Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91293F4/1F695EEC8E7F11EAA9584C67C4F9AE02/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.mft
File:                     5qVLrX0XbkRHqelPJEgDJ8G0DJ4.mft (raw, json)
Hash identifier:          lMiMdbzGqR7yUocMBKcVkNr2jIJ3UeXzAWwdllPqPH4=
Subject key identifier:   E6:34:DB:16:8D:BC:B6:C9:F6:58:15:05:B9:73:25:36:A1:3F:9B:BA
Authority key identifier: E6:A5:4B:AD:7D:17:6E:44:47:A9:E9:4F:24:48:03:27:C1:B4:0C:9E
Certificate issuer:       /CN=A91293F4/serialNumber=E6A54BAD7D176E4447A9E94F24480327C1B40C9E
Certificate serial:       0A54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91293F4/1F695EEC8E7F11EAA9584C67C4F9AE02/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.mft
Manifest number:          0A3E
Signing time:             Tue 12 May 2026 19:46:34 +0000
Manifest this update:     Tue 12 May 2026 19:46:34 +0000
Manifest next update:     Tue 19 May 2026 19:46:34 +0000
Files and hashes:         1: 5qVLrX0XbkRHqelPJEgDJ8G0DJ4.crl (hash: cE4hw4ovz6AbClWB2CgXvLYk5B+WDxu00+ZN72SKT4w=)
                          2: 3E730FA28E8111EAB2038B6BC4F9AE02.roa (hash: vSaXKWRBXUPLPn7+Q/yDSX8ApY9DTLpiFPD4ogaWMGI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91293F4/1F695EEC8E7F11EAA9584C67C4F9AE02/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.crl
                          rsync://rpki.apnic.net/member_repository/A91293F4/1F695EEC8E7F11EAA9584C67C4F9AE02/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:46:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2644 (0xa54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91293F4, serialNumber=E6A54BAD7D176E4447A9E94F24480327C1B40C9E
        Validity
            Not Before: May 12 19:46:34 2026 GMT
            Not After : May 19 19:46:34 2026 GMT
        Subject: CN=6a03839a-f82b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:82:69:9b:ae:89:4c:8f:7f:2c:f3:21:d7:91:
                    09:bf:4b:4d:55:51:98:2a:cc:13:a8:7a:f4:c9:5f:
                    22:7b:e6:88:6b:55:3c:56:f7:13:5c:58:f0:4d:55:
                    35:6d:fb:a2:6f:6e:04:8c:ea:61:cd:b2:0b:af:1b:
                    f1:90:37:75:00:2c:d5:2a:15:b8:70:93:c1:32:7d:
                    19:2d:ce:9d:7e:d1:48:46:5e:56:2a:88:cb:76:e6:
                    a4:6f:a7:34:3a:25:0b:1a:23:60:b5:12:6d:2b:62:
                    ed:17:76:39:f6:ff:69:46:d6:7a:66:b6:1b:3f:c3:
                    99:dd:53:d1:cc:f0:85:4e:47:f0:72:76:7e:9d:c2:
                    fb:d1:1d:2c:e4:d5:7a:2b:7e:a1:92:d3:50:40:63:
                    c9:45:e3:a1:3a:4c:d7:be:02:dd:2f:59:d4:c3:28:
                    be:22:76:ef:ca:17:52:80:02:5e:8d:86:a1:65:b0:
                    d8:81:87:43:e3:14:3e:1d:1a:a1:f3:8e:52:ce:fb:
                    f0:14:55:1d:11:fb:85:ee:f5:dc:c3:0c:c6:75:d5:
                    b7:61:04:e9:ba:c7:82:03:a1:cd:23:5e:a8:55:83:
                    c4:e9:f9:aa:ca:6c:ac:47:54:e5:d1:23:b3:a6:30:
                    ba:03:d0:90:f5:c4:76:66:af:9f:30:fb:9c:a7:d3:
                    a6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:34:DB:16:8D:BC:B6:C9:F6:58:15:05:B9:73:25:36:A1:3F:9B:BA
            X509v3 Authority Key Identifier:
                keyid:E6:A5:4B:AD:7D:17:6E:44:47:A9:E9:4F:24:48:03:27:C1:B4:0C:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91293F4/1F695EEC8E7F11EAA9584C67C4F9AE02/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91293F4/1F695EEC8E7F11EAA9584C67C4F9AE02/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:5f:71:e0:47:eb:87:05:07:10:3f:d3:2b:93:4b:b4:dd:0d:
         f2:5c:6c:96:fe:07:b9:da:55:72:c5:dd:57:5c:10:28:f3:5a:
         1a:0e:58:e9:65:ea:49:6f:de:21:4d:3b:11:3e:c5:78:b1:22:
         a9:9c:f0:82:be:73:f9:ec:95:6a:de:22:5d:9f:9c:17:ba:60:
         8e:cc:52:9c:0c:f0:45:53:e1:04:7b:f8:6a:c3:b3:0d:f1:bb:
         2f:8a:32:e8:b2:6d:b6:4d:d6:22:67:89:4d:55:a5:50:19:dc:
         fb:a5:61:de:fe:87:50:19:b5:6e:0c:ed:b1:cf:a2:98:f6:fa:
         b4:b6:b9:c8:b0:7f:3a:a2:d3:72:4f:6c:a0:f4:9c:e3:90:e5:
         4b:13:fe:d4:5f:df:b2:89:d8:7e:f6:29:3d:0e:28:85:e4:81:
         8c:28:66:82:90:3a:64:a0:71:f1:8a:42:34:c3:77:cd:ae:49:
         b6:ab:2c:d6:f2:45:fa:b6:b4:6a:f6:4d:6f:54:e7:2d:2c:3a:
         e1:be:0e:1c:9e:35:16:32:91:5c:d3:48:7d:71:2a:37:ee:66:
         8c:a2:e4:a3:00:e7:75:aa:78:49:b4:93:49:22:20:6f:c3:80:
         7c:bd:c5:72:64:71:ce:50:41:4b:15:b8:6f:5e:d7:7e:75:17:
         bb:49:3c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:48:43 2026 by rpki-client