Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/55ST8wo-6fDuQFIv8Z1oXIBium4.mft
File:                     55ST8wo-6fDuQFIv8Z1oXIBium4.mft (raw, json)
Hash identifier:          z2uXIuDjEk/xL6YHhRU30ZPECuhJ4VahLGr8IOskg78=
Subject key identifier:   04:CA:78:0E:3A:93:18:D6:4A:0C:B3:9A:D4:92:D6:DC:E7:AA:0A:93
Authority key identifier: E7:94:93:F3:0A:3E:E9:F0:EE:40:52:2F:F1:9D:68:5C:80:62:BA:6E
Certificate issuer:       /CN=A916E377/serialNumber=E79493F30A3EE9F0EE40522FF19D685C8062BA6E
Certificate serial:       01CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/55ST8wo-6fDuQFIv8Z1oXIBium4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/55ST8wo-6fDuQFIv8Z1oXIBium4.mft
Manifest number:          01C1
Signing time:             Sun 05 Apr 2026 03:19:56 +0000
Manifest this update:     Sun 05 Apr 2026 03:19:55 +0000
Manifest next update:     Sun 12 Apr 2026 03:19:55 +0000
Files and hashes:         1: 55ST8wo-6fDuQFIv8Z1oXIBium4.crl (hash: 8bwXLAkRkwrrbeilbLlDwxZNY2F/m5p14nzqK+tjkSg=)
                          2: 54692EB02FB111EFAD1C6322C4F9AE02.roa (hash: 7PaoHMA6XoZT4XJHkHBVfGbdDy263FRPB28wrXF5INM=)
                          3: 53F6AEC62FB111EFAD1C6322C4F9AE02.roa (hash: qSH4X3E9iU1ItPXDoiYYarRMYkBkjokUnUqcSYPUUxk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/55ST8wo-6fDuQFIv8Z1oXIBium4.crl
                          rsync://rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/55ST8wo-6fDuQFIv8Z1oXIBium4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/55ST8wo-6fDuQFIv8Z1oXIBium4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 03:19:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 459 (0x1cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E377, serialNumber=E79493F30A3EE9F0EE40522FF19D685C8062BA6E
        Validity
            Not Before: Apr  5 03:19:55 2026 GMT
            Not After : Apr 12 03:19:55 2026 GMT
        Subject: CN=69d1d4db-f6e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ee:f6:17:cb:ba:84:98:44:81:16:06:75:d4:
                    e9:e6:39:60:4f:3a:9b:96:f1:d3:0e:94:b2:5f:75:
                    8f:b0:88:6c:86:8e:e7:5c:e2:6d:5c:a0:f7:16:97:
                    5a:95:52:10:57:e5:9b:d3:ec:88:69:48:79:93:93:
                    24:53:2a:ce:9d:2a:47:45:43:21:93:06:85:2a:8d:
                    23:53:cd:10:da:3a:aa:e5:e2:05:cc:98:4a:cb:e2:
                    2b:71:3b:1d:51:5f:7c:f1:51:d6:4f:77:42:7d:aa:
                    35:dd:4d:16:b3:a6:ab:2d:6c:a4:15:83:29:fa:10:
                    71:e1:ae:5d:82:b2:bc:50:01:8c:13:98:8c:54:2e:
                    25:eb:a0:46:c9:0a:4e:ed:9c:15:11:c1:10:f1:41:
                    9a:29:30:18:5a:b1:9f:c4:e9:a2:07:f5:32:25:97:
                    09:fb:82:35:7f:dd:e8:13:dd:8d:6d:c3:36:7b:37:
                    67:a0:5c:0d:31:98:06:f9:1c:f6:b0:30:d7:96:44:
                    88:cd:70:b0:6a:e3:af:dc:b8:60:ab:0e:09:ce:81:
                    aa:61:33:eb:19:50:f0:f6:30:e2:46:81:08:03:04:
                    f9:66:8d:94:cd:66:03:eb:33:4b:e3:c3:c5:06:3a:
                    ad:03:a6:43:53:04:af:ad:12:7d:e1:c6:ab:fb:54:
                    95:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:CA:78:0E:3A:93:18:D6:4A:0C:B3:9A:D4:92:D6:DC:E7:AA:0A:93
            X509v3 Authority Key Identifier:
                keyid:E7:94:93:F3:0A:3E:E9:F0:EE:40:52:2F:F1:9D:68:5C:80:62:BA:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/55ST8wo-6fDuQFIv8Z1oXIBium4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/55ST8wo-6fDuQFIv8Z1oXIBium4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/55ST8wo-6fDuQFIv8Z1oXIBium4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:5e:3f:27:f7:aa:cd:67:5f:d2:9a:c6:96:d6:24:d2:00:5e:
         9a:47:16:d7:ad:95:21:51:ef:97:14:e5:9e:1a:de:60:10:f4:
         57:e1:f4:c2:8b:d6:7f:76:e2:83:d2:84:cf:31:4b:4e:ef:ef:
         c0:ec:75:ac:f5:af:6c:3b:03:9c:50:cc:71:ab:d4:2c:56:c0:
         5a:b8:17:7d:d3:c5:b0:35:e9:43:49:69:58:12:fc:06:b7:02:
         07:c8:0d:d4:a6:20:07:3f:e4:95:06:d1:e3:24:d0:7c:64:a4:
         88:6a:2c:42:87:9f:c5:ef:05:ea:ab:b1:25:73:df:84:df:94:
         9f:54:4b:2a:45:2f:75:9b:80:68:28:77:9c:b2:29:ee:5b:89:
         30:cd:f7:8f:9d:39:e9:9d:e5:6d:20:50:bf:21:08:a3:6e:22:
         07:7d:16:80:b8:04:61:4a:95:17:62:52:b1:ac:89:82:6b:ac:
         70:80:eb:27:29:8d:7f:20:76:76:1a:aa:18:c9:28:e1:22:6d:
         7d:b5:c1:d7:2a:4e:bd:25:13:e6:4e:e4:f7:04:41:a9:90:b4:
         58:c4:8f:8b:44:58:44:f3:79:25:b7:23:6f:f0:83:d2:29:d8:
         71:6b:e6:54:85:54:a0:0d:ef:c0:ca:b3:0f:7a:d1:78:c5:4d:
         6d:14:43:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:43:45 2026 by rpki-client