Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.mft
File:                     otDn34iradtuBZowZOTdweb8nRk.mft (raw, json)
Hash identifier:          SnmlqWwXR+gl7jbneuA30bIXAqYSSQ/EKtNuDe1fbvY=
Subject key identifier:   7B:90:44:8C:BC:47:0D:B8:DE:86:60:85:7F:FB:79:15:F5:BC:33:07
Authority key identifier: A2:D0:E7:DF:88:AB:69:DB:6E:05:9A:30:64:E4:DD:C1:E6:FC:9D:19
Certificate issuer:       /CN=A913D2D8/serialNumber=A2D0E7DF88AB69DB6E059A3064E4DDC1E6FC9D19
Certificate serial:       5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otDn34iradtuBZowZOTdweb8nRk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.mft
Manifest number:          5A
Signing time:             Mon 11 May 2026 08:17:52 +0000
Manifest this update:     Mon 11 May 2026 08:17:52 +0000
Manifest next update:     Mon 18 May 2026 08:17:52 +0000
Files and hashes:         1: otDn34iradtuBZowZOTdweb8nRk.crl (hash: tXxRNUjdSLSVl9Db/xe201q0MkD8lOzRQ/MeffK3xW0=)
                          2: 86CCDF8EC91411F085F4A61BC4F9AE02.roa (hash: TtYj2sjHiscSoHGcXukyvA6H2jH+qg3mM5AVrWsmoS8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.crl
                          rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otDn34iradtuBZowZOTdweb8nRk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:17:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D2D8, serialNumber=A2D0E7DF88AB69DB6E059A3064E4DDC1E6FC9D19
        Validity
            Not Before: May 11 08:17:52 2026 GMT
            Not After : May 18 08:17:52 2026 GMT
        Subject: CN=6a0190b0-451c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e1:8c:84:af:52:80:7b:c8:75:47:cc:3b:ec:
                    1c:dc:f3:b9:8d:e2:5a:c6:9e:4d:5c:87:7c:17:d8:
                    e4:73:8f:38:af:7a:b0:3a:dd:e3:93:c3:07:21:bf:
                    6d:74:8a:0c:be:4a:92:e4:c1:dc:2a:c8:d6:13:fe:
                    5e:64:5c:61:2f:be:0c:33:3d:3e:a2:36:d7:8a:a8:
                    93:fc:42:6c:19:61:18:9c:7c:41:18:4f:de:ac:2c:
                    ee:1d:19:25:14:31:8f:5f:98:f8:7b:b9:6b:2e:77:
                    5b:7a:8c:bc:22:e0:38:db:5a:83:b4:a4:a5:8c:7d:
                    22:2a:5f:cb:6d:47:c3:68:9f:11:67:48:44:fb:d9:
                    06:26:f6:02:b1:c8:2c:6e:7b:d0:ee:71:23:f4:06:
                    1b:7d:b6:29:8c:f2:09:32:81:37:8f:9e:7f:ee:75:
                    d7:a9:cb:ac:46:64:14:ff:f1:e9:ac:8f:92:a4:57:
                    f1:bf:13:1a:dd:d8:36:16:57:22:66:76:f6:49:42:
                    69:c2:f4:21:ab:18:26:ec:f2:4d:6f:02:0f:a3:da:
                    b7:2a:9d:ab:b2:49:e4:f8:8f:84:e6:e5:8a:a4:06:
                    c2:07:3c:f0:ed:af:bc:4e:cf:8a:0c:fc:d0:f1:bc:
                    a5:a9:d4:db:5e:4e:33:78:f4:19:2d:ce:51:e0:42:
                    c0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:90:44:8C:BC:47:0D:B8:DE:86:60:85:7F:FB:79:15:F5:BC:33:07
            X509v3 Authority Key Identifier:
                keyid:A2:D0:E7:DF:88:AB:69:DB:6E:05:9A:30:64:E4:DD:C1:E6:FC:9D:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otDn34iradtuBZowZOTdweb8nRk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:e4:5b:4d:df:23:08:6e:34:18:d2:47:86:75:f0:1c:ba:c6:
         6e:b3:ba:4a:91:fd:75:53:83:2e:3e:5f:f8:3e:57:48:da:75:
         25:fc:2a:5a:2f:8f:cd:d5:ea:1a:db:89:08:be:9c:72:51:6d:
         d4:bf:fe:52:cf:c3:f1:34:92:f8:74:2e:62:94:f6:c6:04:61:
         cb:97:a6:d3:ad:83:d4:3d:ac:9b:af:02:a3:f1:b6:63:08:bf:
         56:55:3c:aa:75:84:13:d4:a1:ce:88:d9:45:f8:d5:57:9f:aa:
         73:c2:68:62:de:e8:d9:88:7b:e5:d7:a4:1a:28:00:dd:e8:86:
         22:49:f4:58:20:b5:16:5e:f6:be:94:f4:1b:8b:7c:57:9a:9d:
         28:e2:cf:ab:29:44:47:11:ce:17:67:12:a8:4d:46:79:15:a2:
         0a:b7:63:f0:9e:cc:37:a4:42:83:ae:92:0b:34:a2:e2:3d:58:
         41:cb:0d:e8:4e:1c:3b:94:1c:e8:7a:c0:8c:c5:47:7c:33:13:
         7e:44:11:13:44:da:90:29:e1:a5:d7:b5:37:f2:db:1b:dc:b8:
         c5:09:b7:e2:99:bd:d5:a9:37:e5:1f:cb:bf:ca:73:2f:f9:db:
         45:a7:f1:3b:c7:34:39:43:33:d8:41:52:22:a4:0d:10:39:4e:
         26:7f:b7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:23:47 2026 by rpki-client