Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft
File:                     phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft (raw, json)
Hash identifier:          xNMdNc850Ax8DXA6f2Hp6nuMKZ7x+OshDinQKF8M/XM=
Subject key identifier:   FA:63:3E:2F:F3:FA:4D:47:BB:C3:B5:CD:47:DD:12:36:9C:B3:DF:6D
Authority key identifier: A6:12:0A:E9:9A:AA:DC:00:A3:5A:0C:8B:F5:16:5E:0B:63:A3:8A:1E
Certificate issuer:       /CN=A91456E2/serialNumber=A6120AE99AAADC00A35A0C8BF5165E0B63A38A1E
Certificate serial:       050A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phIK6Zqq3ACjWgyL9RZeC2Ojih4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft
Manifest number:          0502
Signing time:             Thu 16 Apr 2026 23:35:08 +0000
Manifest this update:     Thu 16 Apr 2026 23:35:08 +0000
Manifest next update:     Thu 23 Apr 2026 23:35:08 +0000
Files and hashes:         1: phIK6Zqq3ACjWgyL9RZeC2Ojih4.crl (hash: RL5Mv6wwwqRCRKniAu718NX0vnNjrMAbi16vhxQLgvg=)
                          2: 28E9FEB86F0511EDAF35FA28C4F9AE02.roa (hash: 9qp1lem8CW69t4ERqtAKFfiD84cfJ8z0cZZ7sr2Va70=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.crl
                          rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phIK6Zqq3ACjWgyL9RZeC2Ojih4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:35:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1290 (0x50a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91456E2, serialNumber=A6120AE99AAADC00A35A0C8BF5165E0B63A38A1E
        Validity
            Not Before: Apr 16 23:35:08 2026 GMT
            Not After : Apr 23 23:35:08 2026 GMT
        Subject: CN=69e1722c-4a15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:db:90:f5:44:f6:f2:1a:c9:d6:e2:f9:56:dd:
                    e7:73:fb:c9:8a:e0:26:8a:d8:71:31:47:27:6f:6e:
                    24:32:35:64:49:c1:62:2a:ae:45:70:e5:00:61:d4:
                    73:04:bb:cd:65:4b:b1:a6:b4:bb:dc:11:cd:96:6c:
                    4f:7e:70:03:f4:88:90:ba:9c:6c:22:bc:55:48:61:
                    2c:54:22:9e:2e:dd:b7:8f:2b:a8:2d:b8:1a:0c:50:
                    57:88:60:20:da:f0:7b:4d:38:d1:4e:d3:cc:75:4d:
                    47:fc:cf:5c:53:36:28:4d:cd:4a:be:ac:ec:fd:da:
                    1a:be:2b:7e:40:90:8c:9b:2b:0c:6c:3c:ad:a6:37:
                    32:63:fa:ee:af:a5:d3:6d:ce:03:89:ea:6c:e0:e5:
                    39:b4:39:ab:2a:29:fb:34:6f:0b:77:1e:ee:21:4b:
                    d7:8e:a7:c3:6d:6d:50:f8:5d:24:84:b4:d1:03:30:
                    f4:8d:7a:b6:f8:55:3d:02:ff:8c:41:12:9b:9e:82:
                    e4:9b:56:31:2a:04:52:3d:55:db:64:a0:51:7c:02:
                    45:dc:3c:0d:0d:c7:06:32:54:5e:fd:03:89:e5:e1:
                    d0:8a:0b:19:ca:59:ea:eb:7c:34:12:6e:fd:4c:e2:
                    53:71:ce:cb:0b:9c:a8:a7:d2:cf:f2:97:e0:f8:e0:
                    9e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:63:3E:2F:F3:FA:4D:47:BB:C3:B5:CD:47:DD:12:36:9C:B3:DF:6D
            X509v3 Authority Key Identifier:
                keyid:A6:12:0A:E9:9A:AA:DC:00:A3:5A:0C:8B:F5:16:5E:0B:63:A3:8A:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phIK6Zqq3ACjWgyL9RZeC2Ojih4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:bb:72:c5:40:bf:85:5b:4a:76:d8:ae:bd:0d:ce:34:cd:07:
         ca:de:e6:51:2a:9b:1e:15:f9:1c:33:00:69:30:f8:3d:5d:a7:
         f4:cc:bf:27:97:53:14:ed:9c:02:82:ef:7a:10:75:c3:43:06:
         f0:dd:e2:70:00:7e:a6:2e:dc:1b:8a:34:03:fc:05:5d:0c:5c:
         53:d2:69:1e:0f:34:33:43:e5:69:86:1e:75:f9:9a:df:76:b7:
         46:69:92:f7:06:d3:e0:8d:af:7a:ff:c0:7e:9f:58:eb:2b:6a:
         e4:a5:5e:2d:5a:8e:69:b0:a9:60:c2:05:61:55:f8:ee:c6:bb:
         21:64:b7:2a:26:a6:4f:0c:c2:b6:40:72:12:c7:ed:92:eb:46:
         56:59:77:c4:61:97:32:b8:2a:50:d4:d2:76:76:a3:e4:58:92:
         9f:5f:54:de:6b:0e:53:b9:6b:82:14:47:c9:e7:58:6d:2c:46:
         d5:07:ce:2b:21:e5:eb:02:db:a1:4d:7e:d0:38:01:09:3e:34:
         0e:a3:99:99:25:5b:19:6e:0e:74:c2:1f:16:de:ae:19:04:99:
         80:e1:5e:95:f7:7e:1c:d4:20:c3:94:8b:aa:3e:7c:dd:20:53:
         e9:10:57:43:5c:5d:c5:3a:2d:1f:70:de:6d:d6:83:44:e1:7b:
         b1:f7:12:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:28:39 2026 by rpki-client