Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.mft
File:                     D1Mgluf1jeQB8mUHbe-1yC5x8-I.mft (raw, json)
Hash identifier:          KB/y3AfyQbP/CDgsJnGE7WvzQi7o9sGhv3DB2gFxd9o=
Subject key identifier:   64:82:21:33:E9:BB:87:55:44:77:A2:BC:DC:B6:72:AA:3A:FD:F4:0F
Authority key identifier: 0F:53:20:96:E7:F5:8D:E4:01:F2:65:07:6D:EF:B5:C8:2E:71:F3:E2
Certificate issuer:       /CN=A918306F/serialNumber=0F532096E7F58DE401F265076DEFB5C82E71F3E2
Certificate serial:       5C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1Mgluf1jeQB8mUHbe-1yC5x8-I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.mft
Manifest number:          5A
Signing time:             Mon 11 May 2026 08:14:23 +0000
Manifest this update:     Mon 11 May 2026 08:14:23 +0000
Manifest next update:     Mon 18 May 2026 08:14:23 +0000
Files and hashes:         1: D1Mgluf1jeQB8mUHbe-1yC5x8-I.crl (hash: Lfw2liDPAch8Y3SzOeMOmCNS8FdIiCtNtyH4+OKuYpQ=)
                          2: 970D44E2C54F11F0A154DD09C4F9AE02.roa (hash: HyMt0B+pOhVMNXH2gY84/5yQW/j0O4deZoiKvpL1EJk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.crl
                          rsync://rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1Mgluf1jeQB8mUHbe-1yC5x8-I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:14:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918306F, serialNumber=0F532096E7F58DE401F265076DEFB5C82E71F3E2
        Validity
            Not Before: May 11 08:14:23 2026 GMT
            Not After : May 18 08:14:23 2026 GMT
        Subject: CN=6a018fdf-c347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0f:6a:b6:ad:a3:a4:66:60:82:e2:02:65:05:
                    19:f0:49:5b:ac:c4:a2:a0:11:bf:5f:5c:bd:a7:1d:
                    da:13:31:1c:4c:b6:34:f2:b3:0d:9a:6c:1b:ac:1f:
                    0a:1f:42:52:89:03:84:8d:d1:2b:a5:5d:4b:f4:e1:
                    16:0c:16:8c:a4:7e:cd:bf:4e:34:b9:61:61:29:68:
                    cc:10:a2:dc:81:d8:be:db:69:71:e3:d4:de:3a:7e:
                    e6:ae:3c:dc:5b:83:50:16:ad:41:44:69:42:49:cd:
                    06:29:0b:b8:47:73:b7:80:e5:c0:35:4b:1b:08:28:
                    b1:f0:2a:e7:79:ee:f7:18:b5:3e:68:1a:0a:b5:d9:
                    80:17:63:2f:64:bd:8c:b4:38:db:ad:fd:88:6c:e4:
                    af:68:08:4a:93:81:f5:4d:07:5b:e9:f3:65:81:87:
                    aa:96:fb:ef:cf:b7:55:8b:3b:49:b3:6e:fd:30:c0:
                    5b:6e:18:19:c7:70:8e:96:13:96:73:1e:1e:33:1e:
                    38:6d:10:c2:52:1a:c3:95:77:98:de:b0:f0:de:19:
                    20:3b:af:24:83:0f:f7:2a:fe:4b:3a:7a:88:b7:6d:
                    4e:88:43:0f:30:08:81:5b:1e:9c:3e:86:a9:88:72:
                    49:6f:c9:36:0a:2c:bf:64:cb:df:da:e2:68:37:07:
                    38:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:82:21:33:E9:BB:87:55:44:77:A2:BC:DC:B6:72:AA:3A:FD:F4:0F
            X509v3 Authority Key Identifier:
                keyid:0F:53:20:96:E7:F5:8D:E4:01:F2:65:07:6D:EF:B5:C8:2E:71:F3:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1Mgluf1jeQB8mUHbe-1yC5x8-I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918306F/61C268D6C54E11F088584F86C4F9AE02/D1Mgluf1jeQB8mUHbe-1yC5x8-I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:f7:8e:31:ce:b6:ce:36:44:34:5c:31:82:8e:ea:e9:6e:69:
         a9:ac:34:20:5a:54:6d:78:07:68:7f:74:03:32:a9:c2:06:b9:
         05:2e:c9:7d:89:8f:71:42:57:18:d4:9b:43:4f:0f:ae:30:5d:
         73:2d:05:46:c1:a2:62:c8:30:4e:f5:52:c4:05:ec:da:16:13:
         1d:48:cc:86:e8:44:73:e6:70:cd:4d:bb:7c:c6:f9:70:69:63:
         35:b0:32:3b:37:d3:d8:8d:fc:5f:ce:bd:a4:aa:74:02:55:78:
         92:ce:32:30:7f:59:1f:f8:24:9b:a9:a1:8d:6f:70:e9:76:f6:
         ae:16:54:56:2f:09:cf:c8:6f:37:28:ca:3e:cc:1e:2c:c2:a6:
         a4:fe:71:0e:93:bf:5e:b3:ec:7d:8d:9e:e8:24:6b:68:3a:9a:
         6d:99:73:c1:95:f3:58:6d:d5:28:13:74:39:ff:9a:14:7d:c7:
         73:30:45:bd:e6:c5:35:9f:fb:38:47:14:e4:a5:68:b0:21:eb:
         39:71:b0:36:55:64:af:45:c3:0a:00:26:e9:3f:a0:ec:59:71:
         fa:a9:60:38:96:a0:43:aa:3f:06:bd:70:70:81:53:a4:d0:91:
         ca:7f:c7:82:3c:92:5f:33:85:43:d3:d6:82:d1:23:68:0f:03:
         0b:d0:f9:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:12:04 2026 by rpki-client