Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0727/EE4443C249FD11F1A0F1D14DBD833773/5J1jIBhnqR-y6ZUAKnzLU_NB51s.mft
File:                     5J1jIBhnqR-y6ZUAKnzLU_NB51s.mft (raw, json)
Hash identifier:          JFgFFekWee0v7FFbX73Z+eqR3H9EeSxsLUK2xOb8xmU=
Subject key identifier:   58:8E:62:47:1A:2B:75:BF:F8:B5:77:3C:E2:89:3C:18:53:FC:E9:0F
Authority key identifier: E4:9D:63:20:18:67:A9:1F:B2:E9:95:00:2A:7C:CB:53:F3:41:E7:5B
Certificate issuer:       /CN=A91E0727/serialNumber=E49D63201867A91FB2E995002A7CCB53F341E75B
Certificate serial:       08
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5J1jIBhnqR-y6ZUAKnzLU_NB51s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0727/EE4443C249FD11F1A0F1D14DBD833773/5J1jIBhnqR-y6ZUAKnzLU_NB51s.mft
Manifest number:          06
Signing time:             Mon 11 May 2026 09:25:54 +0000
Manifest this update:     Mon 11 May 2026 09:25:54 +0000
Manifest next update:     Mon 18 May 2026 09:25:54 +0000
Files and hashes:         1: 5J1jIBhnqR-y6ZUAKnzLU_NB51s.crl (hash: ZJzqIKk12Dtv9YWoudmHcOgr8sFnv6RYp/il2U7txv4=)
                          2: 36ACD53E49FE11F1B48580CBBD833773.roa (hash: 2h8Ac5NQWyyJjC325JvGwENZEWd/12mzHWYCD7GMM3Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0727/EE4443C249FD11F1A0F1D14DBD833773/5J1jIBhnqR-y6ZUAKnzLU_NB51s.crl
                          rsync://rpki.apnic.net/member_repository/A91E0727/EE4443C249FD11F1A0F1D14DBD833773/5J1jIBhnqR-y6ZUAKnzLU_NB51s.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5J1jIBhnqR-y6ZUAKnzLU_NB51s.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 09:25:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0727, serialNumber=E49D63201867A91FB2E995002A7CCB53F341E75B
        Validity
            Not Before: May 11 09:25:54 2026 GMT
            Not After : May 18 09:25:54 2026 GMT
        Subject: CN=6a01a0a2-be02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f1:98:7d:0e:ad:b2:19:bc:2d:56:4d:3a:fb:
                    b2:c5:c8:9c:8f:15:ef:d5:77:3d:9e:a7:8c:f7:d0:
                    94:6d:64:6c:79:d0:33:65:ec:45:31:ac:98:f5:b5:
                    9e:46:54:84:29:de:9c:fe:57:fb:3f:d5:dd:e5:d5:
                    8f:df:a1:37:8b:ae:bd:c6:88:39:fe:69:f2:20:7b:
                    2d:57:2c:fc:99:24:5e:39:6a:6b:5f:3c:de:76:cb:
                    e2:2c:1c:c3:42:9e:f5:f2:ac:42:f5:53:94:b5:bd:
                    1b:70:66:10:73:28:e4:45:ac:fd:49:d8:e4:b0:78:
                    4f:fa:c6:88:c5:27:a1:3c:3e:bb:d8:61:81:8b:87:
                    c4:38:46:cd:43:35:8e:7d:c4:27:0a:5f:40:d8:1e:
                    2d:fd:67:c2:8e:49:5f:82:94:b0:b6:68:90:1f:34:
                    fb:c8:13:d6:d3:f6:4e:3b:b6:8b:51:b1:65:ff:71:
                    96:65:0c:ea:34:5d:2d:05:64:74:65:99:c0:fc:ab:
                    70:b1:01:63:d8:02:e8:51:12:09:db:8f:8c:e6:11:
                    72:a1:62:06:51:9c:bd:30:61:5a:55:ae:4e:1e:8c:
                    01:9b:bc:9c:44:0a:01:b4:8a:30:30:d4:70:d1:af:
                    30:66:f3:e5:13:84:57:0c:f7:1f:1e:c1:fb:d5:ad:
                    36:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:8E:62:47:1A:2B:75:BF:F8:B5:77:3C:E2:89:3C:18:53:FC:E9:0F
            X509v3 Authority Key Identifier:
                keyid:E4:9D:63:20:18:67:A9:1F:B2:E9:95:00:2A:7C:CB:53:F3:41:E7:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0727/EE4443C249FD11F1A0F1D14DBD833773/5J1jIBhnqR-y6ZUAKnzLU_NB51s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5J1jIBhnqR-y6ZUAKnzLU_NB51s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0727/EE4443C249FD11F1A0F1D14DBD833773/5J1jIBhnqR-y6ZUAKnzLU_NB51s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:55:56:80:10:dc:1d:52:12:51:38:68:4a:71:cc:09:28:14:
         0c:30:8b:49:eb:57:c4:aa:bb:7c:71:00:f4:2b:59:34:dd:85:
         ff:96:84:10:bd:47:b2:d9:c0:fe:ea:67:c2:2f:54:5a:e5:7f:
         08:43:00:b9:82:91:5d:77:fd:3e:ba:8d:ec:d2:47:c1:6b:ee:
         99:13:83:70:d7:1d:75:14:ac:5c:f0:3d:52:6b:a4:8c:d4:3b:
         22:35:85:0b:39:c7:ee:93:be:69:52:b7:37:cf:c4:47:22:8c:
         fc:f9:0f:a4:d8:3e:c2:b1:ec:8e:f7:30:b9:c8:63:b3:2a:03:
         94:18:e1:5b:d6:6a:55:6d:1c:fa:f2:92:eb:53:af:46:12:a9:
         07:46:d2:c6:07:e2:2e:1e:8e:d9:c0:3e:23:9f:ff:60:df:ed:
         c5:ef:60:8b:08:a5:95:8b:1d:51:5c:14:ab:40:f4:44:1c:d1:
         09:12:d3:f8:f4:f3:e2:59:4b:b6:94:3c:c0:c3:18:95:37:20:
         b6:0c:18:95:13:4d:0c:97:16:a5:24:fc:7d:ed:45:31:b8:31:
         6b:72:60:3d:de:a5:cb:0f:8a:76:7f:b4:bd:3d:de:ac:99:81:
         c7:fa:c2:c8:54:6c:40:60:79:4f:fb:8d:10:bd:f2:5c:ec:92:
         85:04:56:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:10:42 2026 by rpki-client