Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft
File:                     5iRBKkJ5WJuewvqzIiurBibTElo.mft (raw, json)
Hash identifier:          G+EKfLVtibWqbLjyKFHfzBKkCUYMkhq2HAHizOm45sk=
Subject key identifier:   F7:CC:A3:8D:E4:3A:9E:48:33:4C:5F:73:D6:B4:CC:46:F9:1E:A6:9C
Authority key identifier: E6:24:41:2A:42:79:58:9B:9E:C2:FA:B3:22:2B:AB:06:26:D3:12:5A
Certificate issuer:       /CN=A9168336/serialNumber=E624412A4279589B9EC2FAB3222BAB0626D3125A
Certificate serial:       0D59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iRBKkJ5WJuewvqzIiurBibTElo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft
Manifest number:          0D45
Signing time:             Wed 22 Jul 2026 18:21:18 +0000
Manifest this update:     Wed 22 Jul 2026 18:21:18 +0000
Manifest next update:     Wed 29 Jul 2026 18:21:18 +0000
Files and hashes:         1: 5iRBKkJ5WJuewvqzIiurBibTElo.crl (hash: 1xYMvQPYVAwMcY3wRofKDt0lObiC0W+Fjt2hURV4X9E=)
                          2: 6B6223B294D011F08FAC1420C4F9AE02.roa (hash: ywPnX5HWIz7gB+GZOiMioEbYiFIq0HckI3yhWxQCoN4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.crl
                          rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iRBKkJ5WJuewvqzIiurBibTElo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:21:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3417 (0xd59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168336, serialNumber=E624412A4279589B9EC2FAB3222BAB0626D3125A
        Validity
            Not Before: Jul 22 18:21:18 2026 GMT
            Not After : Jul 29 18:21:18 2026 GMT
        Subject: CN=6a610a1e-f5ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d2:9b:0e:b6:d0:55:66:4f:c4:cf:c5:11:87:
                    a8:35:97:31:23:90:dc:48:ff:a2:8d:0c:ea:48:00:
                    b1:14:63:ac:e9:4b:78:1f:2d:3b:3f:b3:2b:f4:10:
                    cf:9b:07:86:9c:a6:2c:3c:50:be:51:56:9d:4b:56:
                    13:0c:2b:91:3d:b2:85:1d:10:2b:d9:b4:72:85:3f:
                    76:de:2a:52:0a:50:71:16:12:0e:16:56:fe:e2:61:
                    ba:9e:4b:dd:7c:03:37:60:0d:65:f0:77:0f:be:e1:
                    bb:51:72:1e:40:2c:9b:40:91:86:98:77:7e:12:51:
                    23:3a:7f:82:04:8a:54:84:ac:4a:bc:49:35:49:74:
                    4a:38:6c:0f:0c:f6:42:a2:8e:85:3e:d5:ce:a1:d9:
                    89:36:74:e4:be:5a:51:a5:b7:be:5b:e8:b9:61:78:
                    c5:28:2e:7d:6c:86:6d:43:11:21:b8:d1:96:c5:c7:
                    1f:8d:65:ed:c5:7f:d8:de:cd:f2:86:1b:8e:37:b5:
                    2b:8c:f3:70:30:aa:93:e7:eb:94:d5:30:29:03:3a:
                    db:fa:63:3a:b2:ad:63:cb:57:8e:c9:3f:a6:2b:f8:
                    2e:e7:bc:6e:f8:92:d1:f0:9e:83:82:15:8b:6e:c1:
                    ab:7d:99:53:d3:c5:21:42:51:11:93:51:2f:77:9f:
                    19:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:CC:A3:8D:E4:3A:9E:48:33:4C:5F:73:D6:B4:CC:46:F9:1E:A6:9C
            X509v3 Authority Key Identifier:
                keyid:E6:24:41:2A:42:79:58:9B:9E:C2:FA:B3:22:2B:AB:06:26:D3:12:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iRBKkJ5WJuewvqzIiurBibTElo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:4f:da:01:32:3b:f2:fc:36:f5:0f:bc:a9:77:a9:1f:f4:e2:
         8a:17:1d:84:8b:b1:e0:44:9e:d4:5f:b1:e2:7a:b5:d8:76:07:
         27:9f:8b:19:15:a9:9e:86:ab:9d:a0:59:96:7c:cc:aa:72:8a:
         56:ce:35:37:d2:5c:5e:7d:54:32:58:80:20:b7:48:c3:53:fb:
         5e:a5:5f:ee:fb:a5:3f:3d:fb:25:61:e5:55:03:75:02:2b:cd:
         48:c9:e7:43:c4:2e:1e:48:91:29:ff:45:ad:0c:53:4b:bd:71:
         e2:fc:6e:3c:ad:fb:27:f7:50:86:5b:d4:ce:5c:81:e4:62:8b:
         24:ac:d1:16:2c:f9:7b:45:65:72:b0:52:e1:33:bf:c2:da:2e:
         04:6e:12:4f:f3:91:de:58:6c:00:f2:8b:06:31:0e:e2:c5:0c:
         eb:03:66:f8:5f:71:40:51:dc:cb:cb:04:88:15:0d:25:81:75:
         64:75:40:1e:e2:88:d5:50:3b:4b:58:22:5e:e8:ea:73:c9:17:
         5d:1e:2b:1e:b1:90:04:97:a8:4b:e3:b4:8a:55:57:62:dd:5e:
         b3:c1:40:53:d3:03:49:f4:41:27:68:a1:a1:a1:aa:b3:7e:d1:
         00:2f:f6:57:da:be:72:62:81:5f:16:c8:60:bf:11:87:61:2f:
         3e:1c:7d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:31:45 2026 by rpki-client