Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft
File:                     5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft (raw, json)
Hash identifier:          0t/b2CP9TTwF3LRP9t147F2wpmIy3XudCTiQ217lgKY=
Subject key identifier:   51:CC:FF:B2:78:CE:19:1A:D9:3C:5B:70:D4:35:8D:E8:AD:57:FF:C4
Authority key identifier: E5:8F:0F:52:A4:D2:D1:DE:44:67:5A:CA:17:55:7B:F9:82:EC:7D:79
Certificate issuer:       /CN=A91698EC/serialNumber=E58F0F52A4D2D1DE44675ACA17557BF982EC7D79
Certificate serial:       0171
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft
Manifest number:          0169
Signing time:             Fri 17 Apr 2026 04:35:31 +0000
Manifest this update:     Fri 17 Apr 2026 04:35:30 +0000
Manifest next update:     Fri 24 Apr 2026 04:35:30 +0000
Files and hashes:         1: 5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl (hash: dtUXxB7bI3TBYH9ibpqH6fC1ZB7ryit7dMOZj/nIzfI=)
                          2: 02BCE50286AF11EF9EFFD52FC4F9AE02.roa (hash: HA8Kw92LD3QGPRWQy9en3UrEthfqY+7JRHJQJs+dCaQ=)
                          3: 1FCE5CE0214F11EFAB245D49C4F9AE02.roa (hash: 1x0I+eVdWJfH3yy8/IHMHpk/2VtmPzxn2HvmLROgLBQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl
                          rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:35:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 369 (0x171)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91698EC, serialNumber=E58F0F52A4D2D1DE44675ACA17557BF982EC7D79
        Validity
            Not Before: Apr 17 04:35:30 2026 GMT
            Not After : Apr 24 04:35:30 2026 GMT
        Subject: CN=69e1b893-62a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:76:81:b4:7f:bf:24:cb:74:a6:4b:39:15:c3:
                    39:d0:01:0f:5a:85:dc:80:10:83:8b:80:38:0a:07:
                    4a:be:03:68:b6:ea:57:ca:4f:de:16:f3:80:8f:c6:
                    67:1a:70:bb:e5:83:2a:c1:32:8a:22:af:80:bf:20:
                    f7:c8:d1:6c:2b:24:2f:f5:ab:4c:19:31:5b:7a:ad:
                    42:1f:44:5a:c5:a6:50:d0:58:de:9f:e1:63:70:ba:
                    e3:5c:bb:b2:7a:c6:ce:6e:7b:ff:9a:c3:3f:0c:b9:
                    c4:27:d4:89:3c:2c:d2:83:76:9b:f5:09:bb:c0:50:
                    4b:c2:eb:b4:e5:17:13:27:6f:59:6c:a3:56:a0:ae:
                    db:04:a9:77:fc:1c:94:9f:83:fb:37:43:df:9e:aa:
                    d3:f1:fe:f9:1b:39:67:59:bb:f6:b7:d4:64:f7:94:
                    dd:e4:50:9a:28:40:7d:58:11:4e:83:0b:29:c7:5a:
                    ef:3c:f3:ee:86:93:d0:39:ec:13:ac:f0:b6:c7:f3:
                    c4:9a:d2:3a:c2:0a:6b:98:15:94:bb:b6:c9:a2:f7:
                    16:9d:71:6d:c8:9b:f9:76:06:88:8a:ed:8a:df:39:
                    27:20:e7:37:2b:e3:cf:94:22:69:a0:9f:8a:0e:49:
                    ea:2e:e7:ae:90:58:da:8b:dc:00:e9:77:e7:68:ac:
                    64:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:CC:FF:B2:78:CE:19:1A:D9:3C:5B:70:D4:35:8D:E8:AD:57:FF:C4
            X509v3 Authority Key Identifier:
                keyid:E5:8F:0F:52:A4:D2:D1:DE:44:67:5A:CA:17:55:7B:F9:82:EC:7D:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:2a:51:15:04:94:84:10:d9:d1:2f:27:e5:c7:3b:6f:39:3c:
         a8:ef:b5:53:f3:7c:32:64:b0:38:72:0c:5b:65:a3:49:cb:69:
         b6:86:0c:dd:5b:16:5d:22:1a:07:64:d8:d2:30:02:5b:2b:ae:
         05:85:37:27:ab:ef:e0:93:86:e8:a6:c3:72:6e:42:e3:84:c8:
         cb:ba:6d:4d:a2:99:bd:dd:72:38:fb:48:16:98:8d:b7:d2:a1:
         5a:60:ed:cd:23:9f:6e:67:03:31:82:38:ea:08:49:4c:c7:72:
         67:08:2c:fa:75:8f:51:d6:ec:40:3d:65:61:08:93:12:e5:c4:
         66:6b:a3:d5:a1:b2:0c:5a:e8:8e:53:c9:88:b5:ea:3b:7a:a5:
         c8:47:22:86:6c:c2:4c:0e:6d:63:32:7e:1f:39:11:29:5e:2d:
         28:3d:be:77:c2:fc:bf:c3:fd:a7:54:9a:a6:e7:ab:84:54:67:
         46:9c:ba:80:c6:bd:26:4a:02:59:a6:e8:84:02:d6:71:53:43:
         c0:09:c8:4b:9f:b8:fe:11:b9:71:76:f5:d6:81:ac:65:d1:bb:
         15:c2:c2:32:58:63:c6:e3:ea:19:6b:e0:ae:b3:b0:af:80:1a:
         30:b7:9e:84:41:9e:74:f3:db:17:e4:95:5a:f8:3f:87:be:3c:
         11:7a:c0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:58:34 2026 by rpki-client