Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft
File:                     5o7RJO9le2eb0SpY-gNQFODf6Cc.mft (raw, json)
Hash identifier:          Tq4FNuQLfJijHugnZ+dkKBAJVlnFakW91/bn7D7bkXI=
Subject key identifier:   95:89:A7:DA:5C:3E:C0:B8:94:08:71:BF:15:F9:08:37:A6:23:AF:B8
Authority key identifier: E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27
Certificate issuer:       /CN=A9191A09/serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827
Certificate serial:       0E64
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft
Manifest number:          0E4D
Signing time:             Fri 06 Mar 2026 14:40:31 +0000
Manifest this update:     Fri 06 Mar 2026 14:40:30 +0000
Manifest next update:     Fri 13 Mar 2026 14:40:30 +0000
Files and hashes:         1: 5o7RJO9le2eb0SpY-gNQFODf6Cc.crl (hash: cp3GQWEAycqcVZNGH/r0EL8ZKY3p7RwYr8BcEf7U+0k=)
                          2: 9C06E51EE37A11EA84A20810C4F9AE02.roa (hash: VGb7fQ4+XdUAVdKkbAj+FraUZZtrQ9DDCForGAVJX7M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl
                          rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 14:40:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3684 (0xe64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191A09, serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827
        Validity
            Not Before: Mar  6 14:40:30 2026 GMT
            Not After : Mar 13 14:40:30 2026 GMT
        Subject: CN=69aae75f-82e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b4:d3:a0:47:57:5b:77:75:90:01:10:6b:cd:
                    28:87:90:69:51:71:9b:3c:e0:d3:f1:5c:d7:9f:fe:
                    f9:64:e8:02:46:e6:13:6b:60:cf:b9:12:f0:05:a6:
                    8c:c6:3e:b2:8a:84:d4:a3:88:cc:ea:ec:5c:24:f3:
                    e9:43:47:3b:46:da:08:58:ad:09:bc:90:63:1b:6b:
                    e2:9c:81:fc:f3:71:7d:ae:19:25:87:94:fa:57:47:
                    94:9d:14:06:32:61:35:10:e6:b7:5a:b6:6c:ac:1c:
                    32:47:47:d5:9c:79:8d:1e:98:e5:58:19:d8:ff:0a:
                    23:13:85:7b:1f:bb:54:51:8a:44:1f:95:95:85:ad:
                    96:16:37:c9:24:d5:8d:c8:d2:5b:8b:73:17:5d:b9:
                    fb:0c:42:b9:c2:33:53:c8:70:bf:88:78:31:40:ed:
                    77:ed:8d:9a:a2:bd:4e:42:d8:bd:73:27:ed:65:57:
                    79:c2:48:e3:ee:57:0d:9f:4d:1e:04:ad:66:fc:07:
                    a6:ec:2e:82:76:1e:ab:c7:36:9d:87:bf:8a:8b:21:
                    32:60:2f:39:cd:5d:09:75:cb:10:15:26:38:36:fa:
                    d1:a8:ef:38:4c:8a:ea:c2:fb:19:58:a4:62:ac:29:
                    a4:ce:cf:a7:58:47:92:18:9b:9a:39:ef:8f:17:a6:
                    86:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:89:A7:DA:5C:3E:C0:B8:94:08:71:BF:15:F9:08:37:A6:23:AF:B8
            X509v3 Authority Key Identifier:
                keyid:E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:93:f4:71:df:cb:5b:34:c8:8d:17:25:fa:01:be:bf:d4:04:
         44:a7:94:d0:64:16:19:cf:31:fb:be:08:ac:25:4f:9e:3c:77:
         2c:1e:bc:eb:a5:1b:7a:83:da:6c:14:dd:6e:a8:47:0f:29:5b:
         85:8e:ff:fd:b3:2e:ff:da:3d:c2:8e:1a:d3:fc:b1:2a:52:11:
         60:0e:5c:25:3a:d3:b4:63:09:f4:ef:01:dc:fc:93:b4:16:26:
         d3:3e:b7:f7:3d:03:29:8f:61:c3:7a:56:29:26:8d:9d:9c:25:
         4f:48:13:5b:95:65:f0:7d:e5:71:fb:b7:a6:7a:1d:67:15:7d:
         ec:0d:cf:b2:a1:bd:2e:fe:05:ff:c2:f1:88:73:77:01:41:80:
         b8:73:88:e2:6f:44:d4:e0:11:d9:1c:50:a0:9a:11:15:fc:8d:
         ae:de:ef:e8:a1:a5:47:55:2d:32:62:a6:b9:37:64:ef:2f:a8:
         a1:8f:1d:33:10:6d:61:19:f6:f0:61:16:02:80:8b:aa:64:d0:
         8e:49:73:2f:df:90:5e:94:e8:74:9d:9a:55:d6:f9:01:0b:d0:
         b2:5e:2a:c2:79:41:97:f7:8e:84:fc:b4:59:e5:aa:cc:89:60:
         de:71:8c:67:d5:00:af:e0:a9:7b:f5:16:ef:22:66:7b:b3:ba:
         ac:62:0f:86
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDmQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTFBMDkxMTAvBgNVBAUTKEU2OEVEMTI0RUY2NTdCNjc5QkQxMkE1OEZBMDM1MDE0
RTBERkU4MjcwHhcNMjYwMzA2MTQ0MDMwWhcNMjYwMzEzMTQ0MDMwWjAYMRYwFAYD
VQQDEw02OWFhZTc1Zi04MmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApbTToEdXW3d1kAEQa80oh5BpUXGbPODT8VzXn/75ZOgCRuYTa2DPuRLwBaaM
xj6yioTUo4jM6uxcJPPpQ0c7RtoIWK0JvJBjG2vinIH883F9rhklh5T6V0eUnRQG
MmE1EOa3WrZsrBwyR0fVnHmNHpjlWBnY/wojE4V7H7tUUYpEH5WVha2WFjfJJNWN
yNJbi3MXXbn7DEK5wjNTyHC/iHgxQO137Y2aor1OQti9cyftZVd5wkjj7lcNn00e
BK1m/Aem7C6Cdh6rxzadh7+KiyEyYC85zV0JdcsQFSY4NvrRqO84TIrqwvsZWKRi
rCmkzs+nWEeSGJuaOe+PF6aGiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJWJp9pc
PsC4lAhxvxX5CDemI6+4MB8GA1UdIwQYMBaAFOaO0STvZXtnm9EqWPoDUBTg3+gn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUEwOS8zQzQxMkMzNkJG
MzkxMUU5ODk3RDdDMkVDNEY5QUUwMi81bzdSSk85bGUyZWIwU3BZLWdOUUZPRGY2
Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyLzVvN1JKTzlsZTJlYjBTcFktZ05RRk9EZjZDYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MUEwOS8zQzQxMkMzNkJGMzkxMUU5ODk3RDdDMkVDNEY5QUUwMi81bzdSSk85bGUy
ZWIwU3BZLWdOUUZPRGY2Q2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdJP0cd/LWzTIjRcl+gG+v9QERKeU0GQWGc8x+74IrCVPnjx3LB6866UbeoPa
bBTdbqhHDylbhY7//bMu/9o9wo4a0/yxKlIRYA5cJTrTtGMJ9O8B3PyTtBYm0z63
9z0DKY9hw3pWKSaNnZwlT0gTW5Vl8H3lcfu3pnodZxV97A3PsqG9Lv4F/8LxiHN3
AUGAuHOI4m9E1OAR2RxQoJoRFfyNrt7v6KGlR1UtMmKmuTdk7y+ooY8dMxBtYRn2
8GEWAoCLqmTQjklzL9+QXpTodJ2aVdb5AQvQsl4qwnlBl/eOhPy0WeWqzIlg3nGM
Z9UAr+Cpe/UW7yJme7O6rGIPhg==
-----END CERTIFICATE-----
Generated at Sat Mar 7 14:34:08 2026 by rpki-client