Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft
File:                     5VbchrlOkc-bLilEqF9xaS2glNI.mft (raw, json)
Hash identifier:          0WwgMfFlVEv0q1n0fBhxlfT8HcjQCAzOvGAzOSaUwVk=
Subject key identifier:   A9:E7:C4:15:20:C6:4A:CE:E9:B1:04:C1:95:BF:D5:80:A7:87:6A:C7
Authority key identifier: E5:56:DC:86:B9:4E:91:CF:9B:2E:29:44:A8:5F:71:69:2D:A0:94:D2
Certificate issuer:       /CN=A919B20D/serialNumber=E556DC86B94E91CF9B2E2944A85F71692DA094D2
Certificate serial:       01C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VbchrlOkc-bLilEqF9xaS2glNI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft
Manifest number:          01C0
Signing time:             Fri 17 Apr 2026 03:37:13 +0000
Manifest this update:     Fri 17 Apr 2026 03:37:12 +0000
Manifest next update:     Fri 24 Apr 2026 03:37:12 +0000
Files and hashes:         1: 5VbchrlOkc-bLilEqF9xaS2glNI.crl (hash: UCEMWvYSfDdeT2IiCVF6Tznc0MdDqBleqeP/LALMKyY=)
                          2: 4B3E4A0693DE11EE81D1045FC4F9AE02.roa (hash: +D/Xxn50EVg8DEjdVI0q+xul/2qrla9jwori+Klwr2U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.crl
                          rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VbchrlOkc-bLilEqF9xaS2glNI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:37:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 454 (0x1c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B20D, serialNumber=E556DC86B94E91CF9B2E2944A85F71692DA094D2
        Validity
            Not Before: Apr 17 03:37:12 2026 GMT
            Not After : Apr 24 03:37:12 2026 GMT
        Subject: CN=69e1aae8-31ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7f:eb:4c:37:c0:ef:d7:11:87:80:15:6c:97:
                    b6:67:4c:2a:e4:cb:9c:27:65:a5:d5:31:bf:2e:35:
                    47:f1:72:05:72:cc:b3:1d:5f:5b:ea:be:e6:8b:98:
                    0f:98:c7:35:b9:0a:e0:39:b7:12:4e:87:18:44:18:
                    4d:ec:2c:bc:eb:ae:96:53:bf:b1:81:20:6d:15:54:
                    9f:69:66:6a:3e:15:9b:cc:50:5a:6b:c7:bf:ae:d1:
                    f3:20:b9:71:43:04:80:c1:ed:81:71:c5:d0:0b:c5:
                    38:8a:ff:33:83:47:6e:e9:9a:0d:df:ff:82:d4:66:
                    84:45:12:c2:f0:c6:27:ca:1e:70:68:62:33:8d:2e:
                    88:0a:30:c1:a0:81:1a:7c:e2:bd:ec:a8:ca:d9:7d:
                    c8:7d:9b:db:31:99:fc:4e:af:ec:11:91:36:b8:93:
                    28:0c:5f:37:ca:38:42:5a:1d:d6:28:04:65:84:23:
                    15:2d:19:90:9c:6f:60:04:ac:4b:94:fb:ba:7f:c2:
                    bf:75:8a:27:be:c5:14:41:7a:f2:29:cd:ac:39:c3:
                    cb:17:87:7b:90:95:ce:f3:d7:1e:15:57:1e:64:e6:
                    0a:6d:82:70:16:cc:49:59:89:3a:d0:9d:3d:e2:1c:
                    a3:a0:fd:47:46:97:1f:32:55:ff:6b:92:a1:47:7a:
                    e1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E7:C4:15:20:C6:4A:CE:E9:B1:04:C1:95:BF:D5:80:A7:87:6A:C7
            X509v3 Authority Key Identifier:
                keyid:E5:56:DC:86:B9:4E:91:CF:9B:2E:29:44:A8:5F:71:69:2D:A0:94:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VbchrlOkc-bLilEqF9xaS2glNI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:c9:38:f4:a5:56:0b:2f:19:bb:aa:13:57:c8:72:6e:5b:bf:
         fa:e0:ef:f1:da:0c:06:05:1d:a3:ae:b3:eb:8a:9e:cf:86:86:
         b7:d8:b9:70:0f:58:4a:8a:89:16:3c:7a:1d:a6:cb:92:56:9b:
         0e:01:e3:74:28:3a:39:06:02:80:94:16:27:07:bb:08:21:8a:
         15:0f:75:2b:07:ba:79:25:80:d8:b5:a1:78:2b:54:46:b3:5b:
         d1:26:55:8c:f8:b3:7e:24:3f:80:2a:c9:e9:4e:5b:1f:f4:bb:
         26:ec:55:da:87:b4:6f:cb:39:98:61:92:7c:e7:55:cd:6a:7f:
         03:84:66:2d:63:b6:be:2e:87:41:ae:ef:34:94:f0:94:16:cf:
         10:fe:a6:2c:b9:95:2b:7c:f5:dd:49:95:af:4f:c6:5e:8f:69:
         8c:0d:21:92:0c:c3:df:d0:62:e1:62:58:08:ba:d1:be:6e:09:
         c8:6f:30:45:42:ee:f7:d1:2e:ce:e5:0c:5b:08:af:e2:f9:2d:
         d5:98:50:f2:92:7c:a9:ad:cd:e7:06:67:d3:9f:c4:6c:c1:80:
         42:4a:ef:f0:90:f2:af:a1:c0:23:3d:b4:50:bd:2d:bb:87:c3:
         d1:a4:54:81:02:d8:11:2c:c7:65:e6:52:3a:b1:4d:ae:64:24:
         58:ad:a4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:08:27 2026 by rpki-client