Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.mft
File:                     556bUhJjfjPKXcthdpCc4ZYhumQ.mft (raw, json)
Hash identifier:          5ywMew0x0HrrzzxodDkB16aoZs6OTcTDPRwfOkEmaDs=
Subject key identifier:   44:F0:54:E3:B5:FC:1E:A8:6B:B1:1C:0A:58:A8:AC:67:7B:3B:10:EF
Authority key identifier: E7:9E:9B:52:12:63:7E:33:CA:5D:CB:61:76:90:9C:E1:96:21:BA:64
Certificate issuer:       /CN=A919C47E/serialNumber=E79E9B5212637E33CA5DCB6176909CE19621BA64
Certificate serial:       0503
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/556bUhJjfjPKXcthdpCc4ZYhumQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.mft
Manifest number:          04FA
Signing time:             Thu 16 Apr 2026 16:53:51 +0000
Manifest this update:     Thu 16 Apr 2026 16:53:50 +0000
Manifest next update:     Thu 23 Apr 2026 16:53:50 +0000
Files and hashes:         1: 556bUhJjfjPKXcthdpCc4ZYhumQ.crl (hash: yRO50UbFbh6eiFpexOOJ3QmVPdWWQCgz8CP0Lfc3EkI=)
                          2: B7E86B40595311EC9ECF510BC4F9AE02.roa (hash: nnn8TU4Nhfi9WXw2EXV87npJUxT1jDCKqMQ3d3jh0cM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.crl
                          rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/556bUhJjfjPKXcthdpCc4ZYhumQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 16:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1283 (0x503)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C47E, serialNumber=E79E9B5212637E33CA5DCB6176909CE19621BA64
        Validity
            Not Before: Apr 16 16:53:50 2026 GMT
            Not After : Apr 23 16:53:50 2026 GMT
        Subject: CN=69e1141e-4253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2b:7b:65:c7:87:62:cd:f4:4f:8f:db:38:f2:
                    94:24:86:46:35:a8:16:57:1f:ef:ac:8d:d8:4f:0c:
                    c6:05:d4:5c:c1:82:fe:5f:ed:24:02:ca:66:b3:91:
                    f0:36:78:d3:3d:fd:a8:8f:a4:eb:50:b6:ec:23:64:
                    7f:29:2b:11:ac:c2:ff:fa:dd:a0:f5:f9:83:73:65:
                    cf:de:82:ba:11:98:db:78:b4:08:e6:7a:c6:29:71:
                    8f:c0:a5:e3:55:71:2f:ef:d6:08:ce:ed:80:12:c2:
                    14:42:a7:cd:5e:e6:f8:1f:66:ff:6c:fb:b2:0d:82:
                    f8:c8:a5:24:ec:35:2a:26:d4:17:e1:ad:a6:a1:8d:
                    46:23:50:9d:fa:00:22:91:10:f4:c6:d6:c2:ee:77:
                    6f:cb:c8:09:cc:d1:14:48:12:76:bc:35:9d:07:cf:
                    1d:06:a5:0b:2b:ea:28:48:cc:fa:51:a7:4d:02:73:
                    16:64:ee:e7:ef:85:bf:7a:cf:70:86:51:23:c3:f8:
                    5b:a5:e2:dc:d9:d0:70:c6:88:06:23:8f:a2:3d:04:
                    61:06:d1:f7:91:41:d4:52:2e:fb:7b:89:db:19:b5:
                    7d:cf:be:7f:af:c0:a2:06:cc:ac:cf:0d:04:b9:20:
                    32:0e:56:08:5c:1b:63:79:e8:fb:77:03:96:06:94:
                    8c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F0:54:E3:B5:FC:1E:A8:6B:B1:1C:0A:58:A8:AC:67:7B:3B:10:EF
            X509v3 Authority Key Identifier:
                keyid:E7:9E:9B:52:12:63:7E:33:CA:5D:CB:61:76:90:9C:E1:96:21:BA:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/556bUhJjfjPKXcthdpCc4ZYhumQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:01:62:86:b3:ba:ce:7c:ba:fd:de:75:e2:ee:7f:8b:e7:7a:
         b4:0a:ec:95:9a:03:2b:3c:29:3f:54:3b:bb:2a:79:06:f3:31:
         23:c6:67:1a:4e:01:1f:a0:a6:6f:8d:bd:2b:40:35:49:10:79:
         11:9f:2b:03:5c:8f:7c:c2:d1:e3:5b:c9:b1:4d:bc:cd:25:41:
         b4:cb:98:65:58:1a:ac:90:d9:5c:be:51:c9:9d:a5:42:c2:ad:
         e9:88:7b:f0:55:8b:22:a2:f4:5c:63:c1:fe:f0:70:90:5f:c8:
         f0:f8:98:dc:ba:d1:fe:12:a0:1e:0e:b6:13:f5:bc:dc:c1:ee:
         87:9e:f5:02:49:b5:af:af:d0:5a:af:36:39:eb:47:5b:38:3b:
         95:7f:af:09:13:34:6f:f7:7c:ee:67:4c:0c:6f:7a:a5:0c:35:
         e6:7d:96:08:0c:80:c3:51:7f:1d:10:fb:e1:15:9f:cd:bf:34:
         67:79:f2:8a:81:52:68:35:4a:10:41:b8:ed:3c:9d:29:25:05:
         be:e6:ca:8b:a7:ec:10:40:e6:8e:95:79:97:23:a4:35:ce:e8:
         4b:84:28:8d:59:c7:c7:eb:1d:01:69:a9:0f:8b:f0:00:40:41:
         a5:7c:a8:d9:60:d0:78:e9:d5:24:85:e7:54:36:ed:29:fd:59:
         34:28:1d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:29:26 2026 by rpki-client