Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.mft
File:                     1FLGfvaHRDivqZOoStCrwYUWkhs.mft (raw, json)
Hash identifier:          OQCMo6LTH4HyvWnjWOqSl7hGmqHq8fQ4OH2sv9mle+o=
Subject key identifier:   24:D8:07:40:A0:49:3D:4B:28:18:D1:2D:CB:B2:E2:5A:CE:F9:74:3F
Authority key identifier: D4:52:C6:7E:F6:87:44:38:AF:A9:93:A8:4A:D0:AB:C1:85:16:92:1B
Certificate issuer:       /CN=A915FD27/serialNumber=D452C67EF6874438AFA993A84AD0ABC18516921B
Certificate serial:       02C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FLGfvaHRDivqZOoStCrwYUWkhs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.mft
Manifest number:          02B5
Signing time:             Wed 25 Mar 2026 01:06:37 +0000
Manifest this update:     Wed 25 Mar 2026 01:06:37 +0000
Manifest next update:     Wed 01 Apr 2026 01:06:37 +0000
Files and hashes:         1: 1FLGfvaHRDivqZOoStCrwYUWkhs.crl (hash: 9x/hW1nccB0THWt05xVoCxwnZoOOintEoxwH5PEvg2o=)
                          2: 9BDA59F69C8C11F0A27C535EC4F9AE02.roa (hash: 1AILx3io2TpfX7hUWzuL2pU58QXDn9h+uBSyFOkdjjg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.crl
                          rsync://rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FLGfvaHRDivqZOoStCrwYUWkhs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 706 (0x2c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FD27, serialNumber=D452C67EF6874438AFA993A84AD0ABC18516921B
        Validity
            Not Before: Mar 25 01:06:37 2026 GMT
            Not After : Apr  1 01:06:37 2026 GMT
        Subject: CN=69c3351d-8805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:78:a4:5d:6e:ea:38:16:f3:f2:17:7f:5d:92:
                    d9:0f:66:50:9b:42:03:8b:44:b3:01:19:d9:eb:15:
                    81:b9:1d:0d:56:69:62:93:b9:8b:4a:98:0a:24:03:
                    fe:7b:90:cb:98:8c:4c:70:73:36:b5:c7:a9:8c:f8:
                    9e:40:36:5c:93:75:16:e5:ab:ee:76:94:3f:34:2c:
                    2f:a8:e5:70:12:d6:39:62:52:3f:47:06:dd:99:41:
                    8f:32:f3:d3:34:cd:6a:f6:2b:bf:ac:ba:65:6d:3a:
                    a3:51:d9:e5:f6:5c:8f:24:50:30:3f:bb:94:09:b2:
                    b9:30:bb:84:2b:59:61:ac:2d:2b:e0:2c:2c:aa:dc:
                    0f:f5:c7:d0:af:4a:10:5f:96:bc:75:ed:41:9a:c5:
                    a5:aa:5e:98:0e:a7:51:7a:4c:e3:74:99:5c:9e:2e:
                    bd:75:25:03:f9:2f:38:13:20:62:cb:eb:2e:48:af:
                    f8:87:3d:61:0f:0f:43:b3:c6:80:53:41:1a:a2:ad:
                    b5:60:f0:e6:4e:b7:b1:0c:02:5f:c5:95:75:7a:25:
                    33:83:3a:47:f8:5e:37:8d:bd:68:22:7b:db:04:9f:
                    68:b7:d3:9c:6c:61:76:f8:b9:99:00:81:86:fe:dd:
                    d9:87:34:bd:67:fc:06:e2:3d:e3:21:0e:89:4e:3b:
                    21:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D8:07:40:A0:49:3D:4B:28:18:D1:2D:CB:B2:E2:5A:CE:F9:74:3F
            X509v3 Authority Key Identifier:
                keyid:D4:52:C6:7E:F6:87:44:38:AF:A9:93:A8:4A:D0:AB:C1:85:16:92:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FLGfvaHRDivqZOoStCrwYUWkhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:fb:3f:5f:32:09:63:f9:cb:1a:94:83:a5:39:fd:aa:96:2b:
         83:8d:77:1c:3b:52:ea:77:94:d6:10:65:b9:b6:1b:0c:c0:31:
         ba:82:5b:b6:00:7b:82:26:2c:9a:95:2b:08:01:db:8f:19:32:
         d4:02:bc:1f:f0:ca:28:26:ac:c7:63:f4:16:a0:80:9d:f5:dd:
         64:36:26:54:a0:37:11:95:80:39:29:46:1f:53:02:dd:5a:fc:
         27:d4:dc:ef:1c:00:ab:5a:51:b5:4e:a4:8b:a1:0b:ef:0d:18:
         71:94:b4:a0:e0:53:ca:cd:3c:97:6b:17:cf:fc:00:a4:1b:a9:
         ea:58:b4:d5:79:2c:a3:40:87:b9:bc:b1:c1:b7:87:de:07:96:
         03:31:cc:88:c0:7d:09:4a:ef:10:e1:bf:42:68:6e:7e:e2:f7:
         b1:77:74:b8:62:0f:a3:52:04:dd:9b:10:35:71:6f:3e:6f:68:
         1b:40:ba:b3:b3:e4:16:d2:4b:58:41:00:bd:d2:6a:8b:7f:21:
         7d:6f:65:9a:5f:23:6e:b6:8b:f6:09:c6:1f:97:7f:55:3a:53:
         bc:45:54:1a:74:dd:67:74:3b:78:62:ab:27:48:5b:2a:5c:c4:
         5c:e0:b1:5c:8e:eb:a2:63:08:8a:a4:8a:ef:b4:ea:f0:1e:6d:
         ef:5d:ed:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:39:12 2026 by rpki-client