Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft
File:                     5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft (raw, json)
Hash identifier:          Fp50wC96F9VvYbxNJ2pZBHymnSFe6RQrILK5DhRTmF8=
Subject key identifier:   7A:AF:13:12:8B:23:C9:F6:5F:26:5A:74:94:6B:78:56:A3:0F:4E:B3
Authority key identifier: E5:B1:CE:1D:45:39:18:19:5B:EB:5C:D9:0F:6D:87:9E:FE:99:10:A2
Certificate issuer:       /CN=A91DE5E8/serialNumber=E5B1CE1D453918195BEB5CD90F6D879EFE9910A2
Certificate serial:       025B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bHOHUU5GBlb61zZD22Hnv6ZEKI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft
Manifest number:          024F
Signing time:             Wed 25 Mar 2026 01:44:33 +0000
Manifest this update:     Wed 25 Mar 2026 01:44:33 +0000
Manifest next update:     Wed 01 Apr 2026 01:44:33 +0000
Files and hashes:         1: 5bHOHUU5GBlb61zZD22Hnv6ZEKI.crl (hash: HiXCMUlsugaye6c6zSB6J8aKgzRplvHu3Xm8wJjo5Ds=)
                          2: 785B44D6F2AF11EF97443030C4F9AE02.roa (hash: yzmWg50nzv8Dnad8AXsujO//BFKjYq1nis/lix16bcM=)
                          3: B264EB66A30911ED99A82087C4F9AE02.roa (hash: Qsg2AMGaV0HzjGdO1Hutn0CHA9Q/KYFBqKZc552p7Mk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.crl
                          rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bHOHUU5GBlb61zZD22Hnv6ZEKI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:44:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 603 (0x25b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE5E8, serialNumber=E5B1CE1D453918195BEB5CD90F6D879EFE9910A2
        Validity
            Not Before: Mar 25 01:44:33 2026 GMT
            Not After : Apr  1 01:44:33 2026 GMT
        Subject: CN=69c33e01-285b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1d:c5:7d:6f:8c:bc:db:42:0a:cb:42:e3:a2:
                    9d:65:1b:aa:5c:af:d5:63:4c:d5:86:20:54:5e:bb:
                    68:27:50:de:66:e9:5e:c7:65:f7:f2:2c:42:93:d2:
                    dc:5f:b7:d6:43:2d:79:a2:19:43:10:2a:af:5b:a9:
                    2d:fd:a4:89:06:17:f1:40:53:bc:c3:93:99:76:5f:
                    9d:be:c9:cf:23:58:01:d4:ce:2d:10:0e:43:b4:92:
                    1a:55:df:f4:0f:de:7c:85:b4:36:2a:da:01:c3:07:
                    97:ab:2b:38:c5:23:84:ba:06:c2:d3:64:0d:ec:9e:
                    8e:a1:e3:b4:a0:6d:eb:28:2f:0a:09:d8:1d:85:ae:
                    c6:98:12:c9:56:3d:61:cb:97:e1:65:8e:ee:b8:93:
                    61:3f:71:6b:92:3f:73:10:41:cc:a4:7f:57:2d:a7:
                    0b:fa:ab:c7:19:4c:68:2f:c1:74:0f:cc:88:ea:16:
                    a4:69:6d:66:78:eb:ea:86:6a:53:0b:12:6f:b4:e2:
                    44:1b:3a:62:eb:42:52:5f:83:8c:9a:58:e4:38:e1:
                    34:e9:27:0d:72:37:38:ab:82:e6:5f:ee:86:9d:2f:
                    15:0a:cd:84:b1:14:db:9c:e9:b1:ca:5a:d2:b1:3a:
                    e2:05:a3:a3:a2:fc:dc:ac:7e:d7:ed:49:c7:55:0b:
                    0d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:AF:13:12:8B:23:C9:F6:5F:26:5A:74:94:6B:78:56:A3:0F:4E:B3
            X509v3 Authority Key Identifier:
                keyid:E5:B1:CE:1D:45:39:18:19:5B:EB:5C:D9:0F:6D:87:9E:FE:99:10:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bHOHUU5GBlb61zZD22Hnv6ZEKI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:9e:8a:7d:14:55:d0:7c:84:a2:7d:67:b9:e5:47:6b:19:c2:
         d4:5b:b1:bf:d5:64:0b:8a:57:15:c1:75:0c:b8:b9:85:a8:2e:
         b2:9f:a1:f9:47:51:54:ca:55:e8:2e:c7:cf:29:d2:c4:f9:89:
         1f:97:bf:25:4d:e2:c1:7a:5f:2e:26:2d:ba:bb:e4:3b:39:d1:
         cc:b8:6e:43:86:54:44:db:fe:3d:c6:b6:5f:a6:9c:24:3a:51:
         6b:f0:c0:69:65:ab:66:52:06:2a:d4:f7:cd:e1:1f:e6:b5:25:
         5b:dc:68:26:67:8b:13:87:2c:a3:af:57:dd:fe:84:60:3e:f5:
         13:cb:37:5d:26:6a:6b:80:1b:de:2b:bd:f3:26:50:b2:4d:44:
         c1:74:16:56:2e:c8:b8:86:dd:c0:99:d7:79:d2:d0:a7:1d:85:
         02:19:4b:5e:7c:b6:cc:66:63:d9:3c:36:0c:54:0f:57:d2:3d:
         59:b5:8b:2c:87:4e:7a:37:8a:60:c1:6a:8d:ee:0d:09:06:30:
         d9:ea:c2:c3:e7:ae:e3:75:ec:d7:74:4b:5d:e9:d5:5b:90:05:
         a4:ec:73:d8:29:96:38:67:d2:1c:82:a8:74:65:70:65:c6:5b:
         36:82:e9:2b:1e:99:80:00:48:3a:b9:6a:d8:5e:ae:6e:bc:1a:
         ce:8a:71:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:05:10 2026 by rpki-client