Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft
File:                     5KlM-o0vn1s570Y1BZHOMS5RT7M.mft (raw, json)
Hash identifier:          E4JD249HFAS2YScZi8JjBXK/wxUZPOyb71vs/ng7ZKQ=
Subject key identifier:   89:6F:B7:1F:48:9B:08:4A:BB:72:30:B5:31:DD:8C:38:66:27:39:EC
Authority key identifier: E4:A9:4C:FA:8D:2F:9F:5B:39:EF:46:35:05:91:CE:31:2E:51:4F:B3
Certificate issuer:       /CN=A91A3AB3/serialNumber=E4A94CFA8D2F9F5B39EF46350591CE312E514FB3
Certificate serial:       032B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft
Manifest number:          0312
Signing time:             Sun 05 Apr 2026 01:01:56 +0000
Manifest this update:     Sun 05 Apr 2026 01:01:55 +0000
Manifest next update:     Sun 12 Apr 2026 01:01:55 +0000
Files and hashes:         1: 5KlM-o0vn1s570Y1BZHOMS5RT7M.crl (hash: 7y5JFEW5kyW3HyR5Oau7m4JSf74aatuR+kVLwIjrizw=)
                          2: 3D331986E17211EFA5959B2FC4F9AE02.roa (hash: HWbA9pcNRQ2T+MNcxggr7hprcPhBvL1c1z3ltsFnoBs=)
                          3: F3997FACE21D11EFA5819B7EC4F9AE02.roa (hash: u+ZBN57vIi/zKLX25fP2Ihd1dJ5sMPLruwdZtn9hxms=)
                          4: 5B69CE3A474A11EF8624EE6DC4F9AE02.roa (hash: V4WCKZt7Bk1mQsPfTsZBXrVnrbvkth09Cs8cneRogjA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.crl
                          rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 01:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 811 (0x32b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3AB3, serialNumber=E4A94CFA8D2F9F5B39EF46350591CE312E514FB3
        Validity
            Not Before: Apr  5 01:01:55 2026 GMT
            Not After : Apr 12 01:01:55 2026 GMT
        Subject: CN=69d1b484-c51d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2e:73:ba:a2:57:6c:c8:57:a5:9e:a5:14:05:
                    5b:cb:f5:94:c6:61:aa:74:a3:70:68:56:52:2d:a9:
                    3f:31:57:40:2b:55:1d:f2:6c:a6:27:d7:00:cf:61:
                    86:88:c0:e6:10:5d:cd:a4:4b:d9:12:11:b0:ef:5f:
                    5e:b5:5e:41:14:64:14:94:c1:18:4f:36:a6:4b:1c:
                    70:fb:a6:71:0c:81:7e:85:3e:ed:ba:b0:9d:08:49:
                    70:da:12:75:49:9e:c6:c8:f9:52:eb:af:26:15:f4:
                    22:bf:4a:a2:0f:e8:a5:08:c3:8d:f9:46:4a:23:54:
                    01:cf:b3:9e:00:dc:bf:97:db:1a:2c:1a:af:3b:49:
                    ef:0d:64:ea:11:13:4d:5c:c6:1b:09:ea:6d:fd:eb:
                    77:1c:f9:71:18:12:77:00:9c:af:5e:bd:64:d8:0e:
                    a2:54:d8:7b:f0:20:8e:c0:6f:37:3f:18:66:f3:1e:
                    82:bd:34:7e:cd:23:67:d0:82:73:3f:af:ae:5a:90:
                    c5:70:7e:7f:95:c2:1a:5f:74:bd:d1:88:31:a2:f3:
                    a2:ff:0e:02:a9:cd:cf:7c:48:57:12:2d:46:a5:40:
                    1e:af:54:ba:b0:60:64:62:1e:67:a7:84:ad:6a:5e:
                    ef:af:31:ce:91:ec:15:21:02:a6:1f:48:2f:c1:9d:
                    25:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:6F:B7:1F:48:9B:08:4A:BB:72:30:B5:31:DD:8C:38:66:27:39:EC
            X509v3 Authority Key Identifier:
                keyid:E4:A9:4C:FA:8D:2F:9F:5B:39:EF:46:35:05:91:CE:31:2E:51:4F:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:5a:77:7c:f1:36:df:43:dd:36:4f:77:b4:0f:4b:a4:69:e3:
         7f:99:0b:2a:77:9c:17:45:39:ba:7a:58:1c:b2:61:12:39:31:
         b2:e2:b0:1c:83:01:4d:93:22:39:69:48:b4:36:69:53:7d:7e:
         6e:2d:35:9d:cc:ab:a5:7c:24:21:ed:42:48:f1:ba:2a:c4:13:
         09:c8:52:cf:e5:dd:b3:4f:26:fd:08:e6:1b:1b:cb:b3:55:96:
         c5:8e:d3:6b:90:77:04:a0:7b:2c:a6:3e:68:4d:a0:8f:9a:fc:
         2e:86:c7:f4:57:fb:66:fb:cb:eb:fd:6b:2d:c1:d0:41:5d:0f:
         d0:95:41:d2:75:a7:11:6c:a3:c0:a0:50:c0:ae:2a:04:86:21:
         71:d5:fa:29:30:53:b5:f5:ca:76:fa:22:a9:7d:64:90:83:ad:
         38:1a:94:38:1f:cb:93:cd:26:7e:63:0f:e9:37:99:5f:48:d8:
         76:5d:4d:06:d8:0a:ca:8f:0d:e8:9b:b8:9d:b2:6f:a0:b6:70:
         52:38:54:02:5a:d8:2b:e0:49:88:2e:54:83:80:c7:8d:04:6f:
         5a:bf:3b:c1:01:87:6a:ef:0b:80:68:13:89:6a:ac:87:61:60:
         df:ad:3c:60:99:41:20:d9:b2:8e:b8:3f:fc:d0:b8:cb:89:24:
         59:a2:db:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 21:08:28 2026 by rpki-client