Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.mft
File:                     5nG8sr6VpsiFJxIdiBXovPGKoeI.mft (raw, json)
Hash identifier:          i0tV06nMN1fHIUoLZPTf0lFt0nH8fzUghhxHbfsq9E8=
Subject key identifier:   C8:49:6D:A8:1C:59:E5:C1:BB:BA:3D:E9:44:CD:26:AB:50:B9:8C:93
Authority key identifier: E6:71:BC:B2:BE:95:A6:C8:85:27:12:1D:88:15:E8:BC:F1:8A:A1:E2
Certificate issuer:       /CN=A9124926/serialNumber=E671BCB2BE95A6C88527121D8815E8BCF18AA1E2
Certificate serial:       0A6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nG8sr6VpsiFJxIdiBXovPGKoeI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.mft
Manifest number:          0A5E
Signing time:             Tue 24 Mar 2026 19:25:52 +0000
Manifest this update:     Tue 24 Mar 2026 19:25:51 +0000
Manifest next update:     Tue 31 Mar 2026 19:25:51 +0000
Files and hashes:         1: 5nG8sr6VpsiFJxIdiBXovPGKoeI.crl (hash: zrFZm4Zk6uP8Ik3RzTskuuSLbYg60SaGUt8RUqewIyg=)
                          2: 209BA8B682DF11EAABBC5018C4F9AE02.roa (hash: 0tZfyO0qZHVtC7N4oqG/s4ZoFuinvHiT3ESC37ncsv0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.crl
                          rsync://rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nG8sr6VpsiFJxIdiBXovPGKoeI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:25:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2669 (0xa6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9124926, serialNumber=E671BCB2BE95A6C88527121D8815E8BCF18AA1E2
        Validity
            Not Before: Mar 24 19:25:51 2026 GMT
            Not After : Mar 31 19:25:51 2026 GMT
        Subject: CN=69c2e53f-4de5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:69:01:0a:42:a0:1e:b5:a4:ea:2a:d5:28:1c:
                    d0:61:46:5b:6b:0d:d8:36:b8:0f:b3:ad:f0:5b:c1:
                    a4:1a:a7:a2:ec:5d:69:2a:95:64:5b:70:8d:a3:21:
                    1f:74:f3:08:d2:14:e4:48:32:3d:4e:9d:f4:80:3c:
                    c9:ab:11:3d:3c:81:be:cf:b8:4d:15:13:ff:36:84:
                    32:ee:00:93:c9:9b:b1:c8:d5:8c:50:ff:b2:d9:91:
                    b5:2b:51:f5:71:83:ce:e0:37:5c:49:da:8d:33:1e:
                    04:6f:2c:6b:40:80:06:11:59:94:0c:c6:1f:05:a4:
                    fa:1b:ea:36:74:c0:68:9c:ac:53:51:48:9e:a3:35:
                    8b:20:03:07:3f:d1:b4:b9:fe:1f:01:7f:66:a3:9d:
                    e5:cc:10:3c:93:4c:85:7a:0b:14:1e:ba:27:01:ca:
                    a6:7f:3c:cd:8e:de:46:55:00:a9:0f:aa:38:b8:65:
                    46:fc:88:f0:1d:f0:1d:f3:e6:16:89:19:36:94:62:
                    63:d6:38:a2:8a:36:6a:ac:b1:91:b3:92:73:50:13:
                    3e:01:ec:3c:01:a2:4e:20:69:6c:f8:b2:a7:0a:e1:
                    ee:dd:8d:84:71:62:34:a9:09:68:bd:cb:4e:8b:b4:
                    d5:0b:ef:56:9f:3b:64:d0:64:e1:bd:50:09:0b:68:
                    c3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:49:6D:A8:1C:59:E5:C1:BB:BA:3D:E9:44:CD:26:AB:50:B9:8C:93
            X509v3 Authority Key Identifier:
                keyid:E6:71:BC:B2:BE:95:A6:C8:85:27:12:1D:88:15:E8:BC:F1:8A:A1:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nG8sr6VpsiFJxIdiBXovPGKoeI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:60:3a:10:c0:44:58:2d:0b:d0:f8:23:f7:5a:11:d6:6a:aa:
         48:44:1d:e6:0c:93:f1:8b:25:99:a0:74:bb:56:11:43:f7:54:
         12:fd:51:81:55:2d:8a:7a:8c:6c:e0:10:df:b2:6d:6a:7a:c1:
         25:ce:1e:a3:53:57:48:31:68:cb:6c:ef:ea:79:28:d6:c0:9f:
         78:55:a4:75:cd:53:6d:97:4d:c7:69:70:04:9d:0d:09:f5:16:
         57:e6:4d:d9:5e:14:4d:91:86:c4:a3:6c:8b:ee:be:6f:12:34:
         1c:67:96:14:99:ad:ce:6f:9c:fa:c6:b4:65:20:d2:63:71:e5:
         43:b8:14:cc:53:36:ab:9a:85:80:cd:94:59:b8:ec:9c:c9:de:
         be:9b:0d:82:cd:3d:76:c0:4f:88:6f:fd:5a:28:ec:2a:22:3d:
         05:96:0b:8a:d9:7e:45:ac:e9:d8:d8:8e:13:9e:24:ce:c9:23:
         84:68:fc:03:fd:b4:27:f7:ad:ac:1c:3a:04:9e:f4:ac:2a:a9:
         7e:13:49:d0:80:39:71:6c:b6:cd:16:8a:36:f8:3e:22:d9:ba:
         58:93:02:91:fb:39:94:6c:97:8f:47:33:fc:2c:ea:e6:01:53:
         59:73:1b:12:d8:ee:ba:45:30:50:5c:a3:54:45:ba:4a:77:35:
         a4:a0:e9:b4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjQ5MjYxMTAvBgNVBAUTKEU2NzFCQ0IyQkU5NUE2Qzg4NTI3MTIxRDg4MTVFOEJD
RjE4QUExRTIwHhcNMjYwMzI0MTkyNTUxWhcNMjYwMzMxMTkyNTUxWjAYMRYwFAYD
VQQDEw02OWMyZTUzZi00ZGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlmkBCkKgHrWk6irVKBzQYUZbaw3YNrgPs63wW8GkGqei7F1pKpVkW3CNoyEf
dPMI0hTkSDI9Tp30gDzJqxE9PIG+z7hNFRP/NoQy7gCTyZuxyNWMUP+y2ZG1K1H1
cYPO4DdcSdqNMx4EbyxrQIAGEVmUDMYfBaT6G+o2dMBonKxTUUieozWLIAMHP9G0
uf4fAX9mo53lzBA8k0yFegsUHronAcqmfzzNjt5GVQCpD6o4uGVG/IjwHfAd8+YW
iRk2lGJj1jiiijZqrLGRs5JzUBM+Aew8AaJOIGls+LKnCuHu3Y2EcWI0qQlovctO
i7TVC+9Wnztk0GThvVAJC2jDtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMhJbagc
WeXBu7o96UTNJqtQuYyTMB8GA1UdIwQYMBaAFOZxvLK+labIhScSHYgV6LzxiqHi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDkyNi9CMzg1NzhDNDgy
RDkxMUVBQjlGQ0QyODVDNEY5QUUwMi81bkc4c3I2VnBzaUZKeElkaUJYb3ZQR0tv
ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVuRzhzcjZWcHNpRkp4SWRpQlhvdlBHS29lSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NDkyNi9CMzg1NzhDNDgyRDkxMUVBQjlGQ0QyODVDNEY5QUUwMi81bkc4c3I2VnBz
aUZKeElkaUJYb3ZQR0tvZUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKWA6EMBEWC0L0Pgj91oR1mqqSEQd5gyT8YslmaB0u1YRQ/dUEv1RgVUtinqM
bOAQ37JtanrBJc4eo1NXSDFoy2zv6nko1sCfeFWkdc1TbZdNx2lwBJ0NCfUWV+ZN
2V4UTZGGxKNsi+6+bxI0HGeWFJmtzm+c+sa0ZSDSY3HlQ7gUzFM2q5qFgM2UWbjs
nMnevpsNgs09dsBPiG/9WijsKiI9BZYLitl+Razp2NiOE54kzskjhGj8A/20J/et
rBw6BJ70rCqpfhNJ0IA5cWy2zRaKNvg+Itm6WJMCkfs5lGyXj0cz/Czq5gFTWXMb
EtjuukUwUFyjVEW6Snc1pKDptA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:11:56 2026 by rpki-client