Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft
File:                     5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft (raw, json)
Hash identifier:          DEm7yf/GoEEowHuDsEuvKwz4D7NlLhW6PxvajAkHHII=
Subject key identifier:   60:D8:17:CF:A5:64:55:87:C5:2E:0D:49:2F:A7:AA:49:9A:64:F0:F2
Authority key identifier: E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03
Certificate issuer:       /CN=A91652F7/serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403
Certificate serial:       0967
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft
Manifest number:          0956
Signing time:             Sat 16 May 2026 20:05:44 +0000
Manifest this update:     Sat 16 May 2026 20:05:43 +0000
Manifest next update:     Sat 23 May 2026 20:05:43 +0000
Files and hashes:         1: 5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl (hash: +0hi1JCO3aEW39DBuWeNC+Ju48U0dlERb2Li19KaORM=)
                          2: A29A66FE2F1C11EDA3E29B09C4F9AE02.roa (hash: juRf6DKubWHLyUVCkZq0DoXL3LBiJ5IdHL3Dkg0ZIH0=)
                          3: A12DD18E2F1C11EDA3E29B09C4F9AE02.roa (hash: TRtCWEacfScERXGsANUVPFpqIEC3+bt+vk9acDdl/Bg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl
                          rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 May 2026 20:05:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2407 (0x967)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91652F7, serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403
        Validity
            Not Before: May 16 20:05:43 2026 GMT
            Not After : May 23 20:05:43 2026 GMT
        Subject: CN=6a08ce18-1aff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:93:47:a8:d8:ec:ec:65:6c:f3:68:00:f8:af:
                    16:c2:57:e4:3d:7a:ac:a7:60:eb:3e:36:b3:dc:4a:
                    ba:90:ab:55:48:36:a4:32:09:06:ce:91:e3:7b:2b:
                    d9:89:af:76:59:ed:86:db:fa:04:8e:fa:32:95:19:
                    09:b3:38:be:1e:e8:ab:2c:c6:32:4e:a8:cb:b9:8b:
                    3b:93:77:62:f5:42:86:4c:d5:95:bb:6f:da:67:d4:
                    90:59:d1:d4:78:51:d3:1d:34:10:6e:cf:f2:42:2e:
                    d6:91:f4:69:37:98:92:aa:39:69:a3:dc:5d:12:26:
                    85:3b:79:80:0d:a7:ce:30:9e:90:5b:f0:11:29:1e:
                    19:5e:18:4b:95:dd:39:e4:5e:4a:9f:19:1a:aa:33:
                    89:38:4f:44:00:1e:d7:a6:9b:94:66:f6:26:29:5a:
                    dd:84:1c:32:63:42:ae:1c:b7:6b:7d:f8:f3:85:20:
                    53:6e:ad:07:5e:22:a2:74:57:25:96:b8:5a:08:4f:
                    1d:d1:cd:f4:6f:cb:92:11:73:d4:84:7e:a4:a8:28:
                    67:57:a7:ca:e0:b4:13:25:6e:93:76:fd:85:f5:c8:
                    6c:13:7a:6b:e9:47:88:fa:21:28:21:7c:ca:10:fd:
                    4f:6d:55:77:8d:6a:4a:8f:be:c8:75:6c:5c:1d:7b:
                    27:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:D8:17:CF:A5:64:55:87:C5:2E:0D:49:2F:A7:AA:49:9A:64:F0:F2
            X509v3 Authority Key Identifier:
                keyid:E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:74:5f:d2:69:17:3a:77:0b:7e:7b:5d:40:ef:54:5d:29:50:
         fd:94:6e:17:16:6e:ee:d0:dc:30:3a:ad:49:e1:ba:b5:77:1a:
         54:07:b0:0e:10:1b:8d:ad:f1:57:ac:df:e1:e0:d1:39:ef:40:
         86:bd:5d:55:eb:bd:b3:8c:e5:5e:17:81:ba:c6:a7:54:94:10:
         5c:58:ee:63:47:89:f2:26:af:8a:c4:cb:0b:9f:1c:6d:64:07:
         9d:58:0e:f3:f4:bd:b2:59:8f:a9:84:e8:99:25:94:45:5f:aa:
         c7:36:19:e3:6f:a7:63:51:bb:e8:11:d6:e9:ad:62:40:5c:39:
         a5:aa:90:e2:ee:2d:4b:78:27:35:ea:17:93:5b:5c:c0:68:d8:
         55:48:ee:e2:6f:e8:2c:73:66:01:64:c0:bb:3e:c3:40:35:46:
         05:ee:b1:31:0c:cc:77:a3:4a:16:0a:a8:41:c7:bb:17:54:a1:
         42:ac:75:f9:03:ab:d7:75:61:47:22:1b:d1:81:92:dd:7f:ce:
         a3:db:f6:37:64:e1:c3:9c:74:1f:18:ef:08:aa:88:b1:36:6b:
         d3:d7:63:a4:f8:39:ca:b1:86:1e:a7:6d:c9:6f:c6:25:21:3c:
         53:0a:3c:22:a5:a5:62:2b:24:72:30:db:77:7e:83:0c:87:a3:
         cb:d6:74:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 06:58:44 2026 by rpki-client