Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.mft
File:                     S5pjiBqFVgIQVOlL3DInTse33fI.mft (raw, json)
Hash identifier:          LS7o0H19/4C9Cz04SDbcjf40PuuSO6fR55Bua8Qg0jA=
Subject key identifier:   C0:4C:98:40:BC:5B:E3:26:90:6E:AF:66:78:FC:FB:0A:75:7A:6C:48
Authority key identifier: 4B:9A:63:88:1A:85:56:02:10:54:E9:4B:DC:32:27:4E:C7:B7:DD:F2
Certificate issuer:       /CN=A91FD90A/serialNumber=4B9A63881A8556021054E94BDC32274EC7B7DDF2
Certificate serial:       06AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5pjiBqFVgIQVOlL3DInTse33fI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.mft
Manifest number:          0698
Signing time:             Thu 16 Apr 2026 22:23:54 +0000
Manifest this update:     Thu 16 Apr 2026 22:23:54 +0000
Manifest next update:     Thu 23 Apr 2026 22:23:54 +0000
Files and hashes:         1: S5pjiBqFVgIQVOlL3DInTse33fI.crl (hash: r/DHzU6VbC9mrVmwA/bEDqYiExAcT7nfAT8f+b94U7s=)
                          2: 79F19E0A5BDA11F0980FE961C4F9AE02.roa (hash: Q5xlJCAiF8KCnEHIB5dc5jerjCip28+WlID9p/XyUfA=)
                          3: 410F8C0EDBC611EEA717194DC4F9AE02.roa (hash: zzXvOA3n0XL26um5myog94HDs9qJeV0AH7BZVHkqiz0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.crl
                          rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5pjiBqFVgIQVOlL3DInTse33fI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:23:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1709 (0x6ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD90A, serialNumber=4B9A63881A8556021054E94BDC32274EC7B7DDF2
        Validity
            Not Before: Apr 16 22:23:54 2026 GMT
            Not After : Apr 23 22:23:54 2026 GMT
        Subject: CN=69e1617a-2589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f7:73:13:e3:6f:99:e5:ee:84:8b:71:aa:fb:
                    64:b3:fd:2d:47:e7:32:15:3c:06:05:ce:fd:98:77:
                    40:2c:3a:3e:26:07:c8:96:ee:25:d1:ba:13:ee:ab:
                    f9:5f:80:e3:bd:9d:e6:2c:e4:8f:e4:c6:3a:d7:a4:
                    a8:80:13:e8:5b:86:14:ad:06:d8:c2:1b:16:0b:b7:
                    d3:18:77:b7:b0:d0:a4:e7:db:e1:89:61:5f:6d:70:
                    af:5b:54:a8:31:32:db:b0:71:73:d0:6d:90:ec:e0:
                    87:d1:7b:74:dd:92:2e:da:33:61:9b:81:24:47:b5:
                    05:da:c4:60:71:32:ad:db:97:74:1c:5b:07:6d:98:
                    94:24:16:f4:ec:7f:db:23:b9:56:21:9e:02:74:d6:
                    dc:a5:95:eb:cb:c8:e6:a7:3f:9d:71:e2:fc:49:65:
                    af:fd:e5:d1:25:0e:e8:11:46:49:92:57:e1:f2:92:
                    21:3c:cb:a3:9d:18:69:cf:c8:64:11:2a:3d:da:fe:
                    8b:9c:dc:e9:c2:20:6f:ee:86:ac:cd:f4:ff:8c:a9:
                    0c:52:05:a4:95:8d:ab:17:9f:97:d1:67:24:40:f9:
                    c9:0f:be:27:b5:a0:88:dd:a2:9b:4a:9a:20:f7:b3:
                    31:85:03:d9:91:9c:bc:d8:bd:75:f1:e1:cc:2c:5b:
                    d3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:4C:98:40:BC:5B:E3:26:90:6E:AF:66:78:FC:FB:0A:75:7A:6C:48
            X509v3 Authority Key Identifier:
                keyid:4B:9A:63:88:1A:85:56:02:10:54:E9:4B:DC:32:27:4E:C7:B7:DD:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5pjiBqFVgIQVOlL3DInTse33fI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:d5:bc:50:66:a3:6d:30:58:eb:81:db:41:cd:f6:85:95:ef:
         53:a7:29:19:28:6b:92:57:93:2f:39:05:21:30:0c:89:32:4f:
         86:ff:8c:2f:33:5a:b1:af:52:fe:54:49:81:e3:d7:11:88:dc:
         ab:62:53:4a:20:bb:0a:b0:ee:94:1d:a2:a3:8b:d7:47:be:05:
         39:59:5a:91:3e:5b:ee:1e:a6:12:91:9e:79:b9:de:a5:3c:4f:
         d4:b1:6b:b0:17:19:aa:88:17:fa:48:c4:39:c6:6b:42:95:4e:
         0e:76:62:ba:46:f7:1f:b6:23:25:2e:68:06:b4:3e:3d:ec:4d:
         88:ae:e9:9e:e2:ff:4b:d9:61:0e:d1:f3:51:08:78:af:b0:80:
         cd:39:db:58:b1:f2:3c:2c:f5:81:c8:eb:8d:3a:13:67:96:9b:
         6e:a3:6a:76:1b:39:b9:78:cf:1e:16:27:f7:c8:6f:21:41:cf:
         c7:47:81:fb:2a:5c:4e:93:85:32:c2:9e:69:b6:0a:6f:99:97:
         1a:24:0d:0d:5c:52:28:13:51:9f:24:11:5e:43:92:8f:1e:f3:
         fe:21:9f:1a:68:2a:a8:1e:07:39:00:e2:98:53:40:c0:5b:3b:
         85:ff:79:33:3f:08:3b:ae:23:06:b2:b7:70:eb:61:0c:e9:82:
         4b:d5:ad:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:53:17 2026 by rpki-client