Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.mft
File:                     5JdLhBatO5ndEfOwQFbwx5m3ocs.mft (raw, json)
Hash identifier:          FTSgy2/Tr+vRwWhBJ8Q434ydo6qOJHY67iTQen429WU=
Subject key identifier:   9A:B0:2B:7E:09:D1:23:9B:E5:5F:A9:52:45:25:1C:0A:84:47:25:09
Authority key identifier: E4:97:4B:84:16:AD:3B:99:DD:11:F3:B0:40:56:F0:C7:99:B7:A1:CB
Certificate issuer:       /CN=A91D9CA8/serialNumber=E4974B8416AD3B99DD11F3B04056F0C799B7A1CB
Certificate serial:       DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5JdLhBatO5ndEfOwQFbwx5m3ocs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.mft
Manifest number:          DB
Signing time:             Sun 05 Apr 2026 06:00:18 +0000
Manifest this update:     Sun 05 Apr 2026 06:00:18 +0000
Manifest next update:     Sun 12 Apr 2026 06:00:18 +0000
Files and hashes:         1: 5JdLhBatO5ndEfOwQFbwx5m3ocs.crl (hash: Vyomx7RPI0zVnHl+QnK5Ajj5r62jLOlYIvE/mDy1Np0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.crl
                          rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5JdLhBatO5ndEfOwQFbwx5m3ocs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 06:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 219 (0xdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9CA8, serialNumber=E4974B8416AD3B99DD11F3B04056F0C799B7A1CB
        Validity
            Not Before: Apr  5 06:00:18 2026 GMT
            Not After : Apr 12 06:00:18 2026 GMT
        Subject: CN=69d1fa72-b575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:64:fc:0d:c5:f6:a5:d3:eb:cc:af:7a:c1:aa:
                    aa:cf:b7:b4:03:b0:7e:c8:dd:4f:11:b7:4d:20:49:
                    17:06:3d:ed:e3:ec:5c:af:80:23:f2:f6:a7:12:8c:
                    b4:6b:93:6d:79:46:07:f8:85:82:11:2f:80:e1:a2:
                    c0:06:6f:da:16:ec:38:59:43:56:a9:0d:d9:73:59:
                    d8:9a:e5:6d:72:2c:52:4b:f5:b9:f3:aa:0b:6c:91:
                    49:b5:0b:4c:43:fc:43:21:f4:c2:ea:86:4b:82:58:
                    76:97:3d:fa:5e:fb:fa:f7:7b:9b:82:d5:5c:8b:cf:
                    0f:5e:7e:92:9c:c9:cd:9e:21:0b:10:36:86:83:90:
                    ec:28:13:b8:87:b3:57:b1:01:d0:aa:d1:ed:4e:4d:
                    89:de:33:b5:77:46:6a:10:90:66:80:1b:0e:17:dc:
                    30:b1:bd:38:44:69:d9:b3:8f:66:f4:4c:2e:f7:a3:
                    b2:e0:cc:4a:05:e0:06:ab:67:59:8a:14:67:f6:4c:
                    9f:62:80:f7:8e:0f:aa:70:e2:8b:3a:94:7f:2d:ec:
                    96:20:94:05:75:27:18:28:7a:e2:44:cd:5f:3c:7e:
                    7d:65:f7:d1:06:c8:cf:e3:54:89:1f:7f:7c:47:ef:
                    73:64:92:1f:38:e4:a0:38:92:50:b0:23:73:51:17:
                    d4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:B0:2B:7E:09:D1:23:9B:E5:5F:A9:52:45:25:1C:0A:84:47:25:09
            X509v3 Authority Key Identifier:
                keyid:E4:97:4B:84:16:AD:3B:99:DD:11:F3:B0:40:56:F0:C7:99:B7:A1:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5JdLhBatO5ndEfOwQFbwx5m3ocs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:56:8d:56:df:58:f9:b1:04:15:55:d3:c1:6c:fa:6b:25:dc:
         8f:d8:27:80:24:85:56:5e:33:e3:74:21:2d:bd:40:a3:91:38:
         67:70:6a:7e:09:52:5b:5e:41:fe:6a:31:45:74:1f:8a:84:16:
         88:91:e6:e3:eb:58:76:a2:7e:a2:0a:09:9f:5a:6b:cd:dc:5b:
         d6:16:f0:87:6c:1d:21:e1:ed:b2:7b:31:f8:d3:3b:e1:f4:99:
         72:34:7c:2e:6c:9f:0d:38:ad:6b:17:34:80:58:64:08:bc:d4:
         a2:4a:b3:1f:f2:a4:cb:db:be:53:48:80:25:f5:05:b6:54:74:
         c6:40:41:e6:91:b1:55:a4:76:db:90:6d:f4:3d:22:43:85:3b:
         be:9e:e2:7d:c4:a1:3d:5c:dc:d3:20:c7:35:5b:5e:b6:b8:e6:
         c0:3d:2c:48:d0:9e:5f:40:ba:0b:61:e1:b8:dd:c0:fa:c4:d3:
         a0:b6:2f:ca:df:b1:f7:a0:aa:be:92:fa:1b:36:d4:5a:0f:7e:
         80:15:09:a2:dc:38:ca:7d:01:d8:dc:ea:81:89:9b:ab:8a:c1:
         73:98:0b:c7:96:db:7c:52:bc:71:ef:f6:8f:c5:f4:f2:ff:45:
         2d:6a:26:dc:f5:cc:92:fa:9d:14:34:c9:a8:01:13:f7:20:a5:
         d2:54:a5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:41:24 2026 by rpki-client