Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.mft
File:                     S5R0cysQASlff10ywBNpOhk3aBM.mft (raw, json)
Hash identifier:          JCaFY00+WprsyMpI0zcc/2l/caGgiSHrgioqfVhi7J4=
Subject key identifier:   84:D3:6A:7C:87:56:98:24:F6:81:42:F4:C3:B2:1E:1C:50:AE:90:F4
Authority key identifier: 4B:94:74:73:2B:10:01:29:5F:7F:5D:32:C0:13:69:3A:19:37:68:13
Certificate issuer:       /CN=A915393C/serialNumber=4B9474732B1001295F7F5D32C013693A19376813
Certificate serial:       0132
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5R0cysQASlff10ywBNpOhk3aBM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.mft
Manifest number:          012A
Signing time:             Fri 27 Mar 2026 05:06:09 +0000
Manifest this update:     Fri 27 Mar 2026 05:06:09 +0000
Manifest next update:     Fri 03 Apr 2026 05:06:09 +0000
Files and hashes:         1: S5R0cysQASlff10ywBNpOhk3aBM.crl (hash: cX75sPZwSx2MB4Sw7cKpTSo81wIm6oZcSEV6yBpVtu8=)
                          2: D970354A640E11EF93D18659C4F9AE02.roa (hash: 2/SeBbADHUqtbBcj33Jpc1cfurDRr3T2kajVOmVV524=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.crl
                          rsync://rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5R0cysQASlff10ywBNpOhk3aBM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 05:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 306 (0x132)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915393C, serialNumber=4B9474732B1001295F7F5D32C013693A19376813
        Validity
            Not Before: Mar 27 05:06:09 2026 GMT
            Not After : Apr  3 05:06:09 2026 GMT
        Subject: CN=69c61041-109c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d4:e7:ef:c8:b8:f4:80:76:25:89:72:51:b1:
                    7f:b6:45:99:55:90:6d:21:be:8b:74:ba:ed:a2:f1:
                    77:13:a6:06:02:c8:4b:1d:0f:bd:7a:b3:cd:e1:c5:
                    0d:b9:36:19:9c:24:e5:55:e8:cc:5b:12:de:72:1e:
                    cf:1d:5a:0b:64:77:10:37:c2:ca:cc:4c:43:e4:ad:
                    a2:ac:71:9d:72:d7:ff:ef:7f:bb:79:7f:80:cc:36:
                    85:61:17:d3:30:51:70:00:00:6a:1e:8c:d3:65:d5:
                    23:b5:2e:f9:9e:17:25:c5:fa:3c:0d:68:c6:f2:2a:
                    92:c5:1a:09:5c:6e:e0:c2:4c:13:44:c3:ba:bd:d6:
                    cc:b7:d4:b1:a2:35:1f:6f:bf:48:6a:7e:17:51:c4:
                    12:28:cb:43:95:da:d7:24:23:9f:53:55:31:b7:50:
                    05:ce:e9:2d:16:8f:7d:06:60:a7:d4:d6:c5:15:8f:
                    54:33:4f:2f:f0:a4:d7:b3:10:1a:d1:31:27:b7:3f:
                    60:d0:75:bf:72:5d:e3:03:f8:dc:b3:8a:df:95:d8:
                    25:0a:4d:5d:e2:28:9b:5a:22:a0:5d:11:b0:4d:f4:
                    2c:65:ff:c6:44:5e:1a:85:33:b6:83:6d:54:98:f1:
                    42:8a:62:25:3a:8f:43:d8:32:70:97:fc:9b:49:b0:
                    35:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:D3:6A:7C:87:56:98:24:F6:81:42:F4:C3:B2:1E:1C:50:AE:90:F4
            X509v3 Authority Key Identifier:
                keyid:4B:94:74:73:2B:10:01:29:5F:7F:5D:32:C0:13:69:3A:19:37:68:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5R0cysQASlff10ywBNpOhk3aBM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:de:dd:69:21:a0:fe:0e:ec:09:4e:29:8f:cf:5b:ec:d1:a1:
         38:09:c0:ec:ce:ec:04:98:82:28:ee:c3:09:40:38:fb:a9:40:
         65:dc:a8:9f:3f:5a:1d:38:d6:a6:6f:30:f4:58:96:4a:1c:14:
         70:c1:a8:50:a8:e3:98:7e:73:0e:a2:8f:15:45:5a:22:e3:33:
         5a:13:8c:02:27:10:48:11:02:34:d2:6b:b7:8f:c0:5f:f0:91:
         2e:a3:81:fb:96:2a:a5:59:26:bb:57:d6:36:19:6b:72:d9:20:
         3f:ba:2b:b7:ff:a5:0d:71:77:25:3b:c7:37:38:63:a7:28:51:
         71:54:6d:e4:a1:36:d4:31:0c:b1:a4:0d:cf:eb:83:6c:6b:3a:
         e0:63:13:24:ad:76:52:6d:11:40:71:03:45:e5:bc:95:f8:b5:
         d4:f4:28:70:17:33:a4:cd:e5:49:71:8a:84:63:8f:8d:a5:ce:
         9c:21:9f:48:21:65:a2:df:2a:c2:a0:06:3c:71:f8:32:0c:97:
         2c:3f:ef:af:f9:cd:78:51:44:89:16:b8:38:c9:2e:74:92:00:
         30:a0:1a:42:a8:7d:4a:af:28:a1:ec:eb:89:0c:95:4e:eb:3b:
         04:ad:3f:1a:25:49:a8:bb:00:78:a5:cf:8c:e7:5c:dc:28:a1:
         f7:88:85:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:21:06 2026 by rpki-client