Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
File:                     C5I347CGtYw82c5v1JrCYffVJaM.mft (raw, json)
Hash identifier:          7zJY5tj/frGgn62yYVCrmBuPC/omZHX78SRFS1OHt/Y=
Subject key identifier:   66:0A:86:40:36:79:35:DB:ED:91:24:6E:89:E2:57:13:43:0D:F4:77
Authority key identifier: 0B:92:37:E3:B0:86:B5:8C:3C:D9:CE:6F:D4:9A:C2:61:F7:D5:25:A3
Certificate issuer:       /CN=A91F08FA/serialNumber=0B9237E3B086B58C3CD9CE6FD49AC261F7D525A3
Certificate serial:       F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
Manifest number:          E8
Signing time:             Sun 19 Apr 2026 06:09:56 +0000
Manifest this update:     Sun 19 Apr 2026 06:09:56 +0000
Manifest next update:     Sun 26 Apr 2026 06:09:56 +0000
Files and hashes:         1: C5I347CGtYw82c5v1JrCYffVJaM.crl (hash: Hqx7j/QcCrmVfZtse76sLZ3L17du6EKWUxG001mVNK0=)
                          2: B4F27262FA2911EFA783CE2DC4F9AE02.roa (hash: uufA5ZmNxri3hkizmrTV+/5I7T9shm+y03oLPhZQF5k=)
                          3: 24E20F9E6B7011F0ACA1BB56C4F9AE02.roa (hash: RLjdUAVnjKgzwqmaXAIPV1P+6YSNLAkKqfL9Zn2hSIQ=)
                          4: 9C9C1046F7CD11EF9245601CC4F9AE02.roa (hash: DZs/ioNjiGTQdREG+zE+daNHAc/dwChZtpeTTorEq9w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.crl
                          rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 248 (0xf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F08FA, serialNumber=0B9237E3B086B58C3CD9CE6FD49AC261F7D525A3
        Validity
            Not Before: Apr 19 06:09:56 2026 GMT
            Not After : Apr 26 06:09:56 2026 GMT
        Subject: CN=69e471b4-4536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ec:cc:e8:03:04:a2:4c:15:5b:1b:c4:f7:aa:
                    f8:0f:6b:36:7e:78:8c:5c:2a:3a:97:61:08:8e:88:
                    8d:01:53:44:50:e4:96:38:dc:3e:ea:be:c3:73:21:
                    f6:e8:f5:17:ce:2d:a2:7c:82:1b:46:0f:0a:46:74:
                    bf:c7:9b:9d:c5:8a:54:04:78:73:21:b3:24:de:c1:
                    a3:bb:53:93:ce:96:d0:ac:c6:23:21:6e:aa:1e:e6:
                    85:da:4b:4c:e9:49:42:3d:e5:c8:ae:b9:b3:20:11:
                    6e:43:f5:49:0c:21:30:c7:7d:49:67:b5:c6:f0:28:
                    23:d8:51:c6:94:23:31:b4:0d:e5:9d:69:c1:8a:03:
                    51:79:03:ab:4d:d1:2c:3c:19:0c:03:da:b3:f1:3d:
                    cc:28:22:10:9e:48:d4:f8:52:1a:c3:7b:88:4a:94:
                    2e:a1:57:07:a3:04:38:3a:81:b4:1f:30:49:25:37:
                    10:3a:ab:fb:c1:d6:28:34:00:8d:04:75:e0:29:a9:
                    83:4d:bf:86:7e:11:3d:8a:f2:2a:c2:7a:2c:43:3f:
                    4c:68:79:16:60:5f:e4:23:50:d5:08:03:3d:b4:34:
                    ca:24:2d:1b:10:ea:47:b4:e7:14:36:57:94:2b:82:
                    c9:06:af:99:b9:1c:9f:1a:18:33:d7:67:a9:0c:0e:
                    2b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:0A:86:40:36:79:35:DB:ED:91:24:6E:89:E2:57:13:43:0D:F4:77
            X509v3 Authority Key Identifier:
                keyid:0B:92:37:E3:B0:86:B5:8C:3C:D9:CE:6F:D4:9A:C2:61:F7:D5:25:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:a0:41:dd:08:7b:8a:c0:5c:9b:4c:50:93:bb:3b:da:2d:59:
         9b:4a:86:4f:e9:76:e7:04:28:c5:9c:0c:c4:14:6a:2e:7a:1a:
         8b:9d:4a:cc:c4:b6:84:93:05:9d:b1:e2:42:cc:d7:60:b9:cf:
         28:22:f4:68:43:e3:1e:5f:c1:0c:d3:32:ac:a0:49:2e:92:dc:
         e5:5d:79:ac:73:ec:e3:06:43:2b:ce:cc:5b:49:e0:52:c7:22:
         e0:65:53:b7:09:cb:52:64:a3:94:06:86:8b:9a:a7:f1:64:eb:
         92:2e:7a:a5:95:36:5d:30:17:ca:5d:f6:f2:f0:4b:9b:2a:e0:
         a9:f4:54:4e:9a:56:4b:b7:f3:d6:46:45:7a:af:df:f1:a1:04:
         3e:34:d7:57:2c:fd:fc:37:2e:46:df:6f:1b:cf:f1:81:3e:a7:
         27:4b:e5:7e:72:05:22:fc:8a:4a:61:51:63:8d:e9:07:28:2c:
         60:a8:f0:55:34:fd:26:a8:41:b4:79:4d:9e:0e:1f:43:79:d0:
         2a:48:d0:57:7f:50:c8:eb:26:30:ac:58:78:8d:d3:19:9f:f2:
         ab:e9:14:94:df:90:05:a5:5e:83:78:75:51:1d:6e:8d:cd:5b:
         94:04:52:d2:63:fd:19:8d:4e:4c:f5:dd:f0:2b:d3:36:c1:43:
         c0:7b:36:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:55:24 2026 by rpki-client