Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft
File:                     5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft (raw, json)
Hash identifier:          2/kEkJx+fsVGvZzTLpWqXw9P0ybD3WTmt7Oxgfrl9uU=
Subject key identifier:   D1:58:A0:81:34:DF:19:97:6C:03:12:A8:35:A8:80:3C:92:FB:3B:94
Authority key identifier: E7:3A:79:44:04:44:FE:34:C3:10:F7:84:89:4C:4A:B2:1E:AC:AA:04
Certificate issuer:       /CN=A919F207/serialNumber=E73A79440444FE34C310F784894C4AB21EACAA04
Certificate serial:       097C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft
Manifest number:          0951
Signing time:             Wed 22 Jul 2026 20:36:23 +0000
Manifest this update:     Wed 22 Jul 2026 20:36:23 +0000
Manifest next update:     Wed 29 Jul 2026 20:36:23 +0000
Files and hashes:         1: 5zp5RARE_jTDEPeEiUxKsh6sqgQ.crl (hash: RtIXXia3pqsB3kvYssSYX1+ixjExJvU/R7k/yGHfndU=)
                          2: FE5523767A4111EB9E76B867C4F9AE02.roa (hash: 4CYZfi3J5mrMgJw71DrWmWBko5u4w80OqCluI06fPlI=)
                          3: 0A00EE7EC2A711EAB8D9B426C4F9AE02.roa (hash: 5lrGY5B8z3gxKejTsTAvtgEu2yogYsNGkQLwshDVoN8=)
                          4: D661BF1821E111EB85E9C824C4F9AE02.roa (hash: xrP+j01URqzb818JxrzZQg9E+zkHFQ6z2nDfJjk/xvY=)
                          5: 9F95B0B4232811EBB98A6C1AC4F9AE02.roa (hash: UE8SAxckfyeRkUiosJW8F4rRi0Cjj19RMe2v1jw5K4s=)
                          6: 0A88715AC2A711EAB8D9B426C4F9AE02.roa (hash: vh+mgfVuse3OG+5JOUAqNPfjrPXWt/l1W1BYVqMifYc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.crl
                          rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:36:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2428 (0x97c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F207, serialNumber=E73A79440444FE34C310F784894C4AB21EACAA04
        Validity
            Not Before: Jul 22 20:36:23 2026 GMT
            Not After : Jul 29 20:36:23 2026 GMT
        Subject: CN=6a6129c7-e532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7a:52:b7:8e:c1:e9:08:c7:1a:15:d5:83:54:
                    21:d4:f1:73:3d:56:37:e4:21:15:79:c1:ee:73:68:
                    c6:5b:b9:6e:39:f5:49:0f:3e:65:32:39:35:74:68:
                    04:b9:8f:ce:a8:f4:64:18:7b:74:df:1f:fb:f2:d8:
                    1e:20:41:d1:00:a6:65:1a:09:67:73:50:70:a7:26:
                    66:f5:c9:62:ac:0b:4e:e8:20:c2:36:6c:23:f4:3d:
                    7f:86:d9:40:cf:4d:98:e5:4b:a6:2b:00:54:1c:75:
                    4e:2e:b0:b5:13:6c:15:3f:f5:47:47:78:ae:c3:1d:
                    ec:68:3b:a5:12:0b:69:4d:dd:6c:fb:e9:a4:47:8e:
                    b5:da:7d:e4:2e:b7:07:0b:6e:7f:63:13:fe:af:f6:
                    72:e4:46:e4:1b:aa:70:31:f2:ba:45:9d:aa:43:6a:
                    84:35:1d:da:52:93:cf:17:fc:62:0a:63:29:c7:17:
                    fc:af:6d:5b:aa:1c:7c:e3:a0:39:d7:5a:94:79:75:
                    1d:6a:0c:58:fe:ca:c8:f8:d3:e0:97:76:95:01:4f:
                    73:81:ff:52:1d:a6:ff:36:5f:ee:0b:3b:8c:6a:d1:
                    b7:f7:6e:70:be:ff:96:9b:18:41:22:81:55:da:a0:
                    fa:57:3d:25:78:aa:b1:70:dc:f8:4b:37:82:d8:0f:
                    18:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:58:A0:81:34:DF:19:97:6C:03:12:A8:35:A8:80:3C:92:FB:3B:94
            X509v3 Authority Key Identifier:
                keyid:E7:3A:79:44:04:44:FE:34:C3:10:F7:84:89:4C:4A:B2:1E:AC:AA:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:7e:4e:f0:e2:3f:94:c0:fd:59:1d:43:87:2e:89:01:51:de:
         70:0a:04:5e:e6:24:d7:ba:6e:d5:a2:03:dd:91:14:fa:ad:f9:
         bf:c3:bb:43:0d:ef:29:09:35:78:71:26:b9:da:b7:f1:5d:13:
         d3:60:c6:5a:f5:d0:39:56:10:9f:7b:3c:f8:cf:90:58:d6:c1:
         12:6e:43:ce:00:88:80:d0:13:b1:79:ee:e8:3e:0a:46:51:a4:
         a9:1c:0a:96:d2:6a:65:87:d9:5f:bb:52:d1:c4:34:87:46:d5:
         1e:cc:dd:25:46:10:7a:c6:c7:0c:9d:cc:5c:e1:95:93:cd:b3:
         f3:56:d1:bb:c7:4f:37:5c:bd:51:ed:c9:db:a2:e7:a5:78:65:
         af:ab:08:73:c8:c9:11:4f:db:08:da:3c:aa:9e:7c:e7:5c:99:
         e8:66:9a:9a:91:f7:31:b4:cb:3c:d6:aa:72:7f:3a:3d:62:a8:
         6e:fa:87:f1:aa:a3:85:b3:93:c1:39:6b:17:58:af:41:5d:57:
         b5:2d:3b:23:19:8b:db:3d:7f:d6:1c:68:a3:66:59:eb:51:77:
         f4:ff:9c:ee:92:f1:b5:d3:71:41:1f:1f:e3:c0:ea:b2:9c:7f:
         99:a7:86:b0:93:5f:a2:3b:dc:39:46:f7:a8:b9:43:1d:cb:c6:
         68:18:2c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:41:45 2026 by rpki-client