Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft
File:                     5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft (raw, json)
Hash identifier:          tcmuddHdLF5FjzEIue5DCkA2JlTg9LDxEaWDcgYZ9nE=
Subject key identifier:   01:4C:A6:95:AD:7F:D4:AF:EB:75:7E:12:53:53:AF:B6:45:65:8E:78
Authority key identifier: E5:18:E9:48:15:C4:6D:7D:8E:6F:EF:4E:BC:3D:18:DF:0E:21:F8:36
Certificate issuer:       /CN=A9183DB7/serialNumber=E518E94815C46D7D8E6FEF4EBC3D18DF0E21F836
Certificate serial:       0E94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft
Manifest number:          0E7A
Signing time:             Thu 26 Mar 2026 17:42:34 +0000
Manifest this update:     Thu 26 Mar 2026 17:42:33 +0000
Manifest next update:     Thu 02 Apr 2026 17:42:33 +0000
Files and hashes:         1: 5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl (hash: +M2B6UarrtIs69OM1RMqycJx8BEmWgjsAV9mfars1zM=)
                          2: 9F14D15E70DB11ECACCABD21C4F9AE02.roa (hash: xvrivgHeCdDydOD/ZktKC2lGC9vuqeY8ZsH11+NgJlU=)
                          3: 6B7E8FC670DE11EC8B944928C4F9AE02.roa (hash: DEYl4xuRBtxqmhzfpUHokIt3OryoQ/FdXNVfb0S7BgA=)
                          4: 6A5EC93A70DE11EC8B944928C4F9AE02.roa (hash: 2vmyMW6TtcbaqXFP7Qp6BP+UrMdH5alLGCt5uNXx+l8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl
                          rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 17:42:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3732 (0xe94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183DB7, serialNumber=E518E94815C46D7D8E6FEF4EBC3D18DF0E21F836
        Validity
            Not Before: Mar 26 17:42:33 2026 GMT
            Not After : Apr  2 17:42:33 2026 GMT
        Subject: CN=69c57009-f978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ca:72:6b:86:ff:c9:a2:6e:a6:71:94:cf:54:
                    74:49:4b:c3:9f:22:be:0c:17:0c:2b:ca:91:8a:12:
                    4e:a8:f5:6b:5c:88:4f:d4:5c:df:7e:52:5f:2c:96:
                    aa:0a:73:b5:cb:36:01:02:32:72:54:b5:f7:eb:7b:
                    62:43:09:16:72:7b:7f:10:19:0b:79:95:75:e9:1c:
                    95:df:17:ba:f2:3e:da:41:29:38:60:73:fa:1c:6e:
                    ad:f0:4d:cc:7a:ce:1e:4f:85:f9:77:94:c6:a8:e1:
                    07:54:fb:17:7e:8c:99:0c:24:38:e4:88:7e:b8:17:
                    f0:af:31:0d:e4:19:96:84:ad:cf:4c:40:03:0d:6e:
                    83:0a:55:85:43:6e:8d:eb:12:9b:72:3f:ac:aa:2c:
                    a9:e2:8f:45:db:c6:89:1a:16:4d:d5:3d:d6:39:64:
                    d0:bd:76:78:d2:e3:4f:e8:dd:46:8e:db:a6:8d:08:
                    9b:ba:7d:37:c8:e7:66:91:70:f1:fa:0a:10:03:d0:
                    86:d5:9e:94:de:cf:47:92:b4:89:56:f9:42:4d:c0:
                    79:36:5c:ce:43:bf:6d:10:da:57:d1:2b:67:81:49:
                    7f:7d:b1:b2:05:04:63:d2:b1:47:5e:1c:4e:f3:11:
                    ba:bc:f1:8b:3b:7a:42:0b:1e:4e:6f:bf:22:8e:8d:
                    bc:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:4C:A6:95:AD:7F:D4:AF:EB:75:7E:12:53:53:AF:B6:45:65:8E:78
            X509v3 Authority Key Identifier:
                keyid:E5:18:E9:48:15:C4:6D:7D:8E:6F:EF:4E:BC:3D:18:DF:0E:21:F8:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:bc:cc:94:a1:cb:95:ce:4b:8a:05:c0:23:31:de:c2:9f:ed:
         f0:b9:30:68:a2:97:28:55:1d:77:e5:7c:1b:42:2a:6b:c2:4b:
         ae:4d:fc:17:a9:4f:72:73:d5:46:fd:20:7c:04:27:52:4f:b8:
         9a:a5:57:f0:bf:56:f5:20:46:16:19:f7:80:b6:a1:e4:de:ea:
         63:24:2e:88:e1:3c:3e:32:9e:11:31:4e:6c:29:b9:7a:95:a4:
         e1:3b:80:d8:18:dc:ce:78:16:4e:8a:b1:8f:56:aa:76:89:41:
         49:9f:7b:a7:90:8b:d1:aa:0a:3e:02:01:78:45:cb:9a:b8:cb:
         cc:85:3c:82:ce:87:06:fc:f3:24:42:d3:53:0d:82:b5:7f:b3:
         cd:ab:cf:3a:7c:aa:6e:1a:df:ee:a1:19:18:0b:43:42:c6:ae:
         b7:06:94:ae:d8:73:39:8e:1a:c3:f4:b3:e9:ce:dd:46:53:2b:
         56:6a:ba:e5:9d:3f:ad:24:c2:6a:4a:f4:3c:5c:c1:f1:5b:e4:
         98:36:14:70:f4:b6:a9:60:91:0a:7a:97:02:47:38:5a:52:57:
         dd:ce:c2:df:95:cf:ac:c6:fe:bb:c9:2e:96:f3:90:5c:b5:5b:
         e5:f1:7f:aa:83:02:42:00:89:0b:1b:29:73:ab:6c:d1:4f:b2:
         82:6a:a8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:35:37 2026 by rpki-client