Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft
File:                     M5P50HCy5wlJrKKqzI5l6JDnQJk.mft (raw, json)
Hash identifier:          RyN4wLBQhZZKviEPFvKNm6rjRXW5i84NKcxHSKzfZA0=
Subject key identifier:   1A:0C:29:8E:9C:74:8E:F7:C1:82:43:86:84:31:1E:E9:C3:8F:AD:44
Authority key identifier: 33:93:F9:D0:70:B2:E7:09:49:AC:A2:AA:CC:8E:65:E8:90:E7:40:99
Certificate issuer:       /CN=A916DB72/serialNumber=3393F9D070B2E70949ACA2AACC8E65E890E74099
Certificate serial:       0157
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft
Manifest number:          014A
Signing time:             Wed 25 Mar 2026 04:24:31 +0000
Manifest this update:     Wed 25 Mar 2026 04:24:31 +0000
Manifest next update:     Wed 01 Apr 2026 04:24:31 +0000
Files and hashes:         1: M5P50HCy5wlJrKKqzI5l6JDnQJk.crl (hash: M/sUSj9IHWRdktUHGJEYl+utAAOJgWuZahJEliUkWYA=)
                          2: 81C87DDE6C8311EFB20D5276C4F9AE02.roa (hash: npEv0GL7n1EnWpzfcHXymx9nG0SCeEVvS7H50YyGOdA=)
                          3: 92F925C231F511EFA1744F0EC4F9AE02.roa (hash: MdsgxtSVf/cKPbVHpzAfXZzC0tIBREHraRN4Ts8algE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.crl
                          rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:24:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 343 (0x157)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DB72, serialNumber=3393F9D070B2E70949ACA2AACC8E65E890E74099
        Validity
            Not Before: Mar 25 04:24:31 2026 GMT
            Not After : Apr  1 04:24:31 2026 GMT
        Subject: CN=69c3637f-1927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3f:b0:3c:f9:7e:29:8d:89:d3:8d:5b:63:ce:
                    b4:3a:4b:8d:3b:fd:41:12:c9:29:c1:8a:5a:e4:57:
                    78:38:35:39:f0:e0:6a:32:bd:31:4e:99:7f:29:a0:
                    70:2f:d3:39:d9:cb:76:20:9d:53:c7:3d:bb:5d:68:
                    1d:81:1d:d8:90:89:ea:c6:07:25:a2:e1:5f:de:2c:
                    a6:c9:15:c3:4a:2f:d7:7e:6c:f1:2d:41:1a:51:6f:
                    92:cc:8a:3a:43:57:94:51:66:8b:ad:8c:ed:82:39:
                    80:db:a9:fc:7a:8f:dc:50:ea:cf:bd:e9:ff:53:d7:
                    2a:45:b5:c0:7b:22:6b:73:36:df:9b:6a:47:aa:58:
                    8c:43:5c:76:1a:2c:23:11:81:15:58:84:d3:87:9c:
                    ce:a9:3a:8d:c2:27:5c:fc:f4:88:f6:0f:cf:54:21:
                    06:48:9b:d7:c6:20:25:d7:82:cf:86:5b:a5:8f:db:
                    97:fd:cb:19:b3:e1:9c:d6:64:11:8a:d5:f8:fa:cf:
                    c4:56:f0:bf:22:d3:48:37:32:41:29:21:50:ff:3b:
                    5b:ea:71:aa:07:ba:92:22:40:08:48:3b:86:57:35:
                    80:62:8f:59:7f:57:d6:b5:3d:b5:78:15:6f:5e:0a:
                    6a:6c:1a:4d:28:3d:a0:e1:a5:89:1a:5e:c9:92:27:
                    e7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:0C:29:8E:9C:74:8E:F7:C1:82:43:86:84:31:1E:E9:C3:8F:AD:44
            X509v3 Authority Key Identifier:
                keyid:33:93:F9:D0:70:B2:E7:09:49:AC:A2:AA:CC:8E:65:E8:90:E7:40:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:6b:b3:c8:73:18:8e:d4:4b:ad:73:d1:3d:cd:af:6a:14:d7:
         70:46:98:17:e1:06:98:24:44:2d:71:66:ee:c4:f8:a0:2d:af:
         bf:bc:43:c7:6d:ee:e4:fd:70:89:45:85:33:27:69:27:bb:8a:
         c1:25:b2:2f:34:97:a5:2a:5c:19:90:41:48:67:d8:1e:7b:c6:
         5b:6d:29:6c:92:4c:38:f4:78:53:82:8d:c2:08:3d:1b:33:42:
         d4:f0:91:92:1b:48:04:ae:21:51:97:dc:2b:03:b3:23:bb:77:
         e1:79:60:b8:96:ad:b9:07:bf:cc:45:76:10:6b:54:e1:9e:c8:
         f8:4f:5c:9d:90:05:45:80:69:e3:50:42:af:a0:1b:11:23:a6:
         04:84:c4:17:79:d0:15:b3:4c:5b:0b:43:a0:a0:fb:47:a7:1d:
         dd:df:cc:51:79:15:a1:ce:ba:32:29:03:56:35:5d:7b:a9:cd:
         53:c4:b9:b6:3f:75:48:51:11:2c:37:62:8d:ce:34:a6:ce:75:
         ea:2a:85:7f:3c:f0:59:a0:e9:4b:1b:a6:6c:05:d7:c7:e7:d1:
         82:87:7e:95:b9:f5:48:eb:08:08:7e:7e:20:24:e2:25:1d:70:
         2b:80:32:85:32:a1:a7:ac:ae:c1:62:cf:fb:d7:4a:8a:d2:45:
         6f:10:a7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:37:16 2026 by rpki-client