Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E63A/37D7A5AE032F11EBB5882E0AC4F9AE02/5tR4mVLfAG9kzr8PNVcqW5bktzc.mft
File:                     5tR4mVLfAG9kzr8PNVcqW5bktzc.mft (raw, json)
Hash identifier:          eowVfuzpBF9DBuS4KC8rbwndH+j3baSA9aH3CtqyIgg=
Subject key identifier:   57:18:14:8C:E6:C3:AB:71:1D:42:FC:02:93:AE:8C:19:48:25:DE:2C
Authority key identifier: E6:D4:78:99:52:DF:00:6F:64:CE:BF:0F:35:57:2A:5B:96:E4:B7:37
Certificate issuer:       /CN=A918E63A/serialNumber=E6D4789952DF006F64CEBF0F35572A5B96E4B737
Certificate serial:       0845
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5tR4mVLfAG9kzr8PNVcqW5bktzc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E63A/37D7A5AE032F11EBB5882E0AC4F9AE02/5tR4mVLfAG9kzr8PNVcqW5bktzc.mft
Manifest number:          0845
Signing time:             Thu 16 Apr 2026 20:44:01 +0000
Manifest this update:     Thu 16 Apr 2026 20:44:01 +0000
Manifest next update:     Thu 23 Apr 2026 20:44:01 +0000
Files and hashes:         1: 5tR4mVLfAG9kzr8PNVcqW5bktzc.crl (hash: Rr+zlq3v8Ejr1Mlo/FQYCtnHpHnjE44ZRsI3Yitzsf4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E63A/37D7A5AE032F11EBB5882E0AC4F9AE02/5tR4mVLfAG9kzr8PNVcqW5bktzc.crl
                          rsync://rpki.apnic.net/member_repository/A918E63A/37D7A5AE032F11EBB5882E0AC4F9AE02/5tR4mVLfAG9kzr8PNVcqW5bktzc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5tR4mVLfAG9kzr8PNVcqW5bktzc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:44:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2117 (0x845)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E63A, serialNumber=E6D4789952DF006F64CEBF0F35572A5B96E4B737
        Validity
            Not Before: Apr 16 20:44:01 2026 GMT
            Not After : Apr 23 20:44:01 2026 GMT
        Subject: CN=69e14a11-f686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:5b:ab:2c:0c:28:3e:92:32:80:5d:6e:a7:38:
                    0b:e5:df:60:b0:91:ed:d0:f0:4d:8b:86:8b:57:6f:
                    d2:4d:be:36:4b:01:82:2e:90:c6:02:1b:1d:ab:01:
                    a4:e4:40:af:b2:3d:85:33:60:44:ad:d4:ce:d1:9c:
                    28:d7:db:a9:bf:04:c7:83:ef:75:6f:14:04:3f:c3:
                    14:1a:8a:b3:c2:2a:b4:79:fd:04:e9:0a:62:69:cb:
                    93:c7:fc:b4:68:17:eb:90:52:62:07:15:5d:d9:e1:
                    a6:77:69:51:f5:5f:7f:d9:4a:d3:9b:37:0f:11:15:
                    3b:23:59:06:73:a8:e2:a0:d9:b6:31:c4:21:60:c7:
                    d0:cd:7c:e1:36:3b:ff:20:bb:e7:8c:1d:fa:72:0e:
                    30:30:b0:3e:cb:f3:ac:60:15:44:e8:d3:f2:5a:df:
                    e9:24:2c:f1:bb:a3:96:09:6b:06:22:8f:5d:b0:e4:
                    b2:67:75:d9:45:2e:30:18:10:45:47:17:3a:a8:d8:
                    cc:11:eb:7f:f9:57:90:19:30:81:c4:4e:6a:1a:ab:
                    55:50:8a:bd:a8:09:b0:bd:74:ca:01:bf:96:38:2f:
                    71:96:d4:9c:8b:f5:6b:e5:92:11:70:02:a2:63:31:
                    0b:be:65:69:19:e6:cd:a5:bb:40:ae:9f:aa:92:b6:
                    28:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:18:14:8C:E6:C3:AB:71:1D:42:FC:02:93:AE:8C:19:48:25:DE:2C
            X509v3 Authority Key Identifier:
                keyid:E6:D4:78:99:52:DF:00:6F:64:CE:BF:0F:35:57:2A:5B:96:E4:B7:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E63A/37D7A5AE032F11EBB5882E0AC4F9AE02/5tR4mVLfAG9kzr8PNVcqW5bktzc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5tR4mVLfAG9kzr8PNVcqW5bktzc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E63A/37D7A5AE032F11EBB5882E0AC4F9AE02/5tR4mVLfAG9kzr8PNVcqW5bktzc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:30:e4:d9:ea:82:f3:37:19:0d:b1:69:af:29:97:b5:19:07:
         5d:74:4d:d2:25:61:78:db:ff:55:64:e7:0b:4e:da:05:8f:41:
         be:c6:7b:9c:ab:46:40:1e:5f:78:6a:e2:12:9b:ca:4b:76:7a:
         38:da:79:38:d8:86:b1:f5:cb:1c:bf:43:b6:fc:05:33:20:5c:
         76:08:d2:ce:b4:d9:a8:a0:d5:0c:54:06:cd:7c:df:4f:8d:96:
         cc:fe:6e:e9:c2:dd:92:1e:db:18:43:6a:53:e8:cc:8b:2a:55:
         08:a6:65:a6:d2:59:ef:4f:54:ba:e1:37:76:43:e0:4b:39:fc:
         fa:7c:bf:52:61:e9:99:79:11:d4:e2:a7:90:7f:fd:85:f2:8a:
         8c:3f:da:a2:b2:68:c0:0c:e7:d8:28:4c:d5:79:24:c4:68:54:
         48:b7:0c:56:a3:bb:b5:32:12:07:0b:26:8c:46:9b:74:89:5d:
         94:b2:fc:84:c0:45:55:07:9e:4c:f1:04:b7:83:48:94:09:8b:
         4b:94:41:af:e4:7d:fd:ff:9c:a7:3b:41:05:68:58:d1:11:68:
         7d:7f:4f:8c:79:93:83:84:a5:23:da:4a:6e:3b:33:f0:af:4b:
         8b:17:9b:18:48:74:b5:22:a5:84:9b:77:04:78:13:72:6f:c9:
         6b:c5:c6:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:12:17 2026 by rpki-client