Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft
File:                     x5XlnAMMfJKfy-R0Gfxexp4frP0.mft (raw, json)
Hash identifier:          YQIKRkPyOULwtMFd1ofnIm+08+82KUFAuGyYIQUO5M0=
Subject key identifier:   4A:5B:59:82:28:E1:01:47:2D:DF:5A:22:B7:84:C9:30:C5:F0:06:E2
Authority key identifier: C7:95:E5:9C:03:0C:7C:92:9F:CB:E4:74:19:FC:5E:C6:9E:1F:AC:FD
Certificate issuer:       /CN=A91A3FEB/serialNumber=C795E59C030C7C929FCBE47419FC5EC69E1FACFD
Certificate serial:       07EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5XlnAMMfJKfy-R0Gfxexp4frP0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft
Manifest number:          07E3
Signing time:             Tue 24 Mar 2026 21:00:26 +0000
Manifest this update:     Tue 24 Mar 2026 21:00:25 +0000
Manifest next update:     Tue 31 Mar 2026 21:00:25 +0000
Files and hashes:         1: x5XlnAMMfJKfy-R0Gfxexp4frP0.crl (hash: W7R4WBzcnuUVOU2Z1HCO97uR3Qz/xyctvXCFwz9CgYU=)
                          2: B722FC542A0411EB992DD32EC4F9AE02.roa (hash: Njy7KgKIOTObZW1lYuUka/CsEJGfqYprwa3YFA9yLH0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.crl
                          rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5XlnAMMfJKfy-R0Gfxexp4frP0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2026 (0x7ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3FEB, serialNumber=C795E59C030C7C929FCBE47419FC5EC69E1FACFD
        Validity
            Not Before: Mar 24 21:00:25 2026 GMT
            Not After : Mar 31 21:00:25 2026 GMT
        Subject: CN=69c2fb69-5f1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ab:0d:6e:19:7c:e8:65:3b:a0:8f:09:9f:9a:
                    a9:94:e0:b7:41:e6:0a:f2:f1:6c:34:92:85:f6:39:
                    71:98:90:cf:31:95:2d:ac:35:38:a3:04:6a:53:08:
                    fe:6e:20:1a:82:8f:a3:a7:9d:49:55:94:74:f2:f3:
                    30:d0:5b:4c:14:63:95:a2:9f:3e:30:ab:10:0c:34:
                    a4:62:c1:14:71:fc:e6:8f:ea:af:89:63:c7:d3:9e:
                    52:d5:d7:c9:37:14:75:05:96:aa:8e:ab:8e:46:dc:
                    c7:26:7f:88:3c:c1:7a:56:61:f9:1e:af:16:94:dd:
                    24:bb:8f:4c:93:84:be:96:61:a0:96:8b:9b:c3:16:
                    19:81:94:92:8d:97:e4:92:53:e4:a6:cf:df:27:16:
                    4c:ff:21:82:b8:af:dd:3b:a7:ff:6b:0b:17:cf:29:
                    4f:4c:ef:72:be:93:60:ea:2a:71:c2:30:74:d0:d3:
                    d4:6d:36:12:21:36:cd:0f:78:ae:72:ae:59:58:70:
                    f7:f7:42:27:3a:7a:06:d8:95:07:49:f7:7d:82:e9:
                    de:25:b4:ca:ce:f2:7b:2b:bd:9a:f0:cc:fb:6b:3d:
                    3d:45:34:d3:d6:38:14:1b:08:43:29:c9:4c:1d:d3:
                    dc:68:a9:93:cb:77:ee:95:1d:fd:b7:73:7d:61:43:
                    b9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:5B:59:82:28:E1:01:47:2D:DF:5A:22:B7:84:C9:30:C5:F0:06:E2
            X509v3 Authority Key Identifier:
                keyid:C7:95:E5:9C:03:0C:7C:92:9F:CB:E4:74:19:FC:5E:C6:9E:1F:AC:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5XlnAMMfJKfy-R0Gfxexp4frP0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:2c:80:be:80:fd:cd:4f:3f:9c:49:94:4c:ae:d9:61:6f:b5:
         9b:e7:fc:4c:59:3e:23:00:28:dc:c5:df:82:ff:b8:4e:9b:25:
         51:e1:87:1a:2d:55:cc:05:40:ad:23:17:c9:1d:e8:38:57:08:
         b0:4d:1a:1f:7f:22:0e:42:1a:0f:56:b6:e1:99:34:18:9d:d2:
         5b:96:e4:19:40:2e:55:31:75:ad:64:15:c7:a8:9b:90:e4:10:
         6e:26:a9:3d:46:66:82:61:be:b3:ff:13:e1:58:df:ca:3a:3a:
         57:77:07:6c:dd:c8:50:b0:3e:b2:28:ef:2e:3d:2c:99:ed:2e:
         ec:14:a7:ff:04:37:c2:75:47:87:fb:97:2f:0a:b3:fc:c2:1c:
         d1:0e:14:e6:83:de:39:25:c1:02:01:5c:28:d1:bf:60:20:ba:
         26:9a:0e:64:82:cd:5a:7e:e8:55:dd:a3:e8:77:c5:5f:ac:55:
         9a:90:53:ea:a4:5e:67:46:8e:dd:25:82:8d:74:f8:6d:70:5c:
         0b:96:bd:c2:f9:6c:40:5f:77:c8:83:f2:b7:73:f8:ef:db:8f:
         9f:b1:67:46:14:b9:30:7d:7c:9e:61:93:cc:cb:b6:34:b5:d7:
         57:77:d1:7b:02:41:db:c9:30:04:f2:ee:07:e3:27:66:a3:32:
         18:cf:a6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:40:56 2026 by rpki-client