Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BD82/6D5CFE4809A211F185BFD9EA1B3D8C67/S5skzTPB9DKZGxqVwJ6iCMvl99s.mft
File:                     S5skzTPB9DKZGxqVwJ6iCMvl99s.mft (raw, json)
Hash identifier:          z0P9uQ8oJ/0/cheXFtGzRT1hgKdT3wzpbYQXOK5NaLc=
Subject key identifier:   19:F3:C5:1E:41:0B:6E:F9:44:B1:56:83:BF:44:EE:D2:F4:08:44:23
Authority key identifier: 4B:9B:24:CD:33:C1:F4:32:99:1B:1A:95:C0:9E:A2:08:CB:E5:F7:DB
Certificate issuer:       /CN=A915BD82/serialNumber=4B9B24CD33C1F432991B1A95C09EA208CBE5F7DB
Certificate serial:       27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5skzTPB9DKZGxqVwJ6iCMvl99s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BD82/6D5CFE4809A211F185BFD9EA1B3D8C67/S5skzTPB9DKZGxqVwJ6iCMvl99s.mft
Manifest number:          25
Signing time:             Fri 17 Apr 2026 08:33:30 +0000
Manifest this update:     Fri 17 Apr 2026 08:33:30 +0000
Manifest next update:     Fri 24 Apr 2026 08:33:30 +0000
Files and hashes:         1: S5skzTPB9DKZGxqVwJ6iCMvl99s.crl (hash: AR3I8Oz2YEi1XvArlwRCFV1UFzqk1haQUbt5hvGwdhw=)
                          2: 85CAF6160B3B11F185A1FC3F063D8C67.roa (hash: WBgwzD/CjfDPglIN1XEYd4/5WhM8OoaoxSUyq6BRdcI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BD82/6D5CFE4809A211F185BFD9EA1B3D8C67/S5skzTPB9DKZGxqVwJ6iCMvl99s.crl
                          rsync://rpki.apnic.net/member_repository/A915BD82/6D5CFE4809A211F185BFD9EA1B3D8C67/S5skzTPB9DKZGxqVwJ6iCMvl99s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5skzTPB9DKZGxqVwJ6iCMvl99s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:33:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BD82, serialNumber=4B9B24CD33C1F432991B1A95C09EA208CBE5F7DB
        Validity
            Not Before: Apr 17 08:33:30 2026 GMT
            Not After : Apr 24 08:33:30 2026 GMT
        Subject: CN=69e1f05a-0cfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f1:ff:76:69:4f:27:40:59:d8:e2:6e:aa:21:
                    f9:d8:3c:39:04:17:9d:e8:e6:05:ce:07:9a:57:97:
                    74:84:ee:e8:64:16:22:e2:34:60:2d:c1:81:f8:00:
                    8e:a1:8d:5c:3c:d5:96:62:31:db:e7:40:96:f8:84:
                    b0:6a:99:31:04:55:82:f9:11:82:1d:79:ba:5a:43:
                    38:c6:2e:2f:4a:67:7b:0a:80:1a:67:2f:77:18:48:
                    37:7b:71:c6:30:3e:a0:1c:44:19:8b:15:5c:59:77:
                    4e:bf:58:c7:52:0c:b7:48:44:8e:53:37:01:b5:c0:
                    69:54:10:1c:0d:46:29:b2:ed:42:6e:ec:9a:20:ac:
                    dc:94:45:ed:7a:42:0f:36:fe:9e:67:d9:0e:0e:87:
                    db:f0:2a:6f:6b:b1:45:d2:77:a0:da:88:35:71:fd:
                    98:5e:de:43:a4:b9:ab:b0:a8:5b:cd:01:0a:e2:0b:
                    25:08:e5:69:bf:d7:97:ff:9a:2f:9c:e8:14:8c:17:
                    7f:17:e7:6c:56:f7:34:d1:c4:fd:51:46:11:21:e7:
                    5d:2b:dd:be:8e:53:42:47:0a:8d:7f:c7:85:46:bc:
                    c6:8f:f5:75:d9:ee:c9:94:bf:d3:f7:aa:dc:f3:4c:
                    2c:5a:b4:ce:1d:a2:79:9c:d2:3a:cc:34:1f:89:7a:
                    32:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F3:C5:1E:41:0B:6E:F9:44:B1:56:83:BF:44:EE:D2:F4:08:44:23
            X509v3 Authority Key Identifier:
                keyid:4B:9B:24:CD:33:C1:F4:32:99:1B:1A:95:C0:9E:A2:08:CB:E5:F7:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BD82/6D5CFE4809A211F185BFD9EA1B3D8C67/S5skzTPB9DKZGxqVwJ6iCMvl99s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5skzTPB9DKZGxqVwJ6iCMvl99s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BD82/6D5CFE4809A211F185BFD9EA1B3D8C67/S5skzTPB9DKZGxqVwJ6iCMvl99s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:0c:32:5b:44:5c:82:fd:97:d4:9a:be:b1:db:d1:bb:d3:38:
         0e:ff:b4:34:a5:88:c2:64:5d:be:71:06:58:47:54:63:45:b9:
         32:30:5e:12:b9:17:eb:27:06:c7:08:1f:32:42:0f:88:8e:9d:
         3e:dd:9d:a1:fb:9e:32:19:11:19:f8:dc:b0:e1:b1:c5:76:0e:
         aa:64:79:63:fe:64:8e:3e:f7:8a:5e:9e:20:36:5f:f1:98:9f:
         13:97:7a:45:ee:fb:b4:ef:dd:c2:6c:f6:e2:09:74:d9:47:41:
         c2:0c:eb:e7:4c:f8:fc:38:ce:7e:94:3c:73:34:c3:bb:3e:96:
         df:96:8a:77:44:78:5c:40:07:ad:f6:31:dc:b6:b8:2f:c9:65:
         89:f2:6e:56:9d:36:af:ec:22:59:cf:c7:30:7a:10:43:1b:06:
         b7:b2:ed:83:72:5d:ff:c4:d3:0b:5a:9e:61:a7:e7:b0:9a:1c:
         25:a3:85:a6:9d:b0:61:e8:6a:8d:cd:41:67:79:f9:37:0c:7b:
         f6:9a:2f:3f:a6:62:77:ee:b5:01:f9:db:c1:37:8e:1b:66:ed:
         90:28:04:b5:f7:d5:85:be:57:ab:66:dc:60:c5:a9:df:9d:a9:
         a2:2e:98:1d:75:b5:fe:22:f0:d1:f0:34:90:f9:ca:f1:0a:66:
         4c:c5:b6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:30:20 2026 by rpki-client