Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91529FC/D69F74B877E811EBB7F99A40C4F9AE02/5FjqMEAJhzyIhK-JqpMdSLqFnNA.mft
File:                     5FjqMEAJhzyIhK-JqpMdSLqFnNA.mft (raw, json)
Hash identifier:          j0YZfaMfkph2GM4cdnZIyUTGz11uiFzVHdK8dbC66HA=
Subject key identifier:   75:C7:14:A4:7B:D6:13:ED:AE:C7:7D:17:46:90:54:F9:60:3D:8B:49
Authority key identifier: E4:58:EA:30:40:09:87:3C:88:84:AF:89:AA:93:1D:48:BA:85:9C:D0
Certificate issuer:       /CN=A91529FC/serialNumber=E458EA304009873C8884AF89AA931D48BA859CD0
Certificate serial:       074F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5FjqMEAJhzyIhK-JqpMdSLqFnNA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91529FC/D69F74B877E811EBB7F99A40C4F9AE02/5FjqMEAJhzyIhK-JqpMdSLqFnNA.mft
Manifest number:          072E
Signing time:             Thu 16 Apr 2026 21:44:30 +0000
Manifest this update:     Thu 16 Apr 2026 21:44:30 +0000
Manifest next update:     Thu 23 Apr 2026 21:44:30 +0000
Files and hashes:         1: 5FjqMEAJhzyIhK-JqpMdSLqFnNA.crl (hash: LnHtq1ybMqYiXoNN/Bmll8FJHv/4vKBkyvVy5WUybtU=)
                          2: 78ACE25C7FD811ECB5AA233AC4F9AE02.roa (hash: ad/IMuIcQJVnfvBAZiAISr8PuPV2aVB3x3OVq7eXORo=)
                          3: 44E8364E7FDB11EC8A268343C4F9AE02.roa (hash: Xm2UbzC8JcbcQaKl1BwOz8Aimyt0wB8QVDQl3a8IBfI=)
                          4: B440BFA6324C11ED94FD883AC4F9AE02.roa (hash: xmNlNCsfvMmHsdcmX4KVkYV3wcWZ95ED3GAYee+h//Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91529FC/D69F74B877E811EBB7F99A40C4F9AE02/5FjqMEAJhzyIhK-JqpMdSLqFnNA.crl
                          rsync://rpki.apnic.net/member_repository/A91529FC/D69F74B877E811EBB7F99A40C4F9AE02/5FjqMEAJhzyIhK-JqpMdSLqFnNA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5FjqMEAJhzyIhK-JqpMdSLqFnNA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:44:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1871 (0x74f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91529FC, serialNumber=E458EA304009873C8884AF89AA931D48BA859CD0
        Validity
            Not Before: Apr 16 21:44:30 2026 GMT
            Not After : Apr 23 21:44:30 2026 GMT
        Subject: CN=69e1583e-7ab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:20:15:b1:c3:2f:32:a1:2f:28:c7:17:fe:ad:
                    24:39:a6:9f:55:6e:88:3e:bb:db:30:a5:bb:a3:a4:
                    92:6f:2c:c7:20:53:16:e3:c6:2b:2c:a6:7a:fb:0a:
                    7f:f2:49:0d:2a:11:d9:3b:ea:1b:ef:3d:2f:4f:eb:
                    69:f6:ad:ff:2d:3f:d6:06:a0:d8:be:0f:b3:c0:0e:
                    6d:b7:5e:a8:ea:81:79:e1:04:45:71:d7:ea:b3:a4:
                    d4:0d:2f:0c:6f:d4:08:c5:e6:e8:b9:e9:3e:59:c8:
                    23:9f:bf:a5:1c:02:72:53:82:6d:7b:12:ca:4f:82:
                    2a:4f:4b:88:39:e6:60:df:30:c5:d6:cb:52:83:67:
                    53:8a:c9:d3:7b:eb:76:ca:7f:12:72:db:d8:10:a6:
                    9d:83:ce:5a:d9:1c:da:d3:c2:75:a8:25:0b:e0:85:
                    48:ea:66:3a:1f:84:40:2f:81:28:be:b4:3c:23:23:
                    f1:cb:46:27:d3:d4:b3:09:84:92:39:4b:0c:c0:12:
                    a3:6b:5d:92:bc:04:0c:61:4f:c6:ec:07:94:cb:ff:
                    1d:32:67:58:f6:a4:41:18:63:54:4d:3c:03:fa:2f:
                    ce:e5:f4:ec:bb:59:f7:d9:7d:30:27:ef:9e:c9:ff:
                    5b:b4:67:38:1f:ca:58:a4:fc:1b:20:50:35:65:60:
                    ab:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:C7:14:A4:7B:D6:13:ED:AE:C7:7D:17:46:90:54:F9:60:3D:8B:49
            X509v3 Authority Key Identifier:
                keyid:E4:58:EA:30:40:09:87:3C:88:84:AF:89:AA:93:1D:48:BA:85:9C:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91529FC/D69F74B877E811EBB7F99A40C4F9AE02/5FjqMEAJhzyIhK-JqpMdSLqFnNA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5FjqMEAJhzyIhK-JqpMdSLqFnNA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91529FC/D69F74B877E811EBB7F99A40C4F9AE02/5FjqMEAJhzyIhK-JqpMdSLqFnNA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:d9:a5:02:b4:a8:ab:0e:8c:5e:0b:86:00:18:ca:c1:f8:ce:
         8e:fc:50:2e:73:f6:28:34:5d:99:ca:75:10:15:cf:76:4d:fd:
         c2:0d:07:af:e3:09:9d:14:e3:04:cd:88:38:8f:c2:f9:8c:41:
         67:e9:85:6d:21:36:6a:13:ab:8b:36:7d:eb:a6:e3:ae:aa:82:
         bb:8e:06:7f:5e:9f:f8:d9:9a:98:39:91:2e:58:59:51:55:bd:
         b5:95:a8:ce:02:0a:7f:37:f7:93:47:98:0d:4b:6d:98:65:19:
         64:c2:cb:af:12:c4:ff:d2:06:83:e1:c7:8a:11:3f:6f:6b:2b:
         cf:51:25:36:39:0b:da:74:97:c0:1c:c0:4b:b9:00:47:bb:14:
         ea:41:3f:0c:fa:e4:77:51:59:27:6a:f4:16:6a:0a:bb:18:2a:
         44:86:0d:ca:99:4e:3a:ed:23:68:2a:b8:3c:ed:6c:06:a7:ce:
         ef:c3:6f:0d:c2:29:28:26:a2:20:01:4b:53:89:6d:f5:de:a2:
         60:8a:2a:4d:8e:a8:ad:ca:2b:6f:11:23:a5:2b:a6:4b:6e:2b:
         d6:01:24:85:08:3d:96:4a:ea:37:3f:f9:21:94:c8:08:8d:69:
         2e:9a:c9:e9:6b:f0:45:9f:a3:7f:4b:75:f1:80:10:4a:2b:2f:
         a6:7c:7b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:09:36 2026 by rpki-client