Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft
File:                     5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft (raw, json)
Hash identifier:          HvhzMXGshcBMAzRl7aIbFlBZMbzn6EjW6GdBIq/aH+8=
Subject key identifier:   34:A9:1C:53:83:2F:C3:65:9F:15:7E:75:0B:76:A0:71:CE:5C:7F:D4
Authority key identifier: E5:18:E9:48:15:C4:6D:7D:8E:6F:EF:4E:BC:3D:18:DF:0E:21:F8:36
Certificate issuer:       /CN=A9183DB7/serialNumber=E518E94815C46D7D8E6FEF4EBC3D18DF0E21F836
Certificate serial:       0ED0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft
Manifest number:          0EB6
Signing time:             Wed 22 Jul 2026 17:53:32 +0000
Manifest this update:     Wed 22 Jul 2026 17:53:31 +0000
Manifest next update:     Wed 29 Jul 2026 17:53:31 +0000
Files and hashes:         1: 5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl (hash: j7Q3BPz4mgsYG6Vb+uUFjVn6npyiJAlgKrUwWIxjFnM=)
                          2: 6A5EC93A70DE11EC8B944928C4F9AE02.roa (hash: 2vmyMW6TtcbaqXFP7Qp6BP+UrMdH5alLGCt5uNXx+l8=)
                          3: 9F14D15E70DB11ECACCABD21C4F9AE02.roa (hash: xvrivgHeCdDydOD/ZktKC2lGC9vuqeY8ZsH11+NgJlU=)
                          4: 6B7E8FC670DE11EC8B944928C4F9AE02.roa (hash: DEYl4xuRBtxqmhzfpUHokIt3OryoQ/FdXNVfb0S7BgA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl
                          rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:53:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3792 (0xed0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183DB7, serialNumber=E518E94815C46D7D8E6FEF4EBC3D18DF0E21F836
        Validity
            Not Before: Jul 22 17:53:31 2026 GMT
            Not After : Jul 29 17:53:31 2026 GMT
        Subject: CN=6a61039b-737b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9a:48:ca:f1:ed:2c:1a:b0:07:fc:e9:90:5b:
                    41:ec:9c:57:d3:e2:b6:50:60:54:7e:e2:68:c1:0a:
                    d9:35:7f:cd:eb:81:ed:21:f8:c5:88:c6:1f:93:df:
                    50:8f:67:cf:3c:9e:0a:fb:6d:0f:fe:f2:6a:cb:6d:
                    63:97:ed:a0:95:3c:37:eb:bd:02:b4:81:16:cd:5f:
                    97:54:9f:9d:60:36:12:9e:a9:17:5f:a1:6e:29:d0:
                    78:36:cc:1d:8e:cb:e0:64:19:a4:f7:b0:b0:6f:4d:
                    50:e0:05:bf:5f:0d:b2:26:cd:38:b6:32:03:73:0b:
                    ab:43:15:9d:5c:0c:ab:8c:c7:b2:60:8c:64:2d:f7:
                    bc:bd:9a:62:73:e3:ef:a5:4e:35:f2:86:1b:93:53:
                    fb:b1:5e:bb:a4:d0:61:24:a3:57:54:d4:dc:fe:41:
                    a3:cf:51:f0:14:68:0f:16:9e:7d:e1:70:1f:5b:5b:
                    e2:06:0e:92:1f:12:e5:c9:4e:a9:6a:76:19:d0:55:
                    77:b8:65:a5:2a:cd:a2:2b:ee:f3:61:c7:f1:63:15:
                    52:d8:18:02:13:0b:04:89:0f:9a:2a:8f:8b:69:ff:
                    62:86:1e:b1:78:5a:ec:bf:93:33:ca:3b:46:ae:37:
                    42:01:ab:bd:ea:8a:ef:34:8e:c5:06:47:61:22:94:
                    61:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:A9:1C:53:83:2F:C3:65:9F:15:7E:75:0B:76:A0:71:CE:5C:7F:D4
            X509v3 Authority Key Identifier:
                keyid:E5:18:E9:48:15:C4:6D:7D:8E:6F:EF:4E:BC:3D:18:DF:0E:21:F8:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:1d:82:38:fc:e0:28:1f:b0:5b:ab:d4:0a:23:2e:ac:0f:4b:
         aa:38:02:f6:75:02:0c:bf:17:1c:80:bc:f6:d6:15:a6:26:bb:
         12:6a:94:32:43:a5:73:64:ea:af:eb:09:82:21:d5:40:09:91:
         92:37:d5:b2:9b:85:94:c8:f3:ba:78:9d:78:98:91:15:08:de:
         2f:9a:7e:b0:0e:50:38:23:70:10:a0:dc:e4:f4:aa:51:e9:9a:
         a3:a9:8d:7d:07:85:e8:36:43:bb:f9:9b:fb:66:c5:20:ed:01:
         b8:9c:7a:43:1b:c3:a0:05:0a:55:68:1e:2f:74:6d:e6:ce:6f:
         15:82:1b:9c:be:9b:f5:a3:b4:e8:dd:a6:c7:5f:c9:c2:aa:53:
         44:2c:05:4d:86:a7:92:ae:53:5f:6a:d1:43:cb:49:2d:3e:10:
         9c:2e:4d:a5:94:5e:1c:0c:db:0d:57:67:3f:08:ec:95:36:02:
         98:40:45:99:3d:21:5f:1b:88:17:6b:bd:cd:f0:fd:c8:75:c6:
         2b:1c:7f:7b:38:04:d0:d6:9a:03:0f:c5:e2:68:b3:15:f8:95:
         87:e2:c4:2c:a7:dc:46:c5:72:22:7b:6c:91:1a:7a:72:52:48:
         68:f2:cc:12:cc:f0:2a:06:de:f7:2e:49:2a:4f:5c:eb:a1:66:
         d7:8f:6b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:26:21 2026 by rpki-client