Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft
File:                     5wYBKhBr0JRljmBMVgMFDxTcP0w.mft (raw, json)
Hash identifier:          ny4xjnF2fBfZgf+fnYH2HrLdI8vpK+iLQg32GoPLgv4=
Subject key identifier:   56:42:B9:22:3E:86:5E:42:7E:55:18:91:0E:F2:1B:23:7D:4E:8D:51
Authority key identifier: E7:06:01:2A:10:6B:D0:94:65:8E:60:4C:56:03:05:0F:14:DC:3F:4C
Certificate issuer:       /CN=A91D94CD/serialNumber=E706012A106BD094658E604C5603050F14DC3F4C
Certificate serial:       5B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft
Manifest number:          53
Signing time:             Tue 03 Mar 2026 07:52:44 +0000
Manifest this update:     Tue 03 Mar 2026 07:52:43 +0000
Manifest next update:     Tue 10 Mar 2026 07:52:43 +0000
Files and hashes:         1: 5wYBKhBr0JRljmBMVgMFDxTcP0w.crl (hash: Em9X/g92Yj2q/X3rNSdWRB/VV12q+Ei7aFRPdNlS1/M=)
                          2: 67D535ACA32311F0A8D9D520C4F9AE02.roa (hash: BSzgTNzVd1eSvTFBsG3dgq89V/tbKxGI5pw6hlS/4GY=)
                          3: 6767E894A32311F0A8D9D520C4F9AE02.roa (hash: EHyz2xRZs5VYv9OanUFyye7p3N/wXAHiJq/ekOSOYZA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.crl
                          rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 07:52:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D94CD, serialNumber=E706012A106BD094658E604C5603050F14DC3F4C
        Validity
            Not Before: Mar  3 07:52:43 2026 GMT
            Not After : Mar 10 07:52:43 2026 GMT
        Subject: CN=69a6934c-74c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6c:02:9a:d6:c3:02:67:d7:48:f4:4e:aa:24:
                    51:b8:bb:6f:a2:88:06:02:97:2b:70:4b:4f:05:25:
                    79:87:36:50:5b:6e:f8:12:45:fb:d7:d3:d1:3a:13:
                    a5:4a:fa:35:98:72:a8:64:4d:9a:2a:f4:d9:80:6a:
                    df:ae:8a:7c:8f:b9:bf:4a:c3:3b:5a:6a:9d:83:fe:
                    90:d8:f7:e4:df:34:00:ed:54:cc:ff:f4:78:88:34:
                    8a:69:28:a7:3c:84:ab:65:b1:c3:35:06:2a:c7:85:
                    08:e5:81:7b:90:85:10:79:3c:25:06:3a:00:55:d4:
                    56:88:6a:0d:e8:65:92:fc:8b:17:f8:45:d6:dd:74:
                    60:d1:49:cc:fd:44:83:c5:32:cb:2b:0b:4f:f4:dc:
                    49:c7:4d:0c:4b:5e:15:1d:1e:b2:32:18:94:25:1f:
                    61:00:70:4d:9d:0c:8e:2a:74:fe:aa:22:f2:b4:86:
                    20:37:b1:5c:27:ec:51:f1:7f:e4:c1:87:58:91:1e:
                    da:d6:ce:98:35:9b:d7:27:df:99:01:32:c4:4b:8c:
                    1c:56:9f:05:f5:bc:36:b2:e7:4f:24:04:3b:38:d3:
                    d0:99:e0:60:71:b1:1c:06:0d:3a:3d:fc:64:42:f7:
                    c4:34:15:1f:63:fc:44:65:b4:57:1b:e8:4c:bf:a3:
                    7a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:42:B9:22:3E:86:5E:42:7E:55:18:91:0E:F2:1B:23:7D:4E:8D:51
            X509v3 Authority Key Identifier:
                keyid:E7:06:01:2A:10:6B:D0:94:65:8E:60:4C:56:03:05:0F:14:DC:3F:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:1e:67:93:52:30:41:03:09:ea:fd:71:81:7e:8a:5b:80:95:
         fb:1e:eb:e6:cc:ca:d6:fb:8c:c0:88:3f:51:5d:d3:14:b1:d1:
         c1:ba:50:17:79:d0:ee:a2:db:dd:e2:b3:00:b5:98:27:df:16:
         a7:10:32:43:f7:7b:e6:93:71:20:c7:d4:7e:dd:73:18:82:a4:
         93:5e:81:2f:7d:f0:a7:5f:a4:c7:5e:c4:fc:ae:13:2d:ef:aa:
         b3:e2:53:51:c6:5f:a6:63:e6:65:7c:bc:db:44:57:e2:cd:65:
         32:6b:ff:4a:88:b2:5e:2b:56:ee:ac:ae:81:56:8d:46:ca:e7:
         22:db:7a:f4:d5:e5:9b:9b:db:8a:57:71:97:d9:54:a3:9c:b0:
         e1:42:3c:4c:00:1b:8f:be:32:fc:ad:55:90:1f:fb:5e:89:ee:
         4e:af:75:36:de:a2:68:0f:15:52:4a:50:21:5a:a1:cb:8d:ea:
         f1:21:67:ed:17:7f:58:c4:66:e0:95:e0:31:20:b5:6f:39:25:
         83:d0:a8:77:bc:44:67:e0:2f:71:9a:2c:29:5b:59:20:3f:8e:
         34:d3:eb:80:a1:b0:75:9b:5a:11:bb:76:f0:5e:99:84:79:1a:
         a3:04:54:82:69:73:86:9b:c1:3e:d4:d7:cc:1f:9a:51:d0:85:
         f8:0c:81:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:34:59 2026 by rpki-client