Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft
File:                     5hI_ServZkwi-UzV67rqztOHoW8.mft (raw, json)
Hash identifier:          /TVz1EIAwrXP2y1u0NcGFzmWiEEEMXIhBA0tv4urf2Q=
Subject key identifier:   C2:43:43:A6:69:4C:91:78:F7:A8:B3:79:F7:1D:A2:22:F1:17:11:50
Authority key identifier: E6:12:3F:49:EA:EF:66:4C:22:F9:4C:D5:EB:BA:EA:CE:D3:87:A1:6F
Certificate issuer:       /CN=A91B861D/serialNumber=E6123F49EAEF664C22F94CD5EBBAEACED387A16F
Certificate serial:       06AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft
Manifest number:          06A4
Signing time:             Thu 16 Apr 2026 22:19:45 +0000
Manifest this update:     Thu 16 Apr 2026 22:19:45 +0000
Manifest next update:     Thu 23 Apr 2026 22:19:45 +0000
Files and hashes:         1: 5hI_ServZkwi-UzV67rqztOHoW8.crl (hash: 2mhb4bhbXtIzuy4AZeAEjEszLTZqN0POOBW62Gl+/3g=)
                          2: 1D0BA0FC57EB11F096357F7CC4F9AE02.roa (hash: qYnHpPQuWWyQUppUZeSoLqg0pl5Eo+MYWVanyVnMZyM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.crl
                          rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:19:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1710 (0x6ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B861D, serialNumber=E6123F49EAEF664C22F94CD5EBBAEACED387A16F
        Validity
            Not Before: Apr 16 22:19:45 2026 GMT
            Not After : Apr 23 22:19:45 2026 GMT
        Subject: CN=69e16081-dbe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:26:14:6e:86:54:99:45:b3:1a:b9:f5:12:6c:
                    33:e3:4a:35:f6:20:c1:67:e6:89:e0:02:39:5a:a0:
                    e3:95:a7:a4:b8:59:61:7f:70:9e:ec:d0:8f:36:86:
                    a7:5a:26:b4:17:5f:13:a2:ae:31:2c:3a:9b:ad:c4:
                    5b:30:a9:eb:1c:e6:7c:34:95:c7:13:78:61:54:03:
                    19:78:82:bd:90:99:89:24:4a:cf:8a:ae:5a:21:e8:
                    ab:66:07:30:4a:a4:7c:30:f7:f1:53:35:33:b9:6d:
                    55:b7:d5:fc:c3:93:2e:5b:af:c6:bf:bc:82:e2:9f:
                    cb:00:14:64:16:99:fd:b1:4a:a1:63:53:2b:4d:97:
                    ac:d1:35:19:62:1b:9b:8a:08:42:35:66:55:db:e5:
                    01:19:9c:14:9e:34:bf:c5:9a:a3:a4:06:4d:2a:6a:
                    54:55:70:6f:22:04:14:37:cc:07:41:25:36:02:a1:
                    4a:65:ed:3e:5b:16:64:18:80:80:77:85:19:50:1c:
                    e9:19:f3:37:2f:0b:de:c3:af:f0:96:b0:53:b3:44:
                    9b:65:48:79:12:9b:29:e3:c5:76:3d:1f:06:b9:68:
                    14:52:e9:7c:1a:8e:aa:91:2b:88:d2:35:7b:e3:89:
                    e4:bb:a5:e8:36:2a:51:72:5b:f9:3a:b4:da:e7:31:
                    27:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:43:43:A6:69:4C:91:78:F7:A8:B3:79:F7:1D:A2:22:F1:17:11:50
            X509v3 Authority Key Identifier:
                keyid:E6:12:3F:49:EA:EF:66:4C:22:F9:4C:D5:EB:BA:EA:CE:D3:87:A1:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:ac:e4:82:3d:43:0d:9e:42:1f:01:74:f4:11:64:56:e0:60:
         70:21:8c:5a:c0:23:25:5e:27:02:c1:01:f9:bc:30:2d:cc:78:
         d5:f2:64:ab:a6:c2:6b:98:9c:da:96:5f:90:f9:20:c1:d2:5c:
         d2:c9:51:cf:06:9f:8c:af:5d:80:5f:5a:09:10:fd:8c:23:5b:
         b6:60:4c:a9:96:c4:74:6a:cd:81:50:b6:f5:c9:53:ab:23:96:
         94:56:0d:7b:8f:6f:7a:06:d4:be:b0:27:ca:86:5d:af:3c:47:
         55:1a:04:2c:90:ac:55:7c:65:2c:e9:aa:97:12:bd:84:3c:9d:
         01:29:c8:65:66:89:e5:6f:81:27:ae:9a:c8:9f:59:16:ee:2f:
         d8:b1:91:a8:8a:0d:66:8a:75:1b:ae:19:a2:74:25:65:62:fd:
         45:86:1e:c1:98:77:36:96:6f:47:18:26:e2:f4:64:83:12:4c:
         ed:f0:9c:7f:e0:4c:12:68:7d:ce:92:59:12:af:91:1d:64:ba:
         0c:0f:33:7c:a5:bf:0c:07:dc:1e:09:c4:05:68:f9:92:39:23:
         e0:1d:c5:0c:6f:b2:44:cb:27:43:8b:7d:80:cd:a8:8b:61:cb:
         16:ca:04:66:4f:82:55:4e:ba:73:04:29:3e:88:0f:d7:25:bb:
         68:e8:d1:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:07:13 2026 by rpki-client