Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft
File:                     5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft (raw, json)
Hash identifier:          GR/6crIlLpzcmOcB0R4pxyqA/TyiVd8r4xYvV4A9CE4=
Subject key identifier:   23:14:C2:4D:61:2A:FB:79:75:FA:E2:76:5A:B8:4D:19:4D:DC:AF:CC
Authority key identifier: E6:F6:5D:22:1B:59:5F:6B:A1:3E:B3:14:DE:E3:38:CA:24:1E:27:20
Certificate issuer:       /CN=A91D2B62/serialNumber=E6F65D221B595F6BA13EB314DEE338CA241E2720
Certificate serial:       0148
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vZdIhtZX2uhPrMU3uM4yiQeJyA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft
Manifest number:          013E
Signing time:             Wed 15 Apr 2026 04:56:54 +0000
Manifest this update:     Wed 15 Apr 2026 04:56:53 +0000
Manifest next update:     Wed 22 Apr 2026 04:56:53 +0000
Files and hashes:         1: 5vZdIhtZX2uhPrMU3uM4yiQeJyA.crl (hash: oJ45Q4MkyPKv8ftN+ry5Os2qUptFQdZzfjftLQAMnXI=)
                          2: E9BDEF2CABD011F0B868ED11C4F9AE02.roa (hash: 6qNEgwLHVAYpgshoxndpSifoEhXIYB8Fbev50w/bqoE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.crl
                          rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vZdIhtZX2uhPrMU3uM4yiQeJyA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 04:56:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 328 (0x148)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2B62, serialNumber=E6F65D221B595F6BA13EB314DEE338CA241E2720
        Validity
            Not Before: Apr 15 04:56:53 2026 GMT
            Not After : Apr 22 04:56:53 2026 GMT
        Subject: CN=69df1a96-5593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c1:00:2d:89:de:66:9a:59:e4:a4:c7:67:7c:
                    12:43:80:aa:19:f5:89:ff:45:af:b9:86:86:b6:3d:
                    b7:b9:b6:26:fe:32:43:b4:bb:0d:95:2b:a6:16:c9:
                    a6:f7:b5:3c:73:6e:95:e0:68:01:90:49:45:3f:1f:
                    0d:39:1c:a7:8a:01:14:52:a7:36:dc:35:c6:13:c5:
                    e7:2d:6b:6c:29:eb:2b:21:2f:6d:7a:45:6b:7e:84:
                    1a:05:29:18:c4:9e:d0:c2:6b:2e:2d:e6:5c:f8:7a:
                    ee:ca:08:a9:f7:0f:6e:67:ca:ef:89:46:9d:70:83:
                    b8:21:37:24:83:ec:76:17:b8:c7:8b:13:47:cc:bb:
                    c7:df:75:fb:cf:f4:93:3f:f9:d6:13:9f:5f:6b:d1:
                    78:94:7a:8d:e5:fa:c7:4b:8f:92:8c:57:93:06:96:
                    c2:05:45:a5:0f:ee:a2:90:e1:4b:65:22:c9:e3:cc:
                    08:ec:a5:7d:dc:49:30:8c:36:ee:0b:8f:ff:e9:46:
                    22:6c:cb:cb:f6:62:0b:8a:66:15:de:10:f6:1c:5e:
                    40:88:a6:ec:49:9e:d9:95:36:0f:9c:16:bc:ce:14:
                    8b:e3:28:23:ca:6d:c5:6c:93:f2:5a:c2:4a:f3:79:
                    aa:35:5b:65:c9:03:56:df:d2:07:a6:d3:cf:44:96:
                    f3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:14:C2:4D:61:2A:FB:79:75:FA:E2:76:5A:B8:4D:19:4D:DC:AF:CC
            X509v3 Authority Key Identifier:
                keyid:E6:F6:5D:22:1B:59:5F:6B:A1:3E:B3:14:DE:E3:38:CA:24:1E:27:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vZdIhtZX2uhPrMU3uM4yiQeJyA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:ba:41:7c:38:dc:d3:ee:ae:64:57:1b:5e:0f:8e:dd:1c:e3:
         9d:18:92:18:10:42:ea:69:f5:b5:99:ea:07:24:84:bc:7b:3c:
         91:14:bb:ef:27:3a:4b:d9:52:fb:6e:8f:3d:36:f4:e1:b4:72:
         17:77:f7:9a:44:ad:6b:11:95:0e:25:15:da:8b:ab:b7:73:54:
         18:1c:7d:69:67:54:4f:07:20:25:d3:a7:65:14:8a:0d:2c:87:
         65:b1:3f:a9:b9:8c:c1:1d:f3:1c:6a:0c:0b:d7:d9:d9:6b:8b:
         62:d7:fa:5a:2f:50:fb:56:50:26:c9:85:9d:0b:20:9c:74:4d:
         0d:2f:b6:ba:2f:f3:7b:9a:19:42:aa:a4:74:32:b6:f3:0c:af:
         2a:fd:28:37:c5:29:95:99:72:bd:f3:58:c7:8d:0c:ad:32:ba:
         4d:5f:d7:36:ce:b2:de:36:6c:00:0e:0d:53:b3:38:11:b6:40:
         68:61:c9:83:74:a1:55:49:62:f6:25:71:a7:00:d0:19:29:40:
         17:e3:d3:e3:d6:5f:35:11:26:21:b7:da:2e:70:f2:49:89:a2:
         6c:70:f2:4b:88:7e:d1:b1:93:91:56:35:ee:6d:ea:aa:b1:13:
         7a:5a:be:ab:cc:b8:09:f5:68:28:14:56:e6:0d:63:07:f2:1c:
         21:0a:d6:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:54:36 2026 by rpki-client