Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.mft
File:                     5sRskdEtWFoSsFVpYh3uGtP4kI4.mft (raw, json)
Hash identifier:          Euw6pJO8tPpoAJQR7mwZeSbuxsrPE6myDKrj7i04F2c=
Subject key identifier:   E8:96:DE:2D:93:99:99:B9:C4:42:21:28:85:8C:62:06:76:7B:06:8D
Authority key identifier: E6:C4:6C:91:D1:2D:58:5A:12:B0:55:69:62:1D:EE:1A:D3:F8:90:8E
Certificate issuer:       /CN=A917A362/serialNumber=E6C46C91D12D585A12B05569621DEE1AD3F8908E
Certificate serial:       020C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5sRskdEtWFoSsFVpYh3uGtP4kI4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.mft
Manifest number:          0205
Signing time:             Thu 23 Jul 2026 04:24:28 +0000
Manifest this update:     Thu 23 Jul 2026 04:24:27 +0000
Manifest next update:     Thu 30 Jul 2026 04:24:27 +0000
Files and hashes:         1: 5sRskdEtWFoSsFVpYh3uGtP4kI4.crl (hash: BbeVDPhPjT/HydhlPH663/bSdZD8USdW4f+QfmrXBxc=)
                          2: 1B299892726F11EEB1217365C4F9AE02.roa (hash: HLST1p2Y6kJdvf5EsBXPMDmNGIMfeuDnuHY6Q9pEH8E=)
                          3: 8F1936B085C511F18F74294165A30FBC.roa (hash: yq2YsrwxDIYpE24W2HFyIqdk2qgElDz+nfdiRK+DTx4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.crl
                          rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5sRskdEtWFoSsFVpYh3uGtP4kI4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:24:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 524 (0x20c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A362, serialNumber=E6C46C91D12D585A12B05569621DEE1AD3F8908E
        Validity
            Not Before: Jul 23 04:24:27 2026 GMT
            Not After : Jul 30 04:24:27 2026 GMT
        Subject: CN=6a61977c-899f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f9:c1:67:1f:98:cb:bd:4c:7e:85:6f:9c:16:
                    cb:5d:66:02:be:c1:1a:2f:34:0e:9e:10:14:07:54:
                    ef:a3:18:98:ff:00:a2:c9:30:fe:36:53:c6:a7:35:
                    7a:65:b7:d7:b4:dd:f3:49:5a:22:62:2c:26:b9:76:
                    24:7d:96:40:49:99:b6:9f:c2:74:e5:09:6e:12:ff:
                    b7:b3:07:f0:61:1e:c5:56:50:b3:db:e4:68:d5:79:
                    9a:2c:26:7d:3b:c6:12:0d:0d:2f:71:e6:9c:c3:96:
                    cf:77:12:f4:89:b5:4a:dc:7d:ee:43:3b:6d:77:34:
                    d1:9f:a8:bc:87:7f:33:a0:d9:2f:fc:6c:a1:8a:7f:
                    83:c2:f7:04:f2:6d:a4:c0:a0:7f:44:06:98:8e:53:
                    4d:e8:75:91:e9:e7:eb:3a:1b:82:82:7f:19:38:2b:
                    4e:33:ab:b0:89:c2:e8:e7:f9:2f:bf:8c:0d:ca:2c:
                    23:da:60:bb:a7:36:5d:c1:40:2b:a3:63:cf:17:a4:
                    fe:e3:7e:20:a0:e3:ae:2b:e6:19:60:e7:ab:92:5a:
                    cd:70:f0:af:6d:57:2e:a7:cf:91:72:03:58:65:3a:
                    61:05:96:b5:0b:29:7b:42:f7:b7:f3:10:0a:2c:14:
                    a8:dc:3d:dd:a5:b2:62:fc:bd:52:60:e2:40:f9:5e:
                    35:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:96:DE:2D:93:99:99:B9:C4:42:21:28:85:8C:62:06:76:7B:06:8D
            X509v3 Authority Key Identifier:
                keyid:E6:C4:6C:91:D1:2D:58:5A:12:B0:55:69:62:1D:EE:1A:D3:F8:90:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5sRskdEtWFoSsFVpYh3uGtP4kI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A362/7CBA4C4C726E11EE9FE35061C4F9AE02/5sRskdEtWFoSsFVpYh3uGtP4kI4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:41:61:64:bd:0c:d7:15:dd:01:23:90:bc:24:4e:fa:60:e8:
         ea:41:b0:40:99:fc:81:3f:69:9e:9d:76:8c:1b:68:f9:6d:17:
         60:ad:d1:73:e5:00:e6:c9:9c:ea:0d:8c:e8:41:be:ac:37:c4:
         19:16:cc:12:7b:f4:d5:da:f8:84:42:88:2d:30:29:22:82:e0:
         6d:f9:f4:7d:f8:3c:08:64:bb:75:25:81:2a:8a:bf:75:67:73:
         ad:79:84:c9:b9:aa:38:a0:a7:b8:99:e7:94:f3:dc:2c:e0:ef:
         bd:e5:bf:f1:ad:fa:c9:0e:bb:e7:ee:61:52:10:22:40:22:ad:
         ba:42:b6:e4:0f:86:fb:cd:1b:ea:c0:da:f7:dd:f0:80:29:e5:
         df:5d:8b:63:b0:00:c0:c9:89:9e:ba:55:38:14:d7:e4:c0:dd:
         aa:84:10:c4:31:01:2a:8d:06:89:9a:21:ca:29:f1:7f:e5:dc:
         17:04:e4:36:06:e4:e1:f2:e8:9f:cc:7e:17:0f:d7:df:d1:67:
         3b:f7:23:9b:56:d9:4e:66:1f:e4:09:ab:2e:c8:f0:95:f4:9e:
         f5:5f:44:34:74:a9:3d:34:0a:c2:b3:ec:51:92:e1:4a:2a:78:
         9f:62:be:23:b6:4a:20:9d:18:dc:f7:1f:3d:87:fb:fc:03:d7:
         81:6b:1b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:36:05 2026 by rpki-client