Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917D82E/E73132280B2011F1A2EFC93F3E3D8C67/_5Lsi9gN-r3TbmPJr0ynqG3ealc.mft
File:                     _5Lsi9gN-r3TbmPJr0ynqG3ealc.mft (raw, json)
Hash identifier:          vEadPLV1oiQN5X+SOmp2NI+DoY/VZ4BWDx93z3AQ3AM=
Subject key identifier:   5B:F8:B4:69:7D:DF:57:7D:51:45:4C:7A:B6:E2:F6:48:1C:80:5C:52
Authority key identifier: FF:92:EC:8B:D8:0D:FA:BD:D3:6E:63:C9:AF:4C:A7:A8:6D:DE:6A:57
Certificate issuer:       /CN=A917D82E/serialNumber=FF92EC8BD80DFABDD36E63C9AF4CA7A86DDE6A57
Certificate serial:       81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5Lsi9gN-r3TbmPJr0ynqG3ealc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D82E/E73132280B2011F1A2EFC93F3E3D8C67/_5Lsi9gN-r3TbmPJr0ynqG3ealc.mft
Manifest number:          7C
Signing time:             Wed 23 Sep 2026 07:38:41 +0000
Manifest this update:     Wed 23 Sep 2026 07:38:41 +0000
Manifest next update:     Wed 30 Sep 2026 07:38:41 +0000
Files and hashes:         1: _5Lsi9gN-r3TbmPJr0ynqG3ealc.crl (hash: UO1sKsrtl9goquZCpSp+CCCfAVPnJjG909qSxyq5Cqo=)
                          2: F98F88FA7B4D11F1B405B1A597A30FBC.roa (hash: BpqLsVApY9HvMtOZTXGvPmVaZLx/kdyWheeXJkSjNHg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D82E/E73132280B2011F1A2EFC93F3E3D8C67/_5Lsi9gN-r3TbmPJr0ynqG3ealc.crl
                          rsync://rpki.apnic.net/member_repository/A917D82E/E73132280B2011F1A2EFC93F3E3D8C67/_5Lsi9gN-r3TbmPJr0ynqG3ealc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5Lsi9gN-r3TbmPJr0ynqG3ealc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 07:38:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129 (0x81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D82E, serialNumber=FF92EC8BD80DFABDD36E63C9AF4CA7A86DDE6A57
        Validity
            Not Before: Sep 23 07:38:41 2026 GMT
            Not After : Sep 30 07:38:41 2026 GMT
        Subject: CN=6ab38201-1df4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:97:ef:2d:7b:f8:ce:91:93:16:cc:8a:15:ab:
                    16:dc:01:9b:17:e4:84:78:e1:4b:67:aa:d3:50:6b:
                    15:a4:80:44:bc:8b:a4:d4:e6:a8:be:9c:f1:41:4e:
                    65:a7:19:d2:b5:c9:39:b2:52:25:70:58:4f:ce:1d:
                    68:76:ea:10:bd:2d:7d:23:90:54:64:5f:9a:84:f4:
                    a7:b5:1e:2e:56:c2:31:e3:1c:df:08:2b:85:43:76:
                    4e:f3:d5:11:f7:4b:52:b8:dc:86:76:7b:49:e7:66:
                    f7:63:89:31:88:b1:eb:9e:7e:8e:41:73:20:2a:ba:
                    2c:3c:3b:84:ef:ef:bb:ca:9f:79:f9:ff:7d:dd:bf:
                    c6:ae:fa:52:53:f0:9a:7c:18:a3:ba:2c:90:81:dc:
                    09:bb:a2:ac:4e:f2:dd:ad:e9:c9:63:4c:19:0c:05:
                    d8:33:6b:a9:36:13:a0:38:b3:03:51:b0:39:78:66:
                    b9:55:f8:2d:ac:01:cf:ac:f2:93:5f:cc:b3:61:b8:
                    54:fd:cd:f2:f9:41:f1:29:97:73:7d:ec:42:40:80:
                    ed:96:80:0b:da:53:dd:0c:94:d0:7f:26:60:be:e0:
                    66:9a:43:24:fb:5d:c6:8e:70:70:90:06:8b:23:70:
                    53:24:aa:5d:9d:53:be:d2:ed:ac:58:93:db:d5:d5:
                    c2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F8:B4:69:7D:DF:57:7D:51:45:4C:7A:B6:E2:F6:48:1C:80:5C:52
            X509v3 Authority Key Identifier:
                keyid:FF:92:EC:8B:D8:0D:FA:BD:D3:6E:63:C9:AF:4C:A7:A8:6D:DE:6A:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D82E/E73132280B2011F1A2EFC93F3E3D8C67/_5Lsi9gN-r3TbmPJr0ynqG3ealc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5Lsi9gN-r3TbmPJr0ynqG3ealc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D82E/E73132280B2011F1A2EFC93F3E3D8C67/_5Lsi9gN-r3TbmPJr0ynqG3ealc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:b4:b4:fc:22:6e:93:3d:5d:a6:6c:33:0f:6d:3a:a1:59:8a:
         08:ab:f1:1a:5b:16:ec:83:fc:68:79:15:15:cd:05:1d:23:af:
         5f:07:dc:47:df:a8:6e:3d:04:11:12:d2:83:c3:0a:37:45:60:
         14:83:8a:83:60:87:7e:63:ca:c5:c2:61:8b:e3:9b:58:24:0a:
         48:db:db:a0:b2:f2:2d:86:85:d8:dd:55:66:fe:92:e7:21:62:
         e9:6a:2d:8e:08:01:51:d6:a3:23:b0:ef:6e:d9:43:35:1e:83:
         5a:7c:f3:8a:cc:ac:02:07:b3:6a:52:34:67:c4:28:a1:0c:f4:
         85:f2:b8:26:16:19:c3:b7:38:57:40:97:2d:e6:ad:50:a7:02:
         cc:35:61:a0:a5:61:f5:11:eb:bc:d0:42:1c:92:47:5d:a9:51:
         40:e3:1a:93:b4:93:7b:2a:04:11:d5:4d:28:10:0b:2b:2d:b5:
         f1:3d:b9:af:8a:e8:b8:71:9b:0a:42:ff:88:95:58:d0:69:d3:
         da:26:11:f0:71:5a:46:19:3d:59:c5:1c:b3:cb:0a:b4:3b:d6:
         9c:7b:5b:c4:05:dc:3f:96:ad:6d:4a:7f:7b:b2:37:fc:5d:71:
         22:1b:10:b9:df:0e:bc:58:de:8c:4b:3a:d7:7e:da:2d:92:d7:
         50:6f:de:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:48:15 2026 by rpki-client