Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.mft
File:                     X-0ED6bGtlZOQCsut2NpLOJDB-o.mft (raw, json)
Hash identifier:          G7okDcmpe2EOuQF5uQhq7aV3LOzOSxR4CVe7HIz0SVc=
Subject key identifier:   4B:84:40:6A:6F:CA:2B:77:98:DD:1A:89:A0:45:3A:AE:74:03:0A:09
Authority key identifier: 5F:ED:04:0F:A6:C6:B6:56:4E:40:2B:2E:B7:63:69:2C:E2:43:07:EA
Certificate issuer:       /CN=A9192F5B/serialNumber=5FED040FA6C6B6564E402B2EB763692CE24307EA
Certificate serial:       56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-0ED6bGtlZOQCsut2NpLOJDB-o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.mft
Manifest number:          54
Signing time:             Sun 05 Apr 2026 07:30:59 +0000
Manifest this update:     Sun 05 Apr 2026 07:30:58 +0000
Manifest next update:     Sun 12 Apr 2026 07:30:58 +0000
Files and hashes:         1: X-0ED6bGtlZOQCsut2NpLOJDB-o.crl (hash: lgyTTQVfGr+GnNE7FnwJ2FlR40yWaptMC7iJ6cYE14c=)
                          2: B44C2C06B4B211F08EEFDF43C4F9AE02.roa (hash: YYsxvMPCRrMVXD10L+51rkoUdNPvTH6rY0GaRqBHiU4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.crl
                          rsync://rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-0ED6bGtlZOQCsut2NpLOJDB-o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 07:30:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192F5B, serialNumber=5FED040FA6C6B6564E402B2EB763692CE24307EA
        Validity
            Not Before: Apr  5 07:30:58 2026 GMT
            Not After : Apr 12 07:30:58 2026 GMT
        Subject: CN=69d20fb2-0ed4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:55:f1:03:94:67:af:21:f2:72:f7:50:f2:be:
                    75:5d:a8:60:a9:d9:06:58:1e:85:3f:b2:b0:8d:37:
                    30:11:56:5c:ce:38:10:3c:b1:d2:ab:9c:ce:fd:59:
                    10:fd:e2:4c:44:5c:1f:05:ea:ad:eb:2e:1c:d8:b5:
                    23:0f:e5:19:95:98:dc:bb:f5:e1:fa:07:e8:8c:36:
                    0d:43:a8:c6:43:ff:87:77:e0:04:2f:f8:e5:7a:7c:
                    54:b6:66:23:0b:ba:f1:84:5f:dd:fd:f3:21:a5:b8:
                    5e:1a:65:2f:0e:d4:ce:29:cf:d7:03:f5:b2:b3:e2:
                    3e:40:14:7d:f2:59:f9:52:4a:07:bf:87:10:6d:e4:
                    2a:7a:fa:46:e7:7a:3a:42:b8:f8:5b:84:ea:f9:ca:
                    5a:7b:24:27:22:cc:70:d9:3a:05:0c:60:b3:24:d5:
                    20:98:d8:0c:e6:6f:0a:76:97:7b:fd:66:fc:5a:ed:
                    49:d0:30:08:f0:88:0f:02:7a:b7:b6:a1:ed:69:b5:
                    e0:a0:14:e5:d7:3b:aa:80:f3:44:49:96:a2:7e:37:
                    0f:c2:f8:0d:04:98:95:ea:5a:27:15:59:69:ca:55:
                    07:9c:f7:36:54:f4:de:c7:6d:11:71:39:38:39:f7:
                    6d:15:4e:63:ae:ee:76:28:64:e3:4a:de:ca:d1:98:
                    39:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:84:40:6A:6F:CA:2B:77:98:DD:1A:89:A0:45:3A:AE:74:03:0A:09
            X509v3 Authority Key Identifier:
                keyid:5F:ED:04:0F:A6:C6:B6:56:4E:40:2B:2E:B7:63:69:2C:E2:43:07:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-0ED6bGtlZOQCsut2NpLOJDB-o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:10:a1:1a:9b:a3:c3:e5:26:11:82:20:7d:dc:3f:70:36:8c:
         c9:50:a7:c5:3e:24:22:ae:60:27:32:e9:a4:0f:0f:a3:cf:79:
         bb:6a:e8:9f:ff:45:69:b5:a2:e3:6a:ca:2a:95:76:c2:3c:cc:
         f7:96:33:64:b6:ea:79:b8:4e:8f:b0:36:6a:1c:b9:50:f7:a2:
         63:a2:f2:b9:b1:fe:bd:5e:00:89:bd:ff:26:94:4a:6b:59:7b:
         73:d2:b0:e3:6d:30:ef:fd:2d:a4:a7:cd:fa:e9:e8:2d:af:bb:
         2e:bd:41:cb:bd:9c:f3:a2:91:99:f0:f1:ae:57:66:f4:45:7d:
         5d:90:aa:ee:c7:26:53:fa:fc:8c:ed:14:99:f5:55:34:49:72:
         95:30:f8:0d:2f:76:9b:56:f8:5e:2d:ae:f3:87:44:f8:2a:41:
         b4:11:a2:43:fc:70:92:50:09:3e:cb:52:a1:b8:dd:e8:48:29:
         bc:49:67:11:ac:8f:28:30:8c:47:77:9e:b9:68:41:d2:57:28:
         00:e4:4f:5d:39:e1:34:a4:ff:c8:93:87:93:f0:57:79:e4:9c:
         74:fb:15:19:f5:15:bc:37:a8:5b:97:52:cd:64:5f:5a:09:fc:
         bd:c5:aa:f7:56:35:eb:77:c1:37:d3:ad:31:9c:fb:5f:75:62:
         94:a9:f5:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:52:57 2026 by rpki-client