Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft
File:                     5OZ6308FfoAR2ixoJJ18JW1QB0E.mft (raw, json)
Hash identifier:          Yoqk2lxj/z/B3j36qhk3Nxxj5PhbVT2mTO32q/xBuPE=
Subject key identifier:   BB:12:EC:45:B3:5D:B4:EE:4E:80:CA:F9:C6:2F:A9:B6:0F:F2:72:2C
Authority key identifier: E4:E6:7A:DF:4F:05:7E:80:11:DA:2C:68:24:9D:7C:25:6D:50:07:41
Certificate issuer:       /CN=A913B3D6/serialNumber=E4E67ADF4F057E8011DA2C68249D7C256D500741
Certificate serial:       0238
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft
Manifest number:          0233
Signing time:             Wed 25 Mar 2026 02:01:01 +0000
Manifest this update:     Wed 25 Mar 2026 02:01:00 +0000
Manifest next update:     Wed 01 Apr 2026 02:01:00 +0000
Files and hashes:         1: 5OZ6308FfoAR2ixoJJ18JW1QB0E.crl (hash: JCUgN5q+4JhCECimRutAlX+co45CQo5O6vTPxgabqbo=)
                          2: A6E025D4CEB111EDAE111B61C4F9AE02.roa (hash: brmnMqqLb85ku5z8lFkSDWkJ/T1282J3h23lCyVPP78=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.crl
                          rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 568 (0x238)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B3D6, serialNumber=E4E67ADF4F057E8011DA2C68249D7C256D500741
        Validity
            Not Before: Mar 25 02:01:00 2026 GMT
            Not After : Apr  1 02:01:00 2026 GMT
        Subject: CN=69c341dd-29ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:ed:da:2a:32:ea:38:de:8a:13:22:bf:3a:76:
                    b3:db:fd:61:54:eb:6b:6f:30:0e:14:ee:11:58:30:
                    38:17:21:dc:3f:dc:a9:c3:17:d9:f0:87:8b:7b:24:
                    fd:44:bf:ae:54:5a:cf:4b:82:c6:f2:44:e2:10:c5:
                    a8:af:b0:e5:d8:97:50:09:7c:68:63:78:3e:c8:94:
                    f4:a7:69:f0:85:be:75:29:47:f1:48:10:1f:e3:05:
                    eb:7f:61:33:57:0e:85:1d:3b:4f:b7:b4:b5:b5:ce:
                    d9:07:9e:2e:21:78:c2:54:82:f3:47:e8:7a:5e:fb:
                    91:06:13:77:b3:fd:de:ad:fb:63:25:7a:45:04:b2:
                    31:f8:9c:0b:9d:32:80:b2:f3:cf:d3:c4:bd:0a:b6:
                    67:f0:df:44:09:53:cd:f9:df:b6:14:81:86:77:76:
                    00:87:6c:9c:36:46:72:85:f4:21:69:0d:de:35:37:
                    ad:2e:a8:2a:e3:cb:c0:51:e5:de:75:33:7a:dc:ec:
                    c5:f3:c7:c0:e5:41:dc:a5:0b:30:c9:1c:78:f0:20:
                    06:2c:07:b2:3e:e5:40:6a:d2:87:ed:69:33:1f:e9:
                    a9:d8:85:29:05:ad:28:0c:c1:14:50:21:15:cf:02:
                    a8:b3:e9:b3:b6:e7:19:e7:53:c7:59:c0:c3:48:77:
                    b3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:12:EC:45:B3:5D:B4:EE:4E:80:CA:F9:C6:2F:A9:B6:0F:F2:72:2C
            X509v3 Authority Key Identifier:
                keyid:E4:E6:7A:DF:4F:05:7E:80:11:DA:2C:68:24:9D:7C:25:6D:50:07:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:cd:1e:89:14:c6:b0:0b:af:cd:07:b6:a9:a3:1e:48:9d:7f:
         71:97:41:c7:a5:46:db:ec:26:19:bc:a0:e9:76:fe:c2:28:3b:
         28:e8:bf:aa:70:ed:94:70:7e:b2:d2:be:8a:36:26:0c:92:17:
         f2:3f:59:ad:a1:7a:38:57:01:91:1e:10:5c:d8:ae:d0:ad:04:
         5c:a2:16:c6:de:c5:20:46:e2:49:ad:e0:2a:b6:31:25:d3:a0:
         1c:77:93:4c:76:92:70:12:30:00:16:52:f7:e9:31:85:5a:9f:
         d1:66:b7:3e:fd:3d:95:39:62:92:6e:7c:8e:32:e8:e8:7b:50:
         98:1c:a8:b6:50:63:0a:9b:f1:df:35:e9:23:95:1d:5a:9c:8f:
         ea:bd:bc:cc:6c:b8:3b:01:a4:98:6f:83:1b:52:0c:2c:16:35:
         a0:8d:4b:7a:9a:08:3f:ba:52:bd:c4:aa:a1:2a:31:c9:d5:38:
         74:a1:af:cc:e1:2a:a8:33:fe:9e:ef:87:29:8a:9b:c3:05:b9:
         b0:dd:91:71:83:57:60:fe:e7:98:8e:6d:eb:85:e5:10:51:ba:
         01:45:c6:81:14:a7:6d:d7:3f:b7:d0:59:a0:86:e7:e6:34:43:
         be:aa:85:04:1c:18:b1:0e:ce:1a:77:4f:90:b5:62:00:ce:33:
         9f:5a:48:64
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAjgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0IzRDYxMTAvBgNVBAUTKEU0RTY3QURGNEYwNTdFODAxMURBMkM2ODI0OUQ3QzI1
NkQ1MDA3NDEwHhcNMjYwMzI1MDIwMTAwWhcNMjYwNDAxMDIwMTAwWjAYMRYwFAYD
VQQDEw02OWMzNDFkZC0yOWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9e3aKjLqON6KEyK/Onaz2/1hVOtrbzAOFO4RWDA4FyHcP9ypwxfZ8IeLeyT9
RL+uVFrPS4LG8kTiEMWor7Dl2JdQCXxoY3g+yJT0p2nwhb51KUfxSBAf4wXrf2Ez
Vw6FHTtPt7S1tc7ZB54uIXjCVILzR+h6XvuRBhN3s/3erftjJXpFBLIx+JwLnTKA
svPP08S9CrZn8N9ECVPN+d+2FIGGd3YAh2ycNkZyhfQhaQ3eNTetLqgq48vAUeXe
dTN63OzF88fA5UHcpQswyRx48CAGLAeyPuVAatKH7WkzH+mp2IUpBa0oDMEUUCEV
zwKos+mztucZ51PHWcDDSHezLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLsS7EWz
XbTuToDK+cYvqbYP8nIsMB8GA1UdIwQYMBaAFOTmet9PBX6AEdosaCSdfCVtUAdB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjNENi80NkVDMURFNENF
QTMxMUVEQjMwM0Y3MzhDNEY5QUUwMi81T1o2MzA4RmZvQVIyaXhvSkoxOEpXMVFC
MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVPWjYzMDhGZm9BUjJpeG9KSjE4SlcxUUIwRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QjNENi80NkVDMURFNENFQTMxMUVEQjMwM0Y3MzhDNEY5QUUwMi81T1o2MzA4RmZv
QVIyaXhvSkoxOEpXMVFCMEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAo80eiRTGsAuvzQe2qaMeSJ1/cZdBx6VG2+wmGbyg6Xb+wig7KOi/qnDtlHB+
stK+ijYmDJIX8j9ZraF6OFcBkR4QXNiu0K0EXKIWxt7FIEbiSa3gKrYxJdOgHHeT
THaScBIwABZS9+kxhVqf0Wa3Pv09lTlikm58jjLo6HtQmByotlBjCpvx3zXpI5Ud
WpyP6r28zGy4OwGkmG+DG1IMLBY1oI1LepoIP7pSvcSqoSoxydU4dKGvzOEqqDP+
nu+HKYqbwwW5sN2RcYNXYP7nmI5t64XlEFG6AUXGgRSnbdc/t9BZoIbn5jRDvqqF
BBwYsQ7OGndPkLViAM4zn1pIZA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:25:08 2026 by rpki-client