Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft
File:                     5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft (raw, json)
Hash identifier:          opyeQdnK2YuFTZCizSNVHAEqITXb9efZiQQAC8rENHI=
Subject key identifier:   3A:94:58:76:67:EA:E7:FC:01:F9:4B:95:5A:C4:94:1D:2F:EF:5C:E3
Authority key identifier: E5:E5:D1:68:A0:E1:09:6E:A1:C3:F9:B7:F8:E8:D7:58:EA:EA:23:F3
Certificate issuer:       /CN=A9165362/serialNumber=E5E5D168A0E1096EA1C3F9B7F8E8D758EAEA23F3
Certificate serial:       05FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft
Manifest number:          05CE
Signing time:             Thu 16 Apr 2026 23:05:52 +0000
Manifest this update:     Thu 16 Apr 2026 23:05:51 +0000
Manifest next update:     Thu 23 Apr 2026 23:05:51 +0000
Files and hashes:         1: 5eXRaKDhCW6hw_m3-OjXWOrqI_M.crl (hash: RJ2KWXYyLXSHhd3D4Ff0c69lAE2Gg08E3AwY8ewNgBE=)
                          2: D5AEE7FEF61A11F0A42262E05A6F56BC.roa (hash: YonCxURFZFCSJYKZZl/AlgVFdSlrOcW3O6u6eFemois=)
                          3: 9CB324BA273111EF9F5B0860C4F9AE02.roa (hash: suAI1YPeN8kbgOgmaGzzfLUHLWI1/VRvkqObcPH/nuk=)
                          4: 2C4993AA271B11EF97731F0BC4F9AE02.roa (hash: GP7UGfZCMHOPLL1gZXCEO6qhlaky7I3CQ/nq013zLKM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.crl
                          rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:05:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1530 (0x5fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165362, serialNumber=E5E5D168A0E1096EA1C3F9B7F8E8D758EAEA23F3
        Validity
            Not Before: Apr 16 23:05:51 2026 GMT
            Not After : Apr 23 23:05:51 2026 GMT
        Subject: CN=69e16b50-a0d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:81:fe:1d:c2:87:76:09:a8:10:35:4e:e7:ec:
                    d4:7e:fc:41:8e:6a:1b:89:6b:dd:79:ec:94:91:7c:
                    c0:75:c2:d6:0c:9c:aa:d3:c2:52:31:6e:e2:b4:c7:
                    c8:26:5d:36:cb:41:08:79:e2:cd:b0:af:ae:e1:4a:
                    4b:db:f5:1d:be:83:d2:7b:1e:08:34:79:8b:8d:54:
                    37:b7:6e:99:25:f9:64:31:ca:04:16:78:25:61:ad:
                    bc:cc:ae:ca:28:14:96:a0:ec:97:c6:75:1e:ca:e4:
                    49:66:15:d5:b4:df:49:e2:78:47:01:bc:bc:8b:47:
                    b3:04:aa:f0:54:b4:70:e2:e0:21:a3:79:2e:7d:2f:
                    98:eb:4f:80:c1:5b:f6:05:f7:5a:bb:27:bc:14:71:
                    95:b1:c1:6b:40:26:2f:5b:f0:36:a7:06:e2:df:65:
                    13:d1:0f:fd:b5:c3:ca:07:af:54:ca:b6:52:d9:df:
                    69:19:09:9c:30:54:9c:c4:c7:14:28:ac:93:f5:8c:
                    17:a3:22:13:03:42:f9:b8:9f:65:df:cf:ed:d0:98:
                    84:47:8b:f5:6c:fd:34:8d:e2:d1:da:f4:03:6f:b1:
                    17:47:6f:75:b1:bd:ef:4a:be:b1:9a:1c:ff:18:14:
                    0f:1b:ac:35:87:95:fe:a7:f0:07:50:79:c7:1b:a6:
                    0e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:94:58:76:67:EA:E7:FC:01:F9:4B:95:5A:C4:94:1D:2F:EF:5C:E3
            X509v3 Authority Key Identifier:
                keyid:E5:E5:D1:68:A0:E1:09:6E:A1:C3:F9:B7:F8:E8:D7:58:EA:EA:23:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:20:37:4e:75:6f:d3:1a:5a:c3:60:d6:93:7a:7b:62:97:c3:
         7a:64:44:9b:f3:02:ba:c4:af:b9:1d:f1:5b:4d:86:27:8c:83:
         80:ce:25:9a:e5:0a:4c:20:e0:7d:4f:a8:d6:06:8d:dd:c2:94:
         ee:85:45:66:01:e6:90:42:0e:02:bf:78:69:5d:00:4b:51:f5:
         4f:e7:de:a6:16:57:14:af:96:ee:9b:c1:ee:93:3c:8e:7d:29:
         60:a5:b8:f1:88:34:c4:72:ff:37:81:bf:42:0a:81:5f:05:33:
         d3:01:d8:37:ea:ca:7f:d2:ca:e7:22:a7:a6:42:1e:87:fa:15:
         9f:85:2d:35:4a:d9:8e:dc:2c:44:f5:2f:15:95:d7:1d:97:e5:
         f1:01:e9:fd:42:af:7b:ca:0d:8f:c6:24:37:82:82:5e:91:25:
         46:05:c6:14:5c:2a:bf:d5:ed:ae:40:61:ee:da:14:b3:ed:08:
         61:d2:6e:23:42:e2:4d:62:88:06:01:0a:13:11:0a:79:b7:71:
         82:9d:27:ea:88:1e:d4:59:0c:7d:e2:17:c5:a8:d4:59:4c:58:
         c7:a6:0b:62:06:b4:6a:23:5d:36:d0:dc:d0:52:11:ed:b3:9c:
         83:8e:72:47:0a:79:43:42:62:a1:5d:81:db:7c:13:61:2a:f7:
         52:c0:0d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:06:05 2026 by rpki-client