Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft
File:                     5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft (raw, json)
Hash identifier:          BKRLC/YO3GNz34EVJGg7zJpNsu6GTWrK5nCUURXpAwU=
Subject key identifier:   D4:74:58:65:27:A3:55:92:F4:C7:38:4F:C9:AF:D5:16:24:DF:C1:43
Authority key identifier: E5:8F:0F:52:A4:D2:D1:DE:44:67:5A:CA:17:55:7B:F9:82:EC:7D:79
Certificate issuer:       /CN=A91698EC/serialNumber=E58F0F52A4D2D1DE44675ACA17557BF982EC7D79
Certificate serial:       016B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft
Manifest number:          0163
Signing time:             Sun 05 Apr 2026 04:24:06 +0000
Manifest this update:     Sun 05 Apr 2026 04:24:06 +0000
Manifest next update:     Sun 12 Apr 2026 04:24:06 +0000
Files and hashes:         1: 5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl (hash: 8fh4zMOK/aEKyufRV3hQkTFW5kBRuEM476WMsfddgC0=)
                          2: 1FCE5CE0214F11EFAB245D49C4F9AE02.roa (hash: 1x0I+eVdWJfH3yy8/IHMHpk/2VtmPzxn2HvmLROgLBQ=)
                          3: 02BCE50286AF11EF9EFFD52FC4F9AE02.roa (hash: HA8Kw92LD3QGPRWQy9en3UrEthfqY+7JRHJQJs+dCaQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl
                          rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 04:24:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 363 (0x16b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91698EC, serialNumber=E58F0F52A4D2D1DE44675ACA17557BF982EC7D79
        Validity
            Not Before: Apr  5 04:24:06 2026 GMT
            Not After : Apr 12 04:24:06 2026 GMT
        Subject: CN=69d1e3e6-f9bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b0:ed:81:dd:7f:08:f0:13:b1:98:8f:cb:86:
                    b6:20:54:67:e8:42:2b:56:d1:e5:f7:a5:d9:e4:ed:
                    b8:03:17:74:c2:de:a1:f5:a8:87:3a:40:8f:e9:00:
                    3d:cd:c0:6c:20:d2:a6:2c:1d:7a:65:a8:99:51:54:
                    e8:c4:5a:04:e1:d1:fc:dd:c8:b8:66:a1:a3:dd:06:
                    3f:c0:7a:38:3c:87:0f:ac:88:85:27:aa:e2:20:d3:
                    5b:24:60:34:e5:de:1f:d4:be:ba:67:c8:2f:b3:4b:
                    cb:38:43:d1:1d:67:c9:bb:72:10:d5:63:21:b0:9f:
                    8a:05:de:8e:43:dd:cd:30:24:3e:1a:75:e2:66:25:
                    cb:35:29:6b:3a:1a:ff:66:df:cd:45:96:76:66:9d:
                    5c:71:0f:97:56:c7:94:39:6b:af:65:c1:77:f4:7a:
                    98:6f:84:89:2f:7c:fa:6b:9a:bf:3a:56:c1:b7:58:
                    8e:c5:1e:73:7c:18:11:9a:8c:56:b6:1e:5e:59:f8:
                    56:4a:7d:a0:26:e0:e2:91:93:72:ec:be:18:91:a0:
                    02:66:3a:a9:28:9f:59:d9:3e:ca:a4:36:7f:17:cf:
                    10:be:ce:a5:f8:6e:81:18:37:5b:d6:37:c8:9c:16:
                    7a:0f:b1:26:50:65:54:a7:ae:48:12:ff:68:02:be:
                    8d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:74:58:65:27:A3:55:92:F4:C7:38:4F:C9:AF:D5:16:24:DF:C1:43
            X509v3 Authority Key Identifier:
                keyid:E5:8F:0F:52:A4:D2:D1:DE:44:67:5A:CA:17:55:7B:F9:82:EC:7D:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:6c:99:ea:83:09:a0:db:77:5b:e4:1d:42:4a:95:30:ce:5d:
         c3:ea:05:a6:f0:be:fa:32:b7:98:ee:a1:4c:85:0f:4f:ca:aa:
         f4:c8:b2:f1:10:93:fb:bf:fa:6e:10:d2:84:46:25:66:6d:77:
         2b:35:a3:cb:ae:e9:38:9a:ec:c5:93:c4:66:97:e8:55:97:9b:
         30:65:d5:3a:81:38:ac:52:f4:1a:65:f4:42:a5:72:32:ec:b4:
         f6:ba:12:65:07:b0:b0:20:54:28:47:c2:ff:30:7a:ec:65:a0:
         1d:d8:17:ca:6e:3a:43:9c:13:d6:71:ad:be:5d:95:4d:c0:13:
         d4:b7:00:d4:a0:59:15:b3:05:cd:77:d2:57:48:ff:eb:77:4a:
         55:88:e8:2f:f8:95:3f:61:ec:b2:1a:1d:e9:0c:91:cb:bf:1d:
         e8:3f:c3:d0:df:a3:e6:06:0a:bb:c6:91:63:59:29:cd:a4:5d:
         13:85:51:0e:e4:98:ca:20:0c:09:10:c3:32:bf:db:61:dd:c7:
         0e:45:c4:49:80:62:d0:c8:9c:10:4f:41:13:73:59:9d:7e:fb:
         30:34:de:a9:a2:e8:b9:78:ee:2a:65:93:1c:e8:71:4c:36:e6:
         44:ec:b5:48:4b:f8:9c:b5:15:05:67:ed:8e:7b:cd:ac:0d:15:
         d5:c5:9b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:51:16 2026 by rpki-client