Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft
File:                     5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft (raw, json)
Hash identifier:          +i1ir9vtzn7EWJz1Kn7GgrC7EjocB3SwIY6AHpaVZ+0=
Subject key identifier:   1D:F7:ED:23:E6:A0:F9:A1:50:C8:DA:66:97:3B:79:04:3B:7F:88:9C
Authority key identifier: E6:1B:EC:13:92:86:32:83:DC:99:E2:FF:93:15:75:A3:18:1C:28:18
Certificate issuer:       /CN=A91367E0/serialNumber=E61BEC1392863283DC99E2FF931575A3181C2818
Certificate serial:       01ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft
Manifest number:          01E5
Signing time:             Wed 25 Mar 2026 02:43:41 +0000
Manifest this update:     Wed 25 Mar 2026 02:43:41 +0000
Manifest next update:     Wed 01 Apr 2026 02:43:41 +0000
Files and hashes:         1: 5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl (hash: lqmR5p0taRGYqJiQNOeghBbAu6BILozUgEBi1IETjXk=)
                          2: 57F3935045A011EEA9A5215EC4F9AE02.roa (hash: XPkWkAY8hF0ZdRtMqLWpaSb6yUY+HHgjgaF8oDjcn2I=)
                          3: 444EB35A459D11EEA8758641C4F9AE02.roa (hash: bH2bIyMDuideJqm0NfLpBJfH2DEowneIhtJKhXbqlSQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl
                          rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:43:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 493 (0x1ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91367E0, serialNumber=E61BEC1392863283DC99E2FF931575A3181C2818
        Validity
            Not Before: Mar 25 02:43:41 2026 GMT
            Not After : Apr  1 02:43:41 2026 GMT
        Subject: CN=69c34bdd-a32e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:94:c5:7b:b8:d7:96:9b:bc:2e:6d:85:94:6e:
                    8b:02:f1:72:1f:00:de:db:aa:60:bc:f0:bc:31:0d:
                    2e:4b:b0:49:f2:13:e5:8a:a5:a2:52:41:9e:6b:9a:
                    71:98:32:90:b2:61:68:a0:75:72:63:81:e8:8e:d4:
                    0d:3e:ef:50:d2:3f:51:f5:14:01:fd:ba:b4:1e:89:
                    0d:3f:0c:8e:69:fa:16:92:13:15:75:98:e9:d5:0f:
                    85:1a:58:d6:80:ca:76:53:dc:35:6d:1c:ba:ce:ef:
                    09:68:7d:59:00:83:f8:24:91:f6:c1:16:60:cd:03:
                    03:aa:08:9d:b0:16:f0:55:d2:7f:0a:12:80:6a:73:
                    5a:06:6d:f8:db:6b:83:68:60:d9:23:82:19:61:62:
                    1b:a6:0b:4f:c7:3e:8f:8c:13:b2:03:77:9d:d2:5d:
                    ba:9d:8c:40:78:54:c3:43:ca:de:34:1a:03:06:72:
                    68:42:19:3e:bb:0a:6e:5f:f0:f6:e0:81:48:e9:17:
                    cf:dd:59:99:8d:39:a0:12:41:64:2e:5e:e0:bd:fb:
                    f3:08:bd:51:b9:0a:f5:eb:36:45:67:a2:fc:c3:f3:
                    8c:e3:a6:56:12:04:2d:cc:7a:a3:9f:59:02:5f:c1:
                    f3:b1:e0:c8:f5:02:2d:93:d9:e3:2e:41:e6:53:f8:
                    be:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:F7:ED:23:E6:A0:F9:A1:50:C8:DA:66:97:3B:79:04:3B:7F:88:9C
            X509v3 Authority Key Identifier:
                keyid:E6:1B:EC:13:92:86:32:83:DC:99:E2:FF:93:15:75:A3:18:1C:28:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:9e:b4:53:4a:f3:b7:98:71:5d:30:39:cb:5c:ed:da:33:3a:
         45:b6:da:4b:ef:66:d7:8b:bc:8f:80:30:c1:f2:87:3d:0a:0a:
         11:ca:2f:2b:fb:ce:48:46:cc:aa:54:cc:e6:fb:fd:46:f9:b5:
         92:7c:ef:ce:d1:82:51:89:3c:2a:a7:21:fe:50:bf:54:3f:6c:
         c4:98:5c:43:76:0d:e1:9c:02:86:02:59:6b:06:d3:fa:1a:f9:
         49:c0:b4:17:85:27:e0:23:35:1e:31:27:c7:7b:dc:3a:29:0d:
         9c:e1:92:8d:fe:62:c7:21:65:91:6f:ef:d8:f8:45:c5:82:00:
         15:74:5d:b3:ff:c5:2e:b2:fd:40:9e:1b:06:8f:2d:cb:ad:8b:
         f9:03:5b:ca:13:1c:f0:04:d5:b2:3e:02:1c:cc:dd:f8:b4:8c:
         79:23:05:4f:62:e0:f0:d4:4f:e4:c9:0a:89:5e:57:07:f0:55:
         15:20:ec:25:49:98:b9:3c:ee:31:52:c7:7f:8f:63:92:87:28:
         11:7f:dc:23:c3:0b:3c:99:00:30:59:9c:b3:11:5f:fe:0e:31:
         93:55:0c:c8:0b:b9:ae:36:9c:85:b3:ec:49:c7:77:be:55:92:
         49:40:51:5d:02:e3:39:43:8f:84:6c:ff:4b:98:15:52:21:96:
         a2:5e:03:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:58:14 2026 by rpki-client