Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A6E1/2D0228E6001511F1A5520AD1406F56BC/5qAfnnpf4L1tom3Ak9swMffqvPU.mft
File:                     5qAfnnpf4L1tom3Ak9swMffqvPU.mft (raw, json)
Hash identifier:          4xh9cEs/mnG00oQ0UYZ65A9BlX3O97pYNXCpGYCgOWg=
Subject key identifier:   8A:A0:28:22:7F:69:F7:C1:99:D2:58:3F:C1:94:03:37:6F:92:2C:88
Authority key identifier: E6:A0:1F:9E:7A:5F:E0:BD:6D:A2:6D:C0:93:DB:30:31:F7:EA:BC:F5
Certificate issuer:       /CN=A915A6E1/serialNumber=E6A01F9E7A5FE0BD6DA26DC093DB3031F7EABCF5
Certificate serial:       2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qAfnnpf4L1tom3Ak9swMffqvPU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A6E1/2D0228E6001511F1A5520AD1406F56BC/5qAfnnpf4L1tom3Ak9swMffqvPU.mft
Manifest number:          2C
Signing time:             Fri 17 Apr 2026 08:28:14 +0000
Manifest this update:     Fri 17 Apr 2026 08:28:14 +0000
Manifest next update:     Fri 24 Apr 2026 08:28:14 +0000
Files and hashes:         1: 5qAfnnpf4L1tom3Ak9swMffqvPU.crl (hash: mTKqeWGSVq5S7o+t0v6vVq1XMElo2RlU1Q8IeO7Crak=)
                          2: 5A1CA5FE001511F1B173DED1406F56BC.roa (hash: Q9xRalMlZSgL2EIEYXzUsDgkkdzjYwQVHna8NWAirhs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A6E1/2D0228E6001511F1A5520AD1406F56BC/5qAfnnpf4L1tom3Ak9swMffqvPU.crl
                          rsync://rpki.apnic.net/member_repository/A915A6E1/2D0228E6001511F1A5520AD1406F56BC/5qAfnnpf4L1tom3Ak9swMffqvPU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qAfnnpf4L1tom3Ak9swMffqvPU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:28:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A6E1, serialNumber=E6A01F9E7A5FE0BD6DA26DC093DB3031F7EABCF5
        Validity
            Not Before: Apr 17 08:28:14 2026 GMT
            Not After : Apr 24 08:28:14 2026 GMT
        Subject: CN=69e1ef1e-0e4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:18:b1:9f:b1:fe:b5:a8:19:ce:d6:af:df:24:
                    94:21:1a:d6:3a:58:d4:de:ca:8e:58:98:68:3d:ce:
                    5a:2e:eb:5d:c2:62:ba:89:71:38:b0:66:3c:2c:d1:
                    7f:a6:74:b4:9c:0a:48:de:b6:3b:21:5c:02:c3:9e:
                    33:42:c0:d4:ad:24:3b:2f:b7:97:4a:78:d6:92:12:
                    e2:98:80:c9:b7:73:ec:72:cc:db:a4:b6:9e:35:3a:
                    64:84:ec:9f:bf:c7:cc:e0:2a:0e:af:a3:79:f1:04:
                    49:8d:bc:3d:30:68:02:f8:61:ca:2c:af:93:08:3d:
                    66:f2:d8:e4:0d:e9:53:e0:fe:51:89:ea:20:f4:36:
                    c6:67:e7:0d:52:06:bc:f5:87:95:2a:66:7c:7b:0e:
                    83:d4:39:8a:02:b4:3d:f5:44:5f:c3:71:35:4f:e2:
                    a8:34:22:bd:de:c7:80:4d:76:3b:60:97:96:a2:d3:
                    12:fe:64:1c:92:7f:f5:97:59:0f:17:3b:5e:d7:3f:
                    69:ac:0d:e3:04:eb:33:08:62:83:24:ef:08:48:c0:
                    09:ab:c6:ea:09:81:16:7b:98:82:5b:f5:57:f4:2f:
                    4e:f0:b5:81:8f:de:94:5e:bd:58:25:80:69:53:20:
                    bf:d6:10:37:4d:79:aa:13:3a:89:f2:26:c0:09:f3:
                    9a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:A0:28:22:7F:69:F7:C1:99:D2:58:3F:C1:94:03:37:6F:92:2C:88
            X509v3 Authority Key Identifier:
                keyid:E6:A0:1F:9E:7A:5F:E0:BD:6D:A2:6D:C0:93:DB:30:31:F7:EA:BC:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A6E1/2D0228E6001511F1A5520AD1406F56BC/5qAfnnpf4L1tom3Ak9swMffqvPU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qAfnnpf4L1tom3Ak9swMffqvPU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A6E1/2D0228E6001511F1A5520AD1406F56BC/5qAfnnpf4L1tom3Ak9swMffqvPU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         f2:38:5e:2c:92:f8:18:61:4e:b2:da:94:d5:b4:61:af:ea:20:
         b6:93:8a:e6:3b:5e:77:a0:1c:28:29:61:0e:c4:84:dd:56:c8:
         49:5f:ac:ec:3e:0e:fd:42:5d:3e:b9:39:e0:b9:08:5e:b0:3b:
         e7:f9:3d:20:3e:ef:83:a1:a9:cf:1e:80:a2:48:36:84:c5:91:
         1a:69:e5:18:de:22:b2:e0:93:76:c8:cb:1b:44:02:b6:e8:c0:
         cf:22:6f:23:0a:45:50:5b:0e:5e:58:5c:7b:c8:49:2c:3b:04:
         88:e4:a8:c6:d7:c0:e9:94:42:f7:6e:e4:53:f4:5e:c4:5c:71:
         d5:6b:9c:b1:81:88:70:a2:81:d1:eb:7f:3b:79:4c:a5:0f:d9:
         58:04:5c:85:db:d6:dd:87:a0:2a:c9:92:24:5c:88:06:88:7a:
         b6:88:1e:0a:4c:c2:d0:0b:66:2d:4c:80:c8:e9:fc:42:ef:94:
         10:80:1c:93:c8:10:85:d8:50:9f:1b:2e:29:e6:c3:16:d0:2e:
         f3:59:77:2a:e3:72:24:0a:a7:92:ae:2a:49:28:1a:e2:ba:43:
         9c:98:d7:07:cc:7a:6d:79:70:63:df:34:da:79:07:db:5d:1a:
         bd:96:1b:00:29:a4:10:c1:cd:a3:6e:93:b8:5c:ba:0c:2f:a0:
         27:41:32:bc
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
QTZFMTExMC8GA1UEBRMoRTZBMDFGOUU3QTVGRTBCRDZEQTI2REMwOTNEQjMwMzFG
N0VBQkNGNTAeFw0yNjA0MTcwODI4MTRaFw0yNjA0MjQwODI4MTRaMBgxFjAUBgNV
BAMTDTY5ZTFlZjFlLTBlNGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCwGLGfsf61qBnO1q/fJJQhGtY6WNTeyo5YmGg9zlou613CYrqJcTiwZjws0X+m
dLScCkjetjshXALDnjNCwNStJDsvt5dKeNaSEuKYgMm3c+xyzNuktp41OmSE7J+/
x8zgKg6vo3nxBEmNvD0waAL4Ycosr5MIPWby2OQN6VPg/lGJ6iD0NsZn5w1SBrz1
h5UqZnx7DoPUOYoCtD31RF/DcTVP4qg0Ir3ex4BNdjtgl5ai0xL+ZBySf/WXWQ8X
O17XP2msDeME6zMIYoMk7whIwAmrxuoJgRZ7mIJb9Vf0L07wtYGP3pRevVglgGlT
IL/WEDdNeaoTOonyJsAJ85qTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUiqAoIn9p
98GZ0lg/wZQDN2+SLIgwHwYDVR0jBBgwFoAU5qAfnnpf4L1tom3Ak9swMffqvPUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVBNkUxLzJEMDIyOEU2MDAx
NTExRjFBNTUyMEFEMTQwNkY1NkJDLzVxQWZubnBmNEwxdG9tM0FrOXN3TWZmcXZQ
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvNXFBZm5ucGY0TDF0b20zQWs5c3dNZmZxdlBVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVB
NkUxLzJEMDIyOEU2MDAxNTExRjFBNTUyMEFEMTQwNkY1NkJDLzVxQWZubnBmNEwx
dG9tM0FrOXN3TWZmcXZQVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQDyOF4skvgYYU6y2pTVtGGv6iC2k4rmO153oBwoKWEOxITdVshJX6zsPg79Ql0+
uTnguQhesDvn+T0gPu+DoanPHoCiSDaExZEaaeUY3iKy4JN2yMsbRAK26MDPIm8j
CkVQWw5eWFx7yEksOwSI5KjG18DplEL3buRT9F7EXHHVa5yxgYhwooHR6387eUyl
D9lYBFyF29bdh6AqyZIkXIgGiHq2iB4KTMLQC2YtTIDI6fxC75QQgByTyBCF2FCf
Gy4p5sMW0C7zWXcq43IkCqeSripJKBriukOcmNcHzHpteXBj3zTaeQfbXRq9lhsA
KaQQwc2jbpO4XLoML6AnQTK8
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:52:21 2026 by rpki-client