Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft
File:                     5G4YncjpEKGrvi42TdCBd1zkhGA.mft (raw, json)
Hash identifier:          3mWYvywn4C0gzunpIg0dcvNOnsoFMRsNnA1t2t9NvLA=
Subject key identifier:   85:2B:CD:BA:A1:2A:18:2C:5B:02:1F:92:4D:7B:B7:97:33:23:B1:BF
Authority key identifier: E4:6E:18:9D:C8:E9:10:A1:AB:BE:2E:36:4D:D0:81:77:5C:E4:84:60
Certificate issuer:       /CN=A9135B44/serialNumber=E46E189DC8E910A1ABBE2E364DD081775CE48460
Certificate serial:       02B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G4YncjpEKGrvi42TdCBd1zkhGA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft
Manifest number:          02B0
Signing time:             Fri 17 Apr 2026 01:22:25 +0000
Manifest this update:     Fri 17 Apr 2026 01:22:25 +0000
Manifest next update:     Fri 24 Apr 2026 01:22:25 +0000
Files and hashes:         1: 5G4YncjpEKGrvi42TdCBd1zkhGA.crl (hash: OsmSHn7uPLd0J6B83TsPGeHHInNzrJP0b0Uv+wQUZZs=)
                          2: D4B06AAA3A6E11ED8266115DC4F9AE02.roa (hash: +rxJJCYqUTC1n9Vg6VPME8EdAjnNnPLt5eoyIH6NFFo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.crl
                          rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G4YncjpEKGrvi42TdCBd1zkhGA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:22:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 696 (0x2b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135B44, serialNumber=E46E189DC8E910A1ABBE2E364DD081775CE48460
        Validity
            Not Before: Apr 17 01:22:25 2026 GMT
            Not After : Apr 24 01:22:25 2026 GMT
        Subject: CN=69e18b51-82a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ab:5e:26:39:82:c6:8a:5f:42:c3:4b:a1:71:
                    ed:0c:16:78:b2:d4:c1:8f:d2:cf:8e:6c:a4:71:96:
                    10:10:18:14:fd:54:24:7e:64:d9:ef:1d:75:2e:6e:
                    95:82:d8:fe:4c:3e:ab:24:6b:38:17:b2:43:17:93:
                    46:4c:f9:8d:0a:c2:b3:f3:9f:07:1f:e3:03:b2:d1:
                    39:5d:ef:b9:45:b7:98:4d:af:3b:b4:85:1e:53:98:
                    c1:13:f4:78:99:a7:cb:a1:23:75:4a:6c:d3:da:4a:
                    36:1e:ce:ed:1b:f5:fd:df:44:06:b2:f0:3c:42:28:
                    b7:57:36:83:08:3b:2d:ab:cc:99:0d:d7:12:b9:e8:
                    71:d9:28:0f:9a:96:70:da:af:d1:a9:d8:1c:72:f9:
                    2e:2b:4f:b5:49:d8:79:a5:d3:4c:6a:13:55:aa:f6:
                    fb:18:f6:b0:c4:1f:fb:fd:ca:e2:24:03:13:59:e9:
                    e9:15:f2:fd:9a:a7:25:5f:36:90:6f:22:24:d6:a9:
                    ea:c6:70:cf:74:36:fe:23:78:06:5b:ee:45:76:8d:
                    df:18:9a:b3:fb:3f:05:4c:bc:49:8e:eb:5a:00:9c:
                    9b:4b:b1:a2:41:09:11:25:db:95:e1:de:12:fc:e9:
                    c6:52:91:66:c7:f2:38:aa:c6:c5:ad:4f:ea:dc:b4:
                    d6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:2B:CD:BA:A1:2A:18:2C:5B:02:1F:92:4D:7B:B7:97:33:23:B1:BF
            X509v3 Authority Key Identifier:
                keyid:E4:6E:18:9D:C8:E9:10:A1:AB:BE:2E:36:4D:D0:81:77:5C:E4:84:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G4YncjpEKGrvi42TdCBd1zkhGA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:24:a2:7b:31:37:35:e3:65:d4:2a:22:ba:a6:7a:3a:07:b3:
         27:d4:9a:17:6d:ea:75:47:f9:d5:a9:2d:a0:00:77:35:c4:1c:
         ef:34:62:63:e1:a3:f8:e5:62:98:78:5f:94:53:29:16:6a:e0:
         ec:9f:a7:43:97:0d:d0:3b:07:f8:dd:73:8a:df:0e:05:6e:2b:
         e0:0e:c6:7e:07:0f:f2:e5:56:77:3f:96:a7:cf:00:7a:72:db:
         a7:0f:eb:2b:db:e7:c3:7d:c2:f9:f0:bf:25:30:75:f0:05:25:
         a0:32:d3:82:57:9b:2b:c2:9a:a6:d2:bb:98:99:dd:26:6b:e0:
         03:ea:6e:6f:66:f3:79:b1:bf:f9:6b:f2:ce:67:6e:5e:71:b6:
         8e:bf:cc:e1:ff:7c:fe:8e:02:32:bc:cb:5c:51:f3:8c:0d:c4:
         98:71:d3:ba:11:b0:07:f0:bd:f0:24:98:9e:e2:b4:44:39:14:
         08:52:eb:57:e1:72:95:c1:d1:50:c6:36:c1:94:5e:d9:4f:63:
         22:b8:ac:89:86:79:7e:85:9b:68:60:9d:e8:47:1b:b5:f5:ee:
         c9:26:89:2e:53:de:66:43:b6:5a:fd:4d:38:e3:8b:85:4f:e6:
         44:7d:b5:1d:ab:0f:af:f2:cf:14:b0:5d:62:c0:c4:92:2c:eb:
         3b:3e:55:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:53:57 2026 by rpki-client