Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.mft
File:                     5sRskdEtWFoSsFVpYh3uGtP4kI4.mft (raw, json)
Hash identifier:          FmjlJLxPaB0ZIF842h111i5RP3PUM7QanEVr+YL3Ves=
Subject key identifier:   4F:16:88:D1:FC:1D:E2:39:AC:FC:E1:48:20:B8:95:E4:AF:84:33:6E
Authority key identifier: E6:C4:6C:91:D1:2D:58:5A:12:B0:55:69:62:1D:EE:1A:D3:F8:90:8E
Certificate issuer:       /CN=A917A362/serialNumber=E6C46C91D12D585A12B05569621DEE1AD3F8908E
Certificate serial:       01D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5sRskdEtWFoSsFVpYh3uGtP4kI4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.mft
Manifest number:          01CE
Signing time:             Sun 05 Apr 2026 03:11:34 +0000
Manifest this update:     Sun 05 Apr 2026 03:11:33 +0000
Manifest next update:     Sun 12 Apr 2026 03:11:33 +0000
Files and hashes:         1: 5sRskdEtWFoSsFVpYh3uGtP4kI4.crl (hash: Ct4yscU1uR8ptLiHgP8PSoilZFli/o9iZHapi/4hKrs=)
                          2: 1B299892726F11EEB1217365C4F9AE02.roa (hash: HLST1p2Y6kJdvf5EsBXPMDmNGIMfeuDnuHY6Q9pEH8E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.crl
                          rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5sRskdEtWFoSsFVpYh3uGtP4kI4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 03:11:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 468 (0x1d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A362, serialNumber=E6C46C91D12D585A12B05569621DEE1AD3F8908E
        Validity
            Not Before: Apr  5 03:11:33 2026 GMT
            Not After : Apr 12 03:11:33 2026 GMT
        Subject: CN=69d1d2e6-7633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:56:a9:62:6d:55:fe:44:13:d4:e9:59:8f:ac:
                    c8:68:f4:02:a4:f0:78:b7:90:d3:20:84:f3:11:f9:
                    e9:f2:ac:e4:90:d6:ba:88:0e:5d:19:3d:42:12:32:
                    25:08:bb:07:a0:7b:a0:5c:a0:31:81:b8:fc:c9:f8:
                    e5:ef:83:3f:82:81:45:47:66:bb:d4:b2:d1:9c:f8:
                    0d:88:8d:23:7d:78:ae:0e:b3:7d:e5:24:29:c5:db:
                    da:80:ca:59:68:ae:05:33:b0:28:52:56:8b:92:25:
                    ee:ea:e6:17:31:42:00:f0:a3:81:4c:09:b8:6f:01:
                    49:45:70:d4:85:4b:06:e5:f8:83:b4:79:eb:dd:cf:
                    70:c4:ad:4c:de:35:f8:81:87:4a:4b:81:a8:50:e5:
                    62:64:ff:08:b3:01:80:39:49:dd:27:dd:45:4c:7f:
                    e5:e3:ba:1a:55:40:6f:87:cc:2d:cd:b9:bc:99:b6:
                    d3:11:a7:17:0d:be:e6:e6:3c:70:e9:f1:a8:82:c8:
                    c8:3e:23:c1:0c:77:ef:12:5a:79:28:0f:0a:d4:7b:
                    1b:ad:b7:1f:ab:6c:a0:09:b0:eb:c3:67:34:f2:64:
                    ba:08:26:10:b9:2f:57:d4:9a:d8:ce:37:a1:66:33:
                    84:ad:a2:50:d2:cd:4d:74:e3:2c:d4:90:4e:0f:f6:
                    7f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:16:88:D1:FC:1D:E2:39:AC:FC:E1:48:20:B8:95:E4:AF:84:33:6E
            X509v3 Authority Key Identifier:
                keyid:E6:C4:6C:91:D1:2D:58:5A:12:B0:55:69:62:1D:EE:1A:D3:F8:90:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5sRskdEtWFoSsFVpYh3uGtP4kI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:d6:d9:98:d4:13:c3:f8:f3:95:e1:48:34:c5:43:93:eb:70:
         01:b4:65:6d:28:d0:c5:1a:81:d0:d9:01:53:91:c5:32:e1:20:
         a4:34:9a:92:14:0e:f7:ea:aa:6a:5c:08:47:fd:82:4a:e6:bd:
         eb:f5:41:f4:fa:8a:10:49:97:ea:c3:eb:28:68:2f:06:7d:91:
         18:b1:6d:19:7e:7b:a0:ed:fe:04:45:da:9c:84:6b:bd:2f:6d:
         1e:f3:da:71:c6:67:f4:dc:18:9e:4a:8a:b6:99:9e:88:78:9b:
         92:c6:0d:11:9d:47:79:b9:d5:ba:82:aa:46:51:fc:c2:44:4f:
         45:21:bc:3a:9a:d9:6d:3e:1a:53:27:84:77:dd:64:46:58:05:
         c4:eb:e7:42:83:24:fd:40:7e:9b:3d:a9:e4:30:9c:a6:c9:b3:
         34:cf:4e:13:26:aa:30:1d:84:ae:1c:25:3d:8d:2d:3d:85:38:
         ed:0b:ee:54:e0:4d:be:4c:23:8f:6c:2d:e5:0d:45:a2:50:51:
         e4:62:94:88:5f:23:f9:c7:69:18:66:d3:c7:16:2c:bc:c8:b3:
         48:0f:82:fe:ec:ff:4a:4b:53:f7:78:91:d6:07:05:8b:8b:70:
         9f:68:08:16:fd:64:43:cc:46:8f:64:49:fb:2c:27:dc:69:08:
         38:3b:56:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:58:48 2026 by rpki-client