Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft
File:                     M5P50HCy5wlJrKKqzI5l6JDnQJk.mft (raw, json)
Hash identifier:          +gRanKswZNCm1OjmYu+YZaQbOnyrHkCdT+za4YIjm2w=
Subject key identifier:   17:44:B5:D9:35:7F:AF:7B:6A:A2:6F:16:4F:C8:3C:AD:17:2F:C7:DD
Authority key identifier: 33:93:F9:D0:70:B2:E7:09:49:AC:A2:AA:CC:8E:65:E8:90:E7:40:99
Certificate issuer:       /CN=A916DB72/serialNumber=3393F9D070B2E70949ACA2AACC8E65E890E74099
Certificate serial:       0163
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft
Manifest number:          0156
Signing time:             Fri 17 Apr 2026 04:43:18 +0000
Manifest this update:     Fri 17 Apr 2026 04:43:17 +0000
Manifest next update:     Fri 24 Apr 2026 04:43:17 +0000
Files and hashes:         1: M5P50HCy5wlJrKKqzI5l6JDnQJk.crl (hash: thhRBXNT02HQyMxCmhyQTET/5LmB5MPeTzJ2h4zoqes=)
                          2: 81C87DDE6C8311EFB20D5276C4F9AE02.roa (hash: npEv0GL7n1EnWpzfcHXymx9nG0SCeEVvS7H50YyGOdA=)
                          3: 92F925C231F511EFA1744F0EC4F9AE02.roa (hash: MdsgxtSVf/cKPbVHpzAfXZzC0tIBREHraRN4Ts8algE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.crl
                          rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:43:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 355 (0x163)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DB72, serialNumber=3393F9D070B2E70949ACA2AACC8E65E890E74099
        Validity
            Not Before: Apr 17 04:43:17 2026 GMT
            Not After : Apr 24 04:43:17 2026 GMT
        Subject: CN=69e1ba65-142b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:38:b8:57:c1:35:fa:68:3f:56:92:31:d4:84:
                    a0:e5:f3:6c:52:7b:00:ec:98:92:82:a4:38:a6:d4:
                    d2:f4:ef:a7:62:5c:80:5e:15:2d:55:6e:d1:b9:1f:
                    b9:7d:d9:90:04:ff:27:30:58:82:95:77:fa:46:0b:
                    2e:a7:a5:ed:65:d0:45:11:69:76:35:0e:b0:19:7e:
                    c9:49:36:25:e5:b0:e6:8f:0b:6e:cd:4d:c2:d2:25:
                    45:36:6f:91:48:dd:dc:6c:cc:eb:d9:f7:93:21:6c:
                    00:50:2f:c4:4b:22:4e:81:fc:99:6d:59:ff:c1:e9:
                    6f:40:6b:a6:71:52:b5:a3:86:35:61:c7:74:6e:b4:
                    5c:1f:1a:d1:f0:fb:96:92:2a:3f:41:d1:56:a2:90:
                    7f:e7:b7:05:55:a2:c7:62:e4:07:d8:18:65:08:b9:
                    ad:02:81:ef:f8:18:fe:53:3d:a7:c6:d3:4b:11:a3:
                    31:40:e8:68:c7:82:a3:93:c2:ed:c7:b0:4a:a7:a5:
                    ac:0a:a3:bb:90:5e:d7:3d:de:d8:a4:92:ff:53:c4:
                    02:3a:dc:82:f2:65:4e:60:58:1e:dd:8a:f0:7e:48:
                    35:60:ac:ab:ec:96:98:9b:72:45:bf:f6:a2:7a:69:
                    c3:7a:ab:0c:93:e9:2c:5d:6a:3b:f2:9f:88:32:a9:
                    30:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:44:B5:D9:35:7F:AF:7B:6A:A2:6F:16:4F:C8:3C:AD:17:2F:C7:DD
            X509v3 Authority Key Identifier:
                keyid:33:93:F9:D0:70:B2:E7:09:49:AC:A2:AA:CC:8E:65:E8:90:E7:40:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:24:12:dd:20:e2:51:be:ae:0c:65:bd:8f:f3:8a:bd:3b:12:
         f8:e6:0e:bc:74:53:08:a0:c8:ae:f9:87:38:26:3d:3f:b4:5d:
         ed:49:af:51:ff:13:96:c7:d5:f9:74:02:4a:c2:e8:7a:4d:f7:
         c7:99:97:1d:68:9d:cb:b1:ed:6c:44:3a:dd:d0:65:52:e2:a4:
         a9:48:14:2a:01:23:ba:f8:a6:28:87:26:e8:d0:53:be:a8:1c:
         6c:b4:b5:3b:a4:55:77:53:d6:89:a0:4b:03:34:cc:d7:f3:e1:
         45:b0:52:2d:b8:c3:54:30:70:57:d9:48:e4:f5:28:93:95:44:
         e2:df:84:4d:8c:f1:82:3d:5a:c1:71:34:af:6d:5b:34:ba:48:
         ea:20:8d:c2:ab:b7:6b:90:35:df:68:6d:c2:09:e0:ed:da:55:
         67:25:3c:8d:0c:36:cd:2f:44:49:d2:ae:90:e9:f4:c6:42:ae:
         b5:76:7f:dd:9d:f2:a2:88:6b:7d:59:11:51:f2:10:c1:e3:f0:
         63:e4:f1:c2:37:9f:f7:d3:b0:9e:5d:ef:15:eb:97:db:55:a3:
         82:e5:92:f6:81:cd:9a:1c:12:87:b4:3c:ce:94:35:c5:8a:60:
         da:6e:7b:3e:81:88:d2:cf:bd:21:01:98:6c:b9:6d:90:4c:91:
         01:dc:81:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:13:55 2026 by rpki-client