Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft
File:                     5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft (raw, json)
Hash identifier:          5QCmrrzjisY+ydx8DemgHWeqpD8ZIY4vgkhQqd9+bp4=
Subject key identifier:   6E:5E:9C:B4:CB:2F:83:4C:12:2D:C6:51:79:C5:89:B9:77:7E:52:45
Authority key identifier: E5:A4:D4:F9:56:0B:5B:5C:5C:5F:E4:D0:61:B4:B8:81:C8:D2:23:52
Certificate issuer:       /CN=A91C8790/serialNumber=E5A4D4F9560B5B5C5C5FE4D061B4B881C8D22352
Certificate serial:       0566
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5aTU-VYLW1xcX-TQYbS4gcjSI1I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft
Manifest number:          055F
Signing time:             Tue 12 May 2026 23:29:10 +0000
Manifest this update:     Tue 12 May 2026 23:29:09 +0000
Manifest next update:     Tue 19 May 2026 23:29:09 +0000
Files and hashes:         1: 5aTU-VYLW1xcX-TQYbS4gcjSI1I.crl (hash: S7CkFaGxmFdt6V8AgzkNFcPAhZRc7IBQU/6SoA3UKXM=)
                          2: BA7E6B1A30B911EC974C3830C4F9AE02.roa (hash: YjQLIF4lrQHX8AithDMD5IxEV82+uXMqcaxvHxiWPso=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.crl
                          rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5aTU-VYLW1xcX-TQYbS4gcjSI1I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 23:29:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1382 (0x566)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8790, serialNumber=E5A4D4F9560B5B5C5C5FE4D061B4B881C8D22352
        Validity
            Not Before: May 12 23:29:09 2026 GMT
            Not After : May 19 23:29:09 2026 GMT
        Subject: CN=6a03b7c5-03a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:99:59:a6:57:08:f5:b5:e6:94:15:9e:8f:2a:
                    ca:4f:59:2f:7b:62:bd:f8:4a:97:12:74:8c:fe:f7:
                    59:02:32:13:6e:ae:65:bc:58:60:12:1f:ba:b4:dd:
                    c0:09:14:a8:22:8b:5c:64:2a:57:39:15:62:15:b6:
                    e8:6c:11:66:75:56:85:8e:30:c2:a7:6c:16:a1:97:
                    4e:4c:41:00:7f:37:b3:86:d8:d3:da:dc:03:23:05:
                    c5:53:1e:35:8c:d7:6c:ad:1c:b7:ab:a7:bb:eb:c2:
                    49:d0:e7:85:cc:40:c7:42:92:82:49:bd:3c:91:80:
                    d1:4f:56:d7:83:c3:fe:e8:d9:60:9d:dc:25:88:b8:
                    98:47:99:d5:ca:b0:b3:a0:df:8b:b0:86:ee:e4:e4:
                    f8:a7:f0:94:9f:0a:41:a6:7c:41:7f:40:0d:30:26:
                    75:07:54:94:57:bc:a5:25:86:51:cc:00:71:3b:b0:
                    16:f3:f6:ea:fe:4f:6a:49:3b:1a:07:64:46:58:ce:
                    8f:6b:3f:75:a7:ea:43:da:b2:ce:d5:55:9a:0d:e4:
                    cc:46:e9:c3:d6:58:9c:29:06:71:18:5f:e6:ec:78:
                    1d:1b:0c:6b:51:65:6c:29:9a:c2:e3:80:07:b2:98:
                    b2:04:bc:07:dd:57:a7:1b:90:3e:0f:8e:60:0f:8b:
                    c1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:5E:9C:B4:CB:2F:83:4C:12:2D:C6:51:79:C5:89:B9:77:7E:52:45
            X509v3 Authority Key Identifier:
                keyid:E5:A4:D4:F9:56:0B:5B:5C:5C:5F:E4:D0:61:B4:B8:81:C8:D2:23:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5aTU-VYLW1xcX-TQYbS4gcjSI1I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:ab:e8:6d:f8:06:4c:fa:bf:a6:0c:d1:80:51:f8:c8:86:da:
         a1:d8:d7:a6:2e:55:6a:b3:c8:28:ed:12:ef:74:b7:c0:e3:1d:
         91:22:f9:d6:57:58:a9:63:fd:50:c3:77:e7:fd:69:1a:78:0b:
         f8:78:2c:6e:01:ac:23:56:a4:d9:b0:c0:50:57:2f:cf:04:1a:
         5c:dc:39:fc:b2:5b:df:26:e8:c8:d0:77:67:d0:ae:b9:b3:a4:
         89:8e:bd:ee:ed:2d:03:cc:49:ea:8e:92:6b:8b:33:89:e9:f4:
         59:61:56:95:ec:05:f0:83:6f:05:f9:0f:15:cb:c3:22:d6:40:
         12:a2:3b:2a:65:fe:31:24:e9:0c:7f:95:7d:a1:a2:45:13:4a:
         74:c0:b2:7c:1d:1d:a2:e9:ed:31:44:7c:3a:bd:57:60:9f:df:
         4e:e7:31:83:cc:f6:97:40:3e:54:f4:93:f3:2c:ef:3e:3c:f6:
         51:13:85:20:22:00:40:94:c0:08:a5:ff:fe:30:b5:93:fa:be:
         56:37:4b:6c:4b:bf:48:b2:62:42:78:58:46:45:25:e6:eb:ef:
         c3:27:70:6f:84:0f:3a:67:25:3c:00:f4:f7:eb:30:53:f1:50:
         d1:1b:38:f3:f2:d0:5d:1a:ad:78:f0:25:6f:f6:6c:d1:e0:32:
         22:2a:65:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:15:42 2026 by rpki-client