Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.mft
File:                     5IPa-2wrg71IK24pCn5AU1W1Ltk.mft (raw, json)
Hash identifier:          7mBZgynm2J+SU53RclJwrMdw3nkD0bgNnuuoXxE5t5A=
Subject key identifier:   C8:FA:61:0D:6C:91:BD:40:D2:51:1D:F6:6F:E0:CD:52:BB:7B:6C:DB
Authority key identifier: E4:83:DA:FB:6C:2B:83:BD:48:2B:6E:29:0A:7E:40:53:55:B5:2E:D9
Certificate issuer:       /CN=A919136B/serialNumber=E483DAFB6C2B83BD482B6E290A7E405355B52ED9
Certificate serial:       1139
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5IPa-2wrg71IK24pCn5AU1W1Ltk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.mft
Manifest number:          1129
Signing time:             Wed 22 Jul 2026 17:23:44 +0000
Manifest this update:     Wed 22 Jul 2026 17:23:44 +0000
Manifest next update:     Wed 29 Jul 2026 17:23:44 +0000
Files and hashes:         1: 5IPa-2wrg71IK24pCn5AU1W1Ltk.crl (hash: MNbCcSMXMZoWzrG/5YIC0ZvGGIoSt0DnVT+fk08GjMU=)
                          2: 99B6039C215311EA86E1E020C4F9AE02.roa (hash: IG0t1VHluhfPiafs+6si8BI2lajDC2N00y2Pwi8hIl8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.crl
                          rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5IPa-2wrg71IK24pCn5AU1W1Ltk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:23:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4409 (0x1139)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919136B, serialNumber=E483DAFB6C2B83BD482B6E290A7E405355B52ED9
        Validity
            Not Before: Jul 22 17:23:44 2026 GMT
            Not After : Jul 29 17:23:44 2026 GMT
        Subject: CN=6a60fca0-5886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2c:28:1e:65:e9:1a:aa:f2:56:4e:4d:69:90:
                    82:4d:ce:c1:05:67:3f:93:c9:d9:62:75:f2:b7:01:
                    8a:2c:7a:3c:84:56:37:09:04:51:3b:c2:60:30:52:
                    43:f8:c0:49:77:2d:59:b6:d5:2c:00:df:7d:b2:5d:
                    a4:09:e6:b3:a0:08:29:e1:f6:5e:58:44:26:b9:02:
                    2b:33:43:7c:c9:f3:3c:40:99:b8:94:d3:c1:9d:24:
                    61:5d:74:35:05:21:81:84:06:8a:19:bb:a7:c0:11:
                    e5:bb:3e:ff:1a:7a:7c:b4:09:d1:d5:af:57:02:96:
                    a3:30:21:72:4d:49:93:b6:c2:8b:4c:23:af:1a:dc:
                    11:0a:09:47:9c:eb:c7:7c:df:34:8b:e1:13:a0:63:
                    f4:a5:ad:dd:9b:40:6a:6f:69:d4:9f:db:68:0d:0b:
                    02:31:0f:6f:b0:d8:05:99:63:f1:ab:35:d6:b9:42:
                    71:6f:65:8a:73:d1:72:0e:18:e7:23:f1:09:21:94:
                    91:4c:07:fa:0f:e8:f7:c5:2c:a4:ec:a6:5e:a8:fe:
                    4f:c5:b5:53:5b:d1:96:4a:43:59:db:f9:99:3f:7c:
                    bb:f1:cc:bc:0d:9d:4c:15:58:98:3a:cb:47:21:42:
                    a8:9e:2f:73:df:3b:95:b2:14:90:27:43:4c:de:ba:
                    c4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:FA:61:0D:6C:91:BD:40:D2:51:1D:F6:6F:E0:CD:52:BB:7B:6C:DB
            X509v3 Authority Key Identifier:
                keyid:E4:83:DA:FB:6C:2B:83:BD:48:2B:6E:29:0A:7E:40:53:55:B5:2E:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5IPa-2wrg71IK24pCn5AU1W1Ltk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919136B/F7C87E843A7B11E9ACBC6A18C4F9AE02/5IPa-2wrg71IK24pCn5AU1W1Ltk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:49:b4:5f:d5:f8:fc:80:b9:99:0c:5f:5e:7c:24:cf:0e:6b:
         9a:40:4f:f1:79:c1:2a:95:56:8f:df:3f:6a:3c:1a:bb:8c:b8:
         f2:fd:42:11:d3:9c:c1:8a:c7:d0:d2:d4:88:ce:58:8d:0e:bd:
         fe:75:e6:ac:d8:1a:be:55:d5:07:1f:f2:f3:9b:83:c3:ff:1f:
         6e:f8:a1:8e:59:8f:cf:31:ab:4d:64:3c:e0:da:5c:e0:64:78:
         dd:ab:f8:11:e0:bc:d1:e8:58:34:5b:70:52:49:38:7e:d4:01:
         2a:18:0e:f7:0d:a3:c5:b6:ad:2f:81:bf:ae:c7:48:28:be:7a:
         af:b5:56:a1:9b:2c:26:fd:f4:68:8b:33:be:df:ee:41:e3:72:
         18:09:f5:ad:6a:39:d6:f5:8d:cd:1f:ed:16:30:fe:37:f0:98:
         e5:b2:85:1a:01:df:40:85:3b:b9:13:7d:c9:97:cc:9c:7d:5e:
         5d:04:e8:6c:86:0c:39:40:6e:68:0c:7a:e2:22:c1:56:b9:ed:
         fe:a3:00:31:14:4e:00:5e:ad:f8:60:4a:8b:2c:c5:90:80:51:
         79:a5:ba:db:6d:08:c6:c9:be:e1:11:46:ee:3d:20:8f:4c:99:
         f4:dc:2f:5a:04:79:d8:dc:98:79:7a:38:12:4d:a5:13:f2:00:
         e4:ce:cd:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:54:47 2026 by rpki-client