Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft
File:                     l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft (raw, json)
Hash identifier:          YwKUGHk7HsxxDqhnkylYR35KpyFS4P9SnkZcgzEnEh4=
Subject key identifier:   32:9E:57:A0:F6:AA:46:EA:BD:68:15:7C:06:1E:92:3F:55:24:D4:F4
Authority key identifier: 97:95:8F:FF:E6:96:D8:0C:57:63:65:24:A4:6E:18:23:41:76:FB:C1
Certificate issuer:       /CN=A91309C9/serialNumber=97958FFFE696D80C57636524A46E18234176FBC1
Certificate serial:       04E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5WP_-aW2AxXY2UkpG4YI0F2-8E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft
Manifest number:          04DE
Signing time:             Thu 23 Jul 2026 00:35:35 +0000
Manifest this update:     Thu 23 Jul 2026 00:35:34 +0000
Manifest next update:     Thu 30 Jul 2026 00:35:34 +0000
Files and hashes:         1: l5WP_-aW2AxXY2UkpG4YI0F2-8E.crl (hash: 6hNOUHQmbVpRNn3vCvFigGjfw78FAzCyqQUL3fLuxZU=)
                          2: 46BFB17C739711ECAD333D27C4F9AE02.roa (hash: gIEs5PsSbdv2kd7fXZi9XdqKRPbKMGlmjiL9BhYFLAM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.crl
                          rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5WP_-aW2AxXY2UkpG4YI0F2-8E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 00:35:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1253 (0x4e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91309C9, serialNumber=97958FFFE696D80C57636524A46E18234176FBC1
        Validity
            Not Before: Jul 23 00:35:34 2026 GMT
            Not After : Jul 30 00:35:34 2026 GMT
        Subject: CN=6a6161d7-222a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:54:84:a9:05:5a:20:27:31:3f:4e:be:31:44:
                    e1:b7:6a:b3:6b:21:e1:2f:a8:f0:e1:36:83:f8:cb:
                    7f:00:18:50:b4:c8:e6:26:ee:c6:4a:0c:04:b8:d6:
                    a3:e4:43:2a:96:9c:24:4a:2a:57:b1:36:46:31:aa:
                    f6:9a:d4:19:a5:c9:05:5f:fb:54:61:3d:3b:f8:14:
                    18:5d:bd:60:74:ec:ab:64:b0:0c:07:a1:21:cc:f5:
                    97:2d:5c:aa:2e:d2:8b:27:1f:94:b4:2e:71:35:ef:
                    25:82:cc:fd:55:60:3f:92:08:08:d5:ae:c0:dc:b0:
                    a3:d5:5a:af:c7:3e:6e:f5:39:9f:0a:c8:ff:1e:ed:
                    f0:40:5d:73:90:03:67:2f:d1:31:00:58:08:a1:03:
                    09:fb:54:9d:4e:5e:d9:cd:f1:05:45:f0:6d:d0:c3:
                    9f:e1:d6:64:84:78:c7:b2:4e:73:dc:bd:32:57:a7:
                    58:53:f9:b7:a8:05:1d:ef:9c:71:f3:0e:c2:3a:72:
                    03:67:31:7f:88:3f:86:ee:28:e0:3a:24:17:c7:77:
                    d7:37:f8:62:0c:ca:87:e7:b0:4d:24:6f:94:af:d6:
                    5c:23:a2:ee:ac:70:83:be:42:3b:1d:8d:cf:b5:69:
                    da:e7:34:67:03:b4:0e:fd:a4:ce:8e:03:8e:3b:22:
                    05:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:9E:57:A0:F6:AA:46:EA:BD:68:15:7C:06:1E:92:3F:55:24:D4:F4
            X509v3 Authority Key Identifier:
                keyid:97:95:8F:FF:E6:96:D8:0C:57:63:65:24:A4:6E:18:23:41:76:FB:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5WP_-aW2AxXY2UkpG4YI0F2-8E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:96:98:48:86:fb:06:11:c8:bc:5f:b6:c8:b9:ad:0f:57:63:
         f6:6d:ad:e5:4a:b6:f9:5e:2b:b7:2e:60:e7:b5:53:56:a6:ad:
         21:3a:64:81:44:e9:27:1c:dd:7e:16:82:6b:fa:8b:70:13:02:
         d8:e2:3d:45:16:c3:a5:31:6e:ff:c5:c4:01:3a:ff:2c:ad:39:
         87:14:ed:46:8a:56:72:fb:a7:39:c5:10:12:49:96:7f:26:87:
         fe:1f:e1:a1:af:7e:e6:e7:ca:89:fc:cb:85:a4:18:03:c6:b6:
         e2:4a:2e:ff:a0:45:00:54:9e:43:c3:3f:83:9c:76:45:b7:6e:
         d2:65:03:fe:07:99:25:e4:f7:55:b0:7a:91:2d:68:fb:8d:98:
         93:18:46:d3:89:51:25:23:22:a8:66:1f:d5:2a:91:fd:2e:20:
         53:f3:63:72:eb:0c:13:f4:67:4a:4f:0b:ad:9a:b2:33:e1:d1:
         02:0f:56:1d:db:38:12:47:33:76:ea:cf:b6:f4:14:aa:af:ff:
         f6:89:3f:e0:b1:cf:0e:39:75:53:6a:1b:d3:b0:76:c7:1b:b7:
         b3:be:84:f0:7a:3c:bf:9a:48:cc:a9:3e:61:fd:b0:d2:21:02:
         41:6c:80:50:d4:4e:b5:2d:2a:3c:48:c5:56:70:33:c3:07:c5:
         29:12:be:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:29:52 2026 by rpki-client