Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft
File:                     5r9G5TDfkimPrAMq-8mECcRDBDk.mft (raw, json)
Hash identifier:          tmRYem5lVf+63ZqThmN3YZLWhuj/tqSF3ttdwTUwpYQ=
Subject key identifier:   C7:BE:0F:D3:5E:5E:DB:E5:B1:42:29:44:55:80:73:47:F2:41:4A:90
Authority key identifier: E6:BF:46:E5:30:DF:92:29:8F:AC:03:2A:FB:C9:84:09:C4:43:04:39
Certificate issuer:       /CN=A91527F9/serialNumber=E6BF46E530DF92298FAC032AFBC98409C4430439
Certificate serial:       3560
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5r9G5TDfkimPrAMq-8mECcRDBDk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft
Manifest number:          3542
Signing time:             Thu 16 Apr 2026 14:54:47 +0000
Manifest this update:     Thu 16 Apr 2026 14:54:47 +0000
Manifest next update:     Thu 23 Apr 2026 14:54:47 +0000
Files and hashes:         1: 5r9G5TDfkimPrAMq-8mECcRDBDk.crl (hash: 5c8ovluNZuHjWSO1ygJzLjGKVcnXCtNuHdITduBsj6g=)
                          2: AD5BA998D85D11EB8E31070BC4F9AE02.roa (hash: mZjZ+p8cLcbwXds5Q+V/zmBkA9l9nadihJZ6Y3qg9aQ=)
                          3: 909C5126F0A711EEA6150174C4F9AE02.roa (hash: oqJ462g0qJmgmHMOMVy2Cc6+TnCbz3LnnEel6B43bqo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.crl
                          rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5r9G5TDfkimPrAMq-8mECcRDBDk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 14:54:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13664 (0x3560)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91527F9, serialNumber=E6BF46E530DF92298FAC032AFBC98409C4430439
        Validity
            Not Before: Apr 16 14:54:47 2026 GMT
            Not After : Apr 23 14:54:47 2026 GMT
        Subject: CN=69e0f837-f1c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fe:31:29:80:29:8f:0f:0c:92:53:53:9b:6e:
                    fd:9e:a1:3a:43:56:22:2c:68:da:8c:6b:ed:af:de:
                    9a:41:0c:f5:2d:de:62:09:d4:d0:22:59:fe:84:04:
                    11:fb:5c:d1:e6:f4:67:c7:fe:b7:fc:12:bf:77:3f:
                    d4:bb:2b:81:ce:dd:8f:e8:56:d7:ed:ae:b4:1e:88:
                    f6:e6:da:ac:c5:ca:f1:d0:cc:18:b6:17:24:41:59:
                    f9:fd:a7:c3:09:fd:c9:0b:36:ec:bb:1a:57:4b:88:
                    e3:e6:a1:5e:09:40:a9:b8:97:98:1b:0d:c7:24:41:
                    aa:4c:ac:0b:c0:0b:67:76:d3:13:59:a5:e0:9e:69:
                    72:f1:75:12:70:71:78:35:e5:d9:ff:66:b7:94:4d:
                    13:bb:b8:6e:7b:58:b1:7b:a2:b6:8d:92:a5:3d:ce:
                    7f:e3:4a:e4:26:bf:ed:42:bb:4e:eb:3b:0c:49:89:
                    5b:3e:dd:4f:77:ac:c6:fd:fd:6c:7f:37:32:43:db:
                    43:f5:3c:a3:bb:e0:3b:5c:09:12:b2:10:6a:36:b7:
                    b9:a7:90:80:be:e9:83:bf:d9:8c:38:01:2f:02:fc:
                    8e:97:28:0c:7d:31:90:ce:90:33:dd:3b:02:66:9b:
                    ab:8c:15:e8:24:32:63:8d:59:42:23:82:17:8e:c3:
                    f7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:BE:0F:D3:5E:5E:DB:E5:B1:42:29:44:55:80:73:47:F2:41:4A:90
            X509v3 Authority Key Identifier:
                keyid:E6:BF:46:E5:30:DF:92:29:8F:AC:03:2A:FB:C9:84:09:C4:43:04:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5r9G5TDfkimPrAMq-8mECcRDBDk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:7f:bd:49:5f:7b:4c:54:33:44:93:aa:e8:9a:a4:67:43:28:
         6d:fa:e0:20:a3:f9:4b:7a:5f:ef:f1:fc:45:c3:b9:90:f2:f6:
         b4:2d:ed:37:06:ba:38:5e:aa:c7:e4:0d:6e:39:23:c9:ce:0e:
         73:0f:ec:3b:02:ce:44:4a:03:48:5d:bd:0c:61:e8:25:a0:65:
         33:40:da:f8:60:c7:73:b0:6b:c1:9b:3a:6a:df:f8:32:c2:41:
         ce:47:28:f9:58:7d:db:0c:c4:cb:e4:60:38:f4:cd:65:26:96:
         3c:f5:9c:e6:a4:73:de:0a:d2:72:8d:d3:a8:b5:a8:99:37:b9:
         a9:6c:e1:15:3a:75:c8:e6:3f:f8:ff:e3:24:4a:7a:48:b7:bd:
         fa:fd:7e:35:66:43:e2:cb:15:f5:e0:18:f3:39:9d:33:c3:da:
         f1:80:89:a3:b3:e2:bb:22:34:87:74:63:1b:85:57:9c:a0:5e:
         d9:fc:ba:79:68:cf:a8:8b:e1:87:7a:24:f0:6c:8d:17:0c:4c:
         2d:8e:d5:47:f2:a3:60:d2:68:c0:52:40:3b:a9:18:3d:09:cb:
         91:ce:19:a1:9d:73:a5:a7:ed:a4:b6:d2:7e:55:5d:80:37:e7:
         19:7a:52:37:84:99:f8:a0:c5:81:45:05:a6:52:46:51:b5:f2:
         03:31:02:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:29:38 2026 by rpki-client