Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.mft
File:                     5B7XVgdLN63ceU-UC9H1Pj9na5M.mft (raw, json)
Hash identifier:          lsUeWkG9VqPoWZ7oiwH0RxtbUrN/lw3yf8042dptxx8=
Subject key identifier:   91:42:DF:D5:9D:B5:A8:2C:D3:48:1D:54:83:07:9A:E8:A7:E0:ED:BC
Authority key identifier: E4:1E:D7:56:07:4B:37:AD:DC:79:4F:94:0B:D1:F5:3E:3F:67:6B:93
Certificate issuer:       /CN=A913B5C7/serialNumber=E41ED756074B37ADDC794F940BD1F53E3F676B93
Certificate serial:       01DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5B7XVgdLN63ceU-UC9H1Pj9na5M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.mft
Manifest number:          01D7
Signing time:             Sun 27 Sep 2026 04:01:31 +0000
Manifest this update:     Sun 27 Sep 2026 04:01:30 +0000
Manifest next update:     Sun 04 Oct 2026 04:01:30 +0000
Files and hashes:         1: 5B7XVgdLN63ceU-UC9H1Pj9na5M.crl (hash: ATSWKof2JMHQsQd23VKEe0JiDvm66L8/7VYtp/mCMIY=)
                          2: B0CE94A0E80911EEADE3420AC4F9AE02.roa (hash: 4FDg9GWcMF+h0lyc+szQBWG2v8yyKRA36ab+Hfgr7nM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.crl
                          rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5B7XVgdLN63ceU-UC9H1Pj9na5M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 04:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 476 (0x1dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B5C7, serialNumber=E41ED756074B37ADDC794F940BD1F53E3F676B93
        Validity
            Not Before: Sep 27 04:01:30 2026 GMT
            Not After : Oct  4 04:01:30 2026 GMT
        Subject: CN=6ab8951b-051a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:40:bb:ec:c1:dc:9f:79:59:41:fb:21:5f:d8:
                    a9:f8:ba:e9:ce:55:e6:e3:58:e2:04:0b:df:8e:a4:
                    df:da:51:41:64:ba:0b:e3:8e:43:48:3d:25:86:5f:
                    93:30:2b:39:01:4d:c3:9e:37:e7:19:f7:52:6b:96:
                    70:8c:bd:91:e4:ce:47:cc:a9:7d:15:84:dc:ba:6d:
                    17:7e:24:e9:78:a7:0f:af:20:21:ce:9f:d2:c5:29:
                    3b:85:0d:53:ea:2d:3f:7d:67:13:b8:33:86:30:23:
                    c7:48:4d:2e:28:f1:a4:2a:21:ff:cb:ab:7a:8b:40:
                    cd:95:a9:f9:9d:bf:22:4b:94:d7:3f:d3:50:2d:5a:
                    f0:ee:90:bf:c4:f5:ee:e1:a6:1a:a7:09:ce:49:cb:
                    5c:2d:11:ae:de:9d:d4:a2:cd:83:9a:85:49:21:a9:
                    ed:92:9d:36:87:5a:f8:68:da:20:ea:20:64:fa:65:
                    6b:a7:2a:dd:a0:49:2c:86:0f:9d:c9:fc:d4:7b:2e:
                    88:0f:ad:9c:df:8d:19:98:cc:37:0b:81:f7:c5:43:
                    2f:d2:ae:8b:a3:88:6a:c4:0b:9e:10:b0:7f:93:fa:
                    eb:57:69:bc:d0:b7:65:19:f0:ee:8e:4c:68:ae:c7:
                    52:79:cc:00:e1:ed:b4:ff:25:37:f4:f5:40:54:98:
                    4f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:42:DF:D5:9D:B5:A8:2C:D3:48:1D:54:83:07:9A:E8:A7:E0:ED:BC
            X509v3 Authority Key Identifier:
                keyid:E4:1E:D7:56:07:4B:37:AD:DC:79:4F:94:0B:D1:F5:3E:3F:67:6B:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5B7XVgdLN63ceU-UC9H1Pj9na5M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:f8:01:e8:39:36:0d:0f:3a:de:ba:d9:3d:cf:af:20:a3:e9:
         fd:c6:74:2f:da:ac:71:ff:71:ae:41:ca:a9:f4:c8:4d:e4:cf:
         f3:e0:e4:5e:cd:a0:3d:93:8f:ac:34:63:fd:fd:84:cb:ca:13:
         77:0a:a2:37:2b:a9:da:61:ef:ef:f0:56:f4:40:35:fa:e9:bf:
         13:29:9d:fe:04:23:e5:fb:e3:41:c8:d1:5d:5a:75:8a:0d:13:
         87:62:ed:78:4c:70:d8:a4:89:3b:a7:cf:55:82:78:1d:db:06:
         eb:08:21:40:84:42:a5:a5:71:2c:2b:cc:81:3c:87:78:85:b1:
         4b:38:03:00:de:f6:cc:82:af:ec:ef:26:8e:20:bc:3b:0d:31:
         ac:a6:85:29:06:c6:11:26:5a:5e:1c:87:cb:e1:e6:19:b4:ab:
         7c:26:29:21:f2:82:83:f7:8e:6c:97:5e:19:9e:dd:b4:6e:69:
         5e:32:d8:57:98:f7:00:69:80:e5:bf:fc:d1:4f:f4:25:d8:12:
         2c:03:81:2d:ea:c6:f1:66:6d:a1:70:d0:c3:b1:e1:a6:ce:bb:
         a0:83:11:51:77:96:b6:bb:51:12:b3:5d:4f:1f:87:67:8a:aa:
         62:a3:df:af:84:ac:7e:39:9d:68:8b:50:e9:33:ce:1f:be:de:
         a3:d8:00:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:12:32 2026 by rpki-client