Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/E5bqlAlF_CBf8uPRsr4bkNcsxek.mft
File:                     E5bqlAlF_CBf8uPRsr4bkNcsxek.mft (raw, json)
Hash identifier:          LH7wFNKFxUXgRePibDQLZeMerraHv7Kexp5W4BaMS5U=
Subject key identifier:   E9:F6:5A:E8:2F:F0:A2:4B:BF:D8:C1:4B:4F:2D:BA:3B:61:61:BF:84
Authority key identifier: 13:96:EA:94:09:45:FC:20:5F:F2:E3:D1:B2:BE:1B:90:D7:2C:C5:E9
Certificate issuer:       /CN=A914DF56/serialNumber=1396EA940945FC205FF2E3D1B2BE1B90D72CC5E9
Certificate serial:       05BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5bqlAlF_CBf8uPRsr4bkNcsxek.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/E5bqlAlF_CBf8uPRsr4bkNcsxek.mft
Manifest number:          05AF
Signing time:             Sun 10 May 2026 23:13:54 +0000
Manifest this update:     Sun 10 May 2026 23:13:54 +0000
Manifest next update:     Sun 17 May 2026 23:13:54 +0000
Files and hashes:         1: E5bqlAlF_CBf8uPRsr4bkNcsxek.crl (hash: AhXDOaf/Y4dT68E3iYt6aIeHBZiuFwowX9oL5dcKUpc=)
                          2: EB17A8C2152511ECAD055780C4F9AE02.roa (hash: 9iwkBoSghTED5G7Gmn3J7760ui7964gnoNzuIo64Xw4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/E5bqlAlF_CBf8uPRsr4bkNcsxek.crl
                          rsync://rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/E5bqlAlF_CBf8uPRsr4bkNcsxek.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5bqlAlF_CBf8uPRsr4bkNcsxek.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 17 May 2026 23:13:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1466 (0x5ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DF56, serialNumber=1396EA940945FC205FF2E3D1B2BE1B90D72CC5E9
        Validity
            Not Before: May 10 23:13:54 2026 GMT
            Not After : May 17 23:13:54 2026 GMT
        Subject: CN=6a011132-6672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:70:9d:0e:f1:a9:24:0b:e7:54:19:d4:fe:7a:
                    b2:65:3f:a1:c8:9a:8e:bb:df:83:4d:10:d2:c2:f0:
                    d5:c2:7a:8f:0c:8e:8e:56:e0:8e:9e:66:1e:f1:59:
                    f2:45:ac:8e:52:e0:b6:c2:41:a3:96:92:02:d1:76:
                    5a:ee:58:35:a5:6d:ae:47:d5:28:ef:5e:27:dd:8b:
                    1c:86:26:d7:3d:6c:b3:40:f6:52:9e:a0:4c:94:ce:
                    b1:eb:b2:57:99:18:1f:75:95:da:90:49:56:61:7b:
                    a4:c2:12:3e:a0:0d:3c:c9:71:00:76:5b:51:62:c4:
                    c2:83:e7:8f:db:f9:34:77:06:23:c9:8c:32:71:11:
                    2f:08:60:bc:05:9e:67:38:74:35:bd:71:84:40:5d:
                    dd:c1:82:68:a3:74:6c:3d:eb:50:34:69:f7:9b:25:
                    c5:29:ff:8d:bc:d4:01:6b:c1:7a:6e:e6:cf:1b:13:
                    88:a3:d6:d3:9c:54:41:bc:34:26:a5:b9:10:e3:4c:
                    7f:b2:d0:9c:09:c5:2a:e2:81:c6:0d:8d:09:2e:8b:
                    30:48:c9:05:2f:23:dc:e1:23:e4:7e:23:9e:38:64:
                    69:16:22:08:16:57:11:5f:4b:21:08:26:a7:56:25:
                    da:81:a0:cd:2e:0d:91:52:73:8c:56:60:e8:f0:b2:
                    4e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:F6:5A:E8:2F:F0:A2:4B:BF:D8:C1:4B:4F:2D:BA:3B:61:61:BF:84
            X509v3 Authority Key Identifier:
                keyid:13:96:EA:94:09:45:FC:20:5F:F2:E3:D1:B2:BE:1B:90:D7:2C:C5:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/E5bqlAlF_CBf8uPRsr4bkNcsxek.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5bqlAlF_CBf8uPRsr4bkNcsxek.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/E5bqlAlF_CBf8uPRsr4bkNcsxek.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:1a:cd:34:48:2c:7e:a2:eb:a5:75:df:95:92:d6:b1:eb:41:
         46:9e:b4:a4:1e:fd:8b:ac:73:b3:9c:e6:d3:35:8a:5e:96:ce:
         a1:84:79:e1:80:20:86:a6:2c:b6:17:49:35:2b:1b:39:11:b4:
         cc:7e:75:d9:0b:73:d4:be:ed:65:14:c6:7f:cc:4f:d3:71:47:
         74:11:e5:86:86:44:32:c5:0e:7c:b2:2f:94:d4:10:26:ae:45:
         b6:ec:15:46:1f:1e:3f:07:c5:ba:22:44:30:6a:02:ca:12:1b:
         53:49:9a:a6:a1:79:72:e0:41:92:08:c9:f9:b1:a2:74:bf:49:
         c5:1c:7d:ba:8d:86:52:0d:fe:6f:51:87:f9:b0:76:a8:66:51:
         64:a4:62:f4:6f:01:b9:ad:ca:e1:a7:41:fa:32:91:37:39:e0:
         84:87:88:54:da:03:bf:7c:56:8c:7d:57:ac:b7:1f:41:1a:7b:
         dc:60:94:8b:07:46:cf:f2:7e:ed:33:0f:ae:4f:49:be:fd:34:
         3c:ec:b6:0b:76:b4:8f:50:91:e7:c1:24:ed:0e:ff:a3:8d:0d:
         f6:78:c7:fe:e8:d4:13:51:90:11:39:29:3b:e3:c4:8f:af:25:
         9a:22:13:99:38:ea:15:8e:e3:c7:35:36:22:22:93:90:5a:e8:
         1f:46:a7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:22:14 2026 by rpki-client