Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft
File:                     5VbchrlOkc-bLilEqF9xaS2glNI.mft (raw, json)
Hash identifier:          sqY6QBFlaKj3/jsZQZi21lxFZtyF7r8/fx2fNGdZVVk=
Subject key identifier:   E7:B0:6B:E6:BE:A0:3B:77:A7:8A:0D:EC:7D:83:07:AF:0D:6D:CA:64
Authority key identifier: E5:56:DC:86:B9:4E:91:CF:9B:2E:29:44:A8:5F:71:69:2D:A0:94:D2
Certificate issuer:       /CN=A919B20D/serialNumber=E556DC86B94E91CF9B2E2944A85F71692DA094D2
Certificate serial:       021A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VbchrlOkc-bLilEqF9xaS2glNI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft
Manifest number:          0213
Signing time:             Fri 25 Sep 2026 03:05:07 +0000
Manifest this update:     Fri 25 Sep 2026 03:05:06 +0000
Manifest next update:     Fri 02 Oct 2026 03:05:06 +0000
Files and hashes:         1: 5VbchrlOkc-bLilEqF9xaS2glNI.crl (hash: j+mWka205pdkIDNB6P4GaDtb3QDwjI/9y+tBGKHvr+A=)
                          2: 4B3E4A0693DE11EE81D1045FC4F9AE02.roa (hash: JqhFhmjTQ7lTEerY4ZxrMkv0NK26Qh/GjDI/YArXFV4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.crl
                          rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VbchrlOkc-bLilEqF9xaS2glNI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 03:05:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 538 (0x21a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B20D, serialNumber=E556DC86B94E91CF9B2E2944A85F71692DA094D2
        Validity
            Not Before: Sep 25 03:05:06 2026 GMT
            Not After : Oct  2 03:05:06 2026 GMT
        Subject: CN=6ab5e4e2-a31e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:5a:aa:ac:ce:0b:03:af:44:bc:43:1c:ed:6c:
                    33:cd:dd:f5:56:69:9c:93:7a:7a:2a:22:8e:c6:9a:
                    d5:0a:ca:ab:57:46:97:85:c9:ab:5a:49:a2:b7:34:
                    cb:31:91:e8:24:b8:61:99:96:54:f3:60:2e:26:b9:
                    0f:df:26:e9:58:db:e6:0b:3a:a2:8e:a0:95:18:00:
                    fb:14:4d:07:a4:35:bd:f6:cc:de:4e:30:f0:9f:b9:
                    9d:bb:a6:8d:3e:96:59:51:c1:73:46:27:dc:b6:d2:
                    c6:55:bc:f7:f5:43:ec:2c:00:0b:b3:9f:90:8c:09:
                    2b:ce:e8:6b:c6:7a:5b:c6:bf:85:f9:0b:56:8a:35:
                    1a:76:a9:0a:da:92:2e:69:90:e0:88:04:22:09:11:
                    b5:52:0c:28:0e:96:c5:6a:11:2e:56:e5:06:f1:74:
                    77:ee:0e:ad:f9:02:94:8b:04:de:32:19:57:a5:9e:
                    01:a0:47:a3:2d:5d:5b:ed:06:7e:88:a6:b4:91:70:
                    89:b2:a1:b8:c5:61:ce:11:17:84:5f:ec:68:f5:4c:
                    73:0e:87:9b:10:5d:00:9c:fa:d8:6c:93:22:d3:b4:
                    6b:f2:70:fa:bc:75:e3:23:d8:00:82:d3:42:6d:c4:
                    33:37:06:06:42:bd:82:62:5c:c2:ee:2b:29:36:4c:
                    80:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B0:6B:E6:BE:A0:3B:77:A7:8A:0D:EC:7D:83:07:AF:0D:6D:CA:64
            X509v3 Authority Key Identifier:
                keyid:E5:56:DC:86:B9:4E:91:CF:9B:2E:29:44:A8:5F:71:69:2D:A0:94:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VbchrlOkc-bLilEqF9xaS2glNI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:fb:c4:96:c6:e8:03:ad:6b:1b:2d:3b:66:aa:9c:aa:a7:78:
         66:5d:1d:89:f9:d7:2e:53:bb:87:d0:36:3b:f5:26:d8:71:5f:
         b4:68:2e:76:28:eb:9c:a8:b6:48:74:ad:bd:5b:e7:2a:0b:e2:
         09:75:a4:78:c8:8e:e0:ff:d0:0f:3f:ae:c5:44:bf:5e:c0:fb:
         36:ee:7d:06:c8:1d:33:16:01:ab:29:0e:93:1a:80:7f:e6:3f:
         9b:9d:3d:bf:8a:6b:68:bd:62:e1:f5:c9:ce:85:cc:49:2d:6e:
         ed:57:e5:d0:8f:a3:d7:e2:37:e6:76:60:05:69:0f:1f:33:68:
         cd:29:7f:61:d7:b9:93:c5:db:08:ce:99:2b:54:68:47:ef:8d:
         72:ef:05:65:db:c4:5e:12:b5:9f:52:e9:e4:3a:df:82:af:df:
         16:bd:b7:bf:8d:25:1f:12:24:6d:f5:56:63:a5:59:7e:7f:1b:
         bb:5b:8a:4f:d0:50:6b:39:a9:0a:ff:9f:24:9a:c2:f5:09:41:
         57:2e:1a:30:b9:e5:3f:56:b7:b8:0e:1b:df:3d:70:e3:3f:1e:
         f4:3b:1e:66:5e:ae:e5:76:9c:45:a8:ac:81:50:1b:8e:73:99:
         90:62:f3:8c:42:7c:e2:13:8d:cc:3c:3e:19:84:a3:48:b3:29:
         5c:c6:a0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:16:05 2026 by rpki-client