Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
File:                     C5I347CGtYw82c5v1JrCYffVJaM.mft (raw, json)
Hash identifier:          R/J8cwag2fCqCFYUXKJCcVYHePhQbfbjhXDqyj1X0Oc=
Subject key identifier:   4E:34:75:92:41:B3:05:27:28:91:AC:85:61:17:B0:86:51:AA:49:BC
Authority key identifier: 0B:92:37:E3:B0:86:B5:8C:3C:D9:CE:6F:D4:9A:C2:61:F7:D5:25:A3
Certificate issuer:       /CN=A91F08FA/serialNumber=0B9237E3B086B58C3CD9CE6FD49AC261F7D525A3
Certificate serial:       EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
Manifest number:          DB
Signing time:             Wed 25 Mar 2026 05:53:20 +0000
Manifest this update:     Wed 25 Mar 2026 05:53:19 +0000
Manifest next update:     Wed 01 Apr 2026 05:53:19 +0000
Files and hashes:         1: C5I347CGtYw82c5v1JrCYffVJaM.crl (hash: ftOvheXhSj6AcPH8u5Drdn7o+ZlUcbEZKCG6kdaJ0JE=)
                          2: 24E20F9E6B7011F0ACA1BB56C4F9AE02.roa (hash: RLjdUAVnjKgzwqmaXAIPV1P+6YSNLAkKqfL9Zn2hSIQ=)
                          3: 9C9C1046F7CD11EF9245601CC4F9AE02.roa (hash: DZs/ioNjiGTQdREG+zE+daNHAc/dwChZtpeTTorEq9w=)
                          4: B4F27262FA2911EFA783CE2DC4F9AE02.roa (hash: uufA5ZmNxri3hkizmrTV+/5I7T9shm+y03oLPhZQF5k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.crl
                          rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:53:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 235 (0xeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F08FA, serialNumber=0B9237E3B086B58C3CD9CE6FD49AC261F7D525A3
        Validity
            Not Before: Mar 25 05:53:19 2026 GMT
            Not After : Apr  1 05:53:19 2026 GMT
        Subject: CN=69c37850-0119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:da:c6:0b:a1:4e:9e:9a:e4:78:b4:b8:e2:97:
                    db:19:5b:14:79:31:f7:20:b3:8d:0b:33:ed:d6:f7:
                    45:b1:f8:38:ba:5e:cb:02:01:12:ae:48:a0:2d:e4:
                    95:de:50:19:4b:75:15:f0:72:3b:de:8a:10:99:7f:
                    e2:25:bf:fd:b4:fb:d8:db:4d:3a:1b:a5:c1:86:e5:
                    7a:e1:07:45:69:92:2c:ca:83:b0:ae:53:68:f0:a0:
                    3c:ee:b8:62:35:0e:4b:c6:4b:33:df:03:a5:a4:87:
                    ca:17:47:2a:ff:59:db:2d:a4:5d:ff:22:34:a5:6d:
                    27:e9:2c:db:98:43:12:26:c9:c3:61:c2:97:c0:1f:
                    3d:23:e0:00:07:fe:dd:ba:64:34:d1:3a:8e:9e:f9:
                    f0:e6:97:a7:08:1e:26:7e:6c:3a:01:1b:b6:17:a1:
                    71:28:16:20:83:5f:63:f8:57:82:12:1e:64:7d:35:
                    9a:34:0a:5b:31:6f:b6:fb:d8:29:32:41:e9:5b:40:
                    c3:56:3d:2f:de:49:32:3b:44:3f:0c:24:db:9f:97:
                    30:28:70:7f:26:a0:71:18:87:db:ad:89:6d:5d:02:
                    45:3d:61:8b:b5:5e:42:53:22:65:27:99:7d:78:63:
                    bf:00:cd:8e:80:e1:88:90:75:1a:89:da:c6:9b:ba:
                    77:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:34:75:92:41:B3:05:27:28:91:AC:85:61:17:B0:86:51:AA:49:BC
            X509v3 Authority Key Identifier:
                keyid:0B:92:37:E3:B0:86:B5:8C:3C:D9:CE:6F:D4:9A:C2:61:F7:D5:25:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:9b:ff:e1:20:97:ef:5e:db:b5:8f:f3:8f:82:57:f9:f9:f5:
         9a:84:0c:b3:67:d3:1c:eb:2f:5f:45:6a:81:67:e7:7c:9b:8b:
         8f:8a:be:4b:1e:0f:0e:ab:94:f7:c9:7f:f4:72:54:1c:39:ab:
         d4:fc:51:5a:44:57:73:41:a6:16:6a:09:1a:53:be:f5:c4:99:
         f5:48:3f:82:3c:ae:d0:83:7d:90:55:4b:de:a9:d0:f3:a3:ef:
         dd:67:97:f6:80:7c:e4:fc:fd:c1:41:30:b3:b1:e8:0f:f3:ef:
         6f:d2:15:63:83:f8:e1:03:d0:b5:68:15:e1:7b:e9:44:c6:05:
         24:1f:f6:70:1c:b0:34:b5:c9:47:6e:4d:c6:83:82:cc:3b:e9:
         d7:22:52:88:42:a9:89:43:91:44:58:e7:25:4f:fa:4f:5b:9d:
         99:86:45:0e:1f:c8:55:a0:b2:79:94:35:f8:83:ee:d4:2c:e5:
         cd:8b:00:d2:32:28:86:85:fa:d8:02:e5:97:2a:51:ba:54:90:
         1b:d1:6a:5c:a2:9f:8b:ec:3e:c0:51:b5:e2:d2:ef:10:6e:01:
         14:17:f8:3c:88:5b:2b:a8:e1:07:ee:d5:4c:f3:69:dd:9a:98:
         43:c7:6b:27:28:7b:f8:20:64:2a:1e:1b:6b:ef:0d:e3:b0:bb:
         e2:4a:67:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:35 2026 by rpki-client