Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft
File:                     x5XlnAMMfJKfy-R0Gfxexp4frP0.mft (raw, json)
Hash identifier:          EvKUILJBZfbZTs4qSkc6a41IFkziAvALhvjCR4P0vZU=
Subject key identifier:   92:F5:31:10:41:B6:C5:F5:29:91:03:51:1C:3B:37:D0:FC:8D:26:0B
Authority key identifier: C7:95:E5:9C:03:0C:7C:92:9F:CB:E4:74:19:FC:5E:C6:9E:1F:AC:FD
Certificate issuer:       /CN=A91A3FEB/serialNumber=C795E59C030C7C929FCBE47419FC5EC69E1FACFD
Certificate serial:       07F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5XlnAMMfJKfy-R0Gfxexp4frP0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft
Manifest number:          07F1
Signing time:             Thu 16 Apr 2026 21:08:45 +0000
Manifest this update:     Thu 16 Apr 2026 21:08:44 +0000
Manifest next update:     Thu 23 Apr 2026 21:08:44 +0000
Files and hashes:         1: x5XlnAMMfJKfy-R0Gfxexp4frP0.crl (hash: xq0THg4njyrktQ+IU9NKNG3fXA37yavTxQluj+mnqlg=)
                          2: B722FC542A0411EB992DD32EC4F9AE02.roa (hash: 55CxpWCtuoXOi6t/gybs+bucccea1BToqnuBzxE+HNE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.crl
                          rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5XlnAMMfJKfy-R0Gfxexp4frP0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:08:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2041 (0x7f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3FEB, serialNumber=C795E59C030C7C929FCBE47419FC5EC69E1FACFD
        Validity
            Not Before: Apr 16 21:08:44 2026 GMT
            Not After : Apr 23 21:08:44 2026 GMT
        Subject: CN=69e14fdc-d3a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:fe:3c:2a:c5:88:15:c6:de:32:b7:4b:ff:a6:
                    4d:bc:7e:cc:82:b8:1e:61:7c:73:64:2f:48:73:79:
                    ad:13:f8:2b:55:54:16:b7:7b:71:09:6e:1f:8a:95:
                    77:c0:90:1d:41:6b:8a:eb:69:ba:5a:99:17:c0:48:
                    cd:a8:6d:e8:da:c8:b6:da:26:de:2c:25:b6:a9:7c:
                    b5:7e:f6:2e:77:e7:5a:22:a6:3d:22:6b:5f:7f:6b:
                    65:5a:fa:3b:76:2d:09:be:88:86:b7:dc:f0:60:82:
                    6a:10:3f:6f:61:10:59:d7:b3:4a:3a:0b:1c:10:e7:
                    3a:e4:cc:f4:36:32:70:47:14:44:59:3b:a7:73:4a:
                    4d:48:31:ca:66:9e:2c:6e:d2:a5:84:55:3d:b3:d5:
                    6f:00:ae:80:9b:7c:c0:dd:fc:f9:31:34:a4:3e:61:
                    49:53:46:b6:e3:13:02:be:09:a5:50:e8:93:43:f3:
                    c7:c9:42:bd:a6:dc:4e:32:56:10:21:ca:ef:40:94:
                    8b:0e:e4:b8:81:b8:79:22:4c:53:f8:cb:62:f4:bc:
                    62:9e:69:2f:42:1b:2c:b7:ba:6f:81:8d:d6:1a:4a:
                    16:24:de:94:88:97:2d:e2:1f:91:7d:56:c3:0f:b1:
                    89:35:ef:d5:18:7e:9e:77:69:fb:36:3c:17:2c:cd:
                    93:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F5:31:10:41:B6:C5:F5:29:91:03:51:1C:3B:37:D0:FC:8D:26:0B
            X509v3 Authority Key Identifier:
                keyid:C7:95:E5:9C:03:0C:7C:92:9F:CB:E4:74:19:FC:5E:C6:9E:1F:AC:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5XlnAMMfJKfy-R0Gfxexp4frP0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:63:91:6b:6c:61:34:be:2d:89:db:26:79:dc:30:4e:e4:84:
         3c:2b:55:08:f4:ae:44:bb:17:43:7e:82:f9:14:ce:66:09:1f:
         54:05:04:4c:55:65:e5:11:39:0d:d2:b1:0c:7e:eb:25:26:e2:
         c6:ad:71:a7:ba:68:ce:b5:9e:08:ad:f9:4c:92:73:fc:7c:1e:
         bd:4a:c8:48:1d:18:e7:63:f2:4c:e6:81:df:39:07:06:88:35:
         06:36:8d:0e:b7:bb:9b:a7:3e:e0:43:fd:6d:fb:f5:9c:82:de:
         0f:80:12:d5:3d:a2:47:c0:f0:d4:ac:83:44:8f:c4:36:8f:0a:
         d5:be:ad:d6:c0:dd:29:88:c8:1f:4b:88:69:a0:e6:6d:0e:82:
         91:bf:14:0d:45:89:9c:7c:e3:4c:bc:0d:df:20:6a:d2:79:9e:
         33:5c:91:cc:79:69:49:fc:b3:52:6c:95:28:7a:b8:69:be:ca:
         9e:5e:5e:40:6d:35:da:8e:b5:6e:53:40:19:f0:3e:c5:74:6c:
         b9:90:73:48:aa:a8:c8:0b:66:11:c0:14:04:14:13:91:63:bc:
         b3:16:5d:94:a1:7f:ba:c6:92:03:05:ac:87:09:87:b9:ba:59:
         46:e9:45:8c:48:5c:cf:fd:52:a4:87:7d:14:6d:31:e6:ca:d3:
         1e:b4:f6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:57:46 2026 by rpki-client