Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft
File:                     5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft (raw, json)
Hash identifier:          FiCfEVqXX5j0IvA1x/YoEXxFBrkIwA+kiGURo0Vtx1A=
Subject key identifier:   A4:ED:67:81:21:D4:CA:F1:90:8F:D9:1B:C2:4C:79:F3:62:7D:10:41
Authority key identifier: E6:1B:EC:13:92:86:32:83:DC:99:E2:FF:93:15:75:A3:18:1C:28:18
Certificate issuer:       /CN=A91367E0/serialNumber=E61BEC1392863283DC99E2FF931575A3181C2818
Certificate serial:       01DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft
Manifest number:          01D7
Signing time:             Sun 01 Mar 2026 04:17:26 +0000
Manifest this update:     Sun 01 Mar 2026 04:17:25 +0000
Manifest next update:     Sun 08 Mar 2026 04:17:25 +0000
Files and hashes:         1: 5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl (hash: oMvdKDSynnjqPnI9E4ODB7uSGvpRp/YkvnJIz+OUa2Y=)
                          2: 444EB35A459D11EEA8758641C4F9AE02.roa (hash: HxWrs2XE/yxdbhgHCsYXC3cP1Nukb/SzqytOwhYHUgs=)
                          3: 57F3935045A011EEA9A5215EC4F9AE02.roa (hash: zhWHaUx74UFv//O6sI95zwvuuZgRyOVSokAfykLA4G4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl
                          rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 04:17:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 477 (0x1dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91367E0, serialNumber=E61BEC1392863283DC99E2FF931575A3181C2818
        Validity
            Not Before: Mar  1 04:17:25 2026 GMT
            Not After : Mar  8 04:17:25 2026 GMT
        Subject: CN=69a3bdd6-08e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f4:16:bf:e4:c1:9c:e3:c3:cf:d9:16:32:cb:
                    d8:e0:2d:9c:ce:59:30:bf:74:bf:27:1f:69:8a:a4:
                    0a:b9:83:e3:b4:97:be:9f:52:29:1b:9d:c2:49:bb:
                    6a:b1:c9:a8:24:d1:c8:e1:91:df:f3:e2:61:ff:7a:
                    b4:9b:55:1d:81:ba:03:f4:d3:be:95:b1:ed:ff:26:
                    03:a1:8e:f7:0a:e5:40:de:d4:87:2d:45:d9:22:5f:
                    1c:31:a5:bf:74:0e:e1:e6:29:42:5a:6e:1e:ce:37:
                    82:97:96:a1:1b:4b:fe:61:a8:37:19:f2:e6:fa:41:
                    8e:0f:1f:76:f5:f5:48:0a:85:24:a0:86:00:3c:6f:
                    5c:79:64:5e:6d:03:16:ce:12:fa:1b:d7:d7:02:3e:
                    94:65:e3:45:77:a0:8e:2b:c5:c0:aa:fb:73:6e:92:
                    9e:05:48:a4:a2:dd:9c:d5:e2:e2:71:d9:a2:4a:4a:
                    5a:f7:a3:0c:59:46:30:46:3b:68:02:fa:5c:54:18:
                    4b:3a:e0:83:d5:d4:80:bc:4c:cc:6c:c9:b4:bf:76:
                    d8:60:1c:11:6d:2c:70:ca:a9:66:0d:2f:f7:2b:d7:
                    6c:6c:4f:92:08:3b:a3:e9:e2:73:05:57:b5:29:fa:
                    4f:d7:53:e5:ef:62:2f:94:47:99:f4:b6:6d:c2:aa:
                    5c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:ED:67:81:21:D4:CA:F1:90:8F:D9:1B:C2:4C:79:F3:62:7D:10:41
            X509v3 Authority Key Identifier:
                keyid:E6:1B:EC:13:92:86:32:83:DC:99:E2:FF:93:15:75:A3:18:1C:28:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:7c:1b:78:6c:7b:58:6a:7e:58:b8:88:24:91:56:b7:c1:47:
         88:92:34:dc:99:72:89:fb:4c:de:58:d1:48:92:97:cf:4c:21:
         40:92:8c:84:26:2e:7e:aa:3f:ab:1c:f1:03:d7:9e:e9:e8:e2:
         55:6a:6d:2a:75:72:dc:53:22:f2:c1:78:dd:52:4f:0f:85:46:
         c7:fd:4d:93:48:9b:db:d3:51:a0:43:b8:a4:4d:45:ff:cb:79:
         77:84:0f:c5:11:c8:33:e5:b7:49:90:79:1b:5a:aa:7b:3d:3f:
         a0:c7:95:3b:02:5b:28:ed:a8:8c:b0:66:1a:80:23:3e:d9:17:
         53:27:08:dd:23:cd:d1:75:c7:ba:f4:a2:08:ea:0e:e4:cc:c2:
         33:44:bb:49:4b:38:8b:82:a9:2f:d1:62:b5:38:1e:8e:59:be:
         30:fc:0f:20:15:92:bc:0c:39:68:a8:41:bf:1d:e3:f1:f8:f1:
         aa:1f:ef:6b:70:ab:42:51:16:dd:a9:89:82:86:77:e9:7e:dd:
         09:4f:5b:da:94:6b:03:b2:14:2c:fc:f0:eb:b2:71:67:5a:77:
         f8:c6:6e:96:88:ba:7e:5b:8c:69:98:41:5e:1e:70:a8:40:90:
         39:07:63:db:af:96:3b:db:b1:92:1a:fb:88:62:9c:57:c3:d1:
         4c:e6:a1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:02:16 2026 by rpki-client