Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft
File:                     vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft (raw, json)
Hash identifier:          Lfmy/mlygjhBX9zQYDg+U9DwRy92MP3Atu6dIc6KZek=
Subject key identifier:   75:63:5A:FB:7F:19:23:88:56:7F:35:0B:1A:50:C1:E6:D7:DE:5E:9C
Authority key identifier: BD:1E:7E:64:1F:FD:96:D5:74:61:55:FC:42:1B:17:DD:C1:AA:77:62
Certificate issuer:       /CN=A9186B80/serialNumber=BD1E7E641FFD96D5746155FC421B17DDC1AA7762
Certificate serial:       05A5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft
Manifest number:          0595
Signing time:             Tue 24 Mar 2026 22:55:25 +0000
Manifest this update:     Tue 24 Mar 2026 22:55:25 +0000
Manifest next update:     Tue 31 Mar 2026 22:55:25 +0000
Files and hashes:         1: vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl (hash: rQsRNvI2/2ze7LjuNQg+rkiXcDYH4B9fT7peOI1xVnA=)
                          2: 37FE553E5CAB11F08FCD0029C4F9AE02.roa (hash: 7vsEdUjO68wSnI82MSqqLNl6M5rdXWQoFEtu17LQhaE=)
                          3: 9B741CFE0C3411EDB8619843C4F9AE02.roa (hash: NVoTvNqptu8+2EEc4xwQ1XFeD946dIqVcf+QNOuWx54=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl
                          rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:55:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1445 (0x5a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186B80, serialNumber=BD1E7E641FFD96D5746155FC421B17DDC1AA7762
        Validity
            Not Before: Mar 24 22:55:25 2026 GMT
            Not After : Mar 31 22:55:25 2026 GMT
        Subject: CN=69c3165d-a104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5a:ab:e6:07:c1:b8:88:da:44:09:44:c3:f5:
                    35:e1:60:a0:70:1a:4c:2e:ac:bc:75:0b:d4:3f:38:
                    73:61:c4:27:c8:24:32:4b:f1:f1:43:87:33:57:b2:
                    ba:42:d4:db:89:fa:4c:2c:b3:98:6f:5d:09:a6:85:
                    12:a5:67:78:01:db:da:da:86:5a:f5:cd:62:1e:19:
                    39:19:d1:94:c5:91:09:e3:7d:bd:72:c4:b3:80:cb:
                    ee:81:ab:ff:54:a2:0c:aa:7d:4f:fa:47:5e:65:59:
                    73:7c:c8:41:a8:fe:1e:b6:17:5a:92:fd:96:e0:31:
                    cd:ee:07:eb:b5:3a:49:75:4a:b5:c5:79:1f:6b:a8:
                    a2:95:c8:df:41:01:1f:54:b3:ee:6a:2c:fa:ac:7a:
                    a9:82:8d:18:9e:ab:96:9f:af:c6:34:27:25:c1:a0:
                    bc:c1:11:01:21:b4:02:2a:e3:5e:a3:d7:df:84:e5:
                    71:12:26:f6:42:22:36:ad:db:3d:75:11:0e:c3:b7:
                    4a:7a:60:d3:6c:2e:a5:cd:0a:cc:8d:10:9a:66:a1:
                    0f:43:fd:18:86:d0:25:0a:1f:54:ce:db:dd:43:2e:
                    0b:63:6b:d9:91:40:6d:09:e6:0c:ac:8b:ae:b6:b9:
                    95:51:88:e0:a6:3f:06:a3:e4:20:75:aa:71:ea:ba:
                    64:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:63:5A:FB:7F:19:23:88:56:7F:35:0B:1A:50:C1:E6:D7:DE:5E:9C
            X509v3 Authority Key Identifier:
                keyid:BD:1E:7E:64:1F:FD:96:D5:74:61:55:FC:42:1B:17:DD:C1:AA:77:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:e4:68:e7:7d:06:0c:87:c5:8b:1b:91:e5:08:ca:99:65:3b:
         74:f5:f9:11:e1:3b:c3:9b:84:3a:21:2d:2d:d8:1c:58:3b:74:
         2d:e8:35:50:1e:06:d9:56:a3:39:b9:f4:3a:6d:6f:63:7d:53:
         b1:69:84:6a:35:41:e6:52:89:1e:e1:ba:98:7b:ec:4f:58:a3:
         90:59:65:18:08:c4:3f:87:ea:c9:af:40:4e:9c:be:c2:25:cd:
         4c:99:5c:38:43:01:f0:31:61:f7:1b:dd:58:89:67:4e:43:8b:
         25:3a:b9:ac:b1:5b:3b:93:ac:6a:57:14:30:a2:a1:58:5c:5c:
         f7:ff:76:06:58:aa:ef:20:ec:02:b8:80:dc:8c:b3:43:81:bf:
         ec:b1:cf:f5:fc:15:3b:b0:e1:bb:67:ce:0b:a6:74:c6:e0:8e:
         c3:71:32:e3:37:3b:c1:9c:f7:b8:87:38:5b:df:43:8a:16:87:
         d6:7b:37:a5:42:e1:00:af:14:61:dc:13:92:c8:cd:c4:35:21:
         6f:bc:53:57:a2:2c:b5:2f:0b:88:cc:c2:8f:5b:23:c5:d6:cd:
         1d:85:95:e6:a3:7e:e0:1b:c3:6c:c7:c7:9c:8d:da:a4:0b:25:
         25:d4:46:6e:08:7f:5d:2f:c3:98:ef:14:d6:c0:12:38:aa:e8:
         cc:10:eb:bc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODZCODAxMTAvBgNVBAUTKEJEMUU3RTY0MUZGRDk2RDU3NDYxNTVGQzQyMUIxN0RE
QzFBQTc3NjIwHhcNMjYwMzI0MjI1NTI1WhcNMjYwMzMxMjI1NTI1WjAYMRYwFAYD
VQQDEw02OWMzMTY1ZC1hMTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnVqr5gfBuIjaRAlEw/U14WCgcBpMLqy8dQvUPzhzYcQnyCQyS/HxQ4czV7K6
QtTbifpMLLOYb10JpoUSpWd4Adva2oZa9c1iHhk5GdGUxZEJ4329csSzgMvugav/
VKIMqn1P+kdeZVlzfMhBqP4ethdakv2W4DHN7gfrtTpJdUq1xXkfa6iilcjfQQEf
VLPuaiz6rHqpgo0YnquWn6/GNCclwaC8wREBIbQCKuNeo9ffhOVxEib2QiI2rds9
dREOw7dKemDTbC6lzQrMjRCaZqEPQ/0YhtAlCh9UztvdQy4LY2vZkUBtCeYMrIuu
trmVUYjgpj8Go+Qgdapx6rpkfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHVjWvt/
GSOIVn81CxpQwebX3l6cMB8GA1UdIwQYMBaAFL0efmQf/ZbVdGFV/EIbF93Bqndi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkI4MC9BRTZBQTFCNDEy
M0IxMUVDOEExMzVGNDJDNEY5QUUwMi92UjUtWkJfOWx0VjBZVlg4UWhzWDNjR3Fk
MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3ZSNS1aQl85bHRWMFlWWDhRaHNYM2NHcWQySS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NkI4MC9BRTZBQTFCNDEyM0IxMUVDOEExMzVGNDJDNEY5QUUwMi92UjUtWkJfOWx0
VjBZVlg4UWhzWDNjR3FkMkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAquRo530GDIfFixuR5QjKmWU7dPX5EeE7w5uEOiEtLdgcWDt0Leg1UB4G2Vaj
Obn0Om1vY31TsWmEajVB5lKJHuG6mHvsT1ijkFllGAjEP4fqya9ATpy+wiXNTJlc
OEMB8DFh9xvdWIlnTkOLJTq5rLFbO5OsalcUMKKhWFxc9/92Bliq7yDsAriA3Iyz
Q4G/7LHP9fwVO7Dhu2fOC6Z0xuCOw3Ey4zc7wZz3uIc4W99DihaH1ns3pULhAK8U
YdwTksjNxDUhb7xTV6IstS8LiMzCj1sjxdbNHYWV5qN+4BvDbMfHnI3apAslJdRG
bgh/XS/DmO8U1sASOKrozBDrvA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:20:20 2026 by rpki-client