Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911EA03/CBDFF6AA24DC11F1AAF5B34AAD833773/_d0zZyPk_yht6VYjX0y7nlvItHs.mft
File:                     _d0zZyPk_yht6VYjX0y7nlvItHs.mft (raw, json)
Hash identifier:          bUZmo1qj5K8VOaITEuJ5snE++fy7QDE/Wf0wJATffnA=
Subject key identifier:   63:4B:DB:DC:BF:A3:A3:B6:42:7E:31:C7:3E:A3:2A:9D:38:28:09:D4
Authority key identifier: FD:DD:33:67:23:E4:FF:28:6D:E9:56:23:5F:4C:BB:9E:5B:C8:B4:7B
Certificate issuer:       /CN=A911EA03/serialNumber=FDDD336723E4FF286DE956235F4CBB9E5BC8B47B
Certificate serial:       07
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_d0zZyPk_yht6VYjX0y7nlvItHs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911EA03/CBDFF6AA24DC11F1AAF5B34AAD833773/_d0zZyPk_yht6VYjX0y7nlvItHs.mft
Manifest number:          05
Signing time:             Wed 25 Mar 2026 08:25:33 +0000
Manifest this update:     Wed 25 Mar 2026 08:25:33 +0000
Manifest next update:     Wed 01 Apr 2026 08:25:33 +0000
Files and hashes:         1: _d0zZyPk_yht6VYjX0y7nlvItHs.crl (hash: bs5Q4tTx0AXsszYpt9bnKmiS2UAH7y3swJUP0CjqHKQ=)
                          2: 2789337224DD11F19E4B5BF6AD833773.roa (hash: 5cgEm0SMJYslABU40A6AOjXeN/3Pw0Ma8SyFdQMbJEs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911EA03/CBDFF6AA24DC11F1AAF5B34AAD833773/_d0zZyPk_yht6VYjX0y7nlvItHs.crl
                          rsync://rpki.apnic.net/member_repository/A911EA03/CBDFF6AA24DC11F1AAF5B34AAD833773/_d0zZyPk_yht6VYjX0y7nlvItHs.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_d0zZyPk_yht6VYjX0y7nlvItHs.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:25:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911EA03, serialNumber=FDDD336723E4FF286DE956235F4CBB9E5BC8B47B
        Validity
            Not Before: Mar 25 08:25:33 2026 GMT
            Not After : Apr  1 08:25:33 2026 GMT
        Subject: CN=69c39bfd-e7a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c2:b4:77:67:5e:8c:69:84:ec:23:6a:e0:04:
                    1d:bd:3d:95:4e:52:ad:e9:35:56:23:2f:1e:15:b0:
                    d6:94:6a:62:bf:5d:c8:e3:68:97:d5:93:4e:13:78:
                    51:4e:12:a1:47:35:59:9d:44:97:8d:83:9a:6a:f2:
                    ae:cc:68:7c:d4:1c:78:35:fc:30:c6:8d:c1:1c:b7:
                    87:d3:8d:cc:95:f2:25:f1:8a:76:62:40:ff:68:59:
                    ee:90:f2:9b:2f:7e:4b:f5:8b:4b:cd:e6:6b:10:4d:
                    74:dc:e1:9b:3b:93:64:3f:b4:54:a8:8e:b4:e2:4d:
                    e5:1b:25:f0:2b:88:64:94:d3:42:34:41:d2:c1:ff:
                    9c:a0:c0:ad:46:05:5e:ca:ca:22:a4:94:55:27:cf:
                    f9:86:14:ad:14:02:4c:73:f8:bc:f8:57:57:14:b8:
                    c6:a8:48:d9:cc:b0:5d:8b:cc:05:e8:02:1f:b2:dc:
                    6f:49:d8:1d:ff:10:14:d6:71:30:3c:1b:0f:7f:5c:
                    9e:7e:14:b9:88:1b:19:d4:ee:72:df:04:1b:54:7f:
                    49:5b:42:c8:2f:d5:d4:0c:ae:c3:2c:9b:e6:20:bc:
                    db:56:61:ae:bb:cd:b3:c9:87:71:cd:1c:e1:cb:7d:
                    ba:51:43:24:86:73:6c:be:2a:e1:78:e8:c0:62:c3:
                    71:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:4B:DB:DC:BF:A3:A3:B6:42:7E:31:C7:3E:A3:2A:9D:38:28:09:D4
            X509v3 Authority Key Identifier:
                keyid:FD:DD:33:67:23:E4:FF:28:6D:E9:56:23:5F:4C:BB:9E:5B:C8:B4:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911EA03/CBDFF6AA24DC11F1AAF5B34AAD833773/_d0zZyPk_yht6VYjX0y7nlvItHs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_d0zZyPk_yht6VYjX0y7nlvItHs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA03/CBDFF6AA24DC11F1AAF5B34AAD833773/_d0zZyPk_yht6VYjX0y7nlvItHs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:1e:ac:a4:22:56:ca:66:db:64:02:9c:0b:cf:d4:9f:5e:60:
         d7:96:a1:ad:32:80:40:d0:2e:37:0c:97:ae:f4:18:63:1f:b0:
         0d:d4:13:d9:51:1d:3e:c8:2a:bf:a5:96:a5:e0:51:cd:84:6d:
         32:fe:30:02:db:08:3e:22:0e:55:6b:40:6b:7d:f8:b4:74:e7:
         db:ec:00:90:f9:d8:55:fc:3b:e5:96:50:aa:75:42:37:a9:33:
         41:13:40:bf:32:56:75:20:a5:78:b9:8e:11:77:24:78:8c:09:
         08:96:e7:e0:7b:ab:e6:97:4c:13:b3:f9:a3:5d:55:72:2c:d5:
         67:53:c9:8b:fb:3e:b2:c0:78:60:c8:06:f9:42:cd:46:96:9d:
         c7:44:0b:85:2c:72:f9:29:4d:e9:33:eb:b0:f5:56:c5:9f:fb:
         ad:7a:9e:b1:65:70:20:41:ff:b1:97:d2:3f:c5:61:7c:6b:e6:
         1d:7d:3f:cc:3e:04:41:21:2c:17:ee:e7:35:53:b1:90:56:95:
         a4:0b:68:27:81:9e:87:c8:fb:8c:85:88:e3:49:40:e3:9c:b6:
         2e:f2:9a:f5:fc:c9:72:ed:87:29:40:ec:20:d2:4c:1a:dd:05:
         9c:f5:8e:08:09:d1:16:8d:52:4e:cb:ae:73:0e:46:4e:6d:43:
         4d:97:bc:f6
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
RUEwMzExMC8GA1UEBRMoRkRERDMzNjcyM0U0RkYyODZERTk1NjIzNUY0Q0JCOUU1
QkM4QjQ3QjAeFw0yNjAzMjUwODI1MzNaFw0yNjA0MDEwODI1MzNaMBgxFjAUBgNV
BAMTDTY5YzM5YmZkLWU3YTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC5wrR3Z16MaYTsI2rgBB29PZVOUq3pNVYjLx4VsNaUamK/XcjjaJfVk04TeFFO
EqFHNVmdRJeNg5pq8q7MaHzUHHg1/DDGjcEct4fTjcyV8iXxinZiQP9oWe6Q8psv
fkv1i0vN5msQTXTc4Zs7k2Q/tFSojrTiTeUbJfAriGSU00I0QdLB/5ygwK1GBV7K
yiKklFUnz/mGFK0UAkxz+Lz4V1cUuMaoSNnMsF2LzAXoAh+y3G9J2B3/EBTWcTA8
Gw9/XJ5+FLmIGxnU7nLfBBtUf0lbQsgv1dQMrsMsm+YgvNtWYa67zbPJh3HNHOHL
fbpRQySGc2y+KuF46MBiw3ETAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUY0vb3L+j
o7ZCfjHHPqMqnTgoCdQwHwYDVR0jBBgwFoAU/d0zZyPk/yht6VYjX0y7nlvItHsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFFQTAzL0NCREZGNkFBMjRE
QzExRjFBQUY1QjM0QUFEODMzNzczL19kMHpaeVBrX3lodDZWWWpYMHk3bmx2SXRI
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvX2Qwelp5UGtfeWh0NlZZalgweTdubHZJdEhzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFF
QTAzL0NCREZGNkFBMjREQzExRjFBQUY1QjM0QUFEODMzNzczL19kMHpaeVBrX3lo
dDZWWWpYMHk3bmx2SXRIcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCcHqykIlbKZttkApwLz9SfXmDXlqGtMoBA0C43DJeu9BhjH7AN1BPZUR0+yCq/
pZal4FHNhG0y/jAC2wg+Ig5Va0Brffi0dOfb7ACQ+dhV/DvlllCqdUI3qTNBE0C/
MlZ1IKV4uY4RdyR4jAkIlufge6vml0wTs/mjXVVyLNVnU8mL+z6ywHhgyAb5Qs1G
lp3HRAuFLHL5KU3pM+uw9VbFn/utep6xZXAgQf+xl9I/xWF8a+YdfT/MPgRBISwX
7uc1U7GQVpWkC2gngZ6HyPuMhYjjSUDjnLYu8pr1/Mly7YcpQOwg0kwa3QWc9Y4I
CdEWjVJOy65zDkZObUNNl7z2
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:28:33 2026 by rpki-client