Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6548/7DCF248A0D7C11ECBABDD56DC4F9AE02/5fjJ4D7R71BndlYU2mtRJq1vyz4.mft
File:                     5fjJ4D7R71BndlYU2mtRJq1vyz4.mft (raw, json)
Hash identifier:          ryNrceYu5g6RrzhobJbWOj3ULukzK/MNVLc8Z5Dg9XE=
Subject key identifier:   5D:FA:0C:4D:31:B8:57:60:7E:73:44:AE:97:73:9A:26:16:5F:6A:17
Authority key identifier: E5:F8:C9:E0:3E:D1:EF:50:67:76:56:14:DA:6B:51:26:AD:6F:CB:3E
Certificate issuer:       /CN=A91A6548/serialNumber=E5F8C9E03ED1EF5067765614DA6B5126AD6FCB3E
Certificate serial:       05A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5fjJ4D7R71BndlYU2mtRJq1vyz4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6548/7DCF248A0D7C11ECBABDD56DC4F9AE02/5fjJ4D7R71BndlYU2mtRJq1vyz4.mft
Manifest number:          059D
Signing time:             Tue 24 Mar 2026 22:53:40 +0000
Manifest this update:     Tue 24 Mar 2026 22:53:39 +0000
Manifest next update:     Tue 31 Mar 2026 22:53:39 +0000
Files and hashes:         1: 5fjJ4D7R71BndlYU2mtRJq1vyz4.crl (hash: O7/TsCPa0vf5f7c4Fgv4cIMZiM93VHP23FwYhSxBjrQ=)
                          2: E6EC55EE0D7E11EC94917272C4F9AE02.roa (hash: jn/vllQFJ5XLkWrLvgI/5TwZWD2l1+MF/RPG5p6TwR0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6548/7DCF248A0D7C11ECBABDD56DC4F9AE02/5fjJ4D7R71BndlYU2mtRJq1vyz4.crl
                          rsync://rpki.apnic.net/member_repository/A91A6548/7DCF248A0D7C11ECBABDD56DC4F9AE02/5fjJ4D7R71BndlYU2mtRJq1vyz4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5fjJ4D7R71BndlYU2mtRJq1vyz4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:53:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1444 (0x5a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6548, serialNumber=E5F8C9E03ED1EF5067765614DA6B5126AD6FCB3E
        Validity
            Not Before: Mar 24 22:53:39 2026 GMT
            Not After : Mar 31 22:53:39 2026 GMT
        Subject: CN=69c315f3-955d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0b:37:9a:72:4a:99:12:f1:1a:34:bb:d2:58:
                    9a:41:90:af:52:36:7d:0d:a3:b0:c5:10:f5:ec:6d:
                    16:23:79:89:4b:2d:64:08:99:43:51:4a:60:37:bb:
                    61:05:22:6c:e0:ab:63:f5:99:20:36:b9:04:ce:83:
                    2c:ae:13:ee:de:88:ed:65:b8:a5:1a:1c:a5:37:50:
                    8e:95:d2:94:9f:d0:67:8c:73:22:fd:be:bf:84:23:
                    d8:48:2d:47:44:95:5c:83:1d:88:a4:76:2a:0d:90:
                    16:d1:ad:35:e2:35:f6:e5:8a:b3:d6:2b:bb:1d:55:
                    60:c4:88:de:80:79:47:2c:dd:52:7b:fc:d7:fb:53:
                    6b:a2:ee:fd:c3:7f:01:e0:4a:7d:53:e4:9e:8a:e1:
                    64:26:8b:67:44:e4:ff:28:12:00:3e:ef:0b:33:71:
                    7a:0b:fa:32:6e:a8:ec:a3:b5:83:45:cd:08:40:af:
                    52:9d:fa:42:8e:34:6e:ff:14:e1:2d:73:bb:20:d7:
                    b2:39:6f:3f:bc:62:a3:20:67:fc:bb:d1:9c:1d:49:
                    37:c8:05:78:1e:cc:9e:9d:d5:e1:00:21:bc:97:e9:
                    c1:9c:4e:f4:3f:a8:de:95:97:56:48:17:f4:c9:84:
                    85:a6:e8:74:f8:78:ce:74:ce:29:78:4e:a0:33:08:
                    d5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:FA:0C:4D:31:B8:57:60:7E:73:44:AE:97:73:9A:26:16:5F:6A:17
            X509v3 Authority Key Identifier:
                keyid:E5:F8:C9:E0:3E:D1:EF:50:67:76:56:14:DA:6B:51:26:AD:6F:CB:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6548/7DCF248A0D7C11ECBABDD56DC4F9AE02/5fjJ4D7R71BndlYU2mtRJq1vyz4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5fjJ4D7R71BndlYU2mtRJq1vyz4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6548/7DCF248A0D7C11ECBABDD56DC4F9AE02/5fjJ4D7R71BndlYU2mtRJq1vyz4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:dc:16:ae:4c:23:18:41:81:9e:24:bd:7c:0d:84:46:20:6e:
         b4:35:10:72:17:cb:a1:3a:e1:5a:98:89:a5:e3:7d:02:8b:81:
         91:32:63:d5:a7:33:6c:a4:8d:b4:76:8e:15:3f:ab:be:95:9d:
         e1:bb:16:54:fe:c4:12:bb:e7:43:37:fa:ef:8d:fd:5b:b4:1d:
         36:d6:a1:0e:75:07:87:51:24:87:49:57:56:a0:fc:38:1d:43:
         9b:58:c2:7c:63:22:b8:dc:25:fc:7e:7f:b7:e4:7e:3f:05:b4:
         96:de:63:bd:ac:35:d4:22:aa:65:60:c7:b9:c2:01:5d:57:ec:
         37:78:1c:37:c7:5c:a3:df:46:6e:64:5d:d8:f2:9f:36:87:5d:
         5e:65:8c:df:2d:49:0c:80:83:3a:83:e4:1d:87:61:ac:16:f9:
         0a:3a:ff:94:08:3a:e7:db:6e:10:8e:db:72:83:7c:f2:01:7f:
         f1:d9:74:75:57:9a:ea:fc:b1:7e:69:d4:12:ec:74:5e:59:34:
         40:54:6f:4c:ab:22:3f:dd:44:6e:e8:3f:09:65:df:9e:3c:27:
         5b:83:50:08:0a:c3:0a:e5:50:3f:f1:9f:bf:4c:0b:12:bb:8f:
         c2:37:d0:cf:eb:df:bc:85:7a:be:a4:a4:06:0a:a4:cb:e3:0e:
         51:95:d4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:50:56 2026 by rpki-client