Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft
File:                     b5wj5AN3j-Ace8lQiL_R5rMoqps.mft (raw, json)
Hash identifier:          kRNIRvbXIgFSh5jv/CqWyElzFpoqTYx6SN42lLZwjCA=
Subject key identifier:   6B:9E:21:8F:10:05:8E:D4:71:11:24:24:9E:91:73:0D:99:57:99:08
Authority key identifier: 6F:9C:23:E4:03:77:8F:E0:1C:7B:C9:50:88:BF:D1:E6:B3:28:AA:9B
Certificate issuer:       /CN=A91DB6FB/serialNumber=6F9C23E403778FE01C7BC95088BFD1E6B328AA9B
Certificate serial:       01D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft
Manifest number:          01CC
Signing time:             Fri 13 Mar 2026 02:50:49 +0000
Manifest this update:     Fri 13 Mar 2026 02:50:48 +0000
Manifest next update:     Fri 20 Mar 2026 02:50:48 +0000
Files and hashes:         1: b5wj5AN3j-Ace8lQiL_R5rMoqps.crl (hash: NhxSnKh2UXgRKKJ1fYK+1hhKDFSrmzFpNrGz4OC7CHo=)
                          2: 4F445CCE1FF311F0833FC50BC4F9AE02.roa (hash: NEyPsb5RWjdv+OoFJRvfUjkfYWeqz3AuMZCzrBRpKPw=)
                          3: 512CFEFE68BD11EE87942B4EC4F9AE02.roa (hash: eftqJaT0OiGT6+fWanJpYi7UmZemCJiu4YrLSsovmzg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.crl
                          rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 02:50:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 471 (0x1d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB6FB, serialNumber=6F9C23E403778FE01C7BC95088BFD1E6B328AA9B
        Validity
            Not Before: Mar 13 02:50:48 2026 GMT
            Not After : Mar 20 02:50:48 2026 GMT
        Subject: CN=69b37b89-586e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f3:b1:3a:df:67:40:60:1e:5f:49:38:ef:21:
                    81:b0:cf:4e:aa:81:e7:07:c5:a2:48:7a:e1:ad:56:
                    4d:0a:50:5a:97:1d:4d:a2:c4:d4:3d:27:ef:d1:3a:
                    b3:3a:c8:30:4d:5f:fd:ae:ad:af:b7:41:dc:dc:56:
                    64:89:af:37:b9:90:62:0c:2f:a1:76:2a:0c:1a:89:
                    16:bf:1e:91:d2:41:66:69:80:a2:18:5e:8b:68:c4:
                    20:ec:4c:73:fc:72:2a:45:a1:8e:5f:8c:d7:b2:54:
                    9b:80:c0:c6:d2:76:3c:95:71:fe:c7:c2:15:18:43:
                    14:2d:64:19:c7:4d:34:76:ca:e0:27:cf:5c:a2:9d:
                    bc:61:76:9a:ed:d8:15:f9:f5:94:8a:fa:92:21:45:
                    59:05:7c:b4:4d:e0:c9:b7:ef:3b:7a:18:cd:83:1a:
                    36:d0:1c:77:1c:ee:76:5a:e7:e5:f3:cd:56:68:74:
                    fa:96:8f:da:ee:21:05:aa:0a:27:44:a8:2d:28:41:
                    5b:85:22:6a:be:24:a0:3d:76:e4:eb:78:04:cb:c2:
                    96:c5:94:64:4c:40:80:cb:fd:51:22:e0:59:f1:3c:
                    72:d8:59:dd:84:7d:0d:b2:c5:32:2c:d8:54:39:10:
                    5d:cc:fa:fa:04:56:03:64:b3:a8:13:7c:66:5b:80:
                    85:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:9E:21:8F:10:05:8E:D4:71:11:24:24:9E:91:73:0D:99:57:99:08
            X509v3 Authority Key Identifier:
                keyid:6F:9C:23:E4:03:77:8F:E0:1C:7B:C9:50:88:BF:D1:E6:B3:28:AA:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:a1:64:b2:ce:ac:a4:ba:cd:98:cf:d2:e3:dc:71:80:5b:fc:
         6f:77:12:1a:ce:41:ad:7e:b3:13:7d:00:f3:4f:f7:ab:0d:46:
         fa:78:9a:18:88:67:60:0b:31:e5:62:9e:74:c8:7e:5f:f0:44:
         d5:33:93:f5:e8:36:60:d8:33:70:8e:e5:6e:7c:df:4c:52:31:
         ef:29:24:78:3a:75:c4:b8:ef:9f:3f:1c:98:67:a8:0c:fa:15:
         45:28:b4:f9:8b:f9:a1:33:3a:83:f5:f1:eb:d7:5a:5e:d8:93:
         e3:5a:02:47:79:e7:b4:47:56:03:24:d1:22:8c:fc:02:31:e4:
         46:ab:7b:f7:f8:a5:a5:d2:c5:3e:04:fa:e3:2a:f8:59:b4:e4:
         b3:5f:fd:53:64:67:65:ff:f3:db:1c:0f:54:ee:23:86:ea:e2:
         1f:d7:d7:3c:a2:32:6d:6d:82:aa:93:2a:e2:31:da:d0:29:b2:
         a4:52:94:0a:06:5d:47:56:40:d7:06:71:7e:09:e7:83:3b:2f:
         c6:69:28:94:f6:6f:64:53:19:dc:f7:ed:ac:64:77:55:eb:26:
         af:0f:f4:fc:5f:25:4b:4d:b7:02:85:f3:85:55:3a:0b:a9:71:
         5c:7c:0e:c3:67:d2:d2:e6:e6:73:52:79:75:eb:f5:80:ba:7f:
         30:1b:7a:f6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REI2RkIxMTAvBgNVBAUTKDZGOUMyM0U0MDM3NzhGRTAxQzdCQzk1MDg4QkZEMUU2
QjMyOEFBOUIwHhcNMjYwMzEzMDI1MDQ4WhcNMjYwMzIwMDI1MDQ4WjAYMRYwFAYD
VQQDEw02OWIzN2I4OS01ODZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0vOxOt9nQGAeX0k47yGBsM9OqoHnB8WiSHrhrVZNClBalx1NosTUPSfv0Tqz
OsgwTV/9rq2vt0Hc3FZkia83uZBiDC+hdioMGokWvx6R0kFmaYCiGF6LaMQg7Exz
/HIqRaGOX4zXslSbgMDG0nY8lXH+x8IVGEMULWQZx000dsrgJ89cop28YXaa7dgV
+fWUivqSIUVZBXy0TeDJt+87ehjNgxo20Bx3HO52Wufl881WaHT6lo/a7iEFqgon
RKgtKEFbhSJqviSgPXbk63gEy8KWxZRkTECAy/1RIuBZ8Txy2FndhH0NssUyLNhU
ORBdzPr6BFYDZLOoE3xmW4CF9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGueIY8Q
BY7UcREkJJ6Rcw2ZV5kIMB8GA1UdIwQYMBaAFG+cI+QDd4/gHHvJUIi/0eazKKqb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjZGQi8xMUNEMUI2RTY4
QkMxMUVFOTIwRURCNERDNEY5QUUwMi9iNXdqNUFOM2otQWNlOGxRaUxfUjVyTW9x
cHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2I1d2o1QU4zai1BY2U4bFFpTF9SNXJNb3Fwcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QjZGQi8xMUNEMUI2RTY4QkMxMUVFOTIwRURCNERDNEY5QUUwMi9iNXdqNUFOM2ot
QWNlOGxRaUxfUjVyTW9xcHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADqFkss6spLrNmM/S49xxgFv8b3cSGs5BrX6zE30A80/3qw1G+niaGIhnYAsx
5WKedMh+X/BE1TOT9eg2YNgzcI7lbnzfTFIx7ykkeDp1xLjvnz8cmGeoDPoVRSi0
+Yv5oTM6g/Xx69daXtiT41oCR3nntEdWAyTRIoz8AjHkRqt79/ilpdLFPgT64yr4
WbTks1/9U2RnZf/z2xwPVO4jhuriH9fXPKIybW2CqpMq4jHa0CmypFKUCgZdR1ZA
1wZxfgnngzsvxmkolPZvZFMZ3PftrGR3Vesmrw/0/F8lS023AoXzhVU6C6lxXHwO
w2fS0ubmc1J5dev1gLp/MBt69g==
-----END CERTIFICATE-----
Generated at Sat Mar 14 18:00:38 2026 by rpki-client