Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft
File:                     5jLTjFoywhfG7nHVLe-fOMoWbFE.mft (raw, json)
Hash identifier:          +tVulR36gJajJF8Qn5X5YGxQj+uzDGKZ/KFuiw9QiW4=
Subject key identifier:   F5:58:93:B4:70:39:9F:7B:D5:2C:B0:78:D9:CA:21:DF:3E:73:6C:FD
Authority key identifier: E6:32:D3:8C:5A:32:C2:17:C6:EE:71:D5:2D:EF:9F:38:CA:16:6C:51
Certificate issuer:       /CN=A911486F/serialNumber=E632D38C5A32C217C6EE71D52DEF9F38CA166C51
Certificate serial:       02AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jLTjFoywhfG7nHVLe-fOMoWbFE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft
Manifest number:          0289
Signing time:             Fri 17 Apr 2026 01:50:13 +0000
Manifest this update:     Fri 17 Apr 2026 01:50:12 +0000
Manifest next update:     Fri 24 Apr 2026 01:50:12 +0000
Files and hashes:         1: 5jLTjFoywhfG7nHVLe-fOMoWbFE.crl (hash: C17HUT/2G+oW/tZVqsM5Xr26CZqoDhjuddFow3obTrs=)
                          2: 32D8E190D0CB11EEAB1CAF34C4F9AE02.roa (hash: FOd1W7zMCod1PsCz4NDcAAA6iXQg7qF4eo6XlN29wRY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.crl
                          rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jLTjFoywhfG7nHVLe-fOMoWbFE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 684 (0x2ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911486F, serialNumber=E632D38C5A32C217C6EE71D52DEF9F38CA166C51
        Validity
            Not Before: Apr 17 01:50:12 2026 GMT
            Not After : Apr 24 01:50:12 2026 GMT
        Subject: CN=69e191d5-c870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4b:e9:4f:91:b5:64:3a:31:fc:2a:11:2d:89:
                    04:c9:72:72:25:45:cd:3e:d3:24:22:8f:a3:62:c8:
                    8e:e1:61:12:40:27:3f:2d:f6:7b:67:fa:d5:85:5f:
                    02:2e:0e:1b:76:26:92:2a:5f:5d:96:e4:31:98:63:
                    a5:a7:fa:1c:4d:6c:9e:23:f5:8c:8a:95:3c:7a:9f:
                    b4:78:cb:c5:ff:8e:c4:36:48:77:e0:d3:8a:1b:ac:
                    3b:36:89:9c:c9:72:fe:02:de:30:a6:5a:28:08:34:
                    d0:90:49:3c:eb:96:19:a9:73:58:68:98:c9:bd:ce:
                    e6:69:8f:6c:db:69:a7:8b:bc:0c:44:56:d8:af:23:
                    b2:d5:73:b6:69:8b:7c:1d:90:e9:2e:fd:01:e3:c5:
                    ef:33:0c:2b:6e:19:9a:9f:07:a8:f0:e3:99:66:c5:
                    55:72:26:b4:c1:2f:df:83:93:8b:e1:a0:65:15:78:
                    37:e8:38:10:b5:30:33:80:32:c4:79:bd:55:d8:38:
                    bf:67:03:cd:79:82:16:cc:2a:80:3d:1e:00:58:5f:
                    91:2f:cd:ca:4c:cd:34:c9:c1:10:ec:08:8a:98:6d:
                    68:9a:c2:6b:c4:74:d5:17:a9:67:54:9d:92:b6:ff:
                    7e:b5:3d:57:3f:e3:aa:48:a4:c2:e8:a2:d0:ad:49:
                    16:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:58:93:B4:70:39:9F:7B:D5:2C:B0:78:D9:CA:21:DF:3E:73:6C:FD
            X509v3 Authority Key Identifier:
                keyid:E6:32:D3:8C:5A:32:C2:17:C6:EE:71:D5:2D:EF:9F:38:CA:16:6C:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jLTjFoywhfG7nHVLe-fOMoWbFE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:ef:97:41:1a:3c:e7:eb:7a:08:91:d6:c7:cf:26:3f:73:44:
         16:20:fc:ed:75:e5:35:13:73:a3:45:a6:67:4f:82:09:14:9e:
         f4:bf:69:25:cd:3f:e3:ca:01:c3:95:73:78:38:5a:57:71:2b:
         1c:9b:14:3a:fb:b5:f1:f4:ce:69:9a:75:a2:3e:8e:55:b8:6a:
         e5:53:2a:da:5c:84:8b:83:93:4a:71:5d:b2:72:19:8d:20:92:
         e6:14:b2:33:63:61:c3:50:17:09:fe:02:98:8e:9f:63:43:84:
         49:33:d1:cb:4d:78:5c:81:3c:67:c2:47:4f:6b:31:04:d3:7e:
         28:cb:89:e2:5e:51:f3:c0:12:e1:d7:4a:02:7c:28:d4:66:19:
         f8:35:51:09:de:11:53:ec:2a:b7:2d:38:f2:ff:da:27:4e:78:
         bb:58:74:05:4c:b0:31:7b:44:bc:3e:3c:a2:de:61:18:24:6e:
         61:0b:26:c0:7f:ea:9f:f1:83:37:85:70:24:48:d6:73:64:96:
         aa:4f:07:1e:47:8f:f0:fc:d1:81:88:29:75:f1:28:4f:95:e2:
         be:10:1d:03:77:77:0c:dd:e5:00:bb:fc:5f:ed:0c:b3:f1:ce:
         28:7a:75:f5:e7:da:7e:68:f7:24:ea:4a:4f:d2:73:7a:c3:1a:
         0e:23:fc:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:25:12 2026 by rpki-client