Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft
File:                     e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft (raw, json)
Hash identifier:          LsZxtN90Fg/Gld5rxvGLlqhgjrLRL7TgRfwk2OI8rFA=
Subject key identifier:   05:2D:BF:5C:7E:44:C1:C1:A0:8F:4F:CD:30:14:33:20:E9:7B:0F:75
Authority key identifier: 7B:9C:ED:C8:32:80:28:A7:45:6E:9C:41:4B:B7:7D:AF:EB:CE:76:5F
Certificate issuer:       /CN=A916D36A/serialNumber=7B9CEDC8328028A7456E9C414BB77DAFEBCE765F
Certificate serial:       01DF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft
Manifest number:          01D9
Signing time:             Sat 18 Apr 2026 16:22:29 +0000
Manifest this update:     Sat 18 Apr 2026 16:22:29 +0000
Manifest next update:     Sat 25 Apr 2026 16:22:29 +0000
Files and hashes:         1: e5ztyDKAKKdFbpxBS7d9r-vOdl8.crl (hash: oovee6pnUXJ3YMwF3GNheck1/VtKe3/qN2TbFLmO4Cg=)
                          2: 21A970BC737211EEB3112437C4F9AE02.roa (hash: yEyjyfL4qmMdrXUNa8/FxH8a11hKOq88Y/fK6pSWFOc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.crl
                          rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 479 (0x1df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D36A, serialNumber=7B9CEDC8328028A7456E9C414BB77DAFEBCE765F
        Validity
            Not Before: Apr 18 16:22:29 2026 GMT
            Not After : Apr 25 16:22:29 2026 GMT
        Subject: CN=69e3afc5-36de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:75:e0:e8:d4:fb:c9:3c:47:78:d6:81:80:de:
                    a8:c9:f4:eb:6e:76:8c:61:6a:56:69:ec:8c:83:2b:
                    00:b1:45:a4:ab:d0:75:04:96:59:05:14:d3:9a:90:
                    90:9d:2e:26:0b:da:32:bf:53:de:ed:60:e7:76:d5:
                    f5:a6:6e:56:7a:b6:a7:f1:c2:21:76:7f:d5:37:47:
                    97:f3:d6:0c:c1:2a:0f:44:04:fa:e6:64:19:30:b5:
                    bd:3e:c2:6b:86:0a:19:98:35:0a:66:f2:77:d4:10:
                    17:41:b2:ea:8e:63:03:d5:5f:d5:6e:ae:e0:4c:71:
                    15:72:ae:96:56:db:9f:d7:67:20:02:cc:8a:4a:13:
                    e7:86:60:db:91:db:89:d0:4c:80:05:f4:9a:29:64:
                    71:d9:e9:89:83:91:83:9a:21:e8:aa:08:9e:8b:f0:
                    50:59:3c:a7:5f:fb:eb:9a:ce:8e:9b:e9:02:75:8c:
                    13:04:2d:e0:05:3d:6b:9f:62:ae:69:7d:75:c2:24:
                    2e:20:65:b4:87:b1:dc:0a:0c:b2:1b:d5:d8:58:e9:
                    e4:55:1c:6a:01:1e:98:f7:99:21:d9:94:d4:ca:10:
                    86:ba:4e:b7:1c:7f:6a:64:fb:c7:78:29:74:6d:dd:
                    93:76:d2:39:94:7d:8b:b1:c0:dd:dc:ea:b2:65:c1:
                    c6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:2D:BF:5C:7E:44:C1:C1:A0:8F:4F:CD:30:14:33:20:E9:7B:0F:75
            X509v3 Authority Key Identifier:
                keyid:7B:9C:ED:C8:32:80:28:A7:45:6E:9C:41:4B:B7:7D:AF:EB:CE:76:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:00:5f:2e:6b:69:74:90:39:ea:a5:57:f6:c4:45:2c:15:22:
         a1:0a:ad:d4:54:78:3b:8a:cd:98:22:22:77:63:9f:70:c1:78:
         d0:f4:7b:ff:d1:f9:af:11:62:fb:66:ca:be:8f:32:b4:92:7c:
         7d:2a:db:d8:f2:4b:7a:5c:63:e8:c8:3e:f0:36:da:5e:d5:26:
         ac:97:39:6c:f5:0d:e6:7e:c9:6b:65:7f:3a:72:73:5a:19:ce:
         0c:d6:f5:d4:4a:0a:a3:b3:6b:23:b2:9e:1e:97:93:c1:d5:5b:
         2c:02:42:a7:e2:81:fe:41:13:96:66:96:db:79:60:c9:3e:49:
         86:d6:81:e8:92:98:25:b7:1f:18:87:57:0d:2d:b8:e1:45:6a:
         8b:43:41:9b:5a:1e:78:89:91:46:d8:47:7b:8d:8e:c3:e0:35:
         d4:13:09:67:9f:01:f2:7a:1e:a8:0f:91:1a:11:0d:b8:1b:cf:
         cd:38:58:9f:9f:bb:3f:d6:75:5a:ae:62:77:06:8c:e9:e6:a8:
         ac:66:a6:59:96:6e:ea:a4:66:75:fb:dc:9e:9d:2d:77:ca:01:
         f3:b9:4c:fb:f0:f4:48:a7:7f:e7:36:58:32:a3:15:af:ce:9e:
         38:50:e7:b6:54:6f:c4:dc:a8:69:80:cc:ed:27:6e:6a:cc:ba:
         e2:21:ce:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 22:24:55 2026 by rpki-client