Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/5S3osZGTOKPiVWZOiASKVpihINA.mft
File:                     5S3osZGTOKPiVWZOiASKVpihINA.mft (raw, json)
Hash identifier:          PoJmWEaGI8UqhDjNVPVvY4MyKvPP4T4WD1PxuMx2xzI=
Subject key identifier:   56:6B:4B:BF:0E:5F:D7:D8:6C:D4:8F:A5:64:18:DB:85:F2:2C:19:46
Authority key identifier: E5:2D:E8:B1:91:93:38:A3:E2:55:66:4E:88:04:8A:56:98:A1:20:D0
Certificate issuer:       /CN=A9160701/serialNumber=E52DE8B1919338A3E255664E88048A5698A120D0
Certificate serial:       0C15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S3osZGTOKPiVWZOiASKVpihINA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/5S3osZGTOKPiVWZOiASKVpihINA.mft
Manifest number:          0C08
Signing time:             Tue 24 Mar 2026 18:38:44 +0000
Manifest this update:     Tue 24 Mar 2026 18:38:43 +0000
Manifest next update:     Tue 31 Mar 2026 18:38:43 +0000
Files and hashes:         1: 5S3osZGTOKPiVWZOiASKVpihINA.crl (hash: kETyroZufuJjRcNjBQEjtup3P+heJg7j6PinniqsQNw=)
                          2: 6DCC06C231BC11EA9AACCA4BC4F9AE02.roa (hash: NDA9/ZIdOnZog2sK2a7R7CTd4jfshQqjGD+nO4awG3w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/5S3osZGTOKPiVWZOiASKVpihINA.crl
                          rsync://rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/5S3osZGTOKPiVWZOiASKVpihINA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S3osZGTOKPiVWZOiASKVpihINA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:38:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3093 (0xc15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160701, serialNumber=E52DE8B1919338A3E255664E88048A5698A120D0
        Validity
            Not Before: Mar 24 18:38:43 2026 GMT
            Not After : Mar 31 18:38:43 2026 GMT
        Subject: CN=69c2da34-6542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:65:95:6a:35:6f:c4:1d:fc:b6:a2:83:1c:ab:
                    17:07:f3:93:71:2c:cf:95:a4:5c:15:84:b7:0f:03:
                    f2:cc:e1:ea:98:f8:59:dd:67:09:27:97:59:34:63:
                    d7:3a:c8:87:3c:fd:05:63:1f:94:54:5d:b4:af:09:
                    99:7b:0b:88:d3:a5:9a:f1:b6:cd:da:e6:ed:5b:40:
                    4a:53:4d:c2:5b:c0:1a:6f:c8:9b:0f:0a:87:32:e6:
                    3c:04:15:37:e0:30:b8:77:52:34:da:13:37:26:53:
                    1e:a4:d6:2b:ab:3c:97:70:ca:ad:58:e8:be:09:7b:
                    bf:56:e4:4a:cc:48:da:0e:73:14:9c:20:23:b1:f4:
                    ce:f0:32:81:ad:15:2b:14:7f:5c:dc:34:ac:e5:6d:
                    47:34:a0:05:f1:7d:0d:5c:0c:c9:91:0b:fb:76:be:
                    49:16:6f:9d:5a:0c:46:89:52:ae:2f:29:74:ad:3d:
                    cd:88:38:f9:12:75:c8:0b:f7:53:7b:17:30:c3:e2:
                    38:85:d4:a2:f0:1f:2e:54:b5:38:bc:ab:56:ba:68:
                    51:78:51:19:0c:a8:62:e8:a9:a8:f1:7e:c4:d1:4f:
                    17:09:8e:60:df:51:d4:10:6b:12:94:4c:36:d0:36:
                    2e:b4:5f:df:15:63:b6:4f:ae:a6:ba:bd:52:8b:c5:
                    43:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:6B:4B:BF:0E:5F:D7:D8:6C:D4:8F:A5:64:18:DB:85:F2:2C:19:46
            X509v3 Authority Key Identifier:
                keyid:E5:2D:E8:B1:91:93:38:A3:E2:55:66:4E:88:04:8A:56:98:A1:20:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/5S3osZGTOKPiVWZOiASKVpihINA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S3osZGTOKPiVWZOiASKVpihINA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/5S3osZGTOKPiVWZOiASKVpihINA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:8d:29:73:f1:45:08:42:29:01:0f:63:db:9a:75:4a:1d:81:
         3f:8a:e6:99:7d:30:62:47:38:51:e0:04:a9:0f:e2:cb:ae:7d:
         1f:aa:94:b8:a6:7d:e0:f6:d7:b5:2c:5a:1b:39:9c:38:45:27:
         56:22:17:7a:a9:33:af:b1:c2:0e:b8:72:67:ea:a1:03:b8:aa:
         8d:53:31:44:4f:4d:0f:ba:e8:34:31:1b:68:8a:c3:16:c1:d5:
         c1:37:41:22:84:e7:d5:85:dc:4d:ea:e9:87:33:e0:11:c5:7b:
         bc:56:78:49:59:da:4b:8d:11:3f:ff:1f:1a:0a:4b:2c:8f:54:
         b5:ff:6a:a1:14:a2:23:9b:39:21:df:78:e4:4f:33:4f:f0:27:
         0f:7b:53:65:1e:dd:95:de:53:7c:f8:fd:4d:9d:48:27:95:54:
         0c:c1:4f:39:77:f0:e3:d3:85:be:ce:8f:0a:9b:7c:a9:ce:54:
         21:32:4e:0a:89:e3:4c:bd:ec:8f:b3:80:60:14:43:04:b6:3b:
         18:b8:5d:5f:01:31:14:a5:f4:f1:a3:15:b6:19:78:50:1f:24:
         28:f6:73:ef:91:75:28:d1:7f:83:33:f0:c1:74:85:76:dc:a4:
         e5:bd:49:00:6f:ba:da:df:fd:ce:93:80:c5:b6:ad:3b:a4:8c:
         98:1e:ba:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:53:20 2026 by rpki-client