Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.mft
File:                     c5FNFBChzT-FrR4bClD_P4vWDBA.mft (raw, json)
Hash identifier:          X9uRgcsroezeOL03k7vgGNinJVCAEUubXSbrhrRsMO4=
Subject key identifier:   78:A5:23:59:E8:5D:B4:50:34:8A:D9:2E:E0:DE:93:6B:C5:20:5A:E2
Authority key identifier: 73:91:4D:14:10:A1:CD:3F:85:AD:1E:1B:0A:50:FF:3F:8B:D6:0C:10
Certificate issuer:       /CN=A91366F8/serialNumber=73914D1410A1CD3F85AD1E1B0A50FF3F8BD60C10
Certificate serial:       03F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5FNFBChzT-FrR4bClD_P4vWDBA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.mft
Manifest number:          03EC
Signing time:             Sun 05 Apr 2026 00:17:51 +0000
Manifest this update:     Sun 05 Apr 2026 00:17:51 +0000
Manifest next update:     Sun 12 Apr 2026 00:17:51 +0000
Files and hashes:         1: c5FNFBChzT-FrR4bClD_P4vWDBA.crl (hash: 1IWcM1WO/LXOAVPcBasqi4M2O+xr8eB6bkBSIgOs8sM=)
                          2: 591A8C06BE4D11EC8DADB22CC4F9AE02.roa (hash: EiXaWk8MN8PRU4m8/hbOE0IqPBgeOCBNgzztG3jvQeA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.crl
                          rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5FNFBChzT-FrR4bClD_P4vWDBA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 00:17:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1013 (0x3f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91366F8, serialNumber=73914D1410A1CD3F85AD1E1B0A50FF3F8BD60C10
        Validity
            Not Before: Apr  5 00:17:51 2026 GMT
            Not After : Apr 12 00:17:51 2026 GMT
        Subject: CN=69d1aa2f-3aae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:91:86:07:50:93:bb:17:23:30:a6:1a:c6:b8:
                    ac:b7:bb:5e:7c:10:bc:41:f4:ed:08:11:f9:d9:8b:
                    99:77:cb:16:34:9c:21:a4:9a:7e:c0:7f:5d:64:6e:
                    58:ed:eb:bc:48:d7:d8:13:89:d3:cb:7d:90:4f:0f:
                    72:52:25:2a:ec:6f:08:c4:93:59:73:1a:95:71:a3:
                    69:53:89:17:f8:a3:ca:e6:fb:6d:86:97:0d:3b:b1:
                    46:c1:db:8e:3d:e3:b9:b3:ed:b3:9f:03:43:a1:82:
                    e9:77:d9:bd:ba:87:49:ea:13:0a:92:ea:92:7d:43:
                    a6:17:b3:30:59:65:04:ed:46:29:16:b5:23:50:61:
                    bc:4b:bd:fe:e6:dc:dc:4c:88:cb:98:6a:57:f0:74:
                    7d:5a:44:24:5a:32:d0:0e:8a:52:8e:50:0c:24:72:
                    bd:da:de:34:34:b0:0c:69:00:e2:bb:43:c3:28:68:
                    20:ed:13:61:eb:2b:17:85:25:f1:b3:9d:fc:d3:79:
                    85:d8:cd:2a:e2:68:df:fd:61:80:7d:8c:b5:38:50:
                    10:26:47:fc:45:c5:c1:88:27:95:80:9f:fb:2b:29:
                    ad:0f:d6:e4:bd:ab:d2:5b:bb:1a:e6:55:e7:50:da:
                    3c:99:65:27:e2:54:53:bf:97:1e:95:87:59:15:68:
                    2f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A5:23:59:E8:5D:B4:50:34:8A:D9:2E:E0:DE:93:6B:C5:20:5A:E2
            X509v3 Authority Key Identifier:
                keyid:73:91:4D:14:10:A1:CD:3F:85:AD:1E:1B:0A:50:FF:3F:8B:D6:0C:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5FNFBChzT-FrR4bClD_P4vWDBA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:48:61:77:a9:b3:88:07:41:69:ea:a2:98:dc:b2:6b:35:73:
         d7:a1:a0:a9:b4:9e:d7:b0:db:90:59:d0:8c:23:b1:57:81:31:
         80:02:a1:00:a7:b7:c9:46:77:ee:67:3c:a0:c5:70:9d:5c:42:
         97:c7:e6:1a:96:e0:03:c9:d6:80:d7:6d:3d:f3:2a:ef:98:88:
         82:c9:1c:f8:e5:2a:08:8e:15:4e:31:29:3d:4e:05:a7:ef:f6:
         1b:1c:fa:c0:0a:75:cb:86:28:22:6c:0a:f8:ae:98:43:b4:47:
         76:43:97:f6:b2:bb:2f:12:00:40:57:4d:66:34:5b:ba:95:90:
         8a:aa:d4:22:84:95:aa:27:b8:26:bd:1a:21:2e:06:bc:df:74:
         a6:83:20:98:27:e1:6a:ce:b8:1a:a2:c9:18:a6:b3:e5:ea:fb:
         45:77:01:35:a4:2f:01:44:ea:fc:73:b0:17:3a:33:41:00:c5:
         98:4a:6a:0d:d0:1e:10:b4:aa:59:92:0d:11:b6:79:37:62:80:
         68:17:7a:7d:43:64:69:11:ac:e2:49:17:91:42:d7:b1:97:7c:
         85:9c:cf:78:ca:a8:82:9b:91:a4:57:86:9b:a9:9c:c6:bd:10:
         1c:a2:5c:27:dd:2f:57:f0:26:c3:23:db:fc:e6:51:70:aa:71:
         9b:d7:11:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:24:43 2026 by rpki-client