Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft
File:                     5o7RJO9le2eb0SpY-gNQFODf6Cc.mft (raw, json)
Hash identifier:          LGcW8SL/YkLjm3B9KQ3VtxLMSQ1txmQvbySW1w1wwxw=
Subject key identifier:   5D:FC:C1:6B:08:40:C0:6A:2C:C0:48:22:4A:25:ED:31:46:EA:C2:8F
Authority key identifier: E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27
Certificate issuer:       /CN=A9191A09/serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827
Certificate serial:       0E79
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft
Manifest number:          0E62
Signing time:             Thu 16 Apr 2026 14:41:24 +0000
Manifest this update:     Thu 16 Apr 2026 14:41:24 +0000
Manifest next update:     Thu 23 Apr 2026 14:41:24 +0000
Files and hashes:         1: 5o7RJO9le2eb0SpY-gNQFODf6Cc.crl (hash: iwYC+aZmEC1EiVyzPDEEKD+wPrQB6gTEsk8/67i9zSo=)
                          2: 9C06E51EE37A11EA84A20810C4F9AE02.roa (hash: VGb7fQ4+XdUAVdKkbAj+FraUZZtrQ9DDCForGAVJX7M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl
                          rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 14:41:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3705 (0xe79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191A09, serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827
        Validity
            Not Before: Apr 16 14:41:24 2026 GMT
            Not After : Apr 23 14:41:24 2026 GMT
        Subject: CN=69e0f514-db1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cc:6f:81:89:fe:46:26:70:e6:98:51:ad:e8:
                    94:4f:00:a2:d3:3b:f1:e3:64:8c:b2:87:3c:4c:a1:
                    97:c7:cb:93:eb:84:5e:65:c1:7f:3f:ab:73:2b:41:
                    c6:38:d9:60:ec:b1:da:fd:75:5d:ba:31:52:1c:9a:
                    09:0c:ed:77:7b:f9:30:ac:19:cc:89:c6:50:d4:28:
                    66:f8:93:22:cf:ed:7b:34:57:55:40:46:b5:20:59:
                    70:da:47:5d:2f:9a:0f:d0:55:b8:27:26:0d:5f:08:
                    57:91:2f:b3:89:a8:49:7e:18:9c:58:aa:8f:33:de:
                    2a:12:5e:ad:0c:76:c3:f5:92:b0:af:3e:58:84:da:
                    2b:fe:d9:79:22:19:37:e1:3e:3a:a8:00:21:b5:0b:
                    39:58:a6:3b:e8:ce:9d:92:6e:98:05:a4:de:86:ed:
                    5e:e3:7f:bc:ba:8f:2a:5f:37:22:76:94:ec:a4:49:
                    1c:15:ab:5a:04:1b:0f:45:da:2c:09:0b:37:f4:8d:
                    16:ba:de:11:80:e6:62:31:61:1a:52:64:66:73:b7:
                    f8:bb:62:3c:df:20:16:11:75:eb:54:0a:fe:67:9e:
                    16:53:aa:72:10:3c:77:d3:1b:e0:f9:1c:34:10:60:
                    1a:99:81:7a:93:fa:b2:93:39:f1:37:f1:f3:75:ac:
                    c0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:FC:C1:6B:08:40:C0:6A:2C:C0:48:22:4A:25:ED:31:46:EA:C2:8F
            X509v3 Authority Key Identifier:
                keyid:E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:12:95:a9:c3:c3:ab:28:2c:4b:a5:3a:37:46:f6:92:34:fa:
         ae:ad:61:cc:5f:fe:77:42:cf:00:4f:f2:7e:b4:f4:fb:90:94:
         2b:62:c6:54:fa:39:45:67:e0:6b:45:e6:bf:e3:cc:ef:dd:46:
         d6:c1:6b:8a:19:87:14:30:c6:16:0d:a4:2e:b5:cd:92:ac:c8:
         7c:dd:2d:66:3f:76:28:41:8a:4e:13:59:26:3e:37:62:50:d0:
         f4:a7:fc:d3:b1:e4:b5:aa:8c:10:2f:80:e9:82:64:6e:a7:ab:
         6e:3a:31:04:b9:20:83:a4:08:f3:f5:8b:74:1c:6d:74:0c:04:
         60:33:0d:1c:96:75:97:8e:f0:e4:2c:40:af:5a:11:b0:7a:cc:
         24:d3:7c:ff:9c:32:69:e7:db:3b:47:e4:86:c8:cb:36:f4:70:
         89:5d:43:1a:0d:3d:26:fd:2c:ea:f8:26:3d:52:f9:ea:b6:04:
         7d:0c:1b:e0:2c:cd:61:44:d9:9b:66:b0:0e:0e:9d:7a:90:01:
         5c:42:97:56:d9:d9:c3:6b:3f:98:86:03:78:09:56:2b:a6:e5:
         b5:e9:5c:8f:b2:89:9d:86:e2:54:11:ef:2c:12:05:05:fa:6d:
         1d:71:c9:82:3a:2c:ea:a6:7b:84:fe:0d:77:13:f9:5b:3e:5b:
         73:8c:ff:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:39:03 2026 by rpki-client