Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft
File:                     V5NDbSKpagYTaFEgO7clmE1wsBc.mft (raw, json)
Hash identifier:          1ckCxiNf7QGab+yl3CsNr2I9QqRtZd30BudWShhcSlc=
Subject key identifier:   00:ED:9F:DC:2A:EE:55:22:E1:E1:A3:65:91:67:5C:A5:A5:74:D6:45
Authority key identifier: 57:93:43:6D:22:A9:6A:06:13:68:51:20:3B:B7:25:98:4D:70:B0:17
Certificate issuer:       /CN=A9159DCD/serialNumber=5793436D22A96A06136851203BB725984D70B017
Certificate serial:       01FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5NDbSKpagYTaFEgO7clmE1wsBc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft
Manifest number:          01F6
Signing time:             Fri 27 Mar 2026 02:42:18 +0000
Manifest this update:     Fri 27 Mar 2026 02:42:17 +0000
Manifest next update:     Fri 03 Apr 2026 02:42:17 +0000
Files and hashes:         1: V5NDbSKpagYTaFEgO7clmE1wsBc.crl (hash: gOziYXN5e97rKmEBzRrk/hA21ttQElYYCa20dr0pJeQ=)
                          2: 29D600062C3311EEBFF69B6CC4F9AE02.roa (hash: WAXFjuNGhyF26G8uyhpIZtaDvgXLuDPly79bzyrgzCI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.crl
                          rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5NDbSKpagYTaFEgO7clmE1wsBc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 02:42:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 508 (0x1fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9159DCD, serialNumber=5793436D22A96A06136851203BB725984D70B017
        Validity
            Not Before: Mar 27 02:42:17 2026 GMT
            Not After : Apr  3 02:42:17 2026 GMT
        Subject: CN=69c5ee8a-2dcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:29:b5:01:3b:51:41:5f:b9:74:ae:59:fd:f4:
                    09:84:96:be:87:24:58:5e:eb:ec:0f:3f:60:f6:79:
                    59:20:8d:79:4b:29:ab:33:c9:46:53:70:ee:8d:9c:
                    94:aa:43:31:a2:aa:49:70:f6:3e:f0:ca:2d:7f:bc:
                    44:a6:1a:a9:3a:02:ff:91:d4:3f:e4:4f:47:48:88:
                    c9:0a:a8:05:2d:bc:b6:de:15:ef:c3:72:ca:4a:5a:
                    2b:4f:7d:ac:54:b5:9e:f4:85:89:9f:63:e9:6d:41:
                    af:54:c4:10:48:1a:31:27:db:4d:11:73:69:fd:a8:
                    92:0a:6b:40:bf:8d:04:17:d7:fe:04:9e:35:91:84:
                    62:8e:10:dd:f1:57:45:e9:23:49:24:0f:04:68:2a:
                    df:4a:6a:db:d5:66:55:6a:ac:aa:33:b8:a0:36:a1:
                    84:bf:69:3e:34:0b:5f:5d:89:85:cc:b6:f3:ec:7b:
                    1c:1a:6f:f6:18:d7:bf:ee:0b:19:d8:a8:f5:5c:93:
                    9b:63:85:43:2a:fd:ab:00:78:e9:76:cd:a4:3f:d3:
                    04:59:a9:15:6a:7e:05:eb:ea:ef:83:63:26:c9:93:
                    45:23:20:3b:62:d7:2f:18:1b:4a:54:1d:84:4c:f1:
                    53:6d:5c:6a:61:f1:c1:99:c9:6c:10:79:67:40:fd:
                    6f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:ED:9F:DC:2A:EE:55:22:E1:E1:A3:65:91:67:5C:A5:A5:74:D6:45
            X509v3 Authority Key Identifier:
                keyid:57:93:43:6D:22:A9:6A:06:13:68:51:20:3B:B7:25:98:4D:70:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5NDbSKpagYTaFEgO7clmE1wsBc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:cf:65:91:67:84:57:ea:e4:45:0b:ae:20:29:b3:ac:28:fe:
         bc:02:90:65:c2:ce:d3:ee:2e:3f:20:c9:26:25:48:b0:e8:b9:
         56:38:94:41:0a:89:09:de:b4:0b:ca:74:6d:a2:3c:f8:b2:72:
         37:30:0b:7e:15:64:e5:41:b5:03:eb:f3:b2:56:e0:b9:cf:55:
         5c:ca:97:4d:2f:54:da:e2:fe:a5:8c:70:c5:59:87:1f:53:5f:
         83:c3:d5:c3:bb:56:21:8c:9d:c8:0b:df:c8:b6:0e:20:bb:39:
         5d:49:bd:38:ac:b6:8f:1b:01:bf:ca:5a:3e:e9:95:6b:0b:64:
         fd:99:1e:a2:e7:10:98:d2:82:65:c0:9f:d6:46:b5:2b:80:17:
         d2:09:f7:b1:ac:c0:43:6d:5b:9d:3f:03:fa:c1:f2:3e:ac:bd:
         d5:51:e0:44:97:01:62:cd:d7:a2:42:5b:37:58:04:2e:7d:84:
         63:30:44:ba:6a:7a:02:01:cd:92:d7:6e:9c:87:3c:79:f4:79:
         8d:27:28:89:29:1e:90:a9:d6:1b:35:a9:a8:78:39:21:d2:37:
         1f:a1:df:9b:f8:ce:a9:b5:cf:08:d4:cd:31:63:69:6a:6f:00:
         c3:62:44:06:f3:ac:61:2a:7c:59:aa:de:51:40:0f:56:c9:ef:
         fb:1d:eb:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:29:09 2026 by rpki-client