Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft
File:                     N5vU53MvGo0cOyItt3c8HBVBn0I.mft (raw, json)
Hash identifier:          NPRE+ALy4htrxxqet+e0ex6gYoQ2O4dnqx6pg5ZBIZ0=
Subject key identifier:   49:0A:D6:D9:D7:92:91:26:AC:67:2D:B8:73:F4:76:2E:C3:C4:E0:47
Authority key identifier: 37:9B:D4:E7:73:2F:1A:8D:1C:3B:22:2D:B7:77:3C:1C:15:41:9F:42
Certificate issuer:       /CN=A912527F/serialNumber=379BD4E7732F1A8D1C3B222DB7773C1C15419F42
Certificate serial:       032B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5vU53MvGo0cOyItt3c8HBVBn0I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft
Manifest number:          0321
Signing time:             Mon 11 May 2026 01:13:47 +0000
Manifest this update:     Mon 11 May 2026 01:13:46 +0000
Manifest next update:     Mon 18 May 2026 01:13:46 +0000
Files and hashes:         1: N5vU53MvGo0cOyItt3c8HBVBn0I.crl (hash: dndoomZ6FmKke0BLRcsg2++llGIblaVmC1WRY0hABsc=)
                          2: 2C257150DBCA11EF920CC12BC4F9AE02.roa (hash: pM24w6vKLtsWmfPCHn0P6r3fycQVCoXTQ9k3lCEASV8=)
                          3: BE0481A4EFA111ED87AD1F0BC4F9AE02.roa (hash: iOuORY+LnmvKLHgsVsbokwSlIctdoiKuQFeKpaNglE4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.crl
                          rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5vU53MvGo0cOyItt3c8HBVBn0I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 01:13:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 811 (0x32b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912527F, serialNumber=379BD4E7732F1A8D1C3B222DB7773C1C15419F42
        Validity
            Not Before: May 11 01:13:46 2026 GMT
            Not After : May 18 01:13:46 2026 GMT
        Subject: CN=6a012d4b-ee0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:3b:05:f5:72:a1:67:3a:55:ef:b6:af:cb:5d:
                    7b:e5:88:bf:60:95:86:bc:7f:34:44:ff:ca:4d:a4:
                    88:65:86:46:60:9f:46:bc:ec:32:6b:53:0f:70:c5:
                    e6:06:0b:63:8a:df:97:dd:49:76:48:0f:9a:c7:7c:
                    d6:bc:d7:c9:11:12:a3:65:df:7e:2a:94:6c:92:ea:
                    61:6b:59:21:eb:b4:1c:77:f1:7b:9e:aa:49:d2:e1:
                    1d:2c:d7:ec:73:72:e0:8e:c1:f9:a6:a5:05:03:fe:
                    42:2d:08:1c:35:5b:79:32:e6:70:27:cc:d3:0a:2c:
                    c8:87:03:47:2e:96:6f:08:31:8d:9a:81:44:fb:2e:
                    5a:ed:48:9a:c4:f7:42:ac:10:e6:87:0e:27:31:bf:
                    6b:bc:44:66:10:f0:e7:b6:e8:3d:22:40:5a:41:67:
                    ad:7d:c0:4b:8d:4c:5e:c9:d6:b8:9e:eb:42:44:03:
                    09:fe:6a:f6:24:dd:a9:6c:f9:77:50:1a:89:e5:5c:
                    37:ba:fe:46:6a:9d:32:6f:71:3a:0f:bc:48:85:7d:
                    04:04:cd:2a:47:67:62:b4:5d:38:05:33:f7:9d:bf:
                    eb:14:b9:44:fa:1e:0b:35:f9:5e:6f:40:20:b6:a7:
                    6b:db:d3:ce:47:37:c5:ed:94:b9:68:02:f0:22:9a:
                    dd:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:0A:D6:D9:D7:92:91:26:AC:67:2D:B8:73:F4:76:2E:C3:C4:E0:47
            X509v3 Authority Key Identifier:
                keyid:37:9B:D4:E7:73:2F:1A:8D:1C:3B:22:2D:B7:77:3C:1C:15:41:9F:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5vU53MvGo0cOyItt3c8HBVBn0I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:58:54:ec:3f:e2:62:03:f9:49:7a:4b:06:5f:bf:6f:61:8a:
         c1:7d:f3:d2:3e:04:32:5c:d2:8d:b4:32:08:0b:86:c5:f1:6c:
         1f:83:31:5c:97:05:f2:4f:1a:de:67:76:1e:17:b0:60:6f:b3:
         53:58:a5:e5:3f:95:74:d8:c0:87:e4:9a:e5:ec:43:f7:62:95:
         3e:64:24:55:8b:fd:4d:43:a0:3b:c4:d0:9e:54:44:8c:82:7b:
         e1:c5:63:58:94:98:d1:f2:55:0d:47:51:19:5d:99:10:2d:0f:
         e4:27:76:b3:8d:0c:7f:4d:1d:d9:af:73:41:19:6d:0d:f4:e2:
         c3:d9:b4:b0:a0:8e:e4:a8:60:5f:81:fb:92:b8:fc:08:1b:eb:
         2c:0e:0e:3b:bd:77:9d:fb:a0:33:1e:65:e5:f3:ac:ae:c9:db:
         e3:da:91:25:cc:0d:d8:1d:0e:ac:93:ef:49:f0:e0:2d:84:b8:
         63:4f:48:61:4a:18:7f:fd:55:2b:d1:57:45:8b:86:07:65:af:
         95:08:04:a7:e4:1b:77:0c:eb:af:31:ff:c5:86:9a:53:00:6f:
         36:7b:17:86:ce:b4:fa:84:72:46:19:c4:96:81:eb:37:13:5a:
         05:0e:a1:81:1b:05:cd:10:8a:ba:76:69:0f:62:e3:29:21:09:
         96:80:c0:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:52:28 2026 by rpki-client