Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft
File:                     5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft (raw, json)
Hash identifier:          4isO+o/t4t25uLLjNj7FS6PM+nlUumUg6vUfmr5WLvw=
Subject key identifier:   C0:54:DB:3D:0B:CE:2F:BD:D2:5B:18:2E:E8:DE:9B:62:2F:2F:29:63
Authority key identifier: E5:18:E9:48:15:C4:6D:7D:8E:6F:EF:4E:BC:3D:18:DF:0E:21:F8:36
Certificate issuer:       /CN=A9183DB7/serialNumber=E518E94815C46D7D8E6FEF4EBC3D18DF0E21F836
Certificate serial:       0E9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft
Manifest number:          0E85
Signing time:             Thu 16 Apr 2026 17:40:37 +0000
Manifest this update:     Thu 16 Apr 2026 17:40:36 +0000
Manifest next update:     Thu 23 Apr 2026 17:40:36 +0000
Files and hashes:         1: 5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl (hash: Rk6i2W/9pRDbjWjPdwZ3M8vYaZS6SLhGkw+bnYtMdEg=)
                          2: 6B7E8FC670DE11EC8B944928C4F9AE02.roa (hash: DEYl4xuRBtxqmhzfpUHokIt3OryoQ/FdXNVfb0S7BgA=)
                          3: 9F14D15E70DB11ECACCABD21C4F9AE02.roa (hash: xvrivgHeCdDydOD/ZktKC2lGC9vuqeY8ZsH11+NgJlU=)
                          4: 6A5EC93A70DE11EC8B944928C4F9AE02.roa (hash: 2vmyMW6TtcbaqXFP7Qp6BP+UrMdH5alLGCt5uNXx+l8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl
                          rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 17:40:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3743 (0xe9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183DB7, serialNumber=E518E94815C46D7D8E6FEF4EBC3D18DF0E21F836
        Validity
            Not Before: Apr 16 17:40:36 2026 GMT
            Not After : Apr 23 17:40:36 2026 GMT
        Subject: CN=69e11f14-e274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2d:1f:ee:ff:cd:18:61:78:b9:18:f5:d3:1c:
                    37:dd:55:cd:7d:f8:1f:81:63:68:f1:e0:87:c0:65:
                    ff:9c:51:7e:4e:dd:7e:a7:10:f3:60:56:66:6c:ba:
                    a9:fa:54:30:98:33:b2:72:fe:bc:53:1c:a6:fb:98:
                    2f:8a:26:32:65:19:b8:77:27:9d:3e:e4:2e:98:a4:
                    dd:26:09:f0:53:7a:80:78:c0:3a:f7:91:69:72:1b:
                    a7:7a:32:2d:6e:f4:01:1b:21:9a:82:d1:fd:77:47:
                    5b:c9:7a:af:f5:b8:d9:98:4d:32:32:9c:33:25:88:
                    3c:85:75:ca:64:95:b7:85:02:84:18:14:ce:3d:42:
                    f2:11:8e:ff:09:15:77:e3:2b:cf:ed:15:5e:16:44:
                    ca:af:03:0c:02:c3:da:4f:dd:96:c8:37:f5:b9:b7:
                    89:bb:0a:2b:64:07:c7:5c:93:24:36:de:52:3a:22:
                    de:91:d5:d6:cf:6b:90:47:35:db:5b:33:8d:a9:df:
                    9a:c0:1c:e0:74:fa:78:74:b1:0c:1b:a4:07:e3:b1:
                    f6:91:3f:82:7d:fe:39:49:ec:43:74:b7:98:6a:1c:
                    99:3d:31:2c:c6:49:01:20:1d:09:78:a5:c0:83:83:
                    b0:88:42:e2:2d:16:fa:af:b8:98:cb:43:11:1b:45:
                    f1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:54:DB:3D:0B:CE:2F:BD:D2:5B:18:2E:E8:DE:9B:62:2F:2F:29:63
            X509v3 Authority Key Identifier:
                keyid:E5:18:E9:48:15:C4:6D:7D:8E:6F:EF:4E:BC:3D:18:DF:0E:21:F8:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:50:17:68:ed:03:53:91:ea:01:c7:76:f6:e4:77:52:2c:84:
         20:f4:cf:01:1c:4b:4e:3f:9d:e5:5c:f9:bf:c4:11:5f:20:fe:
         98:fa:6a:9c:61:a6:14:f6:58:95:8d:19:5c:6e:16:d1:af:93:
         42:19:72:ee:18:69:bd:51:bd:e0:c5:bb:9d:70:1e:fd:ea:42:
         33:79:bc:6a:a4:32:6a:68:73:f2:00:a1:f1:1c:26:32:07:5a:
         87:42:89:01:09:f9:23:ff:3d:48:a0:3f:62:9c:b5:81:a7:e7:
         94:b1:a8:1c:4b:36:17:b9:fb:b7:69:ff:fd:93:0c:fa:87:b6:
         5b:8e:64:58:51:9f:c4:ac:a3:e9:c3:57:59:1f:ff:3e:16:12:
         83:5c:d6:38:12:f0:c2:6e:0c:e2:dc:6e:99:02:ab:2b:e1:f2:
         62:5a:dc:e3:7d:38:a5:29:25:fb:3e:92:0f:95:0d:30:4d:60:
         dc:50:6e:9d:82:aa:9a:5b:48:0e:3f:71:eb:87:8b:33:c6:d1:
         49:3e:27:af:8f:10:fe:26:c3:5e:38:4f:ad:8e:65:c0:0b:3f:
         51:05:df:28:df:29:1d:2c:89:8d:44:89:09:f7:85:04:9a:60:
         a2:28:3d:90:fa:6b:0e:6b:47:d0:55:cd:28:6c:62:6c:5b:e4:
         1d:44:01:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:59:59 2026 by rpki-client