Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/5x94KlPaFtsf0wxsDSYVQnUipt4.mft
File:                     5x94KlPaFtsf0wxsDSYVQnUipt4.mft (raw, json)
Hash identifier:          FFEi6ojCvQSxWuExb/MZyd7gPxZVMr2pLYFktXqFYII=
Subject key identifier:   B0:D7:A2:12:78:B9:95:EF:3A:B9:B3:07:35:3D:6E:EA:1C:FE:25:50
Authority key identifier: E7:1F:78:2A:53:DA:16:DB:1F:D3:0C:6C:0D:26:15:42:75:22:A6:DE
Certificate issuer:       /CN=A918ADBA/serialNumber=E71F782A53DA16DB1FD30C6C0D2615427522A6DE
Certificate serial:       46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5x94KlPaFtsf0wxsDSYVQnUipt4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/5x94KlPaFtsf0wxsDSYVQnUipt4.mft
Manifest number:          42
Signing time:             Wed 25 Mar 2026 07:38:05 +0000
Manifest this update:     Wed 25 Mar 2026 07:38:05 +0000
Manifest next update:     Wed 01 Apr 2026 07:38:05 +0000
Files and hashes:         1: 5x94KlPaFtsf0wxsDSYVQnUipt4.crl (hash: 1EwpBSuzLwPZlC4dk+KfFHNZFIx8uu5sweW++QbbKNc=)
                          2: 95C751AAC99F11F098604B44C4F9AE02.roa (hash: UHvpsaid7Pmo6YPIbYpolV2HsVFbpaGyjeGlBmkMR7I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/5x94KlPaFtsf0wxsDSYVQnUipt4.crl
                          rsync://rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/5x94KlPaFtsf0wxsDSYVQnUipt4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5x94KlPaFtsf0wxsDSYVQnUipt4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:38:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918ADBA, serialNumber=E71F782A53DA16DB1FD30C6C0D2615427522A6DE
        Validity
            Not Before: Mar 25 07:38:05 2026 GMT
            Not After : Apr  1 07:38:05 2026 GMT
        Subject: CN=69c390dd-a1cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:91:f4:0b:f3:db:ff:71:33:cb:35:a6:ee:fd:
                    0e:2a:2f:3c:29:ca:f5:c9:49:9e:c4:8a:2a:3d:32:
                    72:f6:25:87:08:ab:12:31:60:15:4b:0a:14:ab:a4:
                    41:10:f6:e2:42:12:75:bd:32:59:58:2e:dd:97:07:
                    11:14:f7:3e:c0:80:85:45:c4:20:df:44:72:89:97:
                    2a:a3:17:58:59:0f:60:2a:86:08:3d:a0:67:a3:ef:
                    15:3f:51:05:56:ed:ca:cd:1a:4f:92:c7:16:3d:77:
                    38:3e:4f:99:57:83:c8:83:4c:0f:f6:11:78:e2:6a:
                    05:2c:37:df:e9:a7:9b:2a:af:36:61:0f:91:57:ef:
                    f1:7f:d4:fe:72:96:8b:26:ce:1b:34:0a:12:7a:52:
                    d6:bd:21:1b:af:d3:4c:9c:06:49:ab:fd:86:2a:87:
                    97:cb:a3:54:63:82:b4:a4:11:d9:c1:92:52:7f:8a:
                    3a:35:c1:35:ef:c1:0f:9a:67:41:be:02:83:30:0d:
                    dc:cd:86:0f:91:a3:c5:47:eb:f3:3e:a7:80:cc:73:
                    b3:d8:ca:24:ff:7f:ec:f7:de:e7:67:91:07:6a:5a:
                    3d:d2:9d:35:07:4e:8c:2d:12:54:af:16:7c:3f:31:
                    01:d6:91:16:b0:47:70:b4:2c:7a:3d:9d:ef:24:93:
                    1b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:D7:A2:12:78:B9:95:EF:3A:B9:B3:07:35:3D:6E:EA:1C:FE:25:50
            X509v3 Authority Key Identifier:
                keyid:E7:1F:78:2A:53:DA:16:DB:1F:D3:0C:6C:0D:26:15:42:75:22:A6:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/5x94KlPaFtsf0wxsDSYVQnUipt4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5x94KlPaFtsf0wxsDSYVQnUipt4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/5x94KlPaFtsf0wxsDSYVQnUipt4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:86:05:a8:43:be:91:4e:0e:ee:7c:60:2c:82:77:ab:26:3d:
         ed:47:54:75:49:f5:00:27:a3:ee:a0:cb:1e:cb:54:e5:77:73:
         0f:7d:0a:18:a3:f7:27:2f:4c:de:e7:b8:44:b5:66:28:f3:8d:
         22:fb:bb:ba:40:ce:05:4e:86:90:96:2a:1e:33:e2:a8:46:79:
         c8:99:50:e4:53:ac:4f:d0:b6:a8:79:28:70:1b:90:8a:9b:cb:
         55:1e:b3:a2:2b:d4:45:a6:e0:3d:94:70:87:5a:55:59:3e:f4:
         32:05:e4:b2:a1:e3:ab:57:91:71:93:ae:79:44:e4:44:13:b5:
         39:33:8d:30:32:10:77:0b:ea:d7:bd:6c:79:8b:3c:39:69:8d:
         a0:bc:74:e4:d4:2d:f4:0d:19:4d:fa:1b:be:9f:68:1c:1f:0a:
         bc:54:33:45:24:52:e3:eb:f4:89:00:e3:2c:08:47:01:fa:b0:
         28:11:46:36:48:21:5e:aa:c9:8b:09:74:06:9b:8c:ea:44:3c:
         36:98:18:40:d2:78:cf:a9:20:b7:6e:3d:24:4b:b5:05:28:b4:
         93:32:3d:f3:51:d8:07:75:84:d2:85:90:29:5a:fc:4f:2b:c0:
         7a:c8:09:54:d1:ee:d5:5a:ce:7a:78:1e:f3:f5:a1:65:18:3d:
         db:51:59:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:52:27 2026 by rpki-client