Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft
File:                     5r9G5TDfkimPrAMq-8mECcRDBDk.mft (raw, json)
Hash identifier:          VaDbcyTyzYCImHxXjqF5PUl8a8TnsYz3tVc7pfKEEb0=
Subject key identifier:   81:AF:12:AE:9C:A5:E4:01:1D:1E:BF:7C:05:D4:B0:6C:3F:BE:BC:F4
Authority key identifier: E6:BF:46:E5:30:DF:92:29:8F:AC:03:2A:FB:C9:84:09:C4:43:04:39
Certificate issuer:       /CN=A91527F9/serialNumber=E6BF46E530DF92298FAC032AFBC98409C4430439
Certificate serial:       3594
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5r9G5TDfkimPrAMq-8mECcRDBDk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft
Manifest number:          3575
Signing time:             Wed 22 Jul 2026 14:57:42 +0000
Manifest this update:     Wed 22 Jul 2026 14:57:42 +0000
Manifest next update:     Wed 29 Jul 2026 14:57:42 +0000
Files and hashes:         1: 5r9G5TDfkimPrAMq-8mECcRDBDk.crl (hash: zjZdwqQvHdeb/CnnREtBhelYnVAT8TD7qX1eUi6xzDk=)
                          2: 909C5126F0A711EEA6150174C4F9AE02.roa (hash: S2c0dPwfKB8uOTngnalR9yGh9E58M2GB2TBOuFJZKU0=)
                          3: AD5BA998D85D11EB8E31070BC4F9AE02.roa (hash: mZjZ+p8cLcbwXds5Q+V/zmBkA9l9nadihJZ6Y3qg9aQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.crl
                          rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5r9G5TDfkimPrAMq-8mECcRDBDk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 14:57:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13716 (0x3594)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91527F9, serialNumber=E6BF46E530DF92298FAC032AFBC98409C4430439
        Validity
            Not Before: Jul 22 14:57:42 2026 GMT
            Not After : Jul 29 14:57:42 2026 GMT
        Subject: CN=6a60da66-5b72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a4:98:f3:ab:16:52:4e:34:83:e4:14:68:da:
                    97:30:e3:04:f8:c7:99:f3:8a:47:9e:fd:b2:bd:74:
                    6d:08:9e:37:01:5f:fa:f9:3d:68:bc:a9:c2:4c:8f:
                    5f:65:1a:26:6c:48:52:4b:9c:45:70:9a:6d:ad:1e:
                    6c:a2:d6:ee:5b:b4:9d:80:6e:ed:5e:d9:40:f4:88:
                    11:ce:db:85:34:d7:11:e2:ed:f5:1d:cd:56:39:f8:
                    03:95:bb:ac:ec:6e:56:73:62:7d:7b:a9:67:4d:22:
                    d1:34:ec:b2:09:75:80:c6:f9:4f:16:fe:09:37:3f:
                    f9:65:d9:2f:c8:f8:59:0a:29:c3:18:56:6a:3a:40:
                    b9:67:e1:17:2c:17:72:12:44:6c:cf:54:52:9a:13:
                    84:31:7b:14:eb:83:f5:a1:7b:72:2c:e0:5d:e9:bd:
                    cb:1a:37:5c:7b:be:94:b8:dc:82:f8:c0:ed:36:de:
                    ad:05:68:18:41:21:b0:ec:f5:1b:b5:73:a9:7b:83:
                    26:1a:9c:9f:a2:17:5b:e1:ad:a3:2a:cb:ef:41:13:
                    5c:96:ae:1b:7d:c4:e0:c0:96:2f:0d:95:80:54:4f:
                    37:93:ba:00:44:5a:c8:60:bf:cb:f0:e4:0a:ee:27:
                    08:84:6b:db:be:0c:a9:df:d5:5b:f7:bd:58:4f:56:
                    6d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:AF:12:AE:9C:A5:E4:01:1D:1E:BF:7C:05:D4:B0:6C:3F:BE:BC:F4
            X509v3 Authority Key Identifier:
                keyid:E6:BF:46:E5:30:DF:92:29:8F:AC:03:2A:FB:C9:84:09:C4:43:04:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5r9G5TDfkimPrAMq-8mECcRDBDk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:0b:82:02:79:1e:6f:90:bb:01:4b:f3:21:57:e0:84:a3:17:
         cd:17:a5:9c:22:5b:c5:0c:c7:6e:3b:af:0d:b7:f5:5a:57:ea:
         9a:7d:98:73:90:85:38:06:bb:a6:03:30:c0:2c:5d:01:8f:19:
         cc:c5:38:53:46:4c:35:a4:b2:1e:d8:05:55:0d:73:1b:2e:b8:
         68:61:22:63:03:2e:e1:53:7f:46:83:82:97:16:e2:e5:a9:c3:
         b4:51:e4:6d:f6:c0:11:91:ec:9d:e0:2b:b7:68:04:d4:b7:a9:
         d7:91:52:0b:01:dd:ae:1b:12:24:9a:de:22:74:ba:ff:b1:70:
         45:03:28:8d:65:ba:90:92:50:28:c5:86:cb:a3:e8:de:67:c7:
         da:47:50:ed:22:71:9f:95:ea:ad:b0:62:e9:3d:b8:28:3d:9f:
         c7:26:d2:36:48:ea:77:cb:5c:07:36:54:b8:79:0c:69:4b:f2:
         f3:c0:3b:50:bc:a0:7b:3a:b1:86:8c:36:24:ee:f3:a4:dc:10:
         59:87:26:7f:ad:c5:06:99:e5:3e:a9:c5:cf:5f:c6:d2:2a:ff:
         a4:6c:26:69:3e:d2:a7:76:c9:e0:b8:18:af:b3:73:d5:fb:82:
         4c:65:7c:e3:ac:d5:43:db:17:d2:d6:5a:b1:6a:2b:ae:af:1f:
         a8:b1:84:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:54:08 2026 by rpki-client