Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft
File:                     5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft (raw, json)
Hash identifier:          Yq+6oRcTgn8Yei+YnJ4KNAaQCVTm+AgeIQbbdykp1DI=
Subject key identifier:   7B:4E:E2:F2:FC:0E:E5:A6:03:C1:D7:EE:51:25:6A:B3:82:98:67:84
Authority key identifier: E5:E1:CF:CA:E1:F9:E6:F1:21:CA:13:55:1B:40:F6:98:98:4B:9D:9D
Certificate issuer:       /CN=A91801A5/serialNumber=E5E1CFCAE1F9E6F121CA13551B40F698984B9D9D
Certificate serial:       0727
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft
Manifest number:          071A
Signing time:             Thu 16 Apr 2026 21:49:00 +0000
Manifest this update:     Thu 16 Apr 2026 21:49:00 +0000
Manifest next update:     Thu 23 Apr 2026 21:49:00 +0000
Files and hashes:         1: 5eHPyuH55vEhyhNVG0D2mJhLnZ0.crl (hash: TeCwd58alEpOblG+D/Wo5UR41O8o8MQzpayj2EDxukQ=)
                          2: 54F537EC32CD11EFA6C5320EC4F9AE02.roa (hash: deYX7DERz5Fq3pqOqtk2nebblC/7DyU94H4A8Lsgo5s=)
                          3: CB39C1A0B3B611F0BAAB2960C4F9AE02.roa (hash: pq/ShMq6opqVMtQXrgs1sUDSAdgfVm501YkelB9HbSY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.crl
                          rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:48:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1831 (0x727)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91801A5, serialNumber=E5E1CFCAE1F9E6F121CA13551B40F698984B9D9D
        Validity
            Not Before: Apr 16 21:49:00 2026 GMT
            Not After : Apr 23 21:49:00 2026 GMT
        Subject: CN=69e1594c-6090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a9:df:62:a4:49:06:7e:52:ba:7f:b7:06:b7:
                    6a:b5:d5:70:33:a3:d1:60:23:d5:fd:6d:1b:be:3e:
                    b3:b2:d5:ec:66:f5:74:e0:28:49:52:97:e2:2a:b3:
                    6f:a1:85:bf:8c:b7:06:24:f4:74:ef:b5:1f:6e:c7:
                    65:b0:99:4d:80:39:a5:b4:3f:dd:fd:9e:8c:95:c0:
                    b1:95:1f:66:24:23:33:2f:e8:c8:c0:f0:bf:17:35:
                    d2:71:91:72:74:9f:9a:29:e8:0f:1d:98:76:9c:0a:
                    5b:a8:a6:c7:1a:1a:70:86:50:ad:d1:f3:13:65:cc:
                    c3:16:71:d3:d7:20:6f:fa:ca:e0:4a:75:18:03:88:
                    3d:21:87:a5:24:6a:ff:85:4c:0c:48:bb:2d:88:c6:
                    6a:78:b6:d6:83:60:41:9a:44:c4:e1:db:d6:5e:65:
                    08:21:67:e6:9d:d9:fb:79:3e:61:90:93:1e:2e:9e:
                    5f:fe:ee:73:c3:96:43:b4:39:e2:af:e6:b5:de:aa:
                    bf:39:f3:7c:43:6a:35:d4:ae:20:97:b5:0c:dc:8d:
                    57:31:a8:a2:37:f0:54:ca:b8:9d:25:7a:0d:24:25:
                    51:8d:d7:7d:00:a7:fc:3f:5f:71:5b:90:8b:4d:e3:
                    f2:9e:50:9e:88:3c:55:f6:86:fe:62:48:3e:eb:46:
                    aa:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:4E:E2:F2:FC:0E:E5:A6:03:C1:D7:EE:51:25:6A:B3:82:98:67:84
            X509v3 Authority Key Identifier:
                keyid:E5:E1:CF:CA:E1:F9:E6:F1:21:CA:13:55:1B:40:F6:98:98:4B:9D:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:63:5e:15:ef:65:f4:62:a1:f2:86:ac:d3:69:88:53:d5:69:
         78:31:da:2f:74:0a:d0:4a:96:f4:03:a0:b4:56:7a:d2:e3:1e:
         7c:6e:26:f6:42:e4:36:1e:dd:7a:e7:bc:b2:31:36:04:3b:ad:
         d6:97:89:bd:e5:a0:6f:c8:55:37:70:f2:c7:f1:45:c5:e2:3b:
         3d:50:b3:d4:f6:0e:b9:ef:2c:cc:c0:0d:fe:78:7c:45:47:65:
         5b:7e:b5:81:16:90:b1:fc:35:ec:00:b0:92:c2:02:c7:b8:3b:
         1c:c9:76:42:30:6e:a8:d6:29:82:fd:17:01:2e:a7:3c:e6:c7:
         8d:e2:bf:0d:b3:c5:9d:93:12:b8:c7:c2:51:bc:4a:d0:06:de:
         53:f9:8c:54:2d:7d:b4:b5:a7:4f:fa:62:cf:eb:bc:07:c0:8d:
         22:09:f6:bb:ff:e8:9a:46:ec:1a:d3:9a:b6:d8:87:48:a9:1e:
         ef:6b:b0:02:b3:95:bf:56:a9:db:f7:27:f7:af:a8:be:f2:7d:
         b7:54:8f:cd:f8:13:a0:0f:d8:73:ce:e9:ec:75:48:9c:70:b8:
         d8:72:a2:d1:21:c7:f4:2b:1d:35:93:20:05:66:0c:b8:d8:87:
         10:be:fc:d0:b9:f2:7f:7c:40:cc:ff:8a:f3:a3:ec:c6:96:37:
         8c:33:3e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:50:34 2026 by rpki-client