Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft
File:                     5rsDqligwnDrZrPq6yQI__q6Xsc.mft (raw, json)
Hash identifier:          q2sBL9WikomwomA5vVR9G//9oxxjak56DjbunYOfTWM=
Subject key identifier:   24:1A:E2:CC:41:12:BE:B1:77:88:78:E3:F1:25:2F:27:DB:79:5E:D7
Authority key identifier: E6:BB:03:AA:58:A0:C2:70:EB:66:B3:EA:EB:24:08:FF:FA:BA:5E:C7
Certificate issuer:       /CN=A914D2BF/serialNumber=E6BB03AA58A0C270EB66B3EAEB2408FFFABA5EC7
Certificate serial:       024C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rsDqligwnDrZrPq6yQI__q6Xsc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft
Manifest number:          0246
Signing time:             Mon 27 Apr 2026 02:20:43 +0000
Manifest this update:     Mon 27 Apr 2026 02:20:42 +0000
Manifest next update:     Mon 04 May 2026 02:20:42 +0000
Files and hashes:         1: 5rsDqligwnDrZrPq6yQI__q6Xsc.crl (hash: DMhld8O9UJlSrnIb3hAcUmNpi+J6FgPjAL7RfRF+hoA=)
                          2: AEF266ECD34811EDAD96D95DC4F9AE02.roa (hash: ftma0mej/dOtkA9i9qpY2iDBlCF8N3tlglYqa45f8z0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.crl
                          rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rsDqligwnDrZrPq6yQI__q6Xsc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 04 May 2026 02:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 588 (0x24c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D2BF, serialNumber=E6BB03AA58A0C270EB66B3EAEB2408FFFABA5EC7
        Validity
            Not Before: Apr 27 02:20:42 2026 GMT
            Not After : May  4 02:20:42 2026 GMT
        Subject: CN=69eec7fa-3a17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e6:a3:5c:95:f3:76:7d:a4:49:c9:ac:b4:85:
                    10:2d:6d:51:f6:fc:0f:0f:3a:c0:f8:25:01:c8:65:
                    fc:6a:61:c5:b1:ed:1f:b3:fe:6c:ab:4a:d4:97:c3:
                    72:a8:25:6c:5d:bf:db:6a:b2:04:fc:27:ef:27:48:
                    6e:79:6e:c1:01:72:a2:a5:db:c2:c0:65:66:da:7c:
                    3b:b3:66:03:ae:0d:90:d7:f4:04:9d:90:06:20:73:
                    52:51:79:a7:c3:f4:eb:6e:a8:ab:31:24:3a:f5:f4:
                    4a:ca:86:6d:c8:35:e1:13:f9:ea:d8:71:10:92:49:
                    44:68:78:8c:51:c8:b8:fa:ae:aa:a6:be:71:aa:5c:
                    13:ea:f0:e5:09:04:b0:ab:07:45:be:22:ca:cb:c2:
                    e4:de:0f:ee:f9:59:32:e0:36:04:0d:7d:f8:6b:f7:
                    40:28:6d:73:89:73:06:5e:1b:96:c7:28:49:a4:4e:
                    ad:80:a3:e9:05:93:46:51:87:5b:9a:80:55:be:f9:
                    ba:42:fd:55:28:99:8d:0d:3c:5d:eb:24:7c:e0:b3:
                    a9:be:e6:d6:90:74:74:71:42:cf:e5:cd:4e:8b:b5:
                    5c:28:7b:1b:39:67:93:b1:48:20:cb:26:06:da:1c:
                    47:94:ac:c7:7a:cd:15:2b:d0:40:d5:40:9c:5f:83:
                    06:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:1A:E2:CC:41:12:BE:B1:77:88:78:E3:F1:25:2F:27:DB:79:5E:D7
            X509v3 Authority Key Identifier:
                keyid:E6:BB:03:AA:58:A0:C2:70:EB:66:B3:EA:EB:24:08:FF:FA:BA:5E:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rsDqligwnDrZrPq6yQI__q6Xsc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:e3:43:6a:ff:0b:99:cf:35:ff:ad:5c:e5:4b:24:85:43:df:
         18:f5:de:df:10:46:00:18:f4:e9:9c:08:08:c8:af:39:9b:c5:
         9c:de:cc:e4:13:9f:dc:fe:0b:19:48:74:3b:d4:af:53:f9:26:
         7c:df:4b:d5:68:ba:e6:54:df:5c:c2:f2:89:99:66:c5:3c:ab:
         e3:39:f6:15:76:1f:96:fe:30:c2:bb:02:bb:22:65:82:10:13:
         98:15:91:df:98:71:61:d2:84:9c:96:45:0d:b6:ba:a8:ab:d1:
         61:bf:6d:f7:b1:41:f5:71:d7:18:76:c9:1b:3f:45:ea:15:e0:
         37:90:f6:b1:52:82:1b:40:0e:84:97:14:c7:b4:d4:1a:ed:b1:
         19:02:80:b3:e0:14:c6:14:0b:d0:90:a1:d4:7e:a0:bf:7a:78:
         c2:5a:97:1d:01:9a:4e:96:71:15:22:31:87:de:0b:3f:3e:44:
         f4:c9:74:ff:b9:fc:18:c1:ee:8e:79:b8:cb:79:d8:9a:a3:bf:
         39:42:9f:5f:b3:84:c0:13:76:dc:19:f1:94:7e:03:5c:bc:b9:
         a8:b0:7e:84:2d:89:83:d9:5e:40:66:59:3a:66:ef:ff:d8:6c:
         f1:5b:e5:41:ac:78:ce:2c:e7:72:3c:71:82:ba:c7:39:34:ad:
         7f:c2:8d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 22:52:47 2026 by rpki-client