Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.mft
File:                     m5TObjVVCnQlu0QWLfN8v74FPCU.mft (raw, json)
Hash identifier:          W53RQX5yCnMICB6foWqBm5OPIMfjXgy68Z+qCJcvhio=
Subject key identifier:   AD:3C:37:A7:52:F5:D1:4D:4A:31:71:FC:A9:63:81:A4:F9:D3:72:55
Authority key identifier: 9B:94:CE:6E:35:55:0A:74:25:BB:44:16:2D:F3:7C:BF:BE:05:3C:25
Certificate issuer:       /CN=A91776C9/serialNumber=9B94CE6E35550A7425BB44162DF37CBFBE053C25
Certificate serial:       0219
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5TObjVVCnQlu0QWLfN8v74FPCU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.mft
Manifest number:          020E
Signing time:             Wed 29 Apr 2026 03:32:25 +0000
Manifest this update:     Wed 29 Apr 2026 03:32:24 +0000
Manifest next update:     Wed 06 May 2026 03:32:24 +0000
Files and hashes:         1: m5TObjVVCnQlu0QWLfN8v74FPCU.crl (hash: XLvL+LEtDApcb5Wt+3reD2REyXvZZD6Y8XFHgc38HME=)
                          2: C9819D5E705711EFBDEF9265C4F9AE02.roa (hash: 7EElla54PME6t43EGMTvu4HFDw83uuSq/ww5cJrQdjM=)
                          3: C872E06C705711EFBDEF9265C4F9AE02.roa (hash: 6fOOVMWHz8uhdua83reqWb8mHIqUK8rXDkUTcJOKXR0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.crl
                          rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5TObjVVCnQlu0QWLfN8v74FPCU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 03:32:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 537 (0x219)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91776C9, serialNumber=9B94CE6E35550A7425BB44162DF37CBFBE053C25
        Validity
            Not Before: Apr 29 03:32:24 2026 GMT
            Not After : May  6 03:32:24 2026 GMT
        Subject: CN=69f17bc9-cde7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:2a:1e:89:5c:c4:e0:db:d9:49:a3:2c:b6:71:
                    dd:78:69:61:eb:51:b8:e6:4a:12:05:e2:c6:d6:fc:
                    2f:51:94:a7:b4:09:e5:bd:7d:b3:60:b3:79:ec:16:
                    83:2a:8b:a1:02:c8:4b:ce:f2:96:c5:5b:3d:9b:76:
                    a5:77:5b:cf:12:41:aa:87:fa:ea:42:c6:d8:5f:9c:
                    cc:30:4d:fd:83:32:6d:f5:a9:50:af:5a:78:cc:e4:
                    54:8f:1c:18:fc:05:59:28:d9:ea:50:f1:22:3c:33:
                    5a:b3:2c:b1:8b:a6:80:30:a4:da:79:7f:12:63:89:
                    2d:bf:1b:6b:b4:42:03:ee:3b:2e:90:81:79:8c:e0:
                    af:cc:81:63:9e:5f:71:33:86:f9:7e:a8:46:92:9e:
                    6f:9c:34:75:be:7a:dc:fc:74:6f:a0:46:ae:6e:56:
                    e6:88:c8:87:fa:1f:ef:ab:7f:15:58:1e:63:6b:8f:
                    92:e7:d6:b6:49:0b:dd:78:26:63:d7:75:8a:30:9a:
                    68:54:54:10:d7:cb:5f:a7:6f:05:1c:5f:d9:2f:f8:
                    39:ec:da:37:68:18:f5:2a:3f:00:3b:4e:fd:53:1e:
                    ad:37:a9:17:64:65:f7:03:52:50:9d:91:0a:39:51:
                    90:ed:cb:2c:94:73:eb:0c:a6:f1:1a:e7:13:0e:ed:
                    2f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:3C:37:A7:52:F5:D1:4D:4A:31:71:FC:A9:63:81:A4:F9:D3:72:55
            X509v3 Authority Key Identifier:
                keyid:9B:94:CE:6E:35:55:0A:74:25:BB:44:16:2D:F3:7C:BF:BE:05:3C:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5TObjVVCnQlu0QWLfN8v74FPCU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:4d:c3:5d:93:ee:e6:45:08:af:a8:89:86:1e:6a:75:c1:47:
         10:06:fa:66:d8:4e:72:bd:01:c6:5d:14:20:cb:b3:79:04:29:
         7e:32:82:b0:8e:4f:67:bd:15:79:22:5b:2f:c7:ab:0b:9b:e2:
         17:c3:91:a6:02:49:db:6e:98:12:42:67:2b:d3:85:ba:32:2a:
         d3:a8:9a:01:4d:24:f8:cf:ab:42:be:dc:88:7e:fd:cb:3c:9d:
         ea:13:12:42:51:7b:77:ad:5d:e8:d6:e3:6e:2f:52:83:df:6a:
         35:83:d7:98:e7:f6:88:f6:7d:e3:bf:a6:8b:33:fa:ab:d9:16:
         49:6b:3a:d7:56:40:82:79:25:61:20:37:62:d6:69:62:84:51:
         c2:32:ad:69:6c:4a:7f:9b:fc:61:fb:26:31:f1:05:7c:31:fa:
         9f:68:31:70:41:a4:1f:1e:c0:93:1d:9f:a1:61:34:61:c8:3d:
         bb:59:b6:26:c2:0a:19:01:39:18:e4:2e:15:63:5c:9c:a7:3d:
         72:20:b9:05:f3:07:71:09:fa:7b:fb:8c:88:e1:47:8d:bd:76:
         b3:d9:37:51:1f:03:99:6b:42:b5:57:f0:b2:cb:ea:08:18:06:
         dc:fb:1b:36:7e:3d:46:4e:cc:a1:38:fc:fc:40:fc:37:03:a5:
         f6:e3:53:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 16:31:50 2026 by rpki-client