Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/n5wj0nP2qZxl77wDDStoHkIykWc.mft
File:                     n5wj0nP2qZxl77wDDStoHkIykWc.mft (raw, json)
Hash identifier:          RMdVbKlfm3/WHEmggsLfD+F/DDEXVIZi3eUtMkHgOvY=
Subject key identifier:   4B:10:93:41:93:5C:0F:FC:FC:92:70:75:03:BF:E6:65:57:0E:52:6B
Authority key identifier: 9F:9C:23:D2:73:F6:A9:9C:65:EF:BC:03:0D:2B:68:1E:42:32:91:67
Certificate issuer:       /CN=A9144C70/serialNumber=9F9C23D273F6A99C65EFBC030D2B681E42329167
Certificate serial:       041D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n5wj0nP2qZxl77wDDStoHkIykWc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/n5wj0nP2qZxl77wDDStoHkIykWc.mft
Manifest number:          0583
Signing time:             Wed 25 Mar 2026 00:05:21 +0000
Manifest this update:     Wed 25 Mar 2026 00:05:20 +0000
Manifest next update:     Wed 01 Apr 2026 00:05:20 +0000
Files and hashes:         1: n5wj0nP2qZxl77wDDStoHkIykWc.crl (hash: c7p/5iQe5kNUwQ63OVtTS1crk35IVS9vXU0exGkXqjM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/n5wj0nP2qZxl77wDDStoHkIykWc.crl
                          rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/n5wj0nP2qZxl77wDDStoHkIykWc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n5wj0nP2qZxl77wDDStoHkIykWc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:05:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1053 (0x41d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144C70, serialNumber=9F9C23D273F6A99C65EFBC030D2B681E42329167
        Validity
            Not Before: Mar 25 00:05:20 2026 GMT
            Not After : Apr  1 00:05:20 2026 GMT
        Subject: CN=69c326c1-a56b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5d:99:17:12:47:e9:f2:a5:6e:b1:21:c5:d6:
                    ec:d0:10:91:6f:ac:95:9b:f1:21:2e:da:9b:f4:e4:
                    56:93:55:f5:70:ef:aa:83:ab:a2:ca:af:8e:be:a8:
                    95:7b:66:85:ca:71:d2:96:fb:11:14:15:47:d1:56:
                    e2:9e:1b:b9:28:41:ba:9d:9b:8b:f8:01:a4:e1:1a:
                    5b:a1:68:38:27:cd:71:4a:d9:c9:b0:14:c7:7b:36:
                    b8:01:7f:85:b7:4a:7d:5f:92:6f:89:54:7e:35:64:
                    22:3c:2b:e6:83:15:e8:67:21:9b:bb:dc:33:ee:bc:
                    ee:f8:1f:2b:02:fe:b8:2c:db:2b:1d:55:1e:fd:2a:
                    98:fe:54:4c:f9:41:8b:30:57:1b:dc:55:11:bc:a8:
                    1d:17:3b:12:f9:95:0b:87:0c:23:85:5e:8a:ff:1b:
                    d7:6b:95:e1:b9:3e:58:d8:e0:8b:d5:db:87:98:c1:
                    f4:3e:61:bc:a6:f9:1e:a8:57:38:03:5d:7c:8c:3b:
                    1e:03:54:89:43:4d:62:d8:5c:57:e1:d9:f6:fc:b2:
                    8a:3e:6c:82:8d:68:0c:62:3d:81:c5:f8:9c:37:d7:
                    5d:8d:3f:a8:b1:67:72:49:9c:7e:57:76:a1:19:97:
                    b8:54:92:0e:70:c0:53:8f:da:3e:79:c7:19:fe:bc:
                    b8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:10:93:41:93:5C:0F:FC:FC:92:70:75:03:BF:E6:65:57:0E:52:6B
            X509v3 Authority Key Identifier:
                keyid:9F:9C:23:D2:73:F6:A9:9C:65:EF:BC:03:0D:2B:68:1E:42:32:91:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/n5wj0nP2qZxl77wDDStoHkIykWc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n5wj0nP2qZxl77wDDStoHkIykWc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/n5wj0nP2qZxl77wDDStoHkIykWc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:59:1d:7c:a6:b5:87:14:70:61:62:d1:b7:f0:fe:e4:f8:3a:
         99:82:0d:34:22:ed:50:68:37:64:2f:ae:bb:18:83:3f:87:2e:
         60:21:fe:a6:1f:bf:69:25:da:7b:bb:fb:1f:ae:37:1b:6e:75:
         8f:af:21:c4:10:c7:5f:06:da:ed:17:01:1c:9c:02:3d:a3:77:
         57:8a:9c:a1:2a:df:82:8c:f2:21:40:31:20:80:dd:ce:e1:1e:
         ac:62:da:9a:0b:37:34:17:66:ed:f5:a3:61:d0:85:94:31:20:
         9e:4f:ff:f9:f4:82:cd:cc:07:50:84:c2:a1:c3:f7:08:4b:95:
         bb:1e:cb:9c:f4:c8:2e:6a:2e:1a:07:83:c7:13:c5:66:a1:76:
         21:fc:fa:fa:37:0d:ee:a2:c9:c8:4d:67:73:66:80:dc:3c:11:
         84:59:00:a3:d1:d5:ce:4c:f4:36:ff:fc:50:68:8a:e6:25:6c:
         6d:c1:73:6d:9c:9b:e6:0f:6f:d7:de:c4:86:1f:5a:0d:da:62:
         64:f1:af:7d:62:b2:39:fb:9d:eb:0f:83:da:d7:bf:b4:59:5c:
         14:ee:c2:24:ea:e0:01:73:59:d5:12:67:29:07:ac:24:c0:18:
         7c:43:d5:b5:81:c0:6e:03:43:af:90:d3:a2:f1:9a:3c:bc:66:
         68:95:c2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:25:07 2026 by rpki-client