Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0C2B/D27E6ED0CB9611EDAC349B79C4F9AE02/5bsti54YaXwBWe2BMuXzS4axN7E.mft
File:                     5bsti54YaXwBWe2BMuXzS4axN7E.mft (raw, json)
Hash identifier:          tSxwmJs1GqJKqGxRTWwboJRaFZCZLFnl8uwZw/AS/sE=
Subject key identifier:   6C:62:2B:64:AB:87:69:45:8C:CF:B3:E5:18:BA:89:6F:08:66:CE:AF
Authority key identifier: E5:BB:2D:8B:9E:18:69:7C:01:59:ED:81:32:E5:F3:4B:86:B1:37:B1
Certificate issuer:       /CN=A91E0C2B/serialNumber=E5BB2D8B9E18697C0159ED8132E5F34B86B137B1
Certificate serial:       024B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bsti54YaXwBWe2BMuXzS4axN7E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0C2B/D27E6ED0CB9611EDAC349B79C4F9AE02/5bsti54YaXwBWe2BMuXzS4axN7E.mft
Manifest number:          0244
Signing time:             Fri 17 Apr 2026 02:14:46 +0000
Manifest this update:     Fri 17 Apr 2026 02:14:45 +0000
Manifest next update:     Fri 24 Apr 2026 02:14:45 +0000
Files and hashes:         1: 5bsti54YaXwBWe2BMuXzS4axN7E.crl (hash: G4j2DroMNENm/bTKJZD0y6VMqIRO/9CH/nggPKa9rhY=)
                          2: 12B9A5DECBC211EDB6F09516C4F9AE02.roa (hash: r/QdasLc5bg8TvtpOH3qUVDciFGg4kgkaUmfu3ixoOU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0C2B/D27E6ED0CB9611EDAC349B79C4F9AE02/5bsti54YaXwBWe2BMuXzS4axN7E.crl
                          rsync://rpki.apnic.net/member_repository/A91E0C2B/D27E6ED0CB9611EDAC349B79C4F9AE02/5bsti54YaXwBWe2BMuXzS4axN7E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bsti54YaXwBWe2BMuXzS4axN7E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:14:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 587 (0x24b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0C2B, serialNumber=E5BB2D8B9E18697C0159ED8132E5F34B86B137B1
        Validity
            Not Before: Apr 17 02:14:45 2026 GMT
            Not After : Apr 24 02:14:45 2026 GMT
        Subject: CN=69e19796-15ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1f:66:a2:b1:a0:56:25:02:74:08:b4:a4:27:
                    af:5a:e7:18:0f:56:a7:89:92:0b:45:73:1f:7b:a0:
                    fb:3f:e9:a8:ce:88:35:73:d9:e9:da:25:57:83:74:
                    20:5e:1a:50:a3:38:dd:63:b6:46:cd:65:0f:31:5a:
                    c8:01:38:51:cc:38:d0:28:77:d7:b4:6f:83:15:1f:
                    42:2a:48:5d:c7:29:cf:e4:16:c7:cb:2f:36:8e:69:
                    ea:5a:6d:8b:15:87:fc:92:70:85:d7:d5:87:dc:db:
                    4a:4d:15:03:4c:cd:7b:66:96:ad:2c:da:c3:13:40:
                    e5:74:17:15:8d:21:f5:63:29:15:91:4e:19:b0:55:
                    38:ec:72:b7:68:0b:e5:bd:64:64:93:c2:0f:d7:4d:
                    5a:f4:b5:89:cb:de:bb:d3:f0:cd:a8:6f:3d:49:5a:
                    d3:b3:f4:3f:2f:b4:7b:9c:e8:a1:fa:67:eb:d8:1b:
                    e3:09:6f:2b:51:47:b4:83:cf:52:1f:6a:94:71:08:
                    0a:34:fc:69:4b:d8:60:b6:7e:ea:1b:ee:42:06:02:
                    18:c9:50:9a:3f:61:1e:b2:a6:5d:b0:58:5d:d7:14:
                    14:72:14:51:ea:f2:0f:71:b4:45:a7:6b:21:ae:bf:
                    1b:06:db:24:7f:5f:b0:7e:f7:a5:ba:13:ed:df:00:
                    ca:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:62:2B:64:AB:87:69:45:8C:CF:B3:E5:18:BA:89:6F:08:66:CE:AF
            X509v3 Authority Key Identifier:
                keyid:E5:BB:2D:8B:9E:18:69:7C:01:59:ED:81:32:E5:F3:4B:86:B1:37:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0C2B/D27E6ED0CB9611EDAC349B79C4F9AE02/5bsti54YaXwBWe2BMuXzS4axN7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bsti54YaXwBWe2BMuXzS4axN7E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0C2B/D27E6ED0CB9611EDAC349B79C4F9AE02/5bsti54YaXwBWe2BMuXzS4axN7E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:1f:cc:0d:d0:99:a8:9e:6d:9c:93:dd:c3:28:ff:7a:90:d4:
         fe:5b:2b:e3:23:c8:81:d2:ea:a5:2d:b6:28:05:1e:04:48:cb:
         6b:54:d9:a6:8b:25:7b:bb:ad:44:3a:5c:4a:9a:d2:13:4c:a1:
         40:13:17:c8:ed:5b:a0:78:19:10:3c:25:7c:57:4b:75:12:70:
         49:60:23:80:91:34:e7:a8:ee:64:48:12:a6:91:71:fa:13:8c:
         7d:5e:ca:96:8b:ce:d9:6c:f8:0b:0f:86:50:53:97:32:8e:2d:
         6a:b9:b4:5d:3b:dc:43:15:1c:25:1a:1f:12:9f:ff:15:a2:c9:
         9b:5a:8f:13:72:6c:a6:dc:35:57:34:bc:e7:2c:f8:bc:20:6a:
         98:3b:98:ab:37:1c:dd:0b:28:0b:98:2f:9e:2e:d6:fc:b0:d5:
         84:ad:86:35:7e:18:73:43:51:0e:9d:97:f1:b9:10:cf:81:d5:
         75:a6:65:16:86:f0:42:01:16:f2:84:f3:7f:7b:23:b8:b7:9d:
         71:4d:f5:f3:2b:72:6e:1d:c5:a5:73:99:be:27:06:11:96:ae:
         f5:04:43:56:8b:a2:66:46:6d:9e:c8:36:66:2e:fb:59:3e:df:
         ad:1e:9e:8e:cf:b0:2b:2d:4d:85:ca:1c:71:f6:14:7d:a4:73:
         57:e1:02:df
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTBDMkIxMTAvBgNVBAUTKEU1QkIyRDhCOUUxODY5N0MwMTU5RUQ4MTMyRTVGMzRC
ODZCMTM3QjEwHhcNMjYwNDE3MDIxNDQ1WhcNMjYwNDI0MDIxNDQ1WjAYMRYwFAYD
VQQDEw02OWUxOTc5Ni0xNWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoR9morGgViUCdAi0pCevWucYD1aniZILRXMfe6D7P+mozog1c9np2iVXg3Qg
XhpQozjdY7ZGzWUPMVrIAThRzDjQKHfXtG+DFR9CKkhdxynP5BbHyy82jmnqWm2L
FYf8knCF19WH3NtKTRUDTM17ZpatLNrDE0DldBcVjSH1YykVkU4ZsFU47HK3aAvl
vWRkk8IP101a9LWJy9670/DNqG89SVrTs/Q/L7R7nOih+mfr2BvjCW8rUUe0g89S
H2qUcQgKNPxpS9hgtn7qG+5CBgIYyVCaP2EesqZdsFhd1xQUchRR6vIPcbRFp2sh
rr8bBtskf1+wfveluhPt3wDKzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGxiK2Sr
h2lFjM+z5Ri6iW8IZs6vMB8GA1UdIwQYMBaAFOW7LYueGGl8AVntgTLl80uGsTex
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEMyQi9EMjdFNkVEMENC
OTYxMUVEQUMzNDlCNzlDNEY5QUUwMi81YnN0aTU0WWFYd0JXZTJCTXVYelM0YXhO
N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVic3RpNTRZYVh3QldlMkJNdVh6UzRheE43RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MEMyQi9EMjdFNkVEMENCOTYxMUVEQUMzNDlCNzlDNEY5QUUwMi81YnN0aTU0WWFY
d0JXZTJCTXVYelM0YXhON0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYx/MDdCZqJ5tnJPdwyj/epDU/lsr4yPIgdLqpS22KAUeBEjLa1TZposle7ut
RDpcSprSE0yhQBMXyO1boHgZEDwlfFdLdRJwSWAjgJE056juZEgSppFx+hOMfV7K
lovO2Wz4Cw+GUFOXMo4tarm0XTvcQxUcJRofEp//FaLJm1qPE3Jsptw1VzS85yz4
vCBqmDuYqzcc3QsoC5gvni7W/LDVhK2GNX4Yc0NRDp2X8bkQz4HVdaZlFobwQgEW
8oTzf3sjuLedcU318ytybh3FpXOZvicGEZau9QRDVouiZkZtnsg2Zi77WT7frR6e
js+wKy1NhcoccfYUfaRzV+EC3w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:20:59 2026 by rpki-client