Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912C007/79977548B1A011F1B7370E9E7011F970/5lVtsG2j8X5FzKOeMi_ra-5tjVU.mft
File:                     5lVtsG2j8X5FzKOeMi_ra-5tjVU.mft (raw, json)
Hash identifier:          GhbyB5QGSaGBmqnktGX3lMppAuPu+COFTYkZpqRIHEc=
Subject key identifier:   BF:9C:FC:B3:FB:3A:02:ED:E3:34:8D:1C:E1:F2:F0:CC:47:DF:91:3D
Authority key identifier: E6:55:6D:B0:6D:A3:F1:7E:45:CC:A3:9E:32:2F:EB:6B:EE:6D:8D:55
Certificate issuer:       /CN=A912C007/serialNumber=E6556DB06DA3F17E45CCA39E322FEB6BEE6D8D55
Certificate serial:       05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5lVtsG2j8X5FzKOeMi_ra-5tjVU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C007/79977548B1A011F1B7370E9E7011F970/5lVtsG2j8X5FzKOeMi_ra-5tjVU.mft
Manifest number:          05
Signing time:             Mon 21 Sep 2026 09:15:17 +0000
Manifest this update:     Mon 21 Sep 2026 09:15:16 +0000
Manifest next update:     Mon 28 Sep 2026 09:15:16 +0000
Files and hashes:         1: 5lVtsG2j8X5FzKOeMi_ra-5tjVU.crl (hash: r5MbJ6HLGptaTGC/uBhHzT7jyR6cbN67FqKxtq5rX/k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C007/79977548B1A011F1B7370E9E7011F970/5lVtsG2j8X5FzKOeMi_ra-5tjVU.crl
                          rsync://rpki.apnic.net/member_repository/A912C007/79977548B1A011F1B7370E9E7011F970/5lVtsG2j8X5FzKOeMi_ra-5tjVU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5lVtsG2j8X5FzKOeMi_ra-5tjVU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 09:15:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C007, serialNumber=E6556DB06DA3F17E45CCA39E322FEB6BEE6D8D55
        Validity
            Not Before: Sep 21 09:15:16 2026 GMT
            Not After : Sep 28 09:15:16 2026 GMT
        Subject: CN=6ab0f5a5-a3df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:63:63:91:38:0e:57:09:f5:21:53:c9:ec:4b:
                    0c:7a:c7:05:39:14:a4:64:cc:a0:eb:60:14:8f:27:
                    54:85:f6:ba:a3:54:37:58:98:2c:5f:63:1c:96:0c:
                    eb:82:45:4a:b1:70:93:b2:a2:eb:60:5f:dd:a5:fb:
                    9c:57:7f:29:0b:6b:33:f7:71:95:a7:ee:2e:56:b9:
                    4f:90:0c:ff:94:b9:bc:2c:c2:5e:64:26:14:a0:93:
                    1f:4c:3b:38:b2:49:14:94:9b:3f:ec:37:46:bf:44:
                    2b:7d:3a:83:c5:70:4f:92:97:26:9d:3c:75:9d:a1:
                    56:6c:b6:0f:d9:d6:1d:48:c7:28:51:9f:03:bc:53:
                    9f:59:88:fb:51:d9:d2:98:bc:54:66:e7:85:2a:e0:
                    47:db:1a:9f:e0:24:54:e0:3a:0b:fa:21:65:79:98:
                    d1:6f:a1:ee:dc:0d:e2:25:31:60:48:98:bc:78:01:
                    21:d1:ab:42:a9:1b:cd:f7:3d:79:cd:c7:9b:be:08:
                    b9:fc:57:0b:48:a8:92:a1:ce:5a:f9:14:38:1a:65:
                    f8:93:e4:b8:11:5b:81:6c:fa:1e:66:f4:b8:21:ea:
                    0e:85:7a:01:da:0b:a8:a7:3c:ea:aa:3f:a7:eb:6c:
                    1b:2d:3d:c5:28:46:20:a3:3d:a8:29:b7:3e:26:57:
                    bc:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:9C:FC:B3:FB:3A:02:ED:E3:34:8D:1C:E1:F2:F0:CC:47:DF:91:3D
            X509v3 Authority Key Identifier:
                keyid:E6:55:6D:B0:6D:A3:F1:7E:45:CC:A3:9E:32:2F:EB:6B:EE:6D:8D:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C007/79977548B1A011F1B7370E9E7011F970/5lVtsG2j8X5FzKOeMi_ra-5tjVU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5lVtsG2j8X5FzKOeMi_ra-5tjVU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C007/79977548B1A011F1B7370E9E7011F970/5lVtsG2j8X5FzKOeMi_ra-5tjVU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:02:54:b9:c0:77:8e:54:5f:2e:ca:5d:38:de:6b:55:e1:5c:
         f5:a6:23:ef:7e:db:12:58:1a:53:43:10:3b:4a:b8:35:e4:71:
         d1:9e:27:0f:87:6d:91:d8:4d:1d:2f:36:4c:d8:d5:0b:6a:73:
         77:20:1a:ea:2f:35:b3:1e:bc:35:31:51:39:61:b0:c5:3e:f3:
         27:2f:01:2b:3e:c5:e9:7c:b5:f9:68:7d:48:8a:45:bc:4f:6c:
         36:56:2e:62:2a:da:0d:2e:2f:a7:85:63:f7:86:34:18:7a:9c:
         ae:1c:06:ec:79:91:66:b7:dc:0a:0c:7f:ee:b1:b9:b1:fe:7c:
         c3:b4:7a:8e:09:f3:8c:d0:1e:9d:2f:de:06:45:8f:d4:1a:60:
         cf:c7:d5:45:cc:11:25:4b:8f:fb:79:28:ca:06:3d:64:b6:e3:
         22:7b:2f:43:cf:e3:a5:df:e3:15:2d:06:36:97:1b:83:d4:de:
         3e:30:70:b8:45:c5:1b:82:b9:90:0d:eb:8c:9a:1b:7c:60:15:
         7e:34:17:01:7a:eb:c0:be:9a:40:52:1d:34:51:84:a1:30:ab:
         2b:7f:3f:b3:35:25:0f:b1:0c:e6:69:4a:9c:d3:65:4d:c9:5c:
         63:70:3c:ac:eb:fd:4e:bf:f6:0e:1e:43:11:74:48:3a:89:4d:
         42:40:0f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:45:44 2026 by rpki-client