Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.mft
File:                     P5mfuMEae4Z_G_n5nKHCaglVK34.mft (raw, json)
Hash identifier:          hLf+B+CX4C3BUXJIiBQr1jeL5U/dtdWzW12xoY3gIvQ=
Subject key identifier:   6F:55:E3:10:F5:7F:D9:D6:B2:BB:FA:CD:62:4F:74:AF:F1:C4:EB:E9
Authority key identifier: 3F:99:9F:B8:C1:1A:7B:86:7F:1B:F9:F9:9C:A1:C2:6A:09:55:2B:7E
Certificate issuer:       /CN=A917429C/serialNumber=3F999FB8C11A7B867F1BF9F99CA1C26A09552B7E
Certificate serial:       01FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5mfuMEae4Z_G_n5nKHCaglVK34.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.mft
Manifest number:          01F7
Signing time:             Fri 27 Mar 2026 02:44:48 +0000
Manifest this update:     Fri 27 Mar 2026 02:44:47 +0000
Manifest next update:     Fri 03 Apr 2026 02:44:47 +0000
Files and hashes:         1: P5mfuMEae4Z_G_n5nKHCaglVK34.crl (hash: 8tCjHAsaPoT8KeIT9kyLuAiFMoKT6bYWYhKx/7M/N8Q=)
                          2: D41F53D48DC011EEB2B3600BC4F9AE02.roa (hash: +o/nFF9YcRFxpnVGXo6IbySuNz1oT8+gBrDzhbaViHc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.crl
                          rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5mfuMEae4Z_G_n5nKHCaglVK34.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 02:44:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 508 (0x1fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917429C, serialNumber=3F999FB8C11A7B867F1BF9F99CA1C26A09552B7E
        Validity
            Not Before: Mar 27 02:44:47 2026 GMT
            Not After : Apr  3 02:44:47 2026 GMT
        Subject: CN=69c5ef20-273c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:96:b6:8e:db:0a:6c:cc:e0:12:e6:d3:04:4c:
                    1e:f7:8b:f8:53:91:85:97:f6:03:08:8c:70:2e:71:
                    7e:84:43:ca:09:8f:22:63:5c:3f:b2:3e:f3:eb:b9:
                    74:67:04:91:f0:36:35:e5:85:f5:69:50:42:a1:7d:
                    ab:a7:3c:87:c0:a1:6d:8d:49:80:a0:da:50:e0:47:
                    56:f6:d3:66:6d:d9:72:76:67:8e:96:a4:04:55:ef:
                    b4:fc:70:c3:31:89:20:85:b3:07:00:d8:9f:3d:54:
                    19:24:6c:ef:e2:f9:07:a0:01:94:6e:26:7c:13:70:
                    df:82:ba:4c:0c:6a:68:73:c6:10:13:14:74:84:65:
                    eb:be:42:35:45:cc:9f:a1:db:80:d7:bb:00:4e:4c:
                    f6:df:05:32:7d:45:ab:e6:ea:14:02:4b:98:50:ed:
                    aa:b6:ec:ed:a9:cb:a5:c4:d9:06:4c:b2:2e:9d:f0:
                    a0:ec:1f:b1:d0:4e:db:5a:08:64:ba:0a:41:65:75:
                    01:29:c8:72:7a:5c:49:46:d9:dd:b2:01:d1:4d:5e:
                    19:24:8a:66:e1:ba:b3:fe:b2:a5:c6:2c:70:e8:13:
                    d6:34:4c:e7:b7:b3:1e:3d:5a:13:f1:8c:d7:b2:26:
                    0e:b4:ca:77:89:2b:55:b9:31:07:d0:9f:5b:ea:f6:
                    ce:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:55:E3:10:F5:7F:D9:D6:B2:BB:FA:CD:62:4F:74:AF:F1:C4:EB:E9
            X509v3 Authority Key Identifier:
                keyid:3F:99:9F:B8:C1:1A:7B:86:7F:1B:F9:F9:9C:A1:C2:6A:09:55:2B:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5mfuMEae4Z_G_n5nKHCaglVK34.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:50:dc:cf:3f:2a:b0:ae:00:b7:5c:94:81:18:aa:c1:03:79:
         5b:fe:7e:42:d7:e2:f5:49:2c:be:f9:87:4e:80:a3:e7:ad:f9:
         93:43:75:15:8e:c0:46:a9:a1:8d:d6:67:6a:f7:58:83:46:3f:
         fa:5c:1f:81:f0:d7:41:7e:b8:d0:e4:e4:26:a3:f0:13:77:1d:
         dc:07:fb:37:5d:66:1d:de:f6:de:d8:b6:28:0f:25:71:1a:ab:
         c6:63:0d:27:cb:23:83:5d:6c:13:a9:77:e3:ae:3a:02:c8:d3:
         6d:55:9e:9c:16:dd:c5:7c:02:85:9a:88:7e:8e:63:a4:82:5f:
         8c:b3:ae:d9:1e:ec:bc:75:8f:e6:f4:49:82:fc:1d:95:b8:6d:
         09:12:fb:f1:80:d8:6b:af:78:23:f5:5e:0b:2e:4a:ad:7b:05:
         17:6c:f7:ab:f1:45:ec:4a:81:d7:d1:58:43:fe:d5:c5:85:10:
         e6:b9:09:76:6f:82:a2:f5:82:9f:ff:de:e3:94:b6:a4:aa:60:
         4e:5f:69:64:f0:a9:40:78:13:c7:0e:dc:93:f5:9e:ee:d6:c9:
         bf:cd:ff:a2:6e:20:df:c8:1b:62:ef:7a:37:3f:1e:ca:1f:fc:
         8a:70:8e:22:28:53:6a:2a:1f:97:2c:9c:b1:00:3f:06:1f:ac:
         e4:53:b4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:20:39 2026 by rpki-client