Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
File:                     C5I347CGtYw82c5v1JrCYffVJaM.mft (raw, json)
Hash identifier:          ferBLbW+hzMBkEkdt/QO1NSUYPPP2Kt60VESWYUozbY=
Subject key identifier:   89:EF:63:A4:23:C9:EA:8C:C1:93:63:BB:AB:3E:0D:C4:06:70:4B:C4
Authority key identifier: 0B:92:37:E3:B0:86:B5:8C:3C:D9:CE:6F:D4:9A:C2:61:F7:D5:25:A3
Certificate issuer:       /CN=A91F08FA/serialNumber=0B9237E3B086B58C3CD9CE6FD49AC261F7D525A3
Certificate serial:       F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
Manifest number:          E7
Signing time:             Fri 17 Apr 2026 06:15:26 +0000
Manifest this update:     Fri 17 Apr 2026 06:15:25 +0000
Manifest next update:     Fri 24 Apr 2026 06:15:25 +0000
Files and hashes:         1: C5I347CGtYw82c5v1JrCYffVJaM.crl (hash: AXeuiAKs3XgpCFIyy6ghB2rd57byD1WZUwH1qeip2+8=)
                          2: B4F27262FA2911EFA783CE2DC4F9AE02.roa (hash: uufA5ZmNxri3hkizmrTV+/5I7T9shm+y03oLPhZQF5k=)
                          3: 9C9C1046F7CD11EF9245601CC4F9AE02.roa (hash: DZs/ioNjiGTQdREG+zE+daNHAc/dwChZtpeTTorEq9w=)
                          4: 24E20F9E6B7011F0ACA1BB56C4F9AE02.roa (hash: RLjdUAVnjKgzwqmaXAIPV1P+6YSNLAkKqfL9Zn2hSIQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.crl
                          rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:15:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 247 (0xf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F08FA, serialNumber=0B9237E3B086B58C3CD9CE6FD49AC261F7D525A3
        Validity
            Not Before: Apr 17 06:15:25 2026 GMT
            Not After : Apr 24 06:15:25 2026 GMT
        Subject: CN=69e1cffd-134c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:45:8b:ad:ac:98:32:3f:28:de:9c:e4:46:f7:
                    cd:13:e3:f1:25:30:42:6e:a6:60:03:ef:98:63:c4:
                    72:06:58:d7:dc:b1:4e:66:93:dd:76:31:b4:b4:6f:
                    ee:6c:eb:f6:05:82:31:8e:11:90:5a:de:7b:26:6f:
                    2b:b8:d5:4f:09:fd:10:28:1a:bd:a6:e1:03:ad:08:
                    1e:05:93:f0:4e:50:24:bd:a0:26:de:d4:c2:b6:ea:
                    35:80:42:f5:ca:37:cb:3b:8a:dc:24:5d:43:69:43:
                    9f:33:85:da:96:4b:d4:70:49:7b:c2:7d:2d:2d:21:
                    6d:94:8a:9d:ce:91:bf:70:2c:4b:df:49:68:3a:e7:
                    ee:b0:42:9b:03:ab:f5:52:80:e6:94:58:ad:98:87:
                    29:ff:b8:17:58:b8:f8:0c:51:f0:a3:24:02:88:c2:
                    73:fa:1f:72:d5:30:38:61:c0:8c:b8:c3:42:3e:38:
                    fe:2a:2d:31:7d:af:03:73:07:77:5d:02:6b:63:02:
                    d8:ff:48:e8:c6:2b:62:de:a1:20:93:42:62:3c:7f:
                    8f:77:da:dd:dc:5e:de:d3:df:b5:ea:07:a2:80:13:
                    0a:d2:1c:41:a1:fd:fe:33:fd:43:aa:ce:ce:b6:9b:
                    b6:66:92:11:70:90:9e:81:43:5c:da:62:c4:5d:12:
                    59:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:EF:63:A4:23:C9:EA:8C:C1:93:63:BB:AB:3E:0D:C4:06:70:4B:C4
            X509v3 Authority Key Identifier:
                keyid:0B:92:37:E3:B0:86:B5:8C:3C:D9:CE:6F:D4:9A:C2:61:F7:D5:25:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:bd:b9:1b:de:04:71:a8:bc:5f:b7:9d:f8:4c:b0:15:9d:ee:
         36:b1:34:9c:50:e1:4b:8c:1b:f0:c0:27:9f:7b:8b:98:cc:2c:
         5e:53:dc:66:43:63:58:5e:96:0a:e3:df:fb:43:60:78:e0:09:
         88:0a:f8:de:18:f0:d3:ab:93:11:b2:2a:60:33:b7:15:df:08:
         e9:08:77:95:67:bd:84:6d:5f:45:22:80:79:22:32:a6:fe:de:
         7e:f5:79:c9:98:4d:91:46:31:a4:7d:98:ba:bf:c3:6a:02:d0:
         2d:7d:f1:c3:67:91:79:e5:27:2f:a2:70:7b:3e:da:f2:be:a6:
         4a:89:8f:e6:0b:9c:22:ba:b4:95:d6:8c:ed:a0:1e:88:e8:66:
         cc:e1:0c:eb:26:54:ca:af:26:bc:72:9e:14:1a:1a:16:d2:d6:
         8e:35:ed:23:00:99:7e:71:d3:a9:5d:3d:f7:6b:05:eb:ae:17:
         e1:98:4d:a7:80:57:09:8b:6e:e4:e8:c0:9d:f2:54:30:c4:95:
         04:84:d8:e9:9d:8e:ec:28:fe:df:b5:46:eb:fa:c5:4e:35:d7:
         71:fa:3f:53:50:ae:8f:f5:c1:6f:5c:2d:5b:e9:75:8b:30:b8:
         36:a2:55:77:7b:8a:28:e0:e5:0a:47:25:f5:00:2a:e5:e5:16:
         1c:31:b0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:52:43 2026 by rpki-client