Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/E5bqlAlF_CBf8uPRsr4bkNcsxek.mft
File:                     E5bqlAlF_CBf8uPRsr4bkNcsxek.mft (raw, json)
Hash identifier:          Weqf9n99qJNM06OeHwtVfWLenI9e5kd/jMfb+nwz8w0=
Subject key identifier:   73:2E:C1:35:81:EC:3F:08:29:DB:3C:7C:92:15:32:B5:0B:0A:30:E3
Authority key identifier: 13:96:EA:94:09:45:FC:20:5F:F2:E3:D1:B2:BE:1B:90:D7:2C:C5:E9
Certificate issuer:       /CN=A914DF56/serialNumber=1396EA940945FC205FF2E3D1B2BE1B90D72CC5E9
Certificate serial:       05A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5bqlAlF_CBf8uPRsr4bkNcsxek.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/E5bqlAlF_CBf8uPRsr4bkNcsxek.mft
Manifest number:          059D
Signing time:             Sat 04 Apr 2026 23:01:04 +0000
Manifest this update:     Sat 04 Apr 2026 23:01:03 +0000
Manifest next update:     Sat 11 Apr 2026 23:01:03 +0000
Files and hashes:         1: E5bqlAlF_CBf8uPRsr4bkNcsxek.crl (hash: Uj2U661pdp8Y9APigIOBm2mb7koq7ZvofGCsPrY7LVE=)
                          2: EB17A8C2152511ECAD055780C4F9AE02.roa (hash: 9iwkBoSghTED5G7Gmn3J7760ui7964gnoNzuIo64Xw4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/E5bqlAlF_CBf8uPRsr4bkNcsxek.crl
                          rsync://rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/E5bqlAlF_CBf8uPRsr4bkNcsxek.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5bqlAlF_CBf8uPRsr4bkNcsxek.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 23:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1448 (0x5a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DF56, serialNumber=1396EA940945FC205FF2E3D1B2BE1B90D72CC5E9
        Validity
            Not Before: Apr  4 23:01:03 2026 GMT
            Not After : Apr 11 23:01:03 2026 GMT
        Subject: CN=69d19830-e7fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c3:d6:95:9a:0c:02:4d:e9:36:62:79:02:0b:
                    75:e6:9c:bb:d6:f8:72:c4:21:05:9d:3e:22:f1:82:
                    3c:cc:c2:59:81:00:b9:7c:bf:c0:4d:c0:41:12:68:
                    8a:8c:6a:47:a6:77:f9:ab:c1:e4:71:21:5b:40:b9:
                    94:a8:c8:6b:8b:e2:25:70:8c:e9:5b:98:42:0a:dc:
                    8f:f3:99:30:74:ac:6b:aa:4b:0e:8b:fc:6c:a5:b5:
                    79:ce:43:c5:21:99:49:69:12:d7:ae:94:dc:a0:f7:
                    79:c7:d5:47:e1:3f:fa:25:e4:36:7f:87:96:c6:7c:
                    5c:c7:22:8e:66:c0:68:2a:eb:37:83:84:e8:b6:7b:
                    30:76:bf:77:e1:bd:1b:a5:c1:d5:29:f3:0e:7d:06:
                    c6:ba:ca:5d:21:48:71:18:80:0e:1d:6f:09:45:6d:
                    3a:76:d8:51:d1:42:2f:4a:df:84:f9:8d:3b:03:2b:
                    92:e6:3e:5a:05:fd:a8:fc:e2:1e:80:0f:5b:5d:df:
                    48:80:7e:c3:28:d1:3f:cf:93:98:fa:46:db:2c:25:
                    15:64:85:42:57:f5:32:39:37:20:2e:6b:1c:cd:3f:
                    09:2e:9c:66:80:ca:f2:b0:58:14:9e:47:72:57:8f:
                    68:ec:e1:99:dc:d2:07:0e:ad:de:82:77:5c:0f:43:
                    d5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:2E:C1:35:81:EC:3F:08:29:DB:3C:7C:92:15:32:B5:0B:0A:30:E3
            X509v3 Authority Key Identifier:
                keyid:13:96:EA:94:09:45:FC:20:5F:F2:E3:D1:B2:BE:1B:90:D7:2C:C5:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/E5bqlAlF_CBf8uPRsr4bkNcsxek.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5bqlAlF_CBf8uPRsr4bkNcsxek.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/E5bqlAlF_CBf8uPRsr4bkNcsxek.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:a3:ef:fd:2a:08:b0:84:de:cb:0d:da:a2:9a:df:95:3b:6a:
         3d:ce:75:e8:b5:cd:4b:1c:26:5e:5c:01:c3:72:d9:20:70:43:
         3a:6d:8c:eb:ea:b5:70:6a:f1:d2:b6:e8:e6:1a:6b:d6:68:55:
         3c:e4:45:bd:76:2f:25:27:6b:2a:44:67:cb:3c:8c:82:47:16:
         0c:35:37:1f:2c:1c:92:61:92:b4:f1:2f:42:6a:7c:6f:96:e8:
         e1:ac:88:1f:58:d5:4f:e8:08:42:e0:ff:be:a9:bb:59:b9:a5:
         ed:37:9a:9c:a6:ad:41:ab:35:80:bb:f2:ee:58:e4:83:98:ff:
         2a:88:49:5a:fb:e5:3d:87:1c:3c:9c:79:df:79:3b:20:42:d0:
         a9:c6:54:e6:ed:29:81:0f:2c:ba:ea:a9:4a:37:a8:05:d4:e8:
         61:c4:9c:da:89:73:50:59:f7:9e:cf:8c:19:a0:f7:fe:a8:16:
         bd:fe:ed:01:23:76:09:1b:49:65:0d:21:cd:a9:d6:1f:74:52:
         43:dd:46:23:02:10:b6:20:e4:b9:da:3b:f8:8a:45:c5:8d:39:
         be:74:e9:c7:78:90:10:40:53:6e:1d:51:e0:1c:83:bf:05:ec:
         3d:f1:a6:89:9e:f1:b8:26:2f:d7:c8:60:92:a3:48:cd:ee:82:
         15:b4:89:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:25:32 2026 by rpki-client