Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft
File:                     cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft (raw, json)
Hash identifier:          Itv/4mnseTT/X6ZsMGL4iPVwDFHRmYFWRaeLFkiHGaU=
Subject key identifier:   48:02:5A:70:F6:17:27:2A:DE:A4:91:A7:B4:03:3E:DC:60:38:4C:A7
Authority key identifier: 72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7
Certificate issuer:       /CN=A91E0D87/serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7
Certificate serial:       05E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft
Manifest number:          05AF
Signing time:             Thu 16 Apr 2026 23:12:55 +0000
Manifest this update:     Thu 16 Apr 2026 23:12:54 +0000
Manifest next update:     Thu 23 Apr 2026 23:12:54 +0000
Files and hashes:         1: cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl (hash: StsBIEd0JNQATjG6ZL+iEV/MTwKHHZIHrQzlJb9L9ew=)
                          2: 2A490316D97011F0A9AB95F59AD3641D.roa (hash: MTKYuHS54sbbIgz0FdQa7tPFCtPZViVZZlK3jzFk3Qo=)
                          3: 345F56F87FE311EF80C0F71FC4F9AE02.roa (hash: qDBbxutM6whAYRqUGL23M9IPWqduEyKAvV9efNJXIMw=)
                          4: F93DE378B66911F09D7E8031C4F9AE02.roa (hash: c07jP4kaBJLesC3fKCC1+hkjCe95/NhhL5juygnjjI4=)
                          5: 39EA203238DB11F1AA6C3EA5A2833773.roa (hash: Xl9IN1jBFBBr5NJdM8/+NNt/Eg76Z7LumfHzT1CNK/Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl
                          rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:12:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1510 (0x5e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0D87, serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7
        Validity
            Not Before: Apr 16 23:12:54 2026 GMT
            Not After : Apr 23 23:12:54 2026 GMT
        Subject: CN=69e16cf7-790f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:46:7c:af:d3:33:7a:83:e0:94:1b:eb:15:09:
                    36:9b:e0:7c:11:cd:44:a0:a4:1e:d8:b0:e9:96:41:
                    8f:d6:66:7e:24:35:46:af:f3:89:e0:bc:86:26:76:
                    e3:cf:9c:c8:86:f3:5b:c2:66:4b:0c:29:f5:d6:04:
                    05:f2:16:1e:9c:43:6d:c3:f7:2a:61:5c:67:2e:ca:
                    4e:b6:2b:ab:74:19:69:e9:7a:0d:0f:ff:e3:83:41:
                    52:3b:c8:b1:9c:85:61:90:40:8f:a7:e6:8e:4a:a0:
                    23:ea:02:81:82:50:59:1b:47:43:db:86:f9:30:94:
                    b0:3c:c5:08:2d:4f:c3:35:55:b8:b8:a3:ce:d4:9b:
                    0d:d4:32:44:5b:91:8c:bc:cb:09:ad:91:21:15:ad:
                    b2:d5:b3:ae:f7:8f:2c:1f:13:87:10:8f:07:df:80:
                    9d:f8:6d:7e:d8:e7:79:c9:8a:da:26:32:86:39:25:
                    e8:96:60:e3:38:26:26:65:48:11:da:d1:b1:ff:b5:
                    5f:3f:42:ba:59:b2:42:8d:07:9d:28:76:97:54:ee:
                    5e:29:c8:e9:e6:d1:6c:76:ad:6c:05:f9:69:09:e5:
                    48:fc:39:03:cb:29:71:41:dc:1f:84:d9:4c:4e:6f:
                    7d:11:bc:59:cd:76:2f:18:1b:26:62:1b:f0:cb:5d:
                    74:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:02:5A:70:F6:17:27:2A:DE:A4:91:A7:B4:03:3E:DC:60:38:4C:A7
            X509v3 Authority Key Identifier:
                keyid:72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:df:14:1f:fb:68:8c:59:a8:54:6b:70:95:44:7a:63:c6:4a:
         58:85:de:b2:ba:f7:c5:ae:6c:5b:b1:70:87:99:1f:e5:93:51:
         48:96:24:2f:c4:e0:a0:70:d7:86:48:e5:65:67:9f:1e:42:06:
         aa:d4:46:20:be:9b:a0:c3:b0:8b:0b:55:39:4b:18:bf:60:b0:
         4f:b7:83:1b:14:b2:53:42:59:61:69:46:25:ed:02:96:43:89:
         7c:d7:64:20:44:6c:ae:c7:0b:ca:f2:c9:fa:fd:68:f0:ce:df:
         49:6b:2b:58:9d:a0:c4:e8:1e:32:7a:e3:e7:92:5b:65:74:82:
         71:fa:e1:bc:ba:25:a3:0d:28:e3:e5:3a:48:b4:24:3c:98:88:
         7c:64:ed:e7:a0:6a:73:fe:49:ae:73:4f:96:db:48:de:51:0a:
         d2:66:4c:c2:65:59:87:bb:0e:62:e7:99:4b:4b:80:eb:0f:7e:
         a3:04:4e:b5:64:3c:e6:00:16:ec:0b:0b:c8:05:b0:7e:64:bb:
         24:5d:63:37:47:da:ba:3f:ab:e3:61:86:24:41:2f:c8:3f:d8:
         29:bc:02:0b:51:b5:75:a7:23:06:d2:2a:93:1e:77:93:26:96:
         2d:2a:f5:f6:79:01:9d:b4:e5:65:7f:b5:c2:be:01:79:9e:85:
         ad:e0:63:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:41:06 2026 by rpki-client