Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.mft
File:                     5viFuMHmNK45nsq4FzoD245MEpQ.mft (raw, json)
Hash identifier:          /uQJlGjfyyauxKMwvd9hpqFuI/HZBeHImiRUcKvlknI=
Subject key identifier:   87:97:75:DE:9D:63:E3:4D:D2:DC:F4:2D:F5:DC:77:5D:C8:E1:D4:08
Authority key identifier: E6:F8:85:B8:C1:E6:34:AE:39:9E:CA:B8:17:3A:03:DB:8E:4C:12:94
Certificate issuer:       /CN=A914C4D7/serialNumber=E6F885B8C1E634AE399ECAB8173A03DB8E4C1294
Certificate serial:       0E76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5viFuMHmNK45nsq4FzoD245MEpQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.mft
Manifest number:          0E6A
Signing time:             Tue 24 Mar 2026 17:38:18 +0000
Manifest this update:     Tue 24 Mar 2026 17:38:18 +0000
Manifest next update:     Tue 31 Mar 2026 17:38:18 +0000
Files and hashes:         1: 5viFuMHmNK45nsq4FzoD245MEpQ.crl (hash: zbf7Yq740ub14ZPsAqYooBLOB7Dfv4FajHyRrwZGDOU=)
                          2: 1801797EB79211E986129837C4F9AE02.roa (hash: sTQEqI0Zd1ILFJY7IEMF9VrRKsGVR4RFEF9uTNFfGBo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.crl
                          rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5viFuMHmNK45nsq4FzoD245MEpQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 17:38:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3702 (0xe76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C4D7, serialNumber=E6F885B8C1E634AE399ECAB8173A03DB8E4C1294
        Validity
            Not Before: Mar 24 17:38:18 2026 GMT
            Not After : Mar 31 17:38:18 2026 GMT
        Subject: CN=69c2cc0a-fad1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:eb:27:45:0c:45:30:5f:28:80:7d:8f:34:e3:
                    f5:a1:88:cc:ee:76:b8:28:67:5c:16:5d:93:a4:db:
                    6b:74:6f:8f:ba:9f:b5:c9:4c:8d:79:c1:a3:4a:93:
                    4f:83:bd:0b:67:3c:94:c7:76:f8:fc:d2:6c:d7:36:
                    43:bc:62:19:e6:b1:dd:88:3c:ca:32:a3:76:40:de:
                    26:55:e3:9d:0b:4d:b1:0a:3a:14:e4:c1:b9:a0:84:
                    1f:9b:c3:1a:c2:a0:c5:98:60:c6:ec:1a:a5:f7:ca:
                    3f:4e:d3:5e:2d:6c:d9:7d:a4:21:9d:6d:ca:7c:a9:
                    f3:de:b6:12:98:9e:92:df:92:63:60:4e:8e:cc:23:
                    77:c8:b9:65:fd:a3:f9:e3:e7:a7:74:b4:ea:3e:c4:
                    a2:b6:67:ac:bf:f5:b3:3b:fa:20:18:00:fc:f0:c6:
                    5a:0b:86:62:d0:d9:7a:eb:6b:2b:38:16:46:61:cb:
                    b5:cc:fb:71:9c:83:c3:79:90:e5:4d:dd:da:ca:66:
                    fc:1c:ad:3a:45:dc:3e:de:20:94:35:b4:a8:c5:f4:
                    38:9c:31:71:06:0d:89:83:db:1b:a1:93:6c:71:19:
                    9f:f5:f4:a9:e1:b6:fb:e5:ba:b8:77:24:62:db:c9:
                    2b:b6:17:4f:a2:01:ca:b4:91:7b:31:e4:f0:4a:6e:
                    d8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:97:75:DE:9D:63:E3:4D:D2:DC:F4:2D:F5:DC:77:5D:C8:E1:D4:08
            X509v3 Authority Key Identifier:
                keyid:E6:F8:85:B8:C1:E6:34:AE:39:9E:CA:B8:17:3A:03:DB:8E:4C:12:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5viFuMHmNK45nsq4FzoD245MEpQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:ce:23:a9:50:ee:9e:66:6e:d5:34:fc:a1:37:bb:d4:0d:5b:
         ba:1f:45:19:9f:ff:0c:ba:9d:cd:ec:32:7f:ed:f8:fa:e8:b1:
         ee:96:83:ed:61:b5:4f:54:a7:cd:01:af:19:2a:ed:9c:5a:eb:
         55:98:8c:25:af:70:e4:c6:47:84:0c:f0:dd:05:ff:1f:d2:f6:
         f8:0f:c5:50:1e:7d:28:1d:cc:29:7d:3b:8c:e0:c0:6d:9d:36:
         95:32:e1:bc:c0:21:14:81:71:fb:cd:a2:e5:85:fa:34:96:af:
         ef:5a:cb:f4:94:15:56:8e:19:50:a7:af:9f:a5:40:b6:47:cd:
         bf:49:32:91:d3:25:20:53:d2:23:7f:26:ca:55:98:ba:77:1b:
         09:5e:20:cf:88:07:be:fd:ef:fc:59:67:74:77:be:a5:6d:42:
         ca:66:90:b0:6c:83:d1:3b:60:35:48:14:f2:0b:0f:12:7a:e8:
         a3:58:ef:e2:d6:f3:a6:d3:c4:fb:80:7c:82:aa:16:74:34:96:
         6c:bb:db:40:6c:fc:36:85:12:64:7f:54:a5:06:0a:1e:7b:d9:
         99:f6:39:df:90:65:fb:9b:54:ba:b8:b4:32:2b:92:55:8c:75:
         3f:d8:81:94:2b:49:ca:13:ab:75:fd:69:c3:40:35:d2:54:46:
         3d:e8:24:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:29:41 2026 by rpki-client