Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912ACD6/56BFFE22001211F1978FFDC9406F56BC/5sF0BEUF4LBMHTBYk7ecuB_qun0.mft
File:                     5sF0BEUF4LBMHTBYk7ecuB_qun0.mft (raw, json)
Hash identifier:          Y0a02cYWnwa8jAwPtjcIQwDQ7h7ECHmtjTt2fYZPFLU=
Subject key identifier:   9A:21:E1:9B:22:B7:C7:F3:CE:4F:F9:38:58:BB:8B:7D:C0:7B:02:FB
Authority key identifier: E6:C1:74:04:45:05:E0:B0:4C:1D:30:58:93:B7:9C:B8:1F:EA:BA:7D
Certificate issuer:       /CN=A912ACD6/serialNumber=E6C174044505E0B04C1D305893B79CB81FEABA7D
Certificate serial:       39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5sF0BEUF4LBMHTBYk7ecuB_qun0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912ACD6/56BFFE22001211F1978FFDC9406F56BC/5sF0BEUF4LBMHTBYk7ecuB_qun0.mft
Manifest number:          37
Signing time:             Wed 13 May 2026 08:44:30 +0000
Manifest this update:     Wed 13 May 2026 08:44:30 +0000
Manifest next update:     Wed 20 May 2026 08:44:30 +0000
Files and hashes:         1: 5sF0BEUF4LBMHTBYk7ecuB_qun0.crl (hash: LyEtd3p1aBBZK8s9uWyZdlbdTfgac3uhUnoQ+6R729E=)
                          2: 8A8A7DFE001211F1B63766CA406F56BC.roa (hash: yCqHIUEE3e4z0qNBb008BgOrOVMaTHnm3rYi25K/1gA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912ACD6/56BFFE22001211F1978FFDC9406F56BC/5sF0BEUF4LBMHTBYk7ecuB_qun0.crl
                          rsync://rpki.apnic.net/member_repository/A912ACD6/56BFFE22001211F1978FFDC9406F56BC/5sF0BEUF4LBMHTBYk7ecuB_qun0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5sF0BEUF4LBMHTBYk7ecuB_qun0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 08:44:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912ACD6, serialNumber=E6C174044505E0B04C1D305893B79CB81FEABA7D
        Validity
            Not Before: May 13 08:44:30 2026 GMT
            Not After : May 20 08:44:30 2026 GMT
        Subject: CN=6a0439ee-7ea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b9:92:ef:c7:fb:71:1a:e6:d9:4c:34:30:ff:
                    66:ea:29:99:9b:10:5e:10:64:ed:22:5c:2a:0e:1b:
                    47:17:58:e3:ae:1c:f5:74:e2:8e:15:f4:63:e9:68:
                    6f:cd:78:3f:52:f5:fb:d2:61:31:e3:7f:e3:e0:b6:
                    b4:23:82:6d:7a:d8:b2:7e:e6:b3:58:73:7e:68:bd:
                    f6:95:05:aa:fc:75:31:21:36:3a:4f:ca:f2:5f:9e:
                    cd:4a:f9:a3:f8:79:9b:ab:3b:7e:f5:25:04:aa:ec:
                    92:ed:b5:3d:98:b4:44:fa:37:a8:ff:ec:c0:ae:79:
                    a2:17:c3:8a:d5:65:8d:5f:6a:d2:ed:76:54:a6:66:
                    c0:94:72:88:f1:8d:e5:a7:47:a7:f5:9d:a1:58:ca:
                    44:d6:c9:db:28:c5:29:66:f3:7d:17:9b:05:b4:78:
                    50:42:6e:95:da:57:36:93:30:24:a3:7e:10:36:58:
                    3e:83:3a:0f:91:7c:a0:74:55:ae:70:27:05:82:2a:
                    98:0d:fb:53:06:1c:32:3a:d8:fd:1a:c2:f0:55:93:
                    da:73:c4:76:a6:08:1b:a2:94:b3:ba:ba:fa:c6:88:
                    cc:0a:e8:0c:9c:df:9c:b7:5b:a3:17:9d:08:25:a2:
                    dd:3a:64:b2:79:f5:46:05:6d:db:ae:47:c9:e6:f1:
                    6f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:21:E1:9B:22:B7:C7:F3:CE:4F:F9:38:58:BB:8B:7D:C0:7B:02:FB
            X509v3 Authority Key Identifier:
                keyid:E6:C1:74:04:45:05:E0:B0:4C:1D:30:58:93:B7:9C:B8:1F:EA:BA:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912ACD6/56BFFE22001211F1978FFDC9406F56BC/5sF0BEUF4LBMHTBYk7ecuB_qun0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5sF0BEUF4LBMHTBYk7ecuB_qun0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912ACD6/56BFFE22001211F1978FFDC9406F56BC/5sF0BEUF4LBMHTBYk7ecuB_qun0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:e3:3f:ae:51:ef:df:45:6e:f3:3f:e1:da:a7:34:de:d9:a6:
         2a:a6:07:2a:9e:ac:78:8f:76:1b:44:22:ad:fa:23:0d:c5:92:
         e8:e0:54:b3:b7:74:67:4e:67:92:42:b6:c0:c2:17:4e:6f:f6:
         2d:2d:eb:c1:59:aa:b9:99:73:70:90:5a:04:f8:a5:d3:d6:37:
         be:a0:9e:a0:d2:e1:e4:8a:08:00:16:fc:ac:97:45:36:9f:90:
         b6:cc:06:21:0c:46:f9:26:39:a1:c5:79:38:36:4e:88:11:88:
         1f:d3:49:31:9f:7b:6d:bf:9f:a6:80:49:29:d4:6a:54:62:65:
         8f:f9:37:7e:34:82:83:b2:96:87:c5:d4:84:e2:f9:60:d1:d8:
         ea:6c:70:f5:25:59:76:55:90:bd:3f:9a:73:b4:50:a9:f8:fa:
         af:c9:e4:2f:0d:05:ef:07:f2:ec:a3:77:0e:0b:f7:20:51:0e:
         e8:11:c2:bb:75:38:c8:f2:61:2d:8f:10:a8:24:b3:cd:51:d7:
         d0:73:ad:6b:1a:f1:26:b4:70:ff:68:d4:19:33:ba:15:b8:df:
         10:66:44:fa:9e:65:d1:eb:54:bf:83:42:4d:cc:48:ca:5f:3b:
         38:65:f3:6c:96:5d:5e:3b:a9:89:af:75:a9:4d:5f:51:0a:e8:
         60:11:89:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:38:16 2026 by rpki-client