Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118EDB/309BE6BE1DDD11EC883B4423C4F9AE02/5tdlUVTja2lxFXTiB5a2gCxDtxU.mft
File:                     5tdlUVTja2lxFXTiB5a2gCxDtxU.mft (raw, json)
Hash identifier:          0+AMtuQdwdbrle3zePtJab7If7aYD/njUz4exsdUIlE=
Subject key identifier:   89:57:D6:E2:D7:C9:9A:15:91:CC:E4:39:5D:DE:36:C5:D7:BB:A7:B2
Authority key identifier: E6:D7:65:51:54:E3:6B:69:71:15:74:E2:07:96:B6:80:2C:43:B7:15
Certificate issuer:       /CN=A9118EDB/serialNumber=E6D7655154E36B69711574E20796B6802C43B715
Certificate serial:       0583
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5tdlUVTja2lxFXTiB5a2gCxDtxU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118EDB/309BE6BE1DDD11EC883B4423C4F9AE02/5tdlUVTja2lxFXTiB5a2gCxDtxU.mft
Manifest number:          057A
Signing time:             Thu 26 Mar 2026 23:05:35 +0000
Manifest this update:     Thu 26 Mar 2026 23:05:34 +0000
Manifest next update:     Thu 02 Apr 2026 23:05:34 +0000
Files and hashes:         1: 5tdlUVTja2lxFXTiB5a2gCxDtxU.crl (hash: mjsrb6fyddBliM6930Jyj8ZenM4Hq3y0u8p307xj1sM=)
                          2: BA4D01561DE011ECB872BC27C4F9AE02.roa (hash: 71obYwe/YEkiahFOzFQwlgwbuMnmtNJkaInTJQf/rg8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118EDB/309BE6BE1DDD11EC883B4423C4F9AE02/5tdlUVTja2lxFXTiB5a2gCxDtxU.crl
                          rsync://rpki.apnic.net/member_repository/A9118EDB/309BE6BE1DDD11EC883B4423C4F9AE02/5tdlUVTja2lxFXTiB5a2gCxDtxU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5tdlUVTja2lxFXTiB5a2gCxDtxU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 23:05:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1411 (0x583)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118EDB, serialNumber=E6D7655154E36B69711574E20796B6802C43B715
        Validity
            Not Before: Mar 26 23:05:34 2026 GMT
            Not After : Apr  2 23:05:34 2026 GMT
        Subject: CN=69c5bbbf-3890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:eb:e5:3d:87:c2:f9:38:84:8a:4e:d6:cf:38:
                    8d:bb:f8:af:10:04:76:c0:39:f2:c9:dc:af:95:8c:
                    b6:ee:fb:99:38:4b:c9:a5:72:bf:94:1f:63:9c:d4:
                    86:f1:7f:49:9d:6b:29:25:4e:37:68:45:7c:ae:69:
                    f0:64:78:e7:a1:6f:4f:5b:73:3f:37:31:0a:36:0e:
                    d1:46:11:c6:19:9f:36:96:f1:d1:ce:11:04:b5:fc:
                    43:8e:b7:6c:e3:62:88:2a:97:f6:a4:97:ef:14:86:
                    c7:4e:4c:ea:7c:ab:a5:d4:8d:17:8f:54:53:a7:c6:
                    de:43:81:81:b5:5f:ed:4c:09:71:7c:6a:a4:db:b4:
                    87:f7:a1:7a:d8:d6:2f:9e:9d:72:2c:50:be:13:b7:
                    ab:0e:40:e7:f7:95:76:f1:0c:58:4f:8e:17:90:74:
                    90:cd:2b:c3:a6:d6:7f:0e:af:f8:de:84:2c:b6:02:
                    94:10:61:82:8d:30:90:ed:85:85:4f:85:30:8d:17:
                    05:df:3a:cd:c7:8d:fd:e0:67:ea:b2:19:ee:78:05:
                    5e:75:ac:73:5a:fe:50:dd:ed:a8:03:94:65:42:74:
                    d8:4a:d7:be:64:3c:3f:fd:d8:11:c6:9c:ab:90:e5:
                    ae:7b:8b:d9:cf:bd:1d:f0:39:38:21:9a:8f:6a:eb:
                    f5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:57:D6:E2:D7:C9:9A:15:91:CC:E4:39:5D:DE:36:C5:D7:BB:A7:B2
            X509v3 Authority Key Identifier:
                keyid:E6:D7:65:51:54:E3:6B:69:71:15:74:E2:07:96:B6:80:2C:43:B7:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118EDB/309BE6BE1DDD11EC883B4423C4F9AE02/5tdlUVTja2lxFXTiB5a2gCxDtxU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5tdlUVTja2lxFXTiB5a2gCxDtxU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118EDB/309BE6BE1DDD11EC883B4423C4F9AE02/5tdlUVTja2lxFXTiB5a2gCxDtxU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:a3:72:f4:25:90:2e:55:1e:05:a4:e4:6a:d4:58:32:b7:21:
         81:a4:1b:cc:6c:99:3a:96:b5:31:dc:d9:2a:0e:3d:dc:17:58:
         1e:90:98:84:55:d9:c5:c0:52:ba:29:ed:ea:38:09:7f:96:e4:
         b1:5d:51:5a:2b:7f:43:9d:c3:df:82:50:0b:30:72:7f:04:43:
         96:e2:c0:ef:f2:47:d1:79:07:e0:44:03:c5:cc:65:79:8e:d1:
         8b:6c:71:88:90:ee:45:14:47:df:fb:36:eb:9f:f5:81:e0:7b:
         ac:94:a9:c1:ba:f7:ff:94:37:da:18:cc:19:d7:b9:7b:2b:8c:
         cc:84:f0:c2:89:4a:83:39:76:51:19:ab:42:51:f7:03:20:3c:
         12:a7:da:c7:d7:00:e8:e7:b9:24:56:71:80:63:c9:9a:e7:e9:
         36:5c:d9:76:e0:76:ab:4c:f9:80:f8:d1:6c:3a:23:c9:0d:2b:
         d7:44:97:d5:2f:38:20:b7:22:77:81:ba:b6:ad:8b:93:40:71:
         87:b5:03:cc:01:21:51:fe:20:56:53:d1:f2:1c:c9:76:2b:69:
         a7:76:0f:d5:14:f8:7e:21:55:1e:a5:7f:cb:23:e1:dd:ed:41:
         10:69:93:b4:06:e3:b6:a8:26:62:63:8d:a0:35:96:54:92:7f:
         df:0c:5d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:14:33 2026 by rpki-client