Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft
File:                     5NzsWVobtnOJciNlasY5uVNS3XM.mft (raw, json)
Hash identifier:          ezRuaSGGMAIQ75I/mgZ5hnoKC8h2cG1nPBaoKB0nVfg=
Subject key identifier:   4A:75:60:B3:4E:04:04:BE:B6:36:8D:3C:F3:FA:60:4E:96:5F:42:47
Authority key identifier: E4:DC:EC:59:5A:1B:B6:73:89:72:23:65:6A:C6:39:B9:53:52:DD:73
Certificate issuer:       /CN=A91D604E/serialNumber=E4DCEC595A1BB673897223656AC639B95352DD73
Certificate serial:       0D5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft
Manifest number:          0D4D
Signing time:             Thu 16 Apr 2026 17:56:54 +0000
Manifest this update:     Thu 16 Apr 2026 17:56:53 +0000
Manifest next update:     Thu 23 Apr 2026 17:56:53 +0000
Files and hashes:         1: 5NzsWVobtnOJciNlasY5uVNS3XM.crl (hash: RYNXQrvAOlekZLrsUydKTcQfpnuiUxtWWnylIwAfRgQ=)
                          2: D1C40E28183411EF99FD8776C4F9AE02.roa (hash: 62d4jzUjfsj/dKFMhMN/kf/dBUMWoPHad4ewLC0GCPQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.crl
                          rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 17:56:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3423 (0xd5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D604E, serialNumber=E4DCEC595A1BB673897223656AC639B95352DD73
        Validity
            Not Before: Apr 16 17:56:53 2026 GMT
            Not After : Apr 23 17:56:53 2026 GMT
        Subject: CN=69e122e5-81b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:21:a4:23:8f:ef:8a:ac:4c:dd:96:2c:b6:7b:
                    4c:b7:e1:92:83:77:ee:ef:71:b7:c9:ea:f3:ff:1f:
                    b9:24:11:c0:b0:0c:ae:5f:1c:58:e3:ae:71:84:af:
                    f9:d9:18:e4:8f:22:1a:e3:89:ee:9a:94:d4:7a:96:
                    9e:d5:67:82:2a:5e:f5:61:26:ab:a8:c7:38:7a:d3:
                    e6:58:e7:98:2e:6b:b8:5d:e7:21:e3:2b:7e:07:c9:
                    a5:41:9a:d4:59:6d:03:c8:88:f1:87:8b:52:49:e5:
                    c2:8e:a1:6c:73:34:5b:23:03:ed:81:7d:ae:aa:af:
                    3d:7a:20:35:38:40:50:42:a3:5d:2f:4b:7e:1e:80:
                    55:2e:d3:a7:92:38:78:63:16:6c:41:37:5a:d1:09:
                    56:65:a7:24:9f:e1:b2:96:3c:d5:96:ad:d8:4f:ed:
                    b6:ac:55:33:99:b3:06:9a:60:8c:98:4b:7b:4a:b9:
                    ec:67:d2:2a:9f:8a:c0:51:0d:37:71:ab:ba:06:2c:
                    cf:5d:d7:a8:0e:90:f6:30:8a:00:85:61:5f:bf:7f:
                    52:a7:30:6f:91:db:57:16:b2:e4:87:de:5a:6a:1a:
                    da:40:60:4e:97:b4:15:13:f4:45:c9:e0:68:64:33:
                    82:86:e0:a1:a0:03:fc:5a:f7:78:75:96:b1:6e:fd:
                    40:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:75:60:B3:4E:04:04:BE:B6:36:8D:3C:F3:FA:60:4E:96:5F:42:47
            X509v3 Authority Key Identifier:
                keyid:E4:DC:EC:59:5A:1B:B6:73:89:72:23:65:6A:C6:39:B9:53:52:DD:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:eb:7b:04:c5:62:2b:30:dc:f0:b4:e1:14:b2:c4:98:1a:86:
         b9:ae:c2:38:2f:89:01:e0:66:f1:83:9c:fd:e5:d9:12:05:1e:
         48:07:70:60:c5:45:e2:94:0d:7e:13:b7:83:a2:d0:06:93:fd:
         c2:c6:ca:4d:bf:0f:2e:c1:d6:a8:4b:c0:e3:19:b5:cc:00:23:
         94:2c:13:72:cc:9d:54:ff:41:4d:16:9e:f6:a7:50:c2:f5:22:
         47:7e:ae:56:39:e9:2f:f0:d0:e5:81:48:d5:67:2a:5c:8c:7c:
         ec:ae:07:ff:d3:2a:da:5b:14:c4:4b:73:63:d1:9c:5d:a2:d9:
         22:bb:81:46:84:46:cb:d1:a1:3b:eb:2d:67:90:4e:ca:4e:11:
         c7:b2:af:e0:63:65:31:fe:2d:cc:65:a6:e8:0d:11:79:67:8a:
         74:68:72:33:3f:ad:64:35:f3:8b:92:70:20:7d:3a:c6:19:63:
         86:60:50:96:d3:57:91:b2:bf:47:58:66:1a:3e:7f:40:a1:04:
         ff:51:b4:bf:d8:0b:81:c7:b6:62:90:74:58:e4:64:d5:e4:7d:
         05:23:16:75:c1:27:1b:97:48:23:ee:c8:cd:46:11:90:81:7d:
         42:5a:63:86:ee:b6:11:ad:cd:8b:c4:18:29:14:ac:2e:89:1d:
         4f:5a:a2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:26:09 2026 by rpki-client