Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft
File:                     fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft (raw, json)
Hash identifier:          IZh7lhw9vh+sqRNuM1SKXKpbvE9EiLKjN0jjfaVtrcU=
Subject key identifier:   44:4E:E4:6F:BC:CF:36:4D:77:E0:8D:FD:9D:7A:3F:21:EE:D5:30:D9
Authority key identifier: 7E:3A:C6:91:9C:22:8F:98:01:AC:F9:07:5D:90:8E:51:2D:D6:DA:34
Certificate issuer:       /CN=A91BDC68/serialNumber=7E3AC6919C228F9801ACF9075D908E512DD6DA34
Certificate serial:       B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft
Manifest number:          A5
Signing time:             Mon 27 Apr 2026 07:11:17 +0000
Manifest this update:     Mon 27 Apr 2026 07:11:17 +0000
Manifest next update:     Mon 04 May 2026 07:11:17 +0000
Files and hashes:         1: fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl (hash: uMCp1R0xkR978j1V0HC566Vf+AIpX200Ll3GH9QPiXk=)
                          2: 6C18BEE0519811F08E123360C4F9AE02.roa (hash: 8TFnySzYjqGkLlYHhhpYGf9ApF8MAtmix4sZ0+hIQmI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 04 May 2026 07:11:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176 (0xb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDC68, serialNumber=7E3AC6919C228F9801ACF9075D908E512DD6DA34
        Validity
            Not Before: Apr 27 07:11:17 2026 GMT
            Not After : May  4 07:11:17 2026 GMT
        Subject: CN=69ef0c15-f783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b0:d6:a9:a9:aa:38:f2:76:a9:36:80:e9:52:
                    4d:74:fc:a6:90:3c:7e:40:76:74:ba:1c:4d:f4:7e:
                    fb:99:d5:6a:67:79:87:af:95:3e:c5:be:4d:f4:07:
                    6b:71:fb:8d:2b:4f:a4:79:c7:02:ee:64:e5:b5:ac:
                    e7:7f:be:d2:cc:9e:fc:52:25:ff:64:01:6d:c0:fc:
                    c3:19:51:c0:ac:b6:39:a1:c5:0a:68:e0:55:dd:44:
                    04:84:88:e7:33:05:cf:fd:c0:6c:d0:ad:b4:bc:e8:
                    62:9d:1b:6c:e1:4c:03:0d:0c:20:51:9f:48:0a:ad:
                    33:da:e8:d8:57:28:3c:64:2a:98:c0:5e:69:c0:e1:
                    8a:5e:ec:6f:ff:f4:a2:26:b6:68:be:f9:0a:70:b5:
                    69:80:ec:0f:a8:5c:de:fc:ba:5a:9e:07:3e:d5:1b:
                    e7:79:11:e8:d9:e4:c4:53:be:15:65:0a:0d:9f:77:
                    18:ea:b5:8a:a9:60:c4:42:94:c7:a3:c8:46:e8:b0:
                    81:6b:d7:8b:73:24:c2:8f:ac:b0:73:83:6c:8a:1b:
                    80:98:f2:e3:91:f1:74:62:48:5f:9e:9a:93:9b:45:
                    08:43:04:24:4a:35:7a:9a:16:23:50:61:5e:73:f7:
                    2d:c2:f6:8b:f7:d6:5a:5a:0b:7c:1a:f8:d7:13:4e:
                    e5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:4E:E4:6F:BC:CF:36:4D:77:E0:8D:FD:9D:7A:3F:21:EE:D5:30:D9
            X509v3 Authority Key Identifier:
                keyid:7E:3A:C6:91:9C:22:8F:98:01:AC:F9:07:5D:90:8E:51:2D:D6:DA:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:60:4e:5d:ff:7b:2f:e2:b9:32:ef:2a:06:e3:3f:e2:c9:d9:
         2f:32:b9:b1:6a:11:81:06:53:20:dc:8e:04:64:21:ac:c4:ff:
         b1:0d:b4:95:62:92:56:58:07:12:a1:31:0e:ae:ba:95:f2:7a:
         22:59:18:a8:5c:c8:f0:20:ec:cc:ac:0f:fb:0b:0e:8a:13:09:
         07:a5:6b:8e:9e:3d:9b:d6:41:cd:17:9c:d5:cd:ae:59:e8:ab:
         c1:f3:66:76:99:ea:e5:d1:82:16:15:62:dc:1b:be:be:a2:23:
         0e:b6:7e:ca:ee:d3:e7:d0:52:46:84:5f:68:ae:cc:8b:14:16:
         f7:13:c9:3e:03:c1:a1:5f:a2:af:99:72:38:4d:8f:4a:84:c3:
         e3:13:b5:1c:67:df:a1:f1:10:a2:c9:8f:de:e6:e1:21:07:c1:
         a9:2a:ff:e7:2d:93:95:c0:32:c9:84:9d:cb:a4:ff:4a:64:28:
         d8:3b:17:97:e3:9d:34:62:45:85:c5:6f:b9:87:12:4c:c5:52:
         4a:28:5d:d3:64:a0:00:52:86:ce:3c:53:a0:4d:5a:5e:a1:dc:
         67:2c:3b:0e:6d:4e:c6:d1:8b:24:6c:47:ee:09:7c:8f:6e:de:
         ab:35:72:c7:6f:99:9b:5e:d8:92:7a:db:6f:89:27:5e:f1:9d:
         51:46:e3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 15:08:36 2026 by rpki-client