Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft
File:                     Ad9hVyR3ojDnn48oz91tKDd_Iis.mft (raw, json)
Hash identifier:          TxC1pcYFvvByQH2PXyRUWDFmGrErmZUKDXpyw9uPZ1I=
Subject key identifier:   DB:FB:13:77:DF:E0:A1:2E:1B:61:A9:E5:0F:D8:8C:4C:BD:E0:D2:75
Authority key identifier: 01:DF:61:57:24:77:A2:30:E7:9F:8F:28:CF:DD:6D:28:37:7F:22:2B
Certificate issuer:       /CN=A914E5AE/serialNumber=01DF61572477A230E79F8F28CFDD6D28377F222B
Certificate serial:       05B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ad9hVyR3ojDnn48oz91tKDd_Iis.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft
Manifest number:          05AC
Signing time:             Tue 24 Mar 2026 22:51:21 +0000
Manifest this update:     Tue 24 Mar 2026 22:51:20 +0000
Manifest next update:     Tue 31 Mar 2026 22:51:20 +0000
Files and hashes:         1: Ad9hVyR3ojDnn48oz91tKDd_Iis.crl (hash: eR7hUqVVwbZxxooL+vT7ABue8DhDfxXx4tbJ/Ciy1Bk=)
                          2: C847114C07D411ECBF875117C4F9AE02.roa (hash: 3efS8Q9JjQlkVgg6pGkDOEml4mfxa8hUfuGZHCKjSOw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.crl
                          rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ad9hVyR3ojDnn48oz91tKDd_Iis.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:51:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1460 (0x5b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E5AE, serialNumber=01DF61572477A230E79F8F28CFDD6D28377F222B
        Validity
            Not Before: Mar 24 22:51:20 2026 GMT
            Not After : Mar 31 22:51:20 2026 GMT
        Subject: CN=69c31568-98d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fd:9d:6c:36:59:9b:07:b5:7a:fb:3f:7a:b4:
                    3a:ba:3b:16:f2:93:62:64:44:ff:fa:41:d4:e6:9a:
                    73:30:95:5b:f3:86:f2:1e:b1:fd:df:7e:b9:69:b4:
                    72:7f:54:c9:0b:97:e4:ce:06:74:ea:b9:43:d9:ff:
                    7b:19:0a:3a:f4:a6:e9:52:b9:71:ab:c3:a6:0d:d0:
                    5e:43:7c:24:a2:a0:c5:c5:5b:06:91:ef:65:ac:dd:
                    26:6e:25:a9:7d:70:c0:91:c2:71:f8:fe:f0:32:46:
                    89:76:3b:88:2d:b4:35:44:ad:a1:1a:5c:0c:58:e3:
                    ea:52:10:11:95:a2:36:b5:9f:2e:d0:35:d0:24:04:
                    cb:79:1f:45:1b:1b:49:80:fa:c3:79:9d:ef:84:9e:
                    1c:45:96:68:a1:18:53:80:7a:b1:73:9e:a1:52:61:
                    6b:35:38:6a:3b:67:73:16:e2:a5:e3:9d:f9:62:77:
                    8c:be:8d:8d:2f:af:c2:b3:ac:de:3e:af:5c:41:81:
                    f1:f1:43:aa:0f:bc:8b:c9:43:d5:e0:f6:4e:9f:a4:
                    01:0c:f6:1e:db:fe:e7:03:e7:0b:82:62:ee:58:70:
                    73:4f:ae:94:31:3c:dc:db:98:16:a7:56:4b:15:78:
                    a2:40:c0:88:4f:50:d8:f2:84:d9:f2:88:6a:d0:5a:
                    81:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:FB:13:77:DF:E0:A1:2E:1B:61:A9:E5:0F:D8:8C:4C:BD:E0:D2:75
            X509v3 Authority Key Identifier:
                keyid:01:DF:61:57:24:77:A2:30:E7:9F:8F:28:CF:DD:6D:28:37:7F:22:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ad9hVyR3ojDnn48oz91tKDd_Iis.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:c0:31:a3:be:08:ae:5c:65:f4:c8:3d:30:6b:0c:a3:75:44:
         6a:53:36:db:a6:39:a5:7a:98:17:0f:96:ac:1f:65:1e:a9:93:
         b4:70:1a:3d:f2:56:53:29:c6:92:e8:c7:53:4f:00:5e:ce:e4:
         f7:62:2e:5d:6d:f2:d8:07:6c:71:92:3c:27:7f:40:ba:62:a9:
         d2:62:38:9c:23:7e:f2:c6:1e:82:bc:f5:8b:8c:98:a2:ee:07:
         ab:44:d2:96:26:6e:0e:72:b5:ef:6f:5e:0e:22:86:4b:ac:cb:
         54:c3:26:6b:a7:70:31:02:22:e0:9a:b8:89:a0:90:0e:15:ae:
         59:e4:8a:89:30:2b:39:c0:69:69:71:fd:a3:fc:20:6d:19:02:
         7d:99:9d:3a:f9:2f:ba:de:62:32:11:7d:b2:8e:27:b0:9e:39:
         54:82:78:1e:3e:81:88:30:29:b1:cc:44:2e:47:80:66:85:e0:
         28:83:6d:89:f0:aa:37:91:25:4a:2e:3d:51:12:f5:31:0c:ae:
         86:32:43:85:89:1d:5a:31:2f:0c:ba:dc:d9:7b:dd:6e:c7:6c:
         f4:5d:16:8b:f0:e6:d6:51:03:39:36:f6:4d:73:55:73:6e:5c:
         0e:5e:d2:3f:a3:25:22:1d:af:4b:3f:99:c8:35:bd:3d:c2:c9:
         e7:58:cc:9f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEU1QUUxMTAvBgNVBAUTKDAxREY2MTU3MjQ3N0EyMzBFNzlGOEYyOENGREQ2RDI4
Mzc3RjIyMkIwHhcNMjYwMzI0MjI1MTIwWhcNMjYwMzMxMjI1MTIwWjAYMRYwFAYD
VQQDEw02OWMzMTU2OC05OGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzP2dbDZZmwe1evs/erQ6ujsW8pNiZET/+kHU5ppzMJVb84byHrH93365abRy
f1TJC5fkzgZ06rlD2f97GQo69KbpUrlxq8OmDdBeQ3wkoqDFxVsGke9lrN0mbiWp
fXDAkcJx+P7wMkaJdjuILbQ1RK2hGlwMWOPqUhARlaI2tZ8u0DXQJATLeR9FGxtJ
gPrDeZ3vhJ4cRZZooRhTgHqxc56hUmFrNThqO2dzFuKl4535YneMvo2NL6/Cs6ze
Pq9cQYHx8UOqD7yLyUPV4PZOn6QBDPYe2/7nA+cLgmLuWHBzT66UMTzc25gWp1ZL
FXiiQMCIT1DY8oTZ8ohq0FqBOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNv7E3ff
4KEuG2Gp5Q/YjEy94NJ1MB8GA1UdIwQYMBaAFAHfYVckd6Iw55+PKM/dbSg3fyIr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTVBRS80NkQ0MjJGMDA3
RDIxMUVDQUE4MkI2MTFDNEY5QUUwMi9BZDloVnlSM29qRG5uNDhvejkxdEtEZF9J
aXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FkOWhWeVIzb2pEbm40OG96OTF0S0RkX0lpcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RTVBRS80NkQ0MjJGMDA3RDIxMUVDQUE4MkI2MTFDNEY5QUUwMi9BZDloVnlSM29q
RG5uNDhvejkxdEtEZF9JaXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMcAxo74Irlxl9Mg9MGsMo3VEalM226Y5pXqYFw+WrB9lHqmTtHAaPfJWUynG
kujHU08AXs7k92IuXW3y2AdscZI8J39AumKp0mI4nCN+8sYegrz1i4yYou4Hq0TS
liZuDnK1729eDiKGS6zLVMMma6dwMQIi4Jq4iaCQDhWuWeSKiTArOcBpaXH9o/wg
bRkCfZmdOvkvut5iMhF9so4nsJ45VIJ4Hj6BiDApscxELkeAZoXgKINtifCqN5El
Si49URL1MQyuhjJDhYkdWjEvDLrc2Xvdbsds9F0Wi/Dm1lEDOTb2TXNVc25cDl7S
P6MlIh2vSz+ZyDW9PcLJ51jMnw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:59:49 2026 by rpki-client