Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft
File:                     V5NDbSKpagYTaFEgO7clmE1wsBc.mft (raw, json)
Hash identifier:          KclQRbJWCgFdvyq6En22KuqVg6WAbVoT/li6aLH6KLk=
Subject key identifier:   CE:29:98:24:4C:64:21:20:17:EE:71:A4:39:63:E5:A6:0E:53:74:24
Authority key identifier: 57:93:43:6D:22:A9:6A:06:13:68:51:20:3B:B7:25:98:4D:70:B0:17
Certificate issuer:       /CN=A9159DCD/serialNumber=5793436D22A96A06136851203BB725984D70B017
Certificate serial:       0207
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5NDbSKpagYTaFEgO7clmE1wsBc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft
Manifest number:          0201
Signing time:             Fri 17 Apr 2026 02:50:08 +0000
Manifest this update:     Fri 17 Apr 2026 02:50:08 +0000
Manifest next update:     Fri 24 Apr 2026 02:50:08 +0000
Files and hashes:         1: V5NDbSKpagYTaFEgO7clmE1wsBc.crl (hash: rh3kgNiCd4xytHHeHMUKgWg1InQnlCiPMHfXgdqNmqg=)
                          2: 29D600062C3311EEBFF69B6CC4F9AE02.roa (hash: WAXFjuNGhyF26G8uyhpIZtaDvgXLuDPly79bzyrgzCI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.crl
                          rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5NDbSKpagYTaFEgO7clmE1wsBc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 519 (0x207)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9159DCD, serialNumber=5793436D22A96A06136851203BB725984D70B017
        Validity
            Not Before: Apr 17 02:50:08 2026 GMT
            Not After : Apr 24 02:50:08 2026 GMT
        Subject: CN=69e19fe0-3f73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:01:19:66:4f:13:c1:1a:7c:78:fa:0f:50:6d:
                    ef:8f:9e:e6:dd:b7:85:5b:8d:4d:c8:1c:a2:67:d6:
                    76:10:47:33:bc:ee:fb:b7:b4:e2:45:94:95:f3:dd:
                    0f:4b:80:28:64:f8:d6:b0:a0:82:1b:21:6d:7c:ea:
                    22:b6:69:f3:01:51:83:82:a9:e8:53:f6:1c:02:ee:
                    e5:0d:c6:12:bb:f4:ea:b3:5b:e1:e9:db:7f:27:41:
                    3c:de:5b:a9:61:47:be:e8:dd:93:49:41:cf:2a:4c:
                    ad:9c:ff:a3:c7:63:dc:1c:c7:19:b0:78:a5:d9:a8:
                    eb:6d:65:59:cb:01:08:5a:5f:8a:a1:ff:c0:3c:66:
                    dc:be:fc:7f:8d:4b:d4:9d:1d:9c:db:a0:2c:c0:7c:
                    a1:70:8b:06:ca:1d:86:f7:93:5c:ee:0f:16:d6:7b:
                    60:3d:2b:db:61:c5:04:d1:dd:4c:cb:d4:8a:f3:53:
                    9f:c1:11:f9:ff:92:cc:f0:50:2c:14:f6:57:26:c8:
                    31:bc:2e:78:cf:8c:7b:28:d9:ac:c7:b3:26:b1:bc:
                    76:21:48:4a:7e:80:fb:ed:60:cf:56:21:b0:9e:3c:
                    8c:0e:04:ee:a2:99:cb:e7:be:2d:d2:d3:53:c2:48:
                    18:3a:d3:81:69:6b:e7:5f:d7:c3:9f:5d:3a:8e:88:
                    fe:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:29:98:24:4C:64:21:20:17:EE:71:A4:39:63:E5:A6:0E:53:74:24
            X509v3 Authority Key Identifier:
                keyid:57:93:43:6D:22:A9:6A:06:13:68:51:20:3B:B7:25:98:4D:70:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5NDbSKpagYTaFEgO7clmE1wsBc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:c9:72:86:e0:a9:cd:c7:aa:66:bd:dd:b8:a0:32:46:a3:05:
         d4:29:22:ac:a3:fa:ac:71:62:d7:b4:76:2e:64:55:f2:65:98:
         e9:25:56:f0:d6:52:c3:7e:fb:c5:60:a3:2d:c3:da:00:fe:a8:
         61:b9:3d:ca:a7:60:a3:82:4f:cf:f7:38:de:b3:e7:6a:22:99:
         1c:d0:c0:eb:b1:f9:60:98:78:9c:95:8a:44:22:98:71:5a:82:
         9f:95:50:f3:e9:30:cc:50:39:c7:8b:1a:47:2a:88:8a:08:30:
         bc:3e:5d:81:e8:84:4b:3b:cc:53:f5:a5:c4:3a:39:1f:aa:12:
         d5:71:62:2f:76:84:82:1d:f5:4f:e2:63:08:eb:b5:34:4d:15:
         97:ed:e6:46:83:a9:f1:b0:89:d8:dc:86:9f:f1:e1:4b:28:6f:
         9e:e9:40:b5:9e:3b:c7:72:ce:9b:bb:dc:63:90:c3:be:91:45:
         1c:4d:e5:a6:13:a4:5b:e1:1e:8a:97:ce:9d:89:45:9b:02:92:
         a6:bf:fd:21:b8:72:3b:48:43:1c:56:7b:53:5c:45:aa:1c:2b:
         0f:82:3b:86:dd:89:e7:fb:4a:f1:89:8b:c6:a3:b6:8a:30:db:
         ca:ce:68:7a:4e:24:b0:ed:1b:3a:77:f0:f6:fa:10:15:be:55:
         e0:eb:a8:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:55:39 2026 by rpki-client