Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.mft
File:                     53Ey5P6tBO7U_pRtYHoNy1ekIGU.mft (raw, json)
Hash identifier:          fUOdXHTqlj4gJrs+vBoSzB+sapTHCn9OoMBt04r9qM0=
Subject key identifier:   C0:81:1A:E9:86:CC:43:65:12:1A:22:F3:5D:5A:AC:73:C9:88:BE:13
Authority key identifier: E7:71:32:E4:FE:AD:04:EE:D4:FE:94:6D:60:7A:0D:CB:57:A4:20:65
Certificate issuer:       /CN=A91F715C/serialNumber=E77132E4FEAD04EED4FE946D607A0DCB57A42065
Certificate serial:       0210
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53Ey5P6tBO7U_pRtYHoNy1ekIGU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.mft
Manifest number:          01FF
Signing time:             Fri 17 Apr 2026 03:04:20 +0000
Manifest this update:     Fri 17 Apr 2026 03:04:20 +0000
Manifest next update:     Fri 24 Apr 2026 03:04:20 +0000
Files and hashes:         1: 53Ey5P6tBO7U_pRtYHoNy1ekIGU.crl (hash: 3YctF7wNY5ROBr2yqnYfAA8l1EITn1uLInRQrdGAkwQ=)
                          2: 7A97D2F2174311EFAA4B5762C4F9AE02.roa (hash: +Lrcrj2lIMZLMe/9PfLzAWnbYP1lTLAnPGB7X1AwEW0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.crl
                          rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53Ey5P6tBO7U_pRtYHoNy1ekIGU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:04:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 528 (0x210)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F715C, serialNumber=E77132E4FEAD04EED4FE946D607A0DCB57A42065
        Validity
            Not Before: Apr 17 03:04:20 2026 GMT
            Not After : Apr 24 03:04:20 2026 GMT
        Subject: CN=69e1a334-de5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cf:92:ab:13:17:26:e7:ef:f5:0b:4a:c4:95:
                    de:f8:f2:38:d8:fb:c8:a3:e1:d7:52:6a:1a:ee:fc:
                    a9:98:99:36:ef:09:eb:2c:9b:e2:ee:f7:9b:1f:f4:
                    59:e1:5d:44:36:43:f8:a8:aa:1e:96:1b:2b:28:f6:
                    f4:3e:c8:b8:bb:d4:f2:be:ee:8e:1d:83:ae:47:70:
                    4c:83:4b:f7:d6:57:68:55:f9:59:e8:6d:ee:29:5a:
                    12:35:33:72:83:2b:5f:c3:5f:54:61:9d:f9:1b:3c:
                    9d:04:29:2b:35:ed:c9:6b:6f:fc:ea:f3:01:39:f5:
                    42:02:95:31:dd:e3:f3:33:cf:78:42:d5:8a:8d:8d:
                    ff:04:29:68:67:ff:04:37:2f:af:d1:60:bb:17:06:
                    fb:ba:9e:48:28:85:5d:da:b6:6c:e1:53:bb:4b:61:
                    50:04:80:2e:2c:8f:e1:f8:ae:b3:a8:5a:d2:05:22:
                    5c:8d:4c:86:b3:d0:86:fe:31:80:22:60:d5:1b:69:
                    4b:b2:fd:82:39:80:f4:d4:50:44:0a:8a:c8:59:75:
                    c7:df:c0:91:41:0b:b6:97:c7:32:31:73:90:67:38:
                    fc:fc:2b:23:16:d1:4e:77:67:3b:ec:73:81:02:75:
                    a5:4d:99:a8:5c:83:c1:d3:59:66:1d:e9:19:92:8c:
                    76:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:81:1A:E9:86:CC:43:65:12:1A:22:F3:5D:5A:AC:73:C9:88:BE:13
            X509v3 Authority Key Identifier:
                keyid:E7:71:32:E4:FE:AD:04:EE:D4:FE:94:6D:60:7A:0D:CB:57:A4:20:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53Ey5P6tBO7U_pRtYHoNy1ekIGU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:e7:ff:0c:c0:62:e2:0c:a2:19:53:d9:48:80:36:d6:6c:45:
         48:a4:79:49:e7:de:46:e9:b8:19:eb:da:1b:a1:0d:ef:50:ed:
         8a:27:2e:9e:07:47:55:e8:e2:6f:d3:c0:8d:ad:19:87:b5:06:
         88:e1:d0:de:5a:81:d2:41:8b:9f:17:55:c1:b7:9d:25:93:58:
         f4:e7:37:ba:93:bb:69:e7:3f:c6:96:33:e3:53:c0:1c:a4:b9:
         0a:4e:ff:ec:cd:44:5c:12:18:e7:1a:1f:cb:4a:22:1b:bd:b2:
         78:b3:88:92:09:1b:5c:22:aa:a6:81:a0:23:a0:af:13:70:09:
         e9:f1:e9:2a:7d:4c:b6:b1:6d:1a:c5:e4:c2:ed:29:a6:95:d0:
         60:19:57:be:33:c9:bb:1d:32:d2:d3:83:0a:f6:e3:9c:8c:94:
         55:c1:91:fd:a9:14:16:37:21:b3:46:19:d8:cf:af:93:f3:ed:
         2f:90:51:da:c8:f8:a5:87:fb:5b:ad:16:27:69:ac:fa:fc:53:
         a8:14:49:ae:9e:8c:ef:00:08:eb:e3:12:ea:c1:88:72:b2:53:
         da:e4:ee:99:c8:9a:9f:e5:83:e1:5e:b9:42:ef:b1:29:53:c0:
         76:d1:58:fb:25:1d:da:a7:76:f9:91:28:a8:69:e4:19:1d:7e:
         a9:bd:00:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:26:20 2026 by rpki-client