Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft
File:                     5C5CACqDeHpnr4y5qFH5OZdGwTI.mft (raw, json)
Hash identifier:          p1+rgR/fimq9ztba6VoDfvO6abQ5my73BEhuQzs4eWs=
Subject key identifier:   B6:23:5F:0C:5F:09:31:B4:A3:2A:F1:B9:0E:A4:E7:2E:95:E7:58:20
Authority key identifier: E4:2E:42:00:2A:83:78:7A:67:AF:8C:B9:A8:51:F9:39:97:46:C1:32
Certificate issuer:       /CN=A91566DC/serialNumber=E42E42002A83787A67AF8CB9A851F9399746C132
Certificate serial:       0120
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5C5CACqDeHpnr4y5qFH5OZdGwTI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft
Manifest number:          0120
Signing time:             Fri 17 Apr 2026 05:24:42 +0000
Manifest this update:     Fri 17 Apr 2026 05:24:42 +0000
Manifest next update:     Fri 24 Apr 2026 05:24:42 +0000
Files and hashes:         1: 5C5CACqDeHpnr4y5qFH5OZdGwTI.crl (hash: NA/AIQuktx2cEImuHLAsT5VNewdX+8Pz9tOljCBa038=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.crl
                          rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5C5CACqDeHpnr4y5qFH5OZdGwTI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:24:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 288 (0x120)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91566DC, serialNumber=E42E42002A83787A67AF8CB9A851F9399746C132
        Validity
            Not Before: Apr 17 05:24:42 2026 GMT
            Not After : Apr 24 05:24:42 2026 GMT
        Subject: CN=69e1c41a-6c2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:07:7f:e0:bb:7a:95:e9:1a:92:b6:e5:09:c9:
                    e3:ab:75:c1:fe:4d:00:65:96:29:e1:cf:d7:43:ad:
                    62:7c:63:5a:b0:6a:c3:42:52:aa:fd:b2:c7:dc:b7:
                    9a:35:c1:b1:b9:14:56:17:cc:07:3e:c8:2a:0b:cc:
                    7b:aa:04:1a:5f:f2:a4:cc:6f:37:f4:ee:17:b7:8e:
                    f9:66:38:61:b3:76:63:ee:0c:4b:4d:ad:76:99:55:
                    84:5e:b6:f9:c9:c7:c1:3e:91:fa:6c:7d:26:bc:f8:
                    e9:dd:11:14:e0:25:f3:a8:5a:58:99:f6:3d:42:73:
                    da:2b:85:ca:aa:52:e5:9a:af:db:e2:15:19:ed:2a:
                    ea:a1:67:29:37:3c:0d:68:43:da:6d:8a:91:20:bf:
                    2e:ca:d3:93:cc:50:ea:a1:f3:c8:61:0c:08:91:89:
                    53:be:71:21:9c:fe:83:23:c0:fb:14:f4:9b:d2:a8:
                    ad:5a:53:49:3c:89:87:02:11:7f:d1:78:42:a5:5a:
                    21:74:33:b5:c4:09:98:2c:6b:0b:f0:e0:81:00:99:
                    39:6c:ce:3e:3c:04:14:15:c9:dd:be:7f:c1:d7:1e:
                    ef:6f:a2:ed:7d:03:7c:16:8c:3b:c8:97:95:d5:ab:
                    a1:2a:83:1e:46:25:9c:06:30:c6:81:7f:ab:57:ba:
                    67:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:23:5F:0C:5F:09:31:B4:A3:2A:F1:B9:0E:A4:E7:2E:95:E7:58:20
            X509v3 Authority Key Identifier:
                keyid:E4:2E:42:00:2A:83:78:7A:67:AF:8C:B9:A8:51:F9:39:97:46:C1:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5C5CACqDeHpnr4y5qFH5OZdGwTI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:ff:66:5b:e2:c0:6a:8f:21:ad:14:55:da:fc:f0:a5:0a:79:
         27:16:4d:12:f1:30:53:ba:60:28:4f:63:25:b3:b5:bd:44:40:
         63:d1:cd:84:aa:4b:c4:23:00:5d:f6:7a:7e:bc:0f:81:b4:ad:
         9e:67:ae:d0:0a:6e:22:71:b6:11:9c:69:b4:46:b9:17:7b:eb:
         b4:76:0b:7e:fe:90:18:05:98:d8:8a:53:e7:cf:66:8d:db:37:
         23:cc:69:69:5d:50:04:71:74:ad:5f:1e:aa:4a:c6:d2:42:59:
         0e:7b:f9:f2:86:cb:d3:8d:2d:e6:a6:de:1b:21:ef:8f:0a:21:
         58:ee:f9:64:af:1b:f1:7a:17:2f:63:86:a7:5a:5a:60:70:b6:
         9b:7d:ab:4a:88:8f:f3:74:a6:94:09:10:87:39:ee:75:f4:17:
         4d:33:db:1c:e2:a9:bb:81:9a:60:7c:06:56:0a:8e:9a:32:ee:
         90:ce:bb:55:b2:62:a2:d9:8d:ba:c3:5a:b2:28:bc:17:a0:04:
         8c:ac:a7:9d:3f:3d:85:2f:00:23:b1:5c:9a:86:ed:7e:18:a4:
         ec:2f:d3:c8:35:6b:69:53:d0:8a:c7:14:78:c1:b4:4a:88:c7:
         89:6f:24:ff:0c:70:d3:60:13:c7:ba:d4:42:4e:7e:05:63:78:
         04:f7:96:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:15:01 2026 by rpki-client