Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.mft
File:                     5JdLhBatO5ndEfOwQFbwx5m3ocs.mft (raw, json)
Hash identifier:          0ceLNdbiJZEz6Air3QFNrP1PCO+BP9fgNNrxoy7z/3I=
Subject key identifier:   56:E4:E6:B1:F2:B5:DF:A0:94:E9:67:DC:A7:FF:34:2E:64:BE:D9:22
Authority key identifier: E4:97:4B:84:16:AD:3B:99:DD:11:F3:B0:40:56:F0:C7:99:B7:A1:CB
Certificate issuer:       /CN=A91D9CA8/serialNumber=E4974B8416AD3B99DD11F3B04056F0C799B7A1CB
Certificate serial:       E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5JdLhBatO5ndEfOwQFbwx5m3ocs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.mft
Manifest number:          E0
Signing time:             Wed 15 Apr 2026 06:07:41 +0000
Manifest this update:     Wed 15 Apr 2026 06:07:40 +0000
Manifest next update:     Wed 22 Apr 2026 06:07:40 +0000
Files and hashes:         1: 5JdLhBatO5ndEfOwQFbwx5m3ocs.crl (hash: pen1vj3upUXrlClfUcC5dBEvBjYcOdr1Vh3SG4G4Z2E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.crl
                          rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5JdLhBatO5ndEfOwQFbwx5m3ocs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 06:07:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 224 (0xe0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9CA8, serialNumber=E4974B8416AD3B99DD11F3B04056F0C799B7A1CB
        Validity
            Not Before: Apr 15 06:07:40 2026 GMT
            Not After : Apr 22 06:07:40 2026 GMT
        Subject: CN=69df2b2d-800a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a4:52:7b:ab:2f:2d:6f:ed:8f:cb:40:0a:27:
                    3e:99:00:34:29:4c:77:cf:20:96:e9:4c:5c:16:cc:
                    8b:01:d0:80:4c:f3:40:e8:59:02:2c:2c:e2:56:88:
                    10:f0:94:7a:8a:22:46:b9:7e:93:1b:cd:bf:32:4e:
                    87:a9:72:89:3e:ea:7a:de:c2:98:7c:f9:48:cc:c3:
                    86:96:e2:a6:0e:ce:5e:b2:9b:25:57:ea:6c:e5:65:
                    01:29:6f:07:85:a2:4e:20:dc:a8:99:1c:6d:a7:a7:
                    9b:75:64:da:af:b9:b9:ef:bd:8a:b5:68:59:03:62:
                    16:b6:98:e0:d7:b6:d4:df:d4:50:6e:bf:cf:ea:e7:
                    6b:57:e5:4e:b0:5c:6f:23:3d:13:29:b8:7b:85:1f:
                    d0:f0:6b:73:1d:40:61:35:29:02:d0:d5:ec:30:6d:
                    b4:27:44:04:39:70:ab:19:8c:8a:aa:cc:3c:91:05:
                    41:79:a1:82:04:e8:df:b2:14:a1:33:11:32:dd:a4:
                    27:e1:d0:de:e0:e8:06:14:a5:ed:54:69:bf:b1:43:
                    be:d3:ff:4b:2b:9b:1a:d8:49:66:b6:7c:cf:26:6c:
                    4f:60:f4:da:c1:21:c4:2f:f0:20:d2:76:2e:d6:c5:
                    b6:d5:03:6a:27:66:18:ff:9b:16:fa:a4:c9:1b:3f:
                    d3:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E4:E6:B1:F2:B5:DF:A0:94:E9:67:DC:A7:FF:34:2E:64:BE:D9:22
            X509v3 Authority Key Identifier:
                keyid:E4:97:4B:84:16:AD:3B:99:DD:11:F3:B0:40:56:F0:C7:99:B7:A1:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5JdLhBatO5ndEfOwQFbwx5m3ocs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:ac:f7:b4:3a:5e:94:f0:05:cc:01:eb:f7:2c:9c:eb:94:ef:
         60:70:23:fb:f8:97:64:01:e6:31:c3:9e:3e:b5:5c:28:8d:bd:
         5d:26:09:06:e2:44:b4:a8:8c:7b:b8:55:28:1e:12:17:0d:0f:
         9a:68:34:f5:95:6c:ee:6b:e3:9d:27:93:cc:0a:92:e7:48:76:
         5e:fe:ca:ae:8f:71:b1:fe:42:fd:21:df:e0:a2:38:a7:70:fb:
         52:28:7a:e0:21:ab:26:df:c6:0c:80:2c:1f:f1:7e:51:6c:5b:
         8d:38:82:f0:c1:b5:cc:d5:64:e5:59:de:60:0b:32:e6:c0:44:
         39:b1:ed:a7:70:08:41:cd:71:28:dc:ea:6c:03:cc:3b:e6:c1:
         12:ec:5e:b1:e2:79:00:08:32:68:f7:b2:67:90:0d:ca:84:36:
         e4:46:a6:40:7c:12:3e:85:a3:f0:80:a9:a4:1a:8d:02:93:0d:
         2e:9c:33:4c:b6:63:b3:2c:50:2d:0c:5f:e6:47:2a:57:17:42:
         54:15:7c:9a:8d:53:5b:4d:ef:4e:3c:89:a3:4d:e2:0f:35:87:
         dc:fa:83:ea:cd:2b:9e:02:d5:59:7e:4f:4a:f7:31:a8:92:d5:
         7d:4a:81:39:3d:c2:da:e9:ee:9c:18:ef:4d:cc:1d:91:4a:54:
         27:b2:7c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:49:23 2026 by rpki-client