Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.mft
File:                     5XM7E_2GojaUcCw-KPP_CUl6k3E.mft (raw, json)
Hash identifier:          EFV4Z67x8kalhvJH387fRKj5reZ9JX9ArWL3PF1HBHM=
Subject key identifier:   C3:05:6D:2C:E6:22:22:4C:20:CC:76:FE:B9:49:7F:21:9D:36:EF:06
Authority key identifier: E5:73:3B:13:FD:86:A2:36:94:70:2C:3E:28:F3:FF:09:49:7A:93:71
Certificate issuer:       /CN=A91DD92D/serialNumber=E5733B13FD86A23694702C3E28F3FF09497A9371
Certificate serial:       07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XM7E_2GojaUcCw-KPP_CUl6k3E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.mft
Manifest number:          05
Signing time:             Wed 15 Apr 2026 08:47:32 +0000
Manifest this update:     Wed 15 Apr 2026 08:47:31 +0000
Manifest next update:     Wed 22 Apr 2026 08:47:31 +0000
Files and hashes:         1: 5XM7E_2GojaUcCw-KPP_CUl6k3E.crl (hash: rPmTnXqi9z3bmwdyaYwnjxaEl9i3cbWVXUKHHK4vztI=)
                          2: E706483C36F511F1BB8AA257BA833773.roa (hash: 5kRieVF1nul2niREuEGXZytXyh/ShjC7FLAkX7Dl1fE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.crl
                          rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XM7E_2GojaUcCw-KPP_CUl6k3E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 08:47:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD92D, serialNumber=E5733B13FD86A23694702C3E28F3FF09497A9371
        Validity
            Not Before: Apr 15 08:47:31 2026 GMT
            Not After : Apr 22 08:47:31 2026 GMT
        Subject: CN=69df50a4-d2f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e8:c1:a2:31:6f:5f:6f:2d:4e:5f:70:cd:ce:
                    13:65:20:f5:e8:51:4b:59:f4:3b:21:9c:af:8a:66:
                    7f:2e:03:36:1d:da:e8:05:09:48:5d:a1:95:19:4d:
                    96:e9:97:63:6e:d4:95:0b:f7:e0:4f:0c:9d:47:fe:
                    57:fe:14:84:a3:91:25:8f:7c:64:78:7b:ef:44:07:
                    8c:37:8f:a2:b8:8e:ac:d3:2a:2e:cc:7b:06:c7:0f:
                    48:5d:af:10:67:a4:d3:4c:49:ff:fd:9f:71:91:13:
                    b8:94:bb:a7:8e:fc:6b:cc:11:c8:ae:2a:07:a9:cc:
                    ba:80:95:48:9a:ae:5e:18:f0:21:d4:b9:76:8e:25:
                    97:57:d3:b9:fd:fe:f6:ba:2b:cc:67:c7:03:d5:fc:
                    c8:f0:7a:c4:52:4d:3c:9c:b4:2e:76:67:c5:e0:26:
                    21:0e:e8:89:b7:4e:4b:a5:0f:55:ef:19:81:18:10:
                    b5:3a:9a:1b:30:4a:cb:1f:f3:63:0f:aa:e3:fd:b1:
                    cd:8d:c6:7a:0f:b1:3e:01:00:9a:0e:86:8b:9e:d5:
                    19:65:97:5c:00:bc:bc:49:16:65:a4:b2:dc:15:3f:
                    8d:32:52:d1:e2:a1:87:52:99:4e:46:cf:62:0b:ee:
                    41:5e:ab:a3:b6:c8:0d:85:df:68:05:f1:07:e9:fb:
                    c2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:05:6D:2C:E6:22:22:4C:20:CC:76:FE:B9:49:7F:21:9D:36:EF:06
            X509v3 Authority Key Identifier:
                keyid:E5:73:3B:13:FD:86:A2:36:94:70:2C:3E:28:F3:FF:09:49:7A:93:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XM7E_2GojaUcCw-KPP_CUl6k3E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:e8:0c:a4:ca:02:c7:88:37:e0:f0:ea:14:6d:6f:8c:da:d4:
         c6:a4:c7:26:20:58:0e:71:e4:57:57:3a:c4:9b:77:27:da:f1:
         67:89:36:af:aa:16:07:56:92:22:53:7f:f1:99:6f:74:06:c0:
         b8:da:79:41:2b:e3:de:71:1f:73:45:86:90:fd:f2:ea:e7:dc:
         ea:a1:cc:38:3c:90:fe:fc:c5:b9:e0:94:15:2b:a6:99:44:1a:
         52:2a:a9:52:c1:22:7c:7e:ac:56:aa:1f:92:45:5b:e2:a3:31:
         73:db:66:88:14:99:c5:b0:32:56:4c:c1:30:7f:0e:1c:9c:2e:
         1b:02:b6:59:76:bf:7c:a4:cf:64:dd:0d:1d:5b:f0:76:47:d4:
         c6:52:68:71:7a:18:13:a7:47:42:f6:40:8a:84:b4:00:f1:a9:
         1c:f2:9f:64:bd:99:7e:c1:a2:bb:4c:78:de:3d:ce:4d:fe:c9:
         92:51:55:eb:69:49:3d:02:7a:9e:58:cb:97:26:75:46:bd:e5:
         48:39:83:8c:99:8e:b5:eb:6c:17:25:11:7d:4d:ea:1c:b0:89:
         ea:0e:53:5f:60:7a:a5:9e:ae:9e:3f:68:e5:7b:5f:12:ba:de:
         2b:1b:a8:12:51:02:c3:f3:fc:a8:dd:ca:2c:ed:6c:3e:96:4f:
         b8:59:57:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:08:13 2026 by rpki-client