Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FC0B/BEE7558045B011EBA3696D63C4F9AE02/F5SMh3nFnmXK_OLv3LHLUJEThEw.mft
File:                     F5SMh3nFnmXK_OLv3LHLUJEThEw.mft (raw, json)
Hash identifier:          diOxEoytIdhuidkkmwexDBZ4XQirFHyLHymdDd8HQao=
Subject key identifier:   D3:DE:33:24:3D:46:26:7B:7A:9F:58:D2:BE:72:B2:68:FA:9C:23:93
Authority key identifier: 17:94:8C:87:79:C5:9E:65:CA:FC:E2:EF:DC:B1:CB:50:91:13:84:4C
Certificate issuer:       /CN=A915FC0B/serialNumber=17948C8779C59E65CAFCE2EFDCB1CB509113844C
Certificate serial:       07B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F5SMh3nFnmXK_OLv3LHLUJEThEw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FC0B/BEE7558045B011EBA3696D63C4F9AE02/F5SMh3nFnmXK_OLv3LHLUJEThEw.mft
Manifest number:          079F
Signing time:             Tue 24 Mar 2026 21:15:58 +0000
Manifest this update:     Tue 24 Mar 2026 21:15:58 +0000
Manifest next update:     Tue 31 Mar 2026 21:15:58 +0000
Files and hashes:         1: F5SMh3nFnmXK_OLv3LHLUJEThEw.crl (hash: 0veKc3Eit8s8Nd1ZO2q8bT5Hg9zgEPt1LPZEdORQsCM=)
                          2: 7A75D42E45B211EB99335867C4F9AE02.roa (hash: ROziuwSKt6kD0FKsMikGz3qiR7BqzfxieXrk1A6D870=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FC0B/BEE7558045B011EBA3696D63C4F9AE02/F5SMh3nFnmXK_OLv3LHLUJEThEw.crl
                          rsync://rpki.apnic.net/member_repository/A915FC0B/BEE7558045B011EBA3696D63C4F9AE02/F5SMh3nFnmXK_OLv3LHLUJEThEw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F5SMh3nFnmXK_OLv3LHLUJEThEw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:15:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1972 (0x7b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FC0B, serialNumber=17948C8779C59E65CAFCE2EFDCB1CB509113844C
        Validity
            Not Before: Mar 24 21:15:58 2026 GMT
            Not After : Mar 31 21:15:58 2026 GMT
        Subject: CN=69c2ff0e-181a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f4:60:17:d7:48:c6:85:cd:84:39:5d:b9:72:
                    a8:fc:51:9a:26:75:10:49:d0:53:4c:07:e0:fb:60:
                    3a:61:f3:7f:84:fc:b8:d9:7f:af:49:85:a5:49:e2:
                    d7:c7:f7:60:3b:b6:f9:7d:a2:d3:92:77:06:c8:09:
                    74:13:68:7f:b5:42:85:18:71:7e:54:bd:19:88:03:
                    7c:eb:bf:8f:02:bb:01:50:20:8b:ea:a9:88:ed:7e:
                    99:52:7b:bf:99:8d:15:c5:ca:e0:48:63:37:f3:ce:
                    97:3a:22:4a:27:b5:b1:56:7d:59:26:81:be:2b:c1:
                    4b:84:38:24:55:59:87:77:8f:39:ab:aa:36:f3:8d:
                    56:70:aa:90:b6:50:8b:bc:ef:a9:0c:57:cd:67:71:
                    bc:9b:df:da:5d:f3:f0:53:13:18:eb:64:f4:8e:64:
                    54:51:6c:5b:01:b9:77:ad:0f:6b:bc:c8:9a:ba:6d:
                    3c:f8:66:c4:ec:df:e0:5b:0a:e0:23:c1:9f:70:85:
                    c9:f0:85:43:fa:8d:ac:fc:b3:8e:3f:e6:40:01:eb:
                    3c:8a:05:0f:e0:5a:43:d2:b5:d2:5b:38:69:11:39:
                    6d:1d:c6:0d:1f:ab:94:3f:9c:ae:c5:45:2d:54:0f:
                    78:d3:39:96:86:e1:d1:bb:88:23:af:54:d5:77:06:
                    fb:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:DE:33:24:3D:46:26:7B:7A:9F:58:D2:BE:72:B2:68:FA:9C:23:93
            X509v3 Authority Key Identifier:
                keyid:17:94:8C:87:79:C5:9E:65:CA:FC:E2:EF:DC:B1:CB:50:91:13:84:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FC0B/BEE7558045B011EBA3696D63C4F9AE02/F5SMh3nFnmXK_OLv3LHLUJEThEw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F5SMh3nFnmXK_OLv3LHLUJEThEw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FC0B/BEE7558045B011EBA3696D63C4F9AE02/F5SMh3nFnmXK_OLv3LHLUJEThEw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:65:0a:be:2a:ba:dc:2c:a2:ae:f9:03:8f:4b:26:7b:ad:13:
         37:05:4b:4e:54:d0:5b:2d:63:98:12:a1:c0:e4:20:bc:3c:61:
         b6:b2:dd:c3:05:04:26:6d:ba:be:e8:18:12:72:68:a9:f3:20:
         be:2e:d3:74:f7:e1:d3:12:50:6d:2b:37:6c:ec:55:0e:73:71:
         26:1b:56:f9:37:32:cd:26:ed:31:09:23:60:78:3c:12:00:ec:
         22:19:01:35:8b:cc:4d:0e:41:3f:ea:88:96:15:a7:de:58:fb:
         bb:e3:b7:a6:00:35:77:58:49:c0:cb:c7:70:52:81:b0:d7:49:
         7e:a3:61:68:8c:08:d2:5e:22:16:db:cb:48:76:1f:62:e4:6f:
         13:9e:1b:ed:7c:7e:db:d1:50:50:7e:c6:03:20:99:64:94:6e:
         50:2c:4c:e9:ea:64:e1:dc:14:68:b4:36:26:7a:ba:9c:83:e4:
         09:f7:cc:d7:2a:f3:b7:da:49:bc:98:f5:c6:c1:5a:60:d8:c9:
         3f:e2:36:3b:dc:65:60:85:c9:47:72:c6:84:4b:bc:75:e7:cf:
         2e:90:65:98:22:42:7b:ab:b7:6a:b8:60:ff:90:6d:50:bc:e8:
         09:0f:8d:27:56:17:37:64:ca:8a:e5:ca:ce:5c:84:5d:9a:90:
         a2:f9:e8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:21:55 2026 by rpki-client