Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.mft
File:                     _5I0f11UaIEf0lOki_xp_lcKpFA.mft (raw, json)
Hash identifier:          oUd7dOTCC3rSISBmvpxUnSGkIA7U/TTRkAkIxJq/zgU=
Subject key identifier:   F3:F3:8B:61:30:A1:8B:76:D9:67:35:48:26:98:41:D8:8C:C1:73:69
Authority key identifier: FF:92:34:7F:5D:54:68:81:1F:D2:53:A4:8B:FC:69:FE:57:0A:A4:50
Certificate issuer:       /CN=A9191769/serialNumber=FF92347F5D5468811FD253A48BFC69FE570AA450
Certificate serial:       011F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5I0f11UaIEf0lOki_xp_lcKpFA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.mft
Manifest number:          011C
Signing time:             Wed 25 Mar 2026 04:59:22 +0000
Manifest this update:     Wed 25 Mar 2026 04:59:21 +0000
Manifest next update:     Wed 01 Apr 2026 04:59:21 +0000
Files and hashes:         1: _5I0f11UaIEf0lOki_xp_lcKpFA.crl (hash: +JtuWK4fLo2J9xs4DhcENkdiO4UsqinLBKWEmBGpQBk=)
                          2: 4D36C07677C311EF84D38A3BC4F9AE02.roa (hash: UonUgi37eGK5+UZSgpaI5VcXY/NpGaUyQWHx23St90A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.crl
                          rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5I0f11UaIEf0lOki_xp_lcKpFA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:59:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 287 (0x11f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191769, serialNumber=FF92347F5D5468811FD253A48BFC69FE570AA450
        Validity
            Not Before: Mar 25 04:59:21 2026 GMT
            Not After : Apr  1 04:59:21 2026 GMT
        Subject: CN=69c36baa-65f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:11:4a:2c:7b:bd:c6:d6:89:f7:fe:fd:1e:e9:
                    72:83:2e:7f:d5:35:b3:b8:ff:c8:51:59:62:6d:35:
                    de:ed:66:93:f3:7f:da:97:58:91:76:cb:1b:88:7b:
                    50:4d:09:46:18:3f:3c:d2:47:fb:05:da:2a:53:26:
                    db:16:c0:cc:50:bd:44:b1:b1:05:a1:66:39:6e:22:
                    43:d2:64:02:06:09:14:69:22:6e:53:34:b7:0d:29:
                    c0:3a:4d:02:b1:ef:03:81:0d:b1:8b:34:91:46:4c:
                    f4:ef:a7:4d:13:79:40:c3:24:3b:0d:bb:64:0d:7a:
                    4a:1a:c2:17:a0:f0:60:70:d6:ae:fe:b0:6d:10:a9:
                    f8:c4:44:de:fa:8a:0c:0b:ef:c7:8f:53:5b:31:8d:
                    2c:41:97:7e:a0:2a:f5:ca:a8:fd:25:ac:52:13:ce:
                    c1:44:71:41:42:41:92:83:d2:7b:0c:f3:8d:46:34:
                    c2:9a:bb:8f:9e:5d:1f:ea:df:28:1f:c0:80:3d:7b:
                    ed:77:19:fd:30:15:2b:d7:44:59:9d:72:0e:58:0b:
                    ad:b9:20:73:a5:38:4d:e8:42:43:7e:36:23:d8:ba:
                    aa:3e:6a:98:a8:b7:02:3f:4d:45:dd:d3:20:12:4e:
                    53:9c:10:ab:e1:e1:c3:21:42:7b:81:3b:b9:3c:23:
                    9a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F3:8B:61:30:A1:8B:76:D9:67:35:48:26:98:41:D8:8C:C1:73:69
            X509v3 Authority Key Identifier:
                keyid:FF:92:34:7F:5D:54:68:81:1F:D2:53:A4:8B:FC:69:FE:57:0A:A4:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5I0f11UaIEf0lOki_xp_lcKpFA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:9f:71:57:6b:01:f0:37:81:e1:94:4f:85:d3:a4:f1:46:cf:
         9e:a0:2b:2f:b7:16:e3:51:7a:a0:6d:5d:81:46:f1:b4:d0:75:
         10:6b:85:bc:a0:c5:75:f9:45:44:f5:a5:59:b2:04:66:7f:10:
         6a:ad:02:42:e5:42:98:95:28:1d:95:7a:b9:1c:74:08:92:00:
         cb:b1:42:1b:11:a4:f4:6b:85:a4:f1:29:cd:e8:b0:7b:16:c3:
         ac:51:37:d3:00:1e:05:bd:92:8c:50:e0:81:bc:ee:fb:25:b2:
         00:c2:5c:30:1d:c9:eb:9b:87:51:f6:75:a7:88:47:85:8d:7a:
         47:10:fb:8d:d6:05:42:85:dd:ef:47:65:e3:ca:47:1a:36:b8:
         98:32:01:38:a0:4f:9b:56:64:3d:57:01:72:5e:28:b7:05:55:
         6d:bb:59:cc:16:f3:4b:9d:49:fe:1c:51:32:9e:2c:68:09:8e:
         e2:7a:0b:76:d7:a9:19:86:ab:cb:1d:83:bc:cf:9b:49:75:7e:
         2d:7a:ec:1e:8b:89:75:cd:1e:05:2c:06:3e:57:be:df:28:2c:
         20:df:b8:26:64:3a:64:93:9a:48:18:83:22:1e:33:28:dd:17:
         6f:e5:3f:91:9d:ec:99:c1:5a:de:9b:fd:eb:a9:b3:d3:2c:be:
         18:8c:4e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:26:28 2026 by rpki-client