Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.mft
File:                     _5I0f11UaIEf0lOki_xp_lcKpFA.mft (raw, json)
Hash identifier:          YfedG9AUo4tELM1lmdtF9TXkjQuh6Us4jqYF460E5Qc=
Subject key identifier:   65:A8:12:30:B2:9D:5D:89:56:59:44:CD:97:F9:52:C3:25:05:49:EF
Authority key identifier: FF:92:34:7F:5D:54:68:81:1F:D2:53:A4:8B:FC:69:FE:57:0A:A4:50
Certificate issuer:       /CN=A9191769/serialNumber=FF92347F5D5468811FD253A48BFC69FE570AA450
Certificate serial:       0125
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5I0f11UaIEf0lOki_xp_lcKpFA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.mft
Manifest number:          0122
Signing time:             Sun 05 Apr 2026 05:06:44 +0000
Manifest this update:     Sun 05 Apr 2026 05:06:43 +0000
Manifest next update:     Sun 12 Apr 2026 05:06:43 +0000
Files and hashes:         1: _5I0f11UaIEf0lOki_xp_lcKpFA.crl (hash: +gGfPo1PSNxmkmSo9PeZYUO6r0OYrX+A33UJP54y1Ws=)
                          2: 4D36C07677C311EF84D38A3BC4F9AE02.roa (hash: UonUgi37eGK5+UZSgpaI5VcXY/NpGaUyQWHx23St90A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.crl
                          rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5I0f11UaIEf0lOki_xp_lcKpFA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 293 (0x125)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191769, serialNumber=FF92347F5D5468811FD253A48BFC69FE570AA450
        Validity
            Not Before: Apr  5 05:06:43 2026 GMT
            Not After : Apr 12 05:06:43 2026 GMT
        Subject: CN=69d1ede4-aa7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:63:bd:b4:ca:f0:0c:c2:56:7e:9c:07:b7:31:
                    5b:01:d7:b0:27:ab:ce:d3:45:1b:54:c7:fc:b5:aa:
                    c8:ad:d4:c5:c0:d8:7e:84:60:e4:ea:fe:08:95:2a:
                    54:72:cd:42:29:f5:c9:7b:35:bb:e1:41:41:85:82:
                    1d:34:21:8e:11:0e:51:43:21:85:4c:5f:6f:bc:cb:
                    2b:2b:68:00:74:5c:23:a2:12:c1:51:e9:77:d4:f7:
                    74:cb:c7:40:89:19:67:73:47:76:cd:41:02:2d:8c:
                    a8:f1:5d:91:bb:df:96:f3:63:22:03:43:f0:ae:f2:
                    2f:25:31:01:d2:8a:55:11:8f:f4:20:30:e6:9f:03:
                    ac:ee:57:49:5b:86:b1:b9:09:75:40:43:65:d9:f5:
                    79:2a:49:ef:06:31:24:a1:3e:b3:1a:8a:94:4c:4a:
                    77:f5:dd:f3:cc:29:b7:25:75:1c:84:8f:9a:bc:8c:
                    22:67:8d:d8:95:33:3b:a9:9b:42:e9:f9:9c:aa:fb:
                    40:d4:d7:76:f4:53:b4:b9:11:21:f0:f6:2b:e7:b6:
                    c5:34:ce:05:fe:72:ab:47:8d:74:5e:1c:a6:17:dc:
                    00:f8:9c:55:74:f2:e6:14:b0:c0:f4:04:2e:fe:50:
                    1e:d0:0d:b7:01:10:ce:48:2f:83:64:80:d7:03:8e:
                    4c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:A8:12:30:B2:9D:5D:89:56:59:44:CD:97:F9:52:C3:25:05:49:EF
            X509v3 Authority Key Identifier:
                keyid:FF:92:34:7F:5D:54:68:81:1F:D2:53:A4:8B:FC:69:FE:57:0A:A4:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5I0f11UaIEf0lOki_xp_lcKpFA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:3a:ba:75:56:a2:b0:14:cb:46:44:fc:bf:ea:fa:5e:ec:60:
         64:34:4c:94:5a:40:da:0e:c9:b6:97:91:bd:0c:2d:d0:3f:fa:
         f4:a8:2e:e1:45:85:f0:f2:8e:78:76:7e:f9:fe:66:4c:cd:b1:
         0a:64:9d:99:41:93:e6:d1:97:e5:de:aa:4c:d5:be:04:bf:01:
         fe:b3:c3:36:0f:23:da:e0:03:95:53:e9:28:b4:35:93:c2:2e:
         7f:51:c1:80:0a:f6:fd:24:3d:f4:d9:bc:90:ea:1a:22:ac:d5:
         2a:c7:5a:0e:d8:54:93:33:57:da:50:17:80:0a:97:00:7a:4e:
         ff:9e:6a:4d:c6:1b:70:a6:50:36:20:93:eb:c1:7d:25:e3:6a:
         9a:58:66:c2:df:5c:1f:98:c4:54:a8:93:c7:b0:4d:ad:04:56:
         01:25:bd:f5:87:83:02:a3:6f:e2:46:08:07:6f:26:24:23:2f:
         f5:be:df:87:79:59:5b:5c:67:69:46:aa:bf:8a:93:1c:3a:c3:
         02:95:f5:c8:d0:cf:03:a1:91:65:e8:91:ae:15:3e:d4:34:af:
         5b:7e:4e:db:1b:0b:48:45:18:ce:59:07:67:07:85:c9:d4:3e:
         28:f8:63:e6:45:7b:c1:a9:c2:c5:30:af:66:fd:87:99:c1:1c:
         72:cc:a7:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:48:07 2026 by rpki-client