Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.mft
File:                     X-0ED6bGtlZOQCsut2NpLOJDB-o.mft (raw, json)
Hash identifier:          vB0uu1bc8XySHP3pcfhDOI9yxcD0RBhDCw0y7FQ0VaQ=
Subject key identifier:   27:2D:7A:AA:B2:55:91:36:90:8C:9E:23:0D:D4:56:E2:B7:87:97:37
Authority key identifier: 5F:ED:04:0F:A6:C6:B6:56:4E:40:2B:2E:B7:63:69:2C:E2:43:07:EA
Certificate issuer:       /CN=A9192F5B/serialNumber=5FED040FA6C6B6564E402B2EB763692CE24307EA
Certificate serial:       5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-0ED6bGtlZOQCsut2NpLOJDB-o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.mft
Manifest number:          59
Signing time:             Wed 15 Apr 2026 07:40:18 +0000
Manifest this update:     Wed 15 Apr 2026 07:40:18 +0000
Manifest next update:     Wed 22 Apr 2026 07:40:18 +0000
Files and hashes:         1: X-0ED6bGtlZOQCsut2NpLOJDB-o.crl (hash: 4H75wbUR5LTGzV89eNi3h3JlbGocCFkjCUXPeZulNXA=)
                          2: B44C2C06B4B211F08EEFDF43C4F9AE02.roa (hash: YYsxvMPCRrMVXD10L+51rkoUdNPvTH6rY0GaRqBHiU4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.crl
                          rsync://rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-0ED6bGtlZOQCsut2NpLOJDB-o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 07:40:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192F5B, serialNumber=5FED040FA6C6B6564E402B2EB763692CE24307EA
        Validity
            Not Before: Apr 15 07:40:18 2026 GMT
            Not After : Apr 22 07:40:18 2026 GMT
        Subject: CN=69df40e2-4b48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:45:67:bc:4d:6d:b2:3c:53:75:e1:17:11:e4:
                    1e:6b:0c:5f:3b:9d:14:5e:f0:cc:13:ff:e3:ea:5f:
                    d8:71:a3:20:c0:c6:30:a3:5e:ba:c2:40:c6:32:bc:
                    2e:d5:c6:76:97:b9:94:a0:ff:be:f9:b3:5b:6d:72:
                    00:06:bf:d8:6d:db:99:16:a7:9e:78:84:41:d8:d2:
                    79:77:19:7a:56:36:25:8c:4a:28:a3:9d:d0:1c:30:
                    66:2e:56:b5:aa:65:58:ce:9f:f8:e6:6b:61:b6:35:
                    cc:a2:8c:97:57:69:08:78:7e:9e:f5:53:dc:a8:bf:
                    43:f4:6a:50:df:68:64:f3:2d:10:18:f6:68:cc:b9:
                    9f:e9:d1:08:18:c8:35:b4:4c:2e:cd:17:b0:11:0e:
                    1a:35:d1:27:71:90:0a:16:04:66:83:47:bb:b5:18:
                    ad:0c:f0:b7:c8:b0:02:f1:1b:0c:79:fb:75:24:7d:
                    36:d6:64:d6:86:df:55:81:0a:93:4c:59:88:9f:d0:
                    43:21:39:ce:3a:57:c1:ab:41:32:1e:12:95:c9:75:
                    3a:cd:ed:e0:3b:75:e2:75:86:e8:80:41:ec:28:3c:
                    ad:14:59:d4:8b:b3:dd:3d:c5:7b:ad:10:36:f3:2e:
                    e5:db:56:8d:ac:6d:83:5b:8a:03:25:a6:36:59:35:
                    cb:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:2D:7A:AA:B2:55:91:36:90:8C:9E:23:0D:D4:56:E2:B7:87:97:37
            X509v3 Authority Key Identifier:
                keyid:5F:ED:04:0F:A6:C6:B6:56:4E:40:2B:2E:B7:63:69:2C:E2:43:07:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-0ED6bGtlZOQCsut2NpLOJDB-o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:ed:17:89:7a:37:f5:2c:ac:90:8f:b0:b2:a9:41:a3:e6:ac:
         92:e0:bd:01:5f:e2:17:e8:ca:32:0e:14:3d:3a:32:68:3d:10:
         2b:7c:22:2d:5c:bb:59:3c:0e:12:de:26:6d:e6:c3:ad:52:d3:
         6c:0b:d7:1a:9b:4d:93:bf:4a:24:ba:77:c6:ce:3d:c1:90:8b:
         30:a6:76:fc:93:38:d9:87:00:ec:51:8a:23:03:71:17:b2:7f:
         57:b9:20:b3:d6:66:37:b6:cf:9f:e3:8b:cb:ee:46:0c:c6:8a:
         81:e4:ce:33:fc:f3:13:3c:84:f3:23:f1:07:f8:25:01:c6:bc:
         dc:81:20:1e:cd:29:dd:f8:50:8e:8a:ab:32:cb:8d:83:22:c0:
         92:e4:85:b5:c5:7e:eb:54:35:b8:35:94:b8:71:16:6d:dd:14:
         c0:b0:37:11:02:31:f0:25:d5:bb:51:77:e1:aa:8c:97:57:25:
         70:a7:e1:11:4e:68:26:17:1d:ae:87:8d:e0:d4:fd:11:e4:9b:
         9c:96:70:c4:f4:fa:69:74:38:a9:40:14:cc:25:58:e1:6e:e5:
         18:ee:c9:7d:41:d8:78:4f:19:b2:7b:b5:b8:4b:5d:db:c7:93:
         37:e1:4b:ab:2d:1e:52:6b:6a:a7:3a:86:04:4f:86:74:c6:e6:
         99:ac:ec:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:26:32 2026 by rpki-client