Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft
File:                     cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft (raw, json)
Hash identifier:          vi14uy4Fu1ZQPgCknDt3wrh16mXgo2BFRANlr1CkiDs=
Subject key identifier:   88:C6:0D:64:65:87:BB:AF:71:2B:63:4D:8C:84:3C:23:DC:86:93:C7
Authority key identifier: 72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7
Certificate issuer:       /CN=A91E0D87/serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7
Certificate serial:       05EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft
Manifest number:          05B4
Signing time:             Sun 26 Apr 2026 23:14:15 +0000
Manifest this update:     Sun 26 Apr 2026 23:14:14 +0000
Manifest next update:     Sun 03 May 2026 23:14:14 +0000
Files and hashes:         1: cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl (hash: o+NGgqKdczR5uD2304FDhUhMjrSL9AuM/4bXQu7WLTA=)
                          2: 345F56F87FE311EF80C0F71FC4F9AE02.roa (hash: qDBbxutM6whAYRqUGL23M9IPWqduEyKAvV9efNJXIMw=)
                          3: F93DE378B66911F09D7E8031C4F9AE02.roa (hash: c07jP4kaBJLesC3fKCC1+hkjCe95/NhhL5juygnjjI4=)
                          4: 2A490316D97011F0A9AB95F59AD3641D.roa (hash: MTKYuHS54sbbIgz0FdQa7tPFCtPZViVZZlK3jzFk3Qo=)
                          5: 39EA203238DB11F1AA6C3EA5A2833773.roa (hash: Xl9IN1jBFBBr5NJdM8/+NNt/Eg76Z7LumfHzT1CNK/Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl
                          rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 03 May 2026 23:14:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1515 (0x5eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0D87, serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7
        Validity
            Not Before: Apr 26 23:14:14 2026 GMT
            Not After : May  3 23:14:14 2026 GMT
        Subject: CN=69ee9c46-5842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:24:33:ff:f4:6d:fd:65:ef:f9:45:6b:a9:2b:
                    0e:c4:3d:0b:2f:d4:d9:dc:ba:50:73:ef:1c:3f:9b:
                    ff:a1:eb:8a:b6:2f:44:09:6c:f3:32:0c:0b:50:c8:
                    ee:40:23:5b:cc:4b:f4:48:cd:e5:40:35:07:9b:14:
                    2d:23:cd:6d:5a:85:34:48:23:fb:9a:da:38:e7:b9:
                    3d:4d:02:0a:3d:61:0b:11:13:c2:76:cb:a3:d8:95:
                    55:00:32:62:13:de:e3:f9:0c:31:da:e4:09:b9:8a:
                    ba:cc:ac:62:0c:7b:bb:9c:42:92:df:9a:a5:60:76:
                    3f:7f:e1:d9:04:e2:58:91:f5:31:c6:7c:7d:e4:57:
                    8b:10:0a:5c:76:0e:39:16:77:b5:79:34:3c:1c:d3:
                    79:09:c7:ab:37:0e:ee:2c:e5:e0:3f:ef:58:aa:c2:
                    7e:97:1f:68:9a:0b:90:76:88:14:22:ae:98:55:55:
                    ad:92:ff:01:62:74:91:6c:46:c5:d2:03:70:3d:48:
                    52:f0:ff:c3:73:03:02:e8:90:ba:08:75:1e:10:c6:
                    57:84:57:8e:b2:33:c0:e5:4f:bc:c8:0c:18:a5:b2:
                    38:2e:df:3b:0d:95:4f:5c:f0:80:a4:3f:97:9b:79:
                    92:33:ce:04:82:6a:83:e7:a9:96:e9:67:08:b9:c4:
                    d6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C6:0D:64:65:87:BB:AF:71:2B:63:4D:8C:84:3C:23:DC:86:93:C7
            X509v3 Authority Key Identifier:
                keyid:72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:56:6d:f3:2e:92:ce:12:7d:6a:0f:5a:b6:37:b4:2a:2e:3a:
         63:50:8d:4b:b7:5d:82:df:ff:cc:35:81:8a:e4:9d:dc:8f:6f:
         29:37:20:37:6e:a9:20:d2:9b:72:5a:8f:fd:73:cd:b3:9d:d6:
         07:9d:be:1e:a9:69:71:b2:a9:4d:00:cb:d3:3a:c1:94:28:d7:
         4a:de:af:cd:bd:8f:69:76:7f:92:03:fd:d9:e5:03:5b:34:09:
         3e:bb:1a:39:29:c9:28:39:c1:73:98:cc:d1:93:72:bf:64:06:
         76:2d:a3:87:76:d5:30:09:18:f9:43:9a:60:f7:e4:9e:e4:7a:
         c3:ed:76:77:b8:97:1c:fc:45:48:db:c8:4c:43:ae:ce:ce:a3:
         36:86:f2:94:b6:78:51:2f:2c:b4:3e:11:cb:a9:4f:91:43:c7:
         0d:f0:1f:94:41:76:fe:e1:52:7d:6d:5c:34:91:12:0e:94:d1:
         39:df:0c:ef:66:1a:d5:fe:b9:ee:86:f3:d8:7f:09:c5:fe:aa:
         b6:45:89:88:4c:4d:f1:4c:d0:a2:cb:38:0d:52:87:67:53:a3:
         14:dc:66:00:05:3a:77:ae:a8:4b:97:62:34:12:87:ec:9f:c4:
         00:1f:df:62:10:7f:9e:45:7d:98:20:2b:59:55:1c:1c:18:ca:
         f6:45:2b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 07:16:07 2026 by rpki-client