Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8400/F681BBA4781111ECA397D034C4F9AE02/5dmsjXWxbbnyPICt2LO72OWLaHg.mft
File:                     5dmsjXWxbbnyPICt2LO72OWLaHg.mft (raw, json)
Hash identifier:          pGbd6tJ8lxTpQrs5B+/HLKTC71eSA/frDEzdyRX/QLc=
Subject key identifier:   1D:89:C3:A1:83:45:0D:43:C4:59:1B:28:94:7F:02:43:BC:CF:91:35
Authority key identifier: E5:D9:AC:8D:75:B1:6D:B9:F2:3C:80:AD:D8:B3:BB:D8:E5:8B:68:78
Certificate issuer:       /CN=A91D8400/serialNumber=E5D9AC8D75B16DB9F23C80ADD8B3BBD8E58B6878
Certificate serial:       04A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5dmsjXWxbbnyPICt2LO72OWLaHg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8400/F681BBA4781111ECA397D034C4F9AE02/5dmsjXWxbbnyPICt2LO72OWLaHg.mft
Manifest number:          04A0
Signing time:             Thu 16 Apr 2026 23:51:49 +0000
Manifest this update:     Thu 16 Apr 2026 23:51:48 +0000
Manifest next update:     Thu 23 Apr 2026 23:51:48 +0000
Files and hashes:         1: 5dmsjXWxbbnyPICt2LO72OWLaHg.crl (hash: kUy2mEp/LuONa8ik/0XtrCwDMp8ynYvKRjeWcJc/7Fg=)
                          2: 46C1646C781611ECADCDAB0EC4F9AE02.roa (hash: B7LPS8CpZf2Ll5s7URpWr8ddqKyO/ADwdlYXyVT4rEQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8400/F681BBA4781111ECA397D034C4F9AE02/5dmsjXWxbbnyPICt2LO72OWLaHg.crl
                          rsync://rpki.apnic.net/member_repository/A91D8400/F681BBA4781111ECA397D034C4F9AE02/5dmsjXWxbbnyPICt2LO72OWLaHg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5dmsjXWxbbnyPICt2LO72OWLaHg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:51:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1192 (0x4a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8400, serialNumber=E5D9AC8D75B16DB9F23C80ADD8B3BBD8E58B6878
        Validity
            Not Before: Apr 16 23:51:48 2026 GMT
            Not After : Apr 23 23:51:48 2026 GMT
        Subject: CN=69e17615-75b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:52:94:bf:f7:b1:d7:c5:aa:4b:e4:f8:00:4c:
                    ab:c1:84:dc:11:76:0c:f3:47:48:87:f4:97:03:fd:
                    dc:99:81:5b:08:2a:a9:79:bd:40:84:8b:dd:25:6d:
                    ed:3d:34:6f:35:3b:8e:9a:22:dd:01:50:5a:8c:da:
                    c8:dd:f8:1e:a0:94:ad:80:fd:23:25:94:ae:99:db:
                    b8:77:dd:f9:d2:2a:4f:60:27:16:99:f8:57:f7:ba:
                    0f:66:39:2a:54:3d:63:89:e5:84:f0:05:04:2c:b0:
                    ce:0a:4f:0e:70:de:44:8f:fb:a4:d4:06:a8:62:29:
                    dc:63:52:49:a6:d3:bb:20:29:8b:68:d5:84:87:69:
                    98:f6:0b:25:8f:80:ba:c7:5a:e2:9d:12:68:70:e5:
                    0c:34:d8:15:25:52:30:67:b5:f3:0e:79:f6:38:d6:
                    8b:bf:20:9e:36:9b:3f:bd:da:0f:ed:10:a9:d3:e2:
                    bc:7f:93:41:6a:60:b6:ca:05:84:f9:2d:69:38:ea:
                    cf:de:7c:53:a9:55:64:41:bb:a4:28:b0:5c:03:93:
                    da:25:0a:9c:22:3b:35:db:cd:e0:94:27:18:3e:d9:
                    bd:bc:e8:cc:66:19:32:ea:d2:69:dc:84:0e:d3:2e:
                    b6:48:2b:41:5c:26:c7:47:8c:e4:5f:80:bc:23:d0:
                    90:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:89:C3:A1:83:45:0D:43:C4:59:1B:28:94:7F:02:43:BC:CF:91:35
            X509v3 Authority Key Identifier:
                keyid:E5:D9:AC:8D:75:B1:6D:B9:F2:3C:80:AD:D8:B3:BB:D8:E5:8B:68:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8400/F681BBA4781111ECA397D034C4F9AE02/5dmsjXWxbbnyPICt2LO72OWLaHg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5dmsjXWxbbnyPICt2LO72OWLaHg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8400/F681BBA4781111ECA397D034C4F9AE02/5dmsjXWxbbnyPICt2LO72OWLaHg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:f9:62:05:6e:1d:14:20:ea:c7:41:e0:87:57:90:8a:d5:dd:
         68:f9:d0:d7:27:7c:00:44:a4:9a:55:68:8e:7c:43:84:cf:12:
         1f:f0:9f:00:b7:f7:c9:c0:cf:29:e8:29:e1:00:48:9f:81:25:
         b3:f3:68:a7:cb:04:e0:b1:15:e1:d8:11:3c:ca:b5:ad:e0:d0:
         35:e5:07:79:b7:79:1e:2e:6a:07:87:02:cc:a5:25:b0:57:ca:
         a8:0f:53:aa:a6:bd:53:2c:c8:79:a7:9e:a2:33:44:33:dc:e3:
         7b:7c:6d:cc:bc:4d:5b:f0:24:56:8c:10:e4:6b:83:e6:78:c7:
         4c:e5:c2:c8:66:c7:8c:4b:e9:2f:f0:d0:21:8a:64:dc:76:5b:
         3b:c6:70:e5:ec:82:15:d2:36:ec:09:75:e5:7f:39:50:81:f9:
         56:97:6b:0d:37:87:be:39:fa:a6:5e:a9:6b:6f:5c:90:42:66:
         a4:4d:86:dd:78:d8:9d:d9:04:0f:de:b4:4d:13:18:11:28:8a:
         c7:94:f1:7f:6f:96:f7:c6:d5:e0:c0:16:0c:06:50:16:6c:63:
         cc:6a:f7:54:fc:c1:da:ba:6c:7c:cd:62:73:1f:28:59:64:32:
         1a:1a:d2:65:fb:05:ea:25:31:8a:87:06:f3:03:87:9d:51:92:
         35:11:40:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:14:56 2026 by rpki-client