Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft
File:                     rea1d9VLWrCQBc5hO7E2SGUuams.mft (raw, json)
Hash identifier:          8fwAhK3PJO8Wo+gbpXVDonYLiGv2XmAmzNghMeZOkvA=
Subject key identifier:   8C:E7:69:FB:B9:A8:A8:71:F2:6E:5F:18:70:02:DB:7C:C6:99:28:A4
Authority key identifier: AD:E6:B5:77:D5:4B:5A:B0:90:05:CE:61:3B:B1:36:48:65:2E:6A:6B
Certificate issuer:       /CN=A91F4553/serialNumber=ADE6B577D54B5AB09005CE613BB13648652E6A6B
Certificate serial:       05FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rea1d9VLWrCQBc5hO7E2SGUuams.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft
Manifest number:          05F5
Signing time:             Sat 04 Apr 2026 22:42:17 +0000
Manifest this update:     Sat 04 Apr 2026 22:42:17 +0000
Manifest next update:     Sat 11 Apr 2026 22:42:17 +0000
Files and hashes:         1: rea1d9VLWrCQBc5hO7E2SGUuams.crl (hash: cjt4oQJjSVsS7yrZdD/9iSQ1jrzT3J0EeEjBoC7gho8=)
                          2: A1491F7CEB7811EB9134133BC4F9AE02.roa (hash: LMpJMuYVTyY2sVa9uHYEonkQ7494tf0v3yx1gmrO5vY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.crl
                          rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rea1d9VLWrCQBc5hO7E2SGUuams.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 22:42:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1531 (0x5fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4553, serialNumber=ADE6B577D54B5AB09005CE613BB13648652E6A6B
        Validity
            Not Before: Apr  4 22:42:17 2026 GMT
            Not After : Apr 11 22:42:17 2026 GMT
        Subject: CN=69d193c9-060a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:dd:dd:b6:42:09:d0:c3:ce:88:07:ef:14:74:
                    b3:9b:09:f1:44:fa:3d:6f:f3:f9:db:0d:39:d4:96:
                    67:93:56:30:0e:6c:1b:4d:0e:4d:e9:c8:ab:f6:97:
                    a6:bd:85:92:65:4d:8e:26:1d:70:3c:63:c2:30:ca:
                    86:80:38:28:4b:01:64:06:35:72:e3:45:c5:a4:96:
                    c9:10:1d:26:c7:0a:02:01:92:f6:4d:3a:a8:7e:0c:
                    43:8b:f2:34:54:14:e4:74:31:c4:72:83:7b:72:e7:
                    14:00:47:8b:15:97:2b:c0:34:1d:34:e0:07:bd:af:
                    a7:a6:91:6b:2b:51:94:cd:80:15:af:c6:b5:d2:b7:
                    ff:99:49:5d:a0:70:e4:35:50:df:84:21:06:75:90:
                    27:cd:bc:0e:e1:98:e7:f7:c7:84:bd:ea:e3:48:31:
                    27:ad:fc:cb:31:7e:1a:54:48:de:fc:67:25:49:ce:
                    26:c7:2b:9d:a8:d2:65:2f:54:4c:b4:b6:af:ba:10:
                    34:68:f8:02:22:3e:2b:45:b9:df:73:be:e4:4c:0b:
                    4e:6b:16:88:61:86:6a:7f:50:1d:99:46:e8:18:2e:
                    23:59:9d:4a:ce:cd:67:9d:c0:5e:ba:e6:a3:17:92:
                    7c:83:bb:9e:35:b3:6a:4d:95:bd:15:37:e0:5c:e2:
                    dc:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E7:69:FB:B9:A8:A8:71:F2:6E:5F:18:70:02:DB:7C:C6:99:28:A4
            X509v3 Authority Key Identifier:
                keyid:AD:E6:B5:77:D5:4B:5A:B0:90:05:CE:61:3B:B1:36:48:65:2E:6A:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rea1d9VLWrCQBc5hO7E2SGUuams.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:0b:30:a0:b4:74:b8:8b:4a:85:62:c0:56:de:93:70:19:50:
         2b:a6:f8:41:2d:69:7d:c5:de:77:c1:c2:91:91:fc:4a:e4:bf:
         66:2c:47:c6:ee:aa:5b:1b:4d:75:3f:8b:bd:8f:a5:2d:14:95:
         26:b4:ee:53:bc:8e:1b:32:b4:e8:e0:a7:f6:19:71:84:8b:d7:
         a6:ab:a9:cc:60:6e:ef:5a:47:68:cf:f7:b3:ae:bd:eb:e5:97:
         3c:ad:34:c8:98:95:b4:61:14:eb:a6:90:cb:13:d8:fe:66:fc:
         99:5c:e6:5c:96:bb:09:20:b2:20:fb:28:f0:bf:d3:9e:4a:3d:
         b8:25:34:20:ad:76:ac:b1:6f:d6:11:7a:cd:7e:a0:bf:d1:04:
         8f:99:2c:7c:c1:f1:00:81:df:47:2a:1f:3b:e2:0e:58:92:1d:
         47:22:6e:60:b0:88:df:4a:bb:5f:a6:53:6b:0c:27:c2:6a:5e:
         44:23:12:1e:d4:52:ce:b9:52:8a:67:e7:47:f4:34:63:3e:6a:
         23:f1:41:6d:59:c5:3d:f5:10:eb:e9:bb:15:1d:8b:68:d8:90:
         43:e9:7e:dc:35:06:c3:0f:26:54:12:79:7e:60:d8:d2:b2:6b:
         52:9c:aa:2e:68:04:97:de:7e:a3:81:d1:34:d4:d3:06:19:4c:
         2c:59:5b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:54:36 2026 by rpki-client