Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft
File:                     5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft (raw, json)
Hash identifier:          E88eA0k6OAhNpOvXY2QmnbJS5dOkSIaGroKUjbLlWfE=
Subject key identifier:   44:DC:FB:E8:2B:E5:82:2B:58:0D:09:F8:47:D6:42:C0:DC:F1:3C:49
Authority key identifier: E5:E5:D1:68:A0:E1:09:6E:A1:C3:F9:B7:F8:E8:D7:58:EA:EA:23:F3
Certificate issuer:       /CN=A9165362/serialNumber=E5E5D168A0E1096EA1C3F9B7F8E8D758EAEA23F3
Certificate serial:       05EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft
Manifest number:          05C2
Signing time:             Tue 24 Mar 2026 22:54:43 +0000
Manifest this update:     Tue 24 Mar 2026 22:54:42 +0000
Manifest next update:     Tue 31 Mar 2026 22:54:42 +0000
Files and hashes:         1: 5eXRaKDhCW6hw_m3-OjXWOrqI_M.crl (hash: 42hx5Kz/B/TeKiJ8TYcwl4L/2+6eTps6/NQdqUSfAC8=)
                          2: 2C4993AA271B11EF97731F0BC4F9AE02.roa (hash: GP7UGfZCMHOPLL1gZXCEO6qhlaky7I3CQ/nq013zLKM=)
                          3: 9CB324BA273111EF9F5B0860C4F9AE02.roa (hash: suAI1YPeN8kbgOgmaGzzfLUHLWI1/VRvkqObcPH/nuk=)
                          4: D5AEE7FEF61A11F0A42262E05A6F56BC.roa (hash: YonCxURFZFCSJYKZZl/AlgVFdSlrOcW3O6u6eFemois=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.crl
                          rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:54:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1518 (0x5ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165362, serialNumber=E5E5D168A0E1096EA1C3F9B7F8E8D758EAEA23F3
        Validity
            Not Before: Mar 24 22:54:42 2026 GMT
            Not After : Mar 31 22:54:42 2026 GMT
        Subject: CN=69c31633-dbad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a0:af:6c:a5:73:93:31:04:05:42:c3:22:67:
                    9b:13:0e:0b:3b:57:ba:9e:ea:88:b2:d7:a0:91:f7:
                    94:53:a2:77:63:50:ba:1d:67:c7:c5:ee:4f:04:62:
                    7c:1b:25:9b:1e:89:30:83:63:bd:ed:0a:bb:27:31:
                    27:69:2f:30:10:8e:65:52:75:0a:53:2f:0e:25:00:
                    d1:fe:b8:0a:b8:8d:b1:bd:bd:f9:61:a8:6b:6b:4d:
                    f1:0c:60:ff:86:79:72:2b:e1:89:7b:70:1f:d4:a4:
                    5a:1c:f3:35:00:fa:b6:1b:59:0c:f1:07:59:65:50:
                    03:ea:f6:86:f8:e3:c5:77:31:98:7e:82:b7:dd:74:
                    43:4e:d4:22:04:e1:2a:9d:28:9a:cb:01:50:35:ad:
                    6a:1f:aa:c8:ad:f5:d9:e6:13:f5:b5:18:c5:a2:46:
                    43:5e:c8:09:de:78:89:92:41:0e:47:87:31:54:76:
                    0b:24:1c:53:40:a3:8c:69:3d:48:df:bc:68:60:e5:
                    5a:36:5d:57:ae:a7:14:06:b8:e6:82:3f:51:ce:23:
                    ef:13:1d:67:62:fc:dc:4b:fd:40:ba:94:0e:23:24:
                    fa:11:e2:e6:92:92:40:52:86:aa:fa:70:45:db:01:
                    f9:ad:6b:dc:28:38:ab:9e:ed:29:0c:51:4a:a1:0c:
                    16:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:DC:FB:E8:2B:E5:82:2B:58:0D:09:F8:47:D6:42:C0:DC:F1:3C:49
            X509v3 Authority Key Identifier:
                keyid:E5:E5:D1:68:A0:E1:09:6E:A1:C3:F9:B7:F8:E8:D7:58:EA:EA:23:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:26:6f:ef:88:d8:4b:7f:38:73:dd:9a:49:36:a0:75:bc:45:
         e1:6f:54:69:d3:d2:3a:a4:5b:58:03:e6:5b:6a:11:9f:c1:cb:
         50:73:13:11:e9:e2:37:f1:b9:e1:62:cb:1e:3f:8d:75:e0:79:
         a1:f9:d7:a3:3a:e9:c8:1a:39:c3:55:2f:e0:8d:e0:2d:c2:c9:
         89:ec:33:3b:5e:69:be:45:6b:b8:fb:30:98:3b:6c:dd:38:5d:
         14:7d:f2:c1:e2:8b:b7:f7:d8:0f:3c:af:dc:f8:7b:03:9a:9e:
         d8:ba:c4:58:c0:e5:2b:10:3c:91:d3:cd:13:4d:0b:5a:d5:73:
         b3:0a:84:2d:ff:02:35:69:d5:7a:59:ef:ea:b6:de:fc:9f:34:
         94:90:51:4d:cc:55:49:e4:2c:8d:67:25:1c:61:87:2e:7b:70:
         cd:f9:df:0e:e8:a7:ee:4a:5c:24:4e:8a:89:9b:ae:17:4d:fb:
         ae:d5:c2:d1:95:f8:15:59:76:7e:df:71:b9:8b:31:98:d6:74:
         89:84:5e:09:96:13:df:f0:f2:c1:ab:35:bf:3f:e5:9a:42:8a:
         bf:b3:90:df:c6:75:3a:01:b6:41:7a:6c:ce:00:9f:71:3e:21:
         c1:0d:46:63:1b:c1:e2:45:80:e4:51:d0:b1:5b:ff:bb:ce:71:
         39:17:7c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:40:20 2026 by rpki-client