Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.mft
File:                     53p5hBmz84yLAlkKKUx7NffDREw.mft (raw, json)
Hash identifier:          JPLs3DxrdbA4ZzjgGalZuaxm+Gq/cdtk1iXcGdBd82c=
Subject key identifier:   EB:7B:4B:97:0F:DF:2C:26:A1:2A:40:A2:12:00:C1:1F:6F:9D:48:8C
Authority key identifier: E7:7A:79:84:19:B3:F3:8C:8B:02:59:0A:29:4C:7B:35:F7:C3:44:4C
Certificate issuer:       /CN=A914530B/serialNumber=E77A798419B3F38C8B02590A294C7B35F7C3444C
Certificate serial:       0107
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/53p5hBmz84yLAlkKKUx7NffDREw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.mft
Manifest number:          0102
Signing time:             Fri 17 Apr 2026 05:54:20 +0000
Manifest this update:     Fri 17 Apr 2026 05:54:19 +0000
Manifest next update:     Fri 24 Apr 2026 05:54:19 +0000
Files and hashes:         1: 53p5hBmz84yLAlkKKUx7NffDREw.crl (hash: iqGTfIOL+5r6+lIM0cmiEu8nnd5KAEOWF/3BrSXTP9c=)
                          2: 87A33C66B79D11EF9A384C65C4F9AE02.roa (hash: QkVPChArca7p58dKOFKdeRoa2Z6OFQu0S93mu5qNgts=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.crl
                          rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/53p5hBmz84yLAlkKKUx7NffDREw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:54:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 263 (0x107)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914530B, serialNumber=E77A798419B3F38C8B02590A294C7B35F7C3444C
        Validity
            Not Before: Apr 17 05:54:19 2026 GMT
            Not After : Apr 24 05:54:19 2026 GMT
        Subject: CN=69e1cb0c-b0a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:cd:ba:37:ce:d9:77:8e:39:d6:32:bc:47:8b:
                    18:6f:a1:1e:72:8c:ea:da:76:e0:bf:29:3e:ab:b6:
                    62:2e:a2:1e:51:8a:4f:b4:45:75:c5:3e:2d:61:29:
                    92:15:ba:df:1f:38:db:c0:20:d3:e3:28:1a:ea:92:
                    b9:0d:44:68:12:60:06:de:5d:5f:23:40:f0:5f:94:
                    26:53:33:0a:17:a7:07:fd:46:b3:0a:9e:66:eb:62:
                    4d:15:29:fa:c7:66:9c:65:8a:15:55:ff:9a:04:b6:
                    b7:6d:d6:04:a3:a2:a1:ac:4c:cd:46:d2:cc:a5:c9:
                    6b:7d:78:eb:8e:d6:c3:c9:30:eb:6b:7d:38:88:aa:
                    77:bb:a1:4f:ac:6d:9f:12:49:f2:3b:90:5d:43:76:
                    bc:56:f7:d1:98:1d:f3:b8:02:36:ce:a6:1f:9a:63:
                    88:68:ec:46:77:4e:f2:8a:20:ed:83:49:5b:a6:40:
                    3e:47:9a:92:6b:0b:cf:fc:fb:db:52:cb:e7:62:d3:
                    d4:7a:c9:0e:46:06:01:e8:43:cb:da:0b:57:da:5c:
                    2b:8a:b6:83:1b:cf:3c:73:87:98:e9:e0:ca:b9:2f:
                    83:4b:ab:e4:35:85:4c:04:56:84:30:a1:e5:63:d4:
                    ff:ab:e8:56:48:1f:bf:1b:2d:f1:0b:f6:b7:6e:99:
                    4b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:7B:4B:97:0F:DF:2C:26:A1:2A:40:A2:12:00:C1:1F:6F:9D:48:8C
            X509v3 Authority Key Identifier:
                keyid:E7:7A:79:84:19:B3:F3:8C:8B:02:59:0A:29:4C:7B:35:F7:C3:44:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/53p5hBmz84yLAlkKKUx7NffDREw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:6d:33:e7:94:9a:f6:94:90:3d:e1:e0:87:33:a2:f5:ce:53:
         e8:ab:cf:31:d2:85:d5:39:5a:a7:ba:4c:71:fc:5c:f5:c0:31:
         0e:fd:43:21:58:6b:89:09:4d:d6:58:b7:93:5f:2f:31:6c:77:
         e5:83:46:5a:5d:a7:8b:a4:07:a7:4b:bc:f2:ec:5b:f3:49:ba:
         75:0f:d3:c2:82:2f:06:c1:14:ff:63:29:50:6c:d1:5e:cf:bb:
         17:b9:29:f4:3a:9b:c8:06:31:bb:3f:7b:4d:15:fd:89:be:30:
         ac:d1:2c:c4:f4:6d:79:7c:e0:b3:ef:ef:48:07:b6:ca:54:26:
         66:9c:c3:63:5a:7b:eb:0c:a8:10:ac:99:3e:07:f8:81:f2:c2:
         64:98:59:6f:d9:fc:3a:c9:61:00:ef:d0:49:02:5f:98:cf:ac:
         42:33:06:5f:4c:dc:3a:47:b2:f9:8a:80:19:2b:cd:46:1d:9e:
         c7:4a:7d:17:c6:bb:e6:69:4a:62:ad:ab:0a:19:eb:67:ff:ba:
         3f:42:05:b8:ae:0a:e9:90:cf:1e:8d:47:09:31:9f:31:40:34:
         74:a2:e5:f3:8a:3b:b5:f8:1d:e6:ee:d1:6f:33:fe:5e:56:72:
         eb:15:be:f3:a8:3a:7a:4b:11:d8:e8:dd:ea:b0:2b:1d:df:6a:
         d4:2f:e0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:36:40 2026 by rpki-client