Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft
File:                     5C5CACqDeHpnr4y5qFH5OZdGwTI.mft (raw, json)
Hash identifier:          LqwTkqRhgr61izzh8zQlInROIZFZSjbvQuyUnM0l+24=
Subject key identifier:   4B:3A:BD:D9:98:2E:E0:E4:55:2D:25:B0:27:CD:1C:30:70:A4:3E:90
Authority key identifier: E4:2E:42:00:2A:83:78:7A:67:AF:8C:B9:A8:51:F9:39:97:46:C1:32
Certificate issuer:       /CN=A91566DC/serialNumber=E42E42002A83787A67AF8CB9A851F9399746C132
Certificate serial:       011A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5C5CACqDeHpnr4y5qFH5OZdGwTI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft
Manifest number:          011A
Signing time:             Sun 05 Apr 2026 05:12:06 +0000
Manifest this update:     Sun 05 Apr 2026 05:12:05 +0000
Manifest next update:     Sun 12 Apr 2026 05:12:05 +0000
Files and hashes:         1: 5C5CACqDeHpnr4y5qFH5OZdGwTI.crl (hash: xVcjEq4jqI8e8+6p4fjVXz3B4PJU9AdUH+spC/W1J6A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.crl
                          rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5C5CACqDeHpnr4y5qFH5OZdGwTI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:12:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 282 (0x11a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91566DC, serialNumber=E42E42002A83787A67AF8CB9A851F9399746C132
        Validity
            Not Before: Apr  5 05:12:05 2026 GMT
            Not After : Apr 12 05:12:05 2026 GMT
        Subject: CN=69d1ef26-7ca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:f7:84:0f:3d:d8:5b:bf:19:15:ca:b9:8b:a4:
                    9b:f6:71:3d:2c:f0:a1:b3:b6:a2:be:9a:17:a8:08:
                    26:0d:c0:a5:8e:03:c5:16:af:48:09:0a:a5:dc:77:
                    d3:09:a6:f5:14:92:64:10:ad:b3:86:ee:d9:7a:7c:
                    d0:07:a6:1f:66:f2:4d:f6:5b:35:a0:62:35:e3:86:
                    10:21:aa:6c:5e:27:9d:8b:37:96:83:1a:cc:32:96:
                    c8:7f:78:13:db:0e:4c:e0:f5:1d:98:f1:df:25:d1:
                    92:bd:31:17:94:f2:30:48:21:40:41:05:1e:9c:d6:
                    e2:77:77:bd:9a:1c:54:80:b2:57:09:37:da:14:d6:
                    81:10:27:90:22:ab:3f:7b:42:f9:6b:5c:10:7c:b5:
                    31:0e:67:85:cf:5a:c0:bc:76:ed:f0:32:b8:00:e1:
                    00:de:5d:2e:42:09:50:65:51:e4:b7:4c:46:35:5c:
                    55:ec:2c:de:fd:c8:02:7c:b6:39:a1:9e:58:6f:af:
                    42:ec:62:8d:d2:96:6f:f8:76:c8:85:04:5a:01:a1:
                    93:96:a0:f2:9c:90:b1:6a:27:41:21:7a:c8:34:67:
                    89:be:25:c3:69:10:ee:17:ef:c6:5c:e3:e2:0b:c4:
                    e9:57:9c:b5:6f:43:6c:20:08:13:34:82:7c:4c:71:
                    07:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:3A:BD:D9:98:2E:E0:E4:55:2D:25:B0:27:CD:1C:30:70:A4:3E:90
            X509v3 Authority Key Identifier:
                keyid:E4:2E:42:00:2A:83:78:7A:67:AF:8C:B9:A8:51:F9:39:97:46:C1:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5C5CACqDeHpnr4y5qFH5OZdGwTI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:6b:a2:fd:81:06:bf:66:22:64:4a:f8:32:ae:76:77:0e:9e:
         4d:2b:41:25:db:8b:ea:e0:fd:cb:cf:8e:e7:4e:e6:28:7a:0a:
         c9:da:43:8b:bb:8b:95:a1:ae:2b:63:ff:26:86:6b:22:5f:3d:
         4a:b7:4b:32:73:e7:06:92:8f:2b:40:d0:54:a2:66:0e:2a:7d:
         60:8c:34:d9:f6:da:99:83:0a:02:c3:58:c7:4e:38:bb:77:7a:
         38:aa:40:6d:a4:a7:e2:90:72:90:f0:4a:7c:7e:08:c5:94:fa:
         9b:a8:3f:6b:f1:1c:5c:e5:93:b7:42:b8:4a:f9:77:38:f8:8c:
         8d:7a:ce:c9:b6:09:ea:f4:54:34:20:fb:43:ce:9e:e9:82:02:
         ad:9a:9b:d7:e7:29:71:e1:a3:9b:8f:d4:03:eb:a0:9d:47:36:
         57:b5:04:f0:bf:91:be:63:c0:1a:b1:6f:89:41:12:11:d1:02:
         c8:80:6e:01:95:25:2a:b4:98:b2:87:98:f1:0d:33:a4:6a:42:
         b1:10:c4:6c:40:6f:a0:6a:3b:94:fc:67:26:13:e3:b7:e0:7f:
         60:d3:c2:41:39:d8:39:cb:e6:ed:3a:d8:d8:d5:3b:00:e3:62:
         21:61:e6:13:d8:a7:2c:8c:06:c6:37:5f:eb:5b:f5:ef:17:86:
         f5:1f:28:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 11:20:52 2026 by rpki-client