8:5b:df:01:f7:c4:4c:27:61:ac:96:bf:38:36:1f:
         90:51:59:b0:5d:cc:8a:55:82:c1:d7:47:d3:6f:be:52:a0:8a:
         51:dc:ee:d7:cb:5c:a9:92:84:a4:e6:82:b2:99:63:54:4e:0e:
         a1:b5:d5:18:9f:c6:a3:ee:d8:f6:3e:29:e3:3d:4c:9a:35:d2:
         c6:83:1f:cc:fe:da:8d:b0:4c:e7:91:17:2e:d0:91:4d:15:62:
         97:b7:ca:64:ef:27:4a:79:91:36:42:e0:80:d9:76:56:7a:8c:
         29:ce:26:35:72:16:ec:0f:8c:1d:e1:a5:8f:bc:b7:16:30:a7:
         3f:77:eb:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:37:24 2026 by rpki-client