Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912ACD6/56BFFE22001211F1978FFDC9406F56BC/5sF0BEUF4LBMHTBYk7ecuB_qun0.mft
File:                     5sF0BEUF4LBMHTBYk7ecuB_qun0.mft (raw, json)
Hash identifier:          2141e/4MlszjpqQc6fvqIAj7BZlBdsaWEpCrcOXsqQI=
Subject key identifier:   B7:86:A4:7E:AF:14:59:03:DE:3A:8F:7D:81:A9:ED:82:B9:39:A4:D6
Authority key identifier: E6:C1:74:04:45:05:E0:B0:4C:1D:30:58:93:B7:9C:B8:1F:EA:BA:7D
Certificate issuer:       /CN=A912ACD6/serialNumber=E6C174044505E0B04C1D305893B79CB81FEABA7D
Certificate serial:       20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5sF0BEUF4LBMHTBYk7ecuB_qun0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912ACD6/56BFFE22001211F1978FFDC9406F56BC/5sF0BEUF4LBMHTBYk7ecuB_qun0.mft
Manifest number:          1E
Signing time:             Wed 25 Mar 2026 08:05:38 +0000
Manifest this update:     Wed 25 Mar 2026 08:05:37 +0000
Manifest next update:     Wed 01 Apr 2026 08:05:37 +0000
Files and hashes:         1: 5sF0BEUF4LBMHTBYk7ecuB_qun0.crl (hash: yaaRQXLxJLK1PKqa1BpE1JlTlXKTkgoRHnDl7y1oj+I=)
                          2: 8A8A7DFE001211F1B63766CA406F56BC.roa (hash: yCqHIUEE3e4z0qNBb008BgOrOVMaTHnm3rYi25K/1gA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912ACD6/56BFFE22001211F1978FFDC9406F56BC/5sF0BEUF4LBMHTBYk7ecuB_qun0.crl
                          rsync://rpki.apnic.net/member_repository/A912ACD6/56BFFE22001211F1978FFDC9406F56BC/5sF0BEUF4LBMHTBYk7ecuB_qun0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5sF0BEUF4LBMHTBYk7ecuB_qun0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:05:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912ACD6, serialNumber=E6C174044505E0B04C1D305893B79CB81FEABA7D
        Validity
            Not Before: Mar 25 08:05:37 2026 GMT
            Not After : Apr  1 08:05:37 2026 GMT
        Subject: CN=69c39752-836c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:aa:01:8e:8b:a5:b6:e9:87:d1:14:94:31:96:
                    95:c9:69:b5:94:26:ff:c1:31:8a:68:02:1e:5b:4b:
                    21:10:1e:27:d9:dd:75:49:a7:cc:5f:93:ff:4f:6c:
                    f8:31:1e:6d:5a:72:f2:4d:cf:2e:90:af:34:a1:9a:
                    5c:88:57:c4:a3:62:fc:cf:76:cd:46:dc:64:6b:96:
                    0d:bf:7e:c7:35:63:59:a9:68:e2:45:a7:35:df:c2:
                    6c:47:59:6b:32:33:db:4f:a8:ea:e6:e6:2a:42:2c:
                    48:b1:5f:94:02:3b:0f:ba:13:35:58:1b:1b:9e:76:
                    6c:b8:8d:5e:cd:c0:fe:a4:29:29:a9:ac:b4:23:5e:
                    80:b9:d2:a0:a0:0c:70:25:8e:f4:3a:a6:f5:54:28:
                    8b:e3:93:72:3b:cd:23:b9:ed:85:36:b0:31:c1:10:
                    c2:a7:6b:82:32:80:1f:db:42:4d:0a:ed:4e:e5:b3:
                    39:c5:fd:ee:73:75:f2:0b:eb:6d:af:6c:bd:ce:b0:
                    41:55:2a:2e:a2:d7:38:5c:8f:aa:52:db:82:32:77:
                    e2:69:2b:1a:67:34:02:87:5f:94:a0:9c:5f:60:bc:
                    00:63:e0:22:a3:88:00:84:91:2a:18:a2:a1:f4:9e:
                    8b:b4:93:f8:f3:e8:7e:60:e2:a1:b7:5f:58:38:f3:
                    61:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:86:A4:7E:AF:14:59:03:DE:3A:8F:7D:81:A9:ED:82:B9:39:A4:D6
            X509v3 Authority Key Identifier:
                keyid:E6:C1:74:04:45:05:E0:B0:4C:1D:30:58:93:B7:9C:B8:1F:EA:BA:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912ACD6/56BFFE22001211F1978FFDC9406F56BC/5sF0BEUF4LBMHTBYk7ecuB_qun0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5sF0BEUF4LBMHTBYk7ecuB_qun0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912ACD6/56BFFE22001211F1978FFDC9406F56BC/5sF0BEUF4LBMHTBYk7ecuB_qun0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:8c:6c:84:7a:cf:81:d7:d8:7a:2b:c4:fd:b7:b4:82:ea:a8:
         84:9b:f5:64:a2:66:d6:60:05:11:f6:1f:b1:ae:c7:1e:fd:01:
         e1:78:71:b4:24:3c:e4:de:7a:8a:0a:c8:aa:98:34:6b:1a:97:
         b3:2c:46:8f:0b:6c:44:f3:f1:b8:88:5d:69:22:b5:19:3c:89:
         df:85:08:0c:ef:53:cb:af:dd:dc:df:2a:12:fa:08:1f:fb:f7:
         a7:91:0e:a4:81:c9:89:b0:e8:61:a5:11:04:62:81:a8:fd:11:
         06:0d:2b:e3:7d:26:df:61:6f:6d:97:73:96:ae:5c:2f:f1:63:
         8c:4c:9c:d8:57:75:90:fd:52:5a:1b:b7:e3:f2:8c:af:f1:51:
         83:2d:83:74:a6:49:3e:cf:d6:30:2e:a2:df:57:49:de:44:62:
         48:1b:dd:87:a9:a8:67:d8:9a:a3:59:63:79:2e:d5:be:71:2b:
         4b:23:ae:11:4a:eb:eb:34:b8:d5:5c:43:11:4e:96:b8:59:4a:
         a0:a8:65:a9:8f:80:8c:db:f1:17:3b:4f:64:50:8d:6a:98:e8:
         9b:df:ab:09:45:78:fb:a1:ec:a6:3c:e0:bf:be:d7:dc:bc:30:
         9e:51:4c:df:0d:80:49:78:7a:df:20:79:f5:84:56:0b:9a:50:
         73:37:25:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:28:11 2026 by rpki-client