Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft
File:                     5iRBKkJ5WJuewvqzIiurBibTElo.mft (raw, json)
Hash identifier:          jghb73tSuh3GNMh0ofHkUy+Nb0FNFqA9VU8ADSnbcro=
Subject key identifier:   02:93:95:D1:EC:D7:E9:EA:48:D1:E8:37:54:99:E5:3D:05:DA:A3:17
Authority key identifier: E6:24:41:2A:42:79:58:9B:9E:C2:FA:B3:22:2B:AB:06:26:D3:12:5A
Certificate issuer:       /CN=A9168336/serialNumber=E624412A4279589B9EC2FAB3222BAB0626D3125A
Certificate serial:       0D28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iRBKkJ5WJuewvqzIiurBibTElo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft
Manifest number:          0D14
Signing time:             Thu 16 Apr 2026 18:05:52 +0000
Manifest this update:     Thu 16 Apr 2026 18:05:51 +0000
Manifest next update:     Thu 23 Apr 2026 18:05:51 +0000
Files and hashes:         1: 5iRBKkJ5WJuewvqzIiurBibTElo.crl (hash: V2HX29hWCRcj8T4Sqyjz1/84fBYNDaVEL27VJdN36MA=)
                          2: 6B6223B294D011F08FAC1420C4F9AE02.roa (hash: ywPnX5HWIz7gB+GZOiMioEbYiFIq0HckI3yhWxQCoN4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.crl
                          rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iRBKkJ5WJuewvqzIiurBibTElo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:05:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3368 (0xd28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168336, serialNumber=E624412A4279589B9EC2FAB3222BAB0626D3125A
        Validity
            Not Before: Apr 16 18:05:51 2026 GMT
            Not After : Apr 23 18:05:51 2026 GMT
        Subject: CN=69e12500-2824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2f:23:9f:77:72:de:54:5b:94:08:7b:27:bd:
                    31:d2:f1:6a:c8:ed:c1:ad:3e:6b:54:d7:3e:4a:c9:
                    30:b0:65:ee:e2:4f:d5:c6:f2:8c:43:79:4f:1e:17:
                    46:2e:d2:e6:19:35:80:76:62:0b:d7:39:e1:bd:f5:
                    7c:2e:8b:74:59:48:27:f5:ab:ff:5b:0d:53:0a:d9:
                    53:13:04:d4:fc:da:59:7c:b8:c4:e9:25:9f:fe:fa:
                    6a:36:68:aa:ed:0a:49:aa:e7:95:0a:fc:3b:5d:b0:
                    2c:5d:b9:ad:2a:57:18:6d:74:b3:88:2b:c1:b8:e6:
                    4e:3a:57:6f:06:8e:4c:19:ae:5d:df:dc:45:fe:92:
                    54:d8:c6:d2:1f:df:57:a6:6c:15:78:9e:9a:42:80:
                    25:f4:e8:96:72:98:3a:1a:17:bd:20:6b:8d:b0:fe:
                    d0:99:fb:7c:fa:7b:66:77:d1:42:e1:ba:73:b2:12:
                    3b:4e:b0:73:8d:f7:bf:1a:63:87:b2:c2:c3:7e:bc:
                    aa:f1:32:35:22:eb:72:e6:76:d1:d9:35:42:cd:c0:
                    7b:e8:ad:6e:6d:1e:87:9c:1d:9b:00:d3:24:05:81:
                    10:5d:61:02:41:5c:13:21:ea:9e:8e:09:2e:47:12:
                    55:1b:99:60:84:54:3d:65:b8:25:75:f4:26:b2:28:
                    fb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:93:95:D1:EC:D7:E9:EA:48:D1:E8:37:54:99:E5:3D:05:DA:A3:17
            X509v3 Authority Key Identifier:
                keyid:E6:24:41:2A:42:79:58:9B:9E:C2:FA:B3:22:2B:AB:06:26:D3:12:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iRBKkJ5WJuewvqzIiurBibTElo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:d9:ae:f6:42:25:4a:95:62:f3:4d:2c:21:bd:0a:0c:0f:98:
         1c:05:cf:3d:50:4d:36:b1:33:9c:ca:c8:19:7a:04:7c:e5:09:
         ef:0d:3e:77:c4:45:34:6d:3d:d3:8d:19:64:ff:e4:a4:03:25:
         d2:2d:7d:e9:a8:db:e1:68:f7:c2:64:74:3b:d9:7e:19:e7:fe:
         b3:12:a9:68:d8:2f:d6:57:34:31:ae:7a:9c:49:f9:3e:f3:ee:
         38:62:67:91:ea:79:82:9c:10:f2:be:19:a7:0c:d1:6e:b3:bb:
         97:c9:1b:aa:ca:6f:31:a0:55:3b:06:f1:b0:ec:4d:a7:b0:2f:
         c6:62:ad:50:3f:2b:7e:12:6c:a7:7b:17:00:cc:67:de:14:fb:
         ba:63:de:93:a0:bf:e0:b3:9c:32:44:8e:e2:99:ee:8a:7c:43:
         08:02:37:6e:65:0e:a9:cc:d8:4f:e0:ae:b5:11:68:68:be:f1:
         78:44:ea:42:4c:e9:ea:45:17:b6:30:73:62:29:0c:3c:b4:28:
         ce:9d:1e:0d:a7:a0:70:b8:58:fb:bd:08:78:24:04:ca:ac:e1:
         ae:c7:2f:24:52:29:31:6d:5f:cb:e5:0f:ed:72:e5:5b:28:12:
         58:3b:fa:e0:09:b5:03:07:2b:3c:7e:ed:77:ac:22:a4:44:ae:
         ca:32:11:ef
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDSgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjgzMzYxMTAvBgNVBAUTKEU2MjQ0MTJBNDI3OTU4OUI5RUMyRkFCMzIyMkJBQjA2
MjZEMzEyNUEwHhcNMjYwNDE2MTgwNTUxWhcNMjYwNDIzMTgwNTUxWjAYMRYwFAYD
VQQDEw02OWUxMjUwMC0yODI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAni8jn3dy3lRblAh7J70x0vFqyO3BrT5rVNc+SskwsGXu4k/VxvKMQ3lPHhdG
LtLmGTWAdmIL1znhvfV8Lot0WUgn9av/Ww1TCtlTEwTU/NpZfLjE6SWf/vpqNmiq
7QpJqueVCvw7XbAsXbmtKlcYbXSziCvBuOZOOldvBo5MGa5d39xF/pJU2MbSH99X
pmwVeJ6aQoAl9OiWcpg6Ghe9IGuNsP7Qmft8+ntmd9FC4bpzshI7TrBzjfe/GmOH
ssLDfryq8TI1Iuty5nbR2TVCzcB76K1ubR6HnB2bANMkBYEQXWECQVwTIeqejgku
RxJVG5lghFQ9ZbgldfQmsij7nQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAKTldHs
1+nqSNHoN1SZ5T0F2qMXMB8GA1UdIwQYMBaAFOYkQSpCeVibnsL6syIrqwYm0xJa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODMzNi8xOUY3NUE2NjAx
Q0QxMUVBQjg2NUVBMjJDNEY5QUUwMi81aVJCS2tKNVdKdWV3dnF6SWl1ckJpYlRF
bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVpUkJLa0o1V0p1ZXd2cXpJaXVyQmliVEVsby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
ODMzNi8xOUY3NUE2NjAxQ0QxMUVBQjg2NUVBMjJDNEY5QUUwMi81aVJCS2tKNVdK
dWV3dnF6SWl1ckJpYlRFbG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMdmu9kIlSpVi800sIb0KDA+YHAXPPVBNNrEznMrIGXoEfOUJ7w0+d8RFNG09
040ZZP/kpAMl0i196ajb4Wj3wmR0O9l+Gef+sxKpaNgv1lc0Ma56nEn5PvPuOGJn
kep5gpwQ8r4ZpwzRbrO7l8kbqspvMaBVOwbxsOxNp7AvxmKtUD8rfhJsp3sXAMxn
3hT7umPek6C/4LOcMkSO4pnuinxDCAI3bmUOqczYT+CutRFoaL7xeETqQkzp6kUX
tjBzYikMPLQozp0eDaegcLhY+70IeCQEyqzhrscvJFIpMW1fy+UP7XLlWygSWDv6
4Am1AwcrPH7td6wipESuyjIR7w==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:12:19 2026 by rpki-client