Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft
File:                     5C5CACqDeHpnr4y5qFH5OZdGwTI.mft (raw, json)
Hash identifier:          CopIhbaM8c+yWkh/BrH2ig23/AUhCuesOP2ppVEdG7c=
Subject key identifier:   C2:FC:96:80:FD:BD:3B:9B:1D:EE:83:54:99:E3:0F:F4:C1:F5:C1:89
Authority key identifier: E4:2E:42:00:2A:83:78:7A:67:AF:8C:B9:A8:51:F9:39:97:46:C1:32
Certificate issuer:       /CN=A91566DC/serialNumber=E42E42002A83787A67AF8CB9A851F9399746C132
Certificate serial:       0114
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5C5CACqDeHpnr4y5qFH5OZdGwTI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft
Manifest number:          0114
Signing time:             Wed 25 Mar 2026 05:04:33 +0000
Manifest this update:     Wed 25 Mar 2026 05:04:32 +0000
Manifest next update:     Wed 01 Apr 2026 05:04:32 +0000
Files and hashes:         1: 5C5CACqDeHpnr4y5qFH5OZdGwTI.crl (hash: CfPluCU0l3zQEc1i9fn7QO/FeNntMPIspy/bIFXFGTA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.crl
                          rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5C5CACqDeHpnr4y5qFH5OZdGwTI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:04:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 276 (0x114)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91566DC, serialNumber=E42E42002A83787A67AF8CB9A851F9399746C132
        Validity
            Not Before: Mar 25 05:04:32 2026 GMT
            Not After : Apr  1 05:04:32 2026 GMT
        Subject: CN=69c36ce1-3c83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c5:31:39:e1:92:54:15:ca:04:29:ef:0a:06:
                    8c:1b:4a:a1:53:25:ca:8f:85:6b:fa:12:b7:2f:b2:
                    0d:37:79:5b:74:3f:e5:73:94:9f:61:2b:11:c8:d3:
                    97:85:79:26:a3:fc:fb:74:c2:07:45:5e:43:97:3a:
                    f8:be:eb:96:48:1a:16:3b:19:12:6b:60:91:8c:50:
                    95:6a:7f:2d:0f:37:ab:49:2e:b4:6c:21:65:95:89:
                    c7:75:ec:be:6d:62:40:ae:3f:8c:de:e1:b1:25:ed:
                    7a:42:9c:15:01:be:e0:15:1f:ad:c5:1a:86:f8:a6:
                    14:bf:0a:00:ee:3f:50:87:a8:4a:7c:22:5f:e0:09:
                    3e:d3:8a:4d:34:d2:34:d9:d4:a6:ab:8a:e6:d4:54:
                    5a:df:3a:06:0e:b7:c5:86:bb:14:15:cf:a1:4b:22:
                    9d:ea:0d:c4:c9:59:9d:fa:1b:51:0a:da:82:ec:a1:
                    b1:fc:20:c9:3c:86:8a:ae:da:48:eb:35:23:e5:78:
                    1b:1e:45:aa:18:26:dc:d1:72:26:34:45:05:b9:df:
                    cc:4f:e8:02:25:75:13:cd:71:64:66:a6:77:7b:20:
                    5a:70:3f:03:27:79:7f:da:18:4e:e8:c0:9a:db:05:
                    ab:33:94:2a:c0:7b:79:8c:70:87:c0:88:9c:73:94:
                    cd:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:FC:96:80:FD:BD:3B:9B:1D:EE:83:54:99:E3:0F:F4:C1:F5:C1:89
            X509v3 Authority Key Identifier:
                keyid:E4:2E:42:00:2A:83:78:7A:67:AF:8C:B9:A8:51:F9:39:97:46:C1:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5C5CACqDeHpnr4y5qFH5OZdGwTI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:a2:89:e8:d1:cd:25:3f:32:e4:d2:4b:d2:24:76:0a:85:48:
         76:6e:cc:dc:a1:8a:97:db:e1:ea:32:e0:30:1b:d6:e0:59:07:
         56:1a:92:e6:07:eb:40:13:53:16:5e:49:2c:d7:a8:3e:ef:d8:
         a4:f5:4f:e8:e4:f4:7a:32:66:51:50:a2:17:63:5e:6f:6b:a2:
         a5:5d:c4:8d:9a:22:75:c3:2a:2c:f2:78:f9:c8:53:af:90:0b:
         1f:0d:61:1c:eb:a1:ac:b9:b0:64:d3:32:6a:2a:32:a7:19:86:
         da:12:7f:03:f4:3b:95:50:89:be:b8:3c:49:a5:af:d0:6d:37:
         6d:8d:80:de:cf:f3:56:99:14:00:2e:03:ba:0d:8c:18:3a:3b:
         7a:dc:c7:f4:42:12:e8:e9:f5:0f:0e:cc:5f:cb:2d:7b:bc:43:
         c8:c2:9d:45:72:32:c2:62:bd:c0:2c:85:7f:7f:c6:25:c1:4e:
         3d:af:50:56:e5:76:e0:8e:f7:9b:fb:b6:b0:f0:75:c8:79:ae:
         a7:16:57:eb:de:c8:30:90:10:b4:97:b7:05:21:84:48:80:7b:
         4e:40:f3:8f:b7:e0:0b:a6:9f:c6:5a:0e:ef:b4:d2:97:eb:95:
         e9:23:bc:d1:17:d9:ee:db:a0:52:8e:16:0b:d4:b4:e4:81:22:
         00:25:df:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:06:56 2026 by rpki-client