Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.mft
File:                     5IPa-2wrg71IK24pCn5AU1W1Ltk.mft (raw, json)
Hash identifier:          CXSHFZ2PhtywAFhZhWHmA215XBuFVoYUpOKAKYmY19w=
Subject key identifier:   C5:53:CA:6E:61:82:26:87:EA:2B:7A:23:78:1F:D3:CA:FB:81:4C:78
Authority key identifier: E4:83:DA:FB:6C:2B:83:BD:48:2B:6E:29:0A:7E:40:53:55:B5:2E:D9
Certificate issuer:       /CN=A919136B/serialNumber=E483DAFB6C2B83BD482B6E290A7E405355B52ED9
Certificate serial:       10FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5IPa-2wrg71IK24pCn5AU1W1Ltk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.mft
Manifest number:          10EB
Signing time:             Thu 26 Mar 2026 17:15:26 +0000
Manifest this update:     Thu 26 Mar 2026 17:15:26 +0000
Manifest next update:     Thu 02 Apr 2026 17:15:26 +0000
Files and hashes:         1: 5IPa-2wrg71IK24pCn5AU1W1Ltk.crl (hash: jvtJ1QV9K73Q+bQXiGyjY045BEBl3Iav33oPh2JzR60=)
                          2: 99B6039C215311EA86E1E020C4F9AE02.roa (hash: xBQzJokUINHvwXbjCEGs5dFY9Pxy3Whg47fTfEwk4/Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.crl
                          rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5IPa-2wrg71IK24pCn5AU1W1Ltk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4346 (0x10fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919136B, serialNumber=E483DAFB6C2B83BD482B6E290A7E405355B52ED9
        Validity
            Not Before: Mar 26 17:15:26 2026 GMT
            Not After : Apr  2 17:15:26 2026 GMT
        Subject: CN=69c569ae-6297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:58:38:49:fb:f0:ec:b4:db:7a:dc:ce:7b:52:
                    0e:42:8d:75:b8:21:87:c8:04:46:00:1a:d9:03:32:
                    86:d8:b4:3b:8f:b5:48:1f:ce:37:25:79:1f:45:03:
                    77:51:2c:58:06:d7:b4:b6:cf:12:25:c6:62:3e:dd:
                    23:e0:41:c4:47:0c:a1:c5:10:8f:9a:00:84:1b:f8:
                    2e:3b:71:69:11:47:9d:51:bb:9d:b7:d7:84:8a:09:
                    72:ce:a5:4b:90:14:e3:7a:25:92:83:e9:a9:c4:0d:
                    d3:81:d9:34:f9:3c:4f:c5:eb:7c:26:63:d4:9c:28:
                    b8:a2:c4:d4:01:68:07:95:a5:25:e7:2d:bd:f3:24:
                    d2:e4:da:d7:ca:1d:8e:e0:65:fb:32:a7:44:a6:51:
                    63:2c:05:60:ce:58:4d:30:07:dd:4a:6c:45:a5:e8:
                    21:d2:c1:90:c9:fc:7c:b7:2a:c5:af:ff:40:70:54:
                    3a:e5:d8:08:b6:1f:c6:8b:07:6e:4b:e4:e0:83:30:
                    f0:f1:d0:50:e0:7d:4f:be:04:a0:ea:d5:ce:20:34:
                    1f:f3:82:f0:64:f8:ea:cd:38:49:86:e3:f0:3a:6f:
                    7b:a5:c4:e5:06:dc:d5:76:7a:95:32:43:5e:73:18:
                    37:93:dc:03:10:64:ae:b0:8b:a6:a8:e1:a4:34:18:
                    55:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:53:CA:6E:61:82:26:87:EA:2B:7A:23:78:1F:D3:CA:FB:81:4C:78
            X509v3 Authority Key Identifier:
                keyid:E4:83:DA:FB:6C:2B:83:BD:48:2B:6E:29:0A:7E:40:53:55:B5:2E:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5IPa-2wrg71IK24pCn5AU1W1Ltk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:f5:ce:29:ac:78:c0:41:cc:5f:5f:e2:10:cc:ae:d2:62:39:
         cf:5b:83:f5:f5:8b:6c:57:40:ae:6b:f1:f3:a6:76:25:15:17:
         ee:b2:24:e9:63:a1:c6:82:40:1c:af:2f:0a:3c:aa:06:93:40:
         e1:d3:9d:fb:d8:03:e9:a2:cc:2b:8c:50:ba:58:42:ec:47:1c:
         4f:d5:c6:f1:86:b3:72:3a:52:d1:e0:70:a1:36:03:ba:8a:4b:
         13:55:6d:c9:6c:fa:a1:1a:f4:5d:0c:7e:48:bb:36:02:6e:8f:
         49:10:ba:3d:4a:c1:b8:62:e9:82:1a:2f:6c:60:ce:90:63:40:
         76:6f:7d:69:9d:b4:a3:cc:a3:67:8d:cc:13:0b:9c:d1:99:3a:
         a8:75:61:8a:8c:f1:51:30:be:a1:63:b8:d2:1a:4a:6f:c6:55:
         0a:90:1d:a9:bf:2a:4f:d6:13:55:25:06:35:02:d0:72:8b:58:
         3e:92:5b:65:7c:e7:f2:bc:66:40:c9:9f:aa:77:28:03:cd:d7:
         2b:b6:57:51:60:44:11:95:54:95:c1:2d:e6:30:cd:14:b9:cd:
         e7:81:a9:00:22:17:bf:93:87:ec:56:ee:ef:2a:ff:60:43:98:
         b9:50:38:f6:a6:21:7a:45:71:e6:a1:62:f7:ad:f7:99:ed:26:
         fd:e1:25:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:07:32 2026 by rpki-client