Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft
File:                     5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft (raw, json)
Hash identifier:          BQ4PL52LmmrMUugCStegH6h6xouKfw/5iWBj1xe737k=
Subject key identifier:   ED:A5:61:EB:20:FF:B6:78:36:FA:B6:12:2B:D7:05:92:30:58:1A:70
Authority key identifier: E6:B5:4D:02:7C:E3:49:8B:F3:5E:4D:06:5B:C4:78:A9:36:C1:61:69
Certificate issuer:       /CN=A9170DD8/serialNumber=E6B54D027CE3498BF35E4D065BC478A936C16169
Certificate serial:       0149
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft
Manifest number:          013F
Signing time:             Wed 29 Apr 2026 06:01:26 +0000
Manifest this update:     Wed 29 Apr 2026 06:01:25 +0000
Manifest next update:     Wed 06 May 2026 06:01:25 +0000
Files and hashes:         1: 5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl (hash: Vv/wumwlexSdSqv9ZD3Fj3DhuHGKJx5FHrWV9XVvvl8=)
                          2: 4D06CD2C667411EF8E723587C4F9AE02.roa (hash: zXaiTn1OPuqTOi1DnfJ2nxhGdbrJsBTMVyTGh2dj7aY=)
                          3: 4CA4BE8E667411EF8E723587C4F9AE02.roa (hash: Je69DOenUud2l/CtIOyINuqm56Y7r+pSuPgQPd3u0+o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl
                          rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 06:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 329 (0x149)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170DD8, serialNumber=E6B54D027CE3498BF35E4D065BC478A936C16169
        Validity
            Not Before: Apr 29 06:01:25 2026 GMT
            Not After : May  6 06:01:25 2026 GMT
        Subject: CN=69f19eb5-330c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c2:54:6a:c8:ea:9f:af:b8:62:e6:31:ae:4d:
                    5b:1a:42:61:ce:4e:b4:e8:bb:38:e2:df:80:29:a5:
                    3f:b2:df:3d:9a:68:bc:df:4a:7c:ee:09:01:58:b4:
                    55:70:47:e4:31:be:2e:ed:53:d4:cb:c5:df:66:ad:
                    fd:f1:8a:fa:72:08:dd:43:4f:61:98:9a:3e:21:1e:
                    51:5f:92:f0:e8:3a:df:1c:ad:e3:be:77:04:38:43:
                    08:c6:73:92:f6:ac:96:50:bc:e2:22:f3:fc:33:b6:
                    03:41:18:7a:73:71:7b:68:24:f8:0f:8d:cd:36:c8:
                    a6:c3:28:30:64:6f:43:f2:82:a3:96:0a:2b:31:83:
                    19:a0:e2:38:f5:a2:43:01:0e:22:07:dc:ae:e3:81:
                    77:ba:ac:df:05:f5:50:6b:1b:61:bd:49:a7:61:ba:
                    ca:c8:4e:7b:bb:b0:a8:7e:b6:92:db:00:12:b7:80:
                    4a:48:cc:7d:d8:cb:0e:6a:3b:b2:17:1e:e9:67:95:
                    3b:f3:4d:ae:07:e6:b5:c0:77:3a:18:35:36:af:bc:
                    f7:19:d6:ca:0d:f3:c6:a9:0f:c0:71:57:26:91:69:
                    42:d3:e1:db:e1:0a:5a:bd:78:0f:8a:7f:44:57:91:
                    49:36:71:08:d4:fc:94:6f:f7:12:73:c1:56:21:6c:
                    99:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:A5:61:EB:20:FF:B6:78:36:FA:B6:12:2B:D7:05:92:30:58:1A:70
            X509v3 Authority Key Identifier:
                keyid:E6:B5:4D:02:7C:E3:49:8B:F3:5E:4D:06:5B:C4:78:A9:36:C1:61:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:70:37:10:6b:07:21:46:22:38:f4:d2:d1:6f:1e:44:d1:bd:
         d4:c6:5a:58:b3:11:3b:18:cd:18:38:5d:24:bb:1d:f5:27:2b:
         b0:eb:eb:35:0f:d5:54:36:f3:83:ff:c2:59:e0:ff:3f:50:58:
         c6:59:c7:0b:47:75:b6:27:37:d8:a3:71:65:ea:7c:1c:17:47:
         c6:66:12:82:bf:01:bd:36:4e:b0:72:7a:65:fd:55:34:8f:41:
         e1:fb:1e:68:73:b5:c1:bb:0a:64:c8:70:04:17:77:42:b1:37:
         9a:fc:de:25:e6:dc:fc:15:0b:7a:59:13:56:fc:3b:9d:e5:8e:
         6b:f2:60:52:cc:76:a3:3d:df:43:fc:91:f9:4e:de:0a:b6:8a:
         44:24:6b:53:58:9e:76:56:8b:7a:2c:d2:c0:74:4c:57:5c:af:
         f1:6f:c2:cc:db:1d:d4:6e:c7:97:aa:cf:b9:39:2a:32:f9:dc:
         c3:36:52:02:88:fa:b7:aa:01:28:8a:56:88:c1:d0:9a:00:4c:
         06:f5:19:b4:05:c8:1a:11:8d:1c:29:d9:76:17:e9:b3:a1:5f:
         59:70:32:c4:16:77:ad:23:32:a3:dd:19:d8:aa:64:54:52:e5:
         5d:6a:58:64:65:27:fb:ab:96:35:ff:a3:af:33:4b:cf:7d:9e:
         58:d8:5d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 13:47:21 2026 by rpki-client