Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912ACD6/56BFFE22001211F1978FFDC9406F56BC/5sF0BEUF4LBMHTBYk7ecuB_qun0.mft
File:                     5sF0BEUF4LBMHTBYk7ecuB_qun0.mft (raw, json)
Hash identifier:          H+UROqQ81xekw5AY2A7NmHqsMN06B8PDW1KCujisX0M=
Subject key identifier:   53:13:EE:3A:78:C8:2B:54:C2:14:04:A2:DA:AD:E5:A9:32:8D:95:AB
Authority key identifier: E6:C1:74:04:45:05:E0:B0:4C:1D:30:58:93:B7:9C:B8:1F:EA:BA:7D
Certificate issuer:       /CN=A912ACD6/serialNumber=E6C174044505E0B04C1D305893B79CB81FEABA7D
Certificate serial:       2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5sF0BEUF4LBMHTBYk7ecuB_qun0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912ACD6/56BFFE22001211F1978FFDC9406F56BC/5sF0BEUF4LBMHTBYk7ecuB_qun0.mft
Manifest number:          2A
Signing time:             Fri 17 Apr 2026 08:27:47 +0000
Manifest this update:     Fri 17 Apr 2026 08:27:46 +0000
Manifest next update:     Fri 24 Apr 2026 08:27:46 +0000
Files and hashes:         1: 5sF0BEUF4LBMHTBYk7ecuB_qun0.crl (hash: 4jioYk2h9lIJ5av/vvcIu0tN9Q0+SfyTllkf7EPWpls=)
                          2: 8A8A7DFE001211F1B63766CA406F56BC.roa (hash: yCqHIUEE3e4z0qNBb008BgOrOVMaTHnm3rYi25K/1gA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912ACD6/56BFFE22001211F1978FFDC9406F56BC/5sF0BEUF4LBMHTBYk7ecuB_qun0.crl
                          rsync://rpki.apnic.net/member_repository/A912ACD6/56BFFE22001211F1978FFDC9406F56BC/5sF0BEUF4LBMHTBYk7ecuB_qun0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5sF0BEUF4LBMHTBYk7ecuB_qun0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:27:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912ACD6, serialNumber=E6C174044505E0B04C1D305893B79CB81FEABA7D
        Validity
            Not Before: Apr 17 08:27:46 2026 GMT
            Not After : Apr 24 08:27:46 2026 GMT
        Subject: CN=69e1ef02-2e6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7b:83:d2:9e:e2:af:0b:87:2e:50:d1:f8:32:
                    86:a7:44:8b:a6:43:b7:5d:c4:90:54:6f:86:ab:72:
                    e9:be:87:08:55:b5:f8:94:46:60:43:29:a5:25:f7:
                    58:b3:1c:f7:86:99:0e:e7:de:9e:47:26:ad:11:3c:
                    37:be:17:65:40:82:e0:8d:d8:0b:10:aa:33:96:aa:
                    82:43:0f:28:b9:03:c3:f0:84:c0:44:66:14:e5:e9:
                    b3:16:85:a9:f4:c5:70:d3:93:af:c0:5c:b2:7e:2e:
                    07:94:0e:f2:39:4c:04:a1:77:ac:7b:16:e9:78:77:
                    26:35:6e:89:54:ac:4f:bb:1e:64:fd:e1:7e:da:e2:
                    bf:48:d8:d6:41:eb:68:ac:72:c3:da:89:01:3e:b4:
                    b6:fd:cc:66:32:cd:11:bd:df:b9:1d:cb:0a:b6:72:
                    28:e3:fc:13:46:58:42:61:a6:83:24:f2:05:75:be:
                    0d:f3:b6:a2:57:04:c4:d0:0e:16:3e:63:3a:b6:dc:
                    4b:1b:1a:8d:69:8a:e3:74:a2:83:64:68:ed:c3:5b:
                    3f:c9:65:89:49:d4:9c:17:ba:0c:48:9d:be:48:92:
                    2f:e8:89:b3:45:32:55:8e:50:96:38:af:21:3d:9d:
                    da:01:2b:21:16:e1:02:3b:78:81:01:19:60:08:f6:
                    3f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:13:EE:3A:78:C8:2B:54:C2:14:04:A2:DA:AD:E5:A9:32:8D:95:AB
            X509v3 Authority Key Identifier:
                keyid:E6:C1:74:04:45:05:E0:B0:4C:1D:30:58:93:B7:9C:B8:1F:EA:BA:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912ACD6/56BFFE22001211F1978FFDC9406F56BC/5sF0BEUF4LBMHTBYk7ecuB_qun0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5sF0BEUF4LBMHTBYk7ecuB_qun0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912ACD6/56BFFE22001211F1978FFDC9406F56BC/5sF0BEUF4LBMHTBYk7ecuB_qun0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:be:ce:93:25:f9:71:80:55:a4:39:c2:ed:48:ba:00:6d:9c:
         69:c8:12:18:d5:19:18:87:6b:4a:74:e9:24:f1:31:a6:08:e8:
         d6:79:b3:55:79:89:be:66:b5:89:c0:c5:0c:b1:e1:19:1f:88:
         47:ae:63:32:66:19:b9:96:19:e6:18:6b:e1:09:c3:f2:58:55:
         f0:61:ce:34:ea:df:23:12:9a:ec:bb:d9:da:c6:27:c7:50:2d:
         df:39:25:0f:a4:7d:39:70:df:d0:e4:ae:12:ec:ba:a9:e5:3e:
         64:8f:3c:1d:89:9f:c8:d4:57:ca:49:81:e8:2f:6d:4b:49:ff:
         4f:b9:67:b0:18:66:c0:59:ea:9c:2a:36:8b:29:00:88:b9:8b:
         f9:65:25:b5:16:bc:ff:c3:98:33:01:d4:26:e2:7c:4e:71:a7:
         ad:99:fe:e9:de:48:df:69:dc:d8:b4:b1:b8:b5:be:a8:1e:05:
         17:77:5f:24:73:3e:1a:cf:b2:07:02:25:eb:49:9c:b3:ba:bf:
         c1:48:1c:dc:13:7a:71:1f:2e:cf:57:65:19:19:ef:86:6c:1a:
         1f:60:af:32:a3:15:6e:26:44:f6:e2:68:93:9e:1b:92:d5:98:
         5f:a4:0f:e6:af:d9:11:a8:b8:e8:2c:b9:f7:ff:2d:9c:3f:a8:
         5a:99:3b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:42:35 2026 by rpki-client