Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/5Ux-FlPQE0JCIsO5NoohO6URXOM.mft
File:                     5Ux-FlPQE0JCIsO5NoohO6URXOM.mft (raw, json)
Hash identifier:          DboxFmaRA79wqMioW4TBpN1TXkGtS8k6Me8930Uf1OI=
Subject key identifier:   2A:C9:6E:CF:04:4C:24:59:70:84:AB:63:47:A6:62:44:F3:D2:01:A0
Authority key identifier: E5:4C:7E:16:53:D0:13:42:42:22:C3:B9:36:8A:21:3B:A5:11:5C:E3
Certificate issuer:       /CN=A91877A6/serialNumber=E54C7E1653D013424222C3B9368A213BA5115CE3
Certificate serial:       8F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Ux-FlPQE0JCIsO5NoohO6URXOM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/5Ux-FlPQE0JCIsO5NoohO6URXOM.mft
Manifest number:          8D
Signing time:             Sun 05 Apr 2026 06:53:47 +0000
Manifest this update:     Sun 05 Apr 2026 06:53:46 +0000
Manifest next update:     Sun 12 Apr 2026 06:53:46 +0000
Files and hashes:         1: 5Ux-FlPQE0JCIsO5NoohO6URXOM.crl (hash: REAajP8BNPtFJr0kkictYAfUOt8hrkUCN3xVI4ZNelo=)
                          2: 49FB21A25C8011F0ABC6993DC4F9AE02.roa (hash: xddKCKrciYMQOQDWh0L/UeoRnxPJH7k8BoUpUOdsrCo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/5Ux-FlPQE0JCIsO5NoohO6URXOM.crl
                          rsync://rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/5Ux-FlPQE0JCIsO5NoohO6URXOM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Ux-FlPQE0JCIsO5NoohO6URXOM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 06:53:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143 (0x8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91877A6, serialNumber=E54C7E1653D013424222C3B9368A213BA5115CE3
        Validity
            Not Before: Apr  5 06:53:46 2026 GMT
            Not After : Apr 12 06:53:46 2026 GMT
        Subject: CN=69d206fb-0ca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:05:52:65:4f:4e:f6:40:83:24:a8:b3:6b:72:
                    c5:96:a5:4c:11:bc:44:f8:2b:d2:06:77:34:71:24:
                    e9:5f:30:e1:84:07:4f:7b:ab:74:a0:28:80:00:ba:
                    d7:27:50:c6:63:9c:26:d8:45:0f:c8:b2:4f:4a:00:
                    36:90:4d:d5:a3:d6:58:c5:85:de:8b:03:40:75:e1:
                    67:9c:e7:9a:78:f5:33:a8:2d:58:33:d6:03:29:42:
                    b0:9f:81:f2:15:42:a0:03:82:d8:c6:c3:77:1a:33:
                    f4:97:80:31:9c:d4:f6:fd:55:21:ff:b6:b3:a7:39:
                    0d:c5:cc:04:28:61:cf:00:2b:39:fb:e9:ed:a1:f1:
                    68:a0:7b:bc:d3:f3:cc:a4:36:79:27:e6:fa:eb:c3:
                    dc:83:d9:4a:a1:4b:98:09:d6:d6:22:a2:8b:ab:6f:
                    48:4a:94:61:f9:02:c3:cb:bb:ee:24:c5:f7:ae:a3:
                    62:1c:e2:4a:06:a9:bb:1f:76:05:76:56:56:66:26:
                    9c:13:1a:91:7d:75:f3:f2:07:24:52:51:fe:fe:50:
                    8b:2c:75:83:38:9a:37:43:65:57:59:f9:02:83:8f:
                    02:22:f0:e7:95:e5:bb:ed:99:64:98:9d:0c:6b:3d:
                    5f:70:ed:2d:d4:8b:40:17:80:25:23:3e:b6:a6:6e:
                    e3:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C9:6E:CF:04:4C:24:59:70:84:AB:63:47:A6:62:44:F3:D2:01:A0
            X509v3 Authority Key Identifier:
                keyid:E5:4C:7E:16:53:D0:13:42:42:22:C3:B9:36:8A:21:3B:A5:11:5C:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/5Ux-FlPQE0JCIsO5NoohO6URXOM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Ux-FlPQE0JCIsO5NoohO6URXOM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/5Ux-FlPQE0JCIsO5NoohO6URXOM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:7c:4c:86:4a:e2:79:4e:9f:64:e3:56:d9:82:3f:ec:82:5c:
         ad:5d:13:0b:90:c7:a9:7a:f9:78:41:67:87:0d:8b:b3:69:39:
         27:21:0f:a9:5c:6a:17:82:f6:6b:43:95:cd:3d:aa:37:de:44:
         00:97:2e:0d:3b:60:74:ca:5b:39:60:2c:09:98:50:4e:e4:0f:
         23:76:5a:d7:0a:6c:e3:7c:06:11:98:ba:47:d9:c1:a5:e1:b8:
         a7:c4:13:5d:66:bf:12:8e:44:df:32:5d:62:c7:19:b6:f8:89:
         05:34:8e:85:f5:45:8c:58:0e:02:4d:fd:ee:bd:3e:8f:1d:c4:
         c4:d4:14:e0:52:59:fd:a7:a0:5f:19:52:b7:24:44:4c:cf:8f:
         6c:f9:66:9c:e5:54:9f:4f:83:45:51:a8:6e:82:54:89:f0:f5:
         ff:bf:e2:01:0e:fb:9a:ca:76:97:9e:b9:03:1a:6e:7c:b9:2e:
         ec:e9:02:5d:74:cb:ef:61:af:46:2e:c4:c9:81:e5:d2:9e:99:
         8f:20:a8:50:23:84:88:54:49:c6:f2:6e:a5:35:11:18:26:4c:
         4d:6f:c8:f4:a9:08:cb:6f:0a:ce:91:43:8d:85:d9:23:1b:c3:
         85:a5:1d:40:62:f4:83:2a:03:68:20:6e:ed:5d:32:90:a4:4b:
         f3:1e:2a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:56:33 2026 by rpki-client