Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft
File:                     5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft (raw, json)
Hash identifier:          oI6MzFZyWym1/Yt4WM/e0pgByR/fRlPfgHk1tvX5iwU=
Subject key identifier:   6F:EF:C1:84:A7:E6:52:20:3B:BB:82:27:E2:02:50:BA:10:F8:A5:83
Authority key identifier: E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03
Certificate issuer:       /CN=A91652F7/serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403
Certificate serial:       0989
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft
Manifest number:          0978
Signing time:             Wed 22 Jul 2026 20:29:35 +0000
Manifest this update:     Wed 22 Jul 2026 20:29:35 +0000
Manifest next update:     Wed 29 Jul 2026 20:29:35 +0000
Files and hashes:         1: 5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl (hash: XPPzZ+BXTEiGXdV4kyHL/Twb9Fz9oclIe46QqRFUqmM=)
                          2: A29A66FE2F1C11EDA3E29B09C4F9AE02.roa (hash: juRf6DKubWHLyUVCkZq0DoXL3LBiJ5IdHL3Dkg0ZIH0=)
                          3: A12DD18E2F1C11EDA3E29B09C4F9AE02.roa (hash: TRtCWEacfScERXGsANUVPFpqIEC3+bt+vk9acDdl/Bg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl
                          rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:29:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2441 (0x989)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91652F7, serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403
        Validity
            Not Before: Jul 22 20:29:35 2026 GMT
            Not After : Jul 29 20:29:35 2026 GMT
        Subject: CN=6a61282f-5cc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:47:e0:ee:b1:18:c5:02:01:7b:60:14:41:f1:
                    f2:63:56:93:ee:d7:f8:21:6c:96:c2:1f:84:74:49:
                    ee:da:6e:7b:79:5d:03:f4:ae:64:88:27:5f:51:d8:
                    1a:03:67:0a:58:d6:12:f4:ca:95:8d:67:74:06:7e:
                    bf:41:89:5b:0b:ea:f2:19:ae:86:69:ca:ec:35:b7:
                    48:fc:b9:04:e1:dc:0d:e4:45:08:fb:66:f6:0f:e2:
                    b2:12:22:f8:fe:a2:b4:4f:f8:23:fe:22:69:1f:ea:
                    da:44:7c:85:48:48:51:78:bc:b9:03:e3:09:36:94:
                    8c:1d:a0:5e:a3:b2:cd:ae:2e:e9:45:01:db:f9:6a:
                    0c:9f:ea:0c:f2:91:26:c4:c6:c5:ff:80:07:69:1b:
                    75:fd:ef:08:68:07:0a:c0:5a:90:f0:7a:67:5a:70:
                    e6:98:ed:2f:7e:50:b1:57:0c:06:ec:48:35:a9:8b:
                    39:76:09:fa:ad:99:10:b0:41:15:6b:1e:4d:ee:0e:
                    95:f6:c7:a3:ed:4d:cb:db:03:25:21:e7:7e:4e:6c:
                    a5:61:af:8c:65:0b:78:77:70:90:3d:cc:66:6a:74:
                    23:9a:d5:7f:1d:bf:c5:cf:b5:17:81:ff:2a:28:f4:
                    65:88:e3:86:8d:02:87:17:a9:90:55:2c:af:b2:cb:
                    80:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:EF:C1:84:A7:E6:52:20:3B:BB:82:27:E2:02:50:BA:10:F8:A5:83
            X509v3 Authority Key Identifier:
                keyid:E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:cd:00:7f:ce:51:28:91:5e:97:83:1d:44:3e:ae:02:e5:9e:
         e1:84:2e:b7:91:c9:8d:95:6a:a1:fb:12:3a:47:73:04:f1:75:
         e7:23:fa:c0:8f:7f:5c:8d:a7:19:18:2d:f9:95:15:95:50:a0:
         89:8d:8b:fc:7f:22:b0:77:ef:45:a9:9b:dd:05:81:cb:16:7e:
         5f:0d:54:af:a3:78:cf:5b:02:7d:38:68:3b:f5:7b:44:60:52:
         63:90:c6:e1:ab:40:40:3b:0a:dd:51:c4:91:2d:b8:9b:88:dc:
         34:fd:8e:a3:a7:d9:d8:a1:44:70:76:ba:75:3a:95:04:ec:c0:
         b5:2e:b1:3e:7a:57:da:3c:e4:a3:66:95:b4:56:47:52:1c:a7:
         a7:20:09:e2:10:ac:de:11:c9:95:1e:eb:80:d6:06:f0:80:22:
         98:19:d5:d8:27:1e:59:fd:db:3a:76:a9:2e:62:79:0b:b2:9c:
         e9:85:9b:d5:6b:fa:45:35:66:e4:9b:9c:bf:55:23:09:5e:ee:
         f0:57:27:f9:54:5f:ee:3e:3b:6a:9f:47:fa:bc:d0:0d:c9:df:
         cf:b0:d7:22:7d:cf:cb:81:ed:9a:5a:34:40:29:11:b9:14:f2:
         a3:fa:85:9d:e3:da:1f:1f:a5:6f:5f:51:a5:26:5d:fa:0a:25:
         e2:c0:5a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:09:18 2026 by rpki-client