Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.mft
File:                     2SQL5Scj5Rfx5UdaG8-UuPCMA4A.mft (raw, json)
Hash identifier:          8jlzd0eeWqzkxstxQnEzdlQwp1nXs/Mn1Bm4avsDJFA=
Subject key identifier:   A5:44:E9:8D:4A:19:94:E2:80:83:B9:96:82:A6:89:77:60:8E:95:41
Authority key identifier: D9:24:0B:E5:27:23:E5:17:F1:E5:47:5A:1B:CF:94:B8:F0:8C:03:80
Certificate issuer:       /CN=A9124D7C/serialNumber=D9240BE52723E517F1E5475A1BCF94B8F08C0380
Certificate serial:       60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.mft
Manifest number:          5E
Signing time:             Fri 25 Sep 2026 08:16:00 +0000
Manifest this update:     Fri 25 Sep 2026 08:16:00 +0000
Manifest next update:     Fri 02 Oct 2026 08:16:00 +0000
Files and hashes:         1: 2SQL5Scj5Rfx5UdaG8-UuPCMA4A.crl (hash: eTG3J+EecBY7CHz8Zb7CYEXEGDMiUMLuUeWJCt3A/QA=)
                          2: 7F2C6F04B0BA11F1BBB308266611F970.roa (hash: QuuI6x89fM2Me13ySpS2g80axscXabQ5MLnbeeYJ3Ko=)
                          3: 8C138F502CCA11F1960EC6ED91833773.roa (hash: xJmZuhv9rNcM/Fsd3fmDp03WFv+ujmJvez9T7ai4exw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.crl
                          rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 08:15:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9124D7C, serialNumber=D9240BE52723E517F1E5475A1BCF94B8F08C0380
        Validity
            Not Before: Sep 25 08:16:00 2026 GMT
            Not After : Oct  2 08:16:00 2026 GMT
        Subject: CN=6ab62dc0-5e24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:dc:2d:e7:87:43:29:b7:92:d3:20:35:39:1a:
                    56:48:bf:f2:3c:2f:bb:8c:db:1b:75:4a:28:a3:a4:
                    da:3f:74:cf:22:5a:eb:57:2b:b6:7f:83:fb:09:3b:
                    65:91:d1:b9:07:2c:0e:16:40:ef:08:de:8a:e6:9a:
                    04:7a:91:67:3f:b7:fc:d0:0b:34:95:5a:d5:37:62:
                    66:da:56:82:fc:e4:72:9b:4b:71:52:85:dc:66:42:
                    6c:5d:9d:0e:e7:34:69:aa:ed:0c:66:7a:b0:21:ae:
                    5a:0c:e0:3b:58:a3:e6:19:13:31:c5:d5:4a:de:52:
                    8b:cc:56:8a:d8:49:a4:7f:07:f1:bd:72:70:93:95:
                    5a:fc:3c:d7:3f:93:81:bf:b0:a2:64:c7:03:91:47:
                    a1:e3:98:ca:10:bb:f1:89:86:e1:d5:3f:06:5f:bb:
                    08:ed:a0:e9:92:c4:7a:a7:d9:90:5a:c5:7b:c2:51:
                    f3:7c:a5:5a:90:d1:72:33:79:21:b7:91:cf:4b:ef:
                    ca:1e:a7:7c:ed:3a:54:b9:0d:9d:63:23:c1:eb:c7:
                    8f:0b:36:6e:70:40:98:b9:10:37:bf:ba:ee:47:6b:
                    12:9d:c6:35:c2:ef:59:52:f2:46:e0:7c:9c:cc:5e:
                    72:8f:de:5b:bb:76:39:83:98:20:a6:ad:2f:e0:71:
                    e3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:44:E9:8D:4A:19:94:E2:80:83:B9:96:82:A6:89:77:60:8E:95:41
            X509v3 Authority Key Identifier:
                keyid:D9:24:0B:E5:27:23:E5:17:F1:E5:47:5A:1B:CF:94:B8:F0:8C:03:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:14:ba:f4:e1:b9:0c:f0:0e:10:eb:00:9d:a6:d7:99:fe:72:
         27:ef:26:55:2d:10:d2:55:c0:08:4c:b2:8a:bd:ce:53:17:30:
         1a:87:6a:7b:14:00:02:67:18:df:3d:7c:ec:02:f3:65:f5:d8:
         7f:6f:0a:2c:0f:c1:4a:2b:2c:3b:43:3c:25:b0:95:26:7d:46:
         0c:8f:09:57:12:a3:d4:25:7a:6e:ac:03:26:6a:f3:af:32:09:
         fa:5b:f1:c6:57:b7:57:e4:f3:b9:86:1a:a4:46:10:ad:4b:46:
         a0:95:83:08:20:87:f3:8b:ec:7b:5a:2b:c4:9f:d7:d6:1a:11:
         ce:16:e3:e3:27:c5:2c:5c:0b:20:bd:b2:20:a7:20:3b:69:49:
         6e:59:75:57:80:2a:94:80:4d:d4:6c:98:c2:47:e4:a6:fe:0f:
         18:6b:1b:75:43:80:fd:72:88:85:ef:37:70:ec:3f:de:c8:54:
         a1:32:19:af:c6:29:86:8d:c2:03:c7:42:06:66:2c:7c:c1:a4:
         93:81:45:9e:61:8d:c9:f9:9f:66:23:d0:6b:c4:5c:4d:51:90:
         f6:68:8f:2c:81:c4:91:b2:f2:d8:23:a8:b6:4b:9f:58:81:d1:
         38:c0:a8:ee:cb:7a:dc:c4:3c:87:02:aa:29:0a:33:c3:d0:ac:
         1b:af:fb:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:44:07 2026 by rpki-client