Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft
File:                     5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft (raw, json)
Hash identifier:          WT9hzVOQt+Ka3bHIEuIfd3glN2yU/uIJEfW6jzOXVr8=
Subject key identifier:   AA:68:C9:63:92:28:F0:56:89:FE:26:F7:77:97:C6:0D:F9:EF:89:D5
Authority key identifier: E4:7B:F7:02:54:53:26:97:D2:0D:0D:31:10:F6:25:37:0D:65:FA:83
Certificate issuer:       /CN=A91B59E5/serialNumber=E47BF70254532697D20D0D3110F625370D65FA83
Certificate serial:       02A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft
Manifest number:          0273
Signing time:             Thu 23 Jul 2026 03:57:55 +0000
Manifest this update:     Thu 23 Jul 2026 03:57:55 +0000
Manifest next update:     Thu 30 Jul 2026 03:57:55 +0000
Files and hashes:         1: 5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.crl (hash: 28eqeZyU74L2gj1j629nGQlgajnHfrlcfos0Xs3j9oo=)
                          2: 9EEE3C44D94F11EF916BCF23C4F9AE02.roa (hash: /zrcL4nSpe3zdFYdi/0iqkSLzijJlxJzGF9A4BLkUeg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.crl
                          rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:57:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 675 (0x2a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B59E5, serialNumber=E47BF70254532697D20D0D3110F625370D65FA83
        Validity
            Not Before: Jul 23 03:57:55 2026 GMT
            Not After : Jul 30 03:57:55 2026 GMT
        Subject: CN=6a619143-0bc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b5:ef:55:0a:93:6c:59:ec:90:c4:06:fd:53:
                    2a:10:e1:37:a4:ed:4f:e3:a6:1d:11:08:21:34:a1:
                    98:b7:a4:20:67:ce:ce:51:9f:5b:2d:59:6c:5f:02:
                    8f:59:ec:1f:a3:04:e7:ea:38:eb:02:3e:6f:47:fa:
                    bb:78:b5:32:82:a9:e0:9b:b8:95:2d:9a:74:3c:a9:
                    58:20:1c:ef:95:92:bf:e8:7e:b1:96:ec:b9:56:ef:
                    48:80:e5:7d:ff:6c:aa:a2:fc:3c:c0:7f:0c:3a:3d:
                    f5:1e:78:83:ba:00:0f:3a:e8:89:48:96:83:de:a9:
                    0f:aa:2a:46:ef:8c:4e:29:0a:13:00:dd:32:2c:1d:
                    48:63:a6:a3:66:5f:a9:3d:96:75:67:61:c0:31:13:
                    b3:89:8e:b1:b8:c3:4a:da:73:68:84:cc:7a:4f:76:
                    32:59:2e:0c:8b:c3:b1:0d:2d:f7:4e:40:52:5a:74:
                    dd:dc:60:6d:b2:47:82:39:b0:24:be:3e:29:15:d8:
                    a0:fc:64:ed:e8:01:d1:ee:56:20:4c:8a:54:5e:8a:
                    8d:e6:e1:3d:26:35:f0:ad:34:4e:cf:39:2e:0f:3b:
                    56:7f:0f:36:95:82:46:69:28:e8:8d:21:c6:65:9d:
                    30:7a:9d:cc:aa:d7:3b:08:14:56:cb:b8:54:a4:1b:
                    41:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:68:C9:63:92:28:F0:56:89:FE:26:F7:77:97:C6:0D:F9:EF:89:D5
            X509v3 Authority Key Identifier:
                keyid:E4:7B:F7:02:54:53:26:97:D2:0D:0D:31:10:F6:25:37:0D:65:FA:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:c7:90:f3:11:14:fc:1b:6c:21:ac:32:f5:6b:33:bc:7b:42:
         b0:68:2e:1a:26:7a:a3:0f:f1:e3:d5:7d:62:4e:32:58:d6:20:
         e9:a2:fd:92:f1:73:7c:48:b1:ac:50:9b:a7:67:c6:93:c3:c7:
         9e:c5:a3:37:40:a5:28:61:d7:9d:06:87:81:90:b9:7e:f3:15:
         57:09:af:17:3e:c7:dd:13:08:fa:3d:47:b0:8c:b5:aa:bd:c2:
         9d:f9:14:d2:b4:0e:9a:a9:5d:6c:4e:98:ff:f1:47:e4:35:1e:
         99:ed:ef:7a:6d:25:ef:4a:02:e3:86:87:08:5f:39:a0:f7:24:
         ac:b1:f5:35:b4:b8:e3:e7:69:69:ac:a6:30:58:49:25:9f:dc:
         0e:b0:28:fc:5e:3c:d6:34:c4:c8:4c:1e:6b:f2:4a:3d:8e:a5:
         0f:d1:2c:1a:f0:19:fd:ab:9f:8e:aa:57:17:23:8a:b5:5a:fd:
         3e:e0:c3:46:98:cc:60:69:82:a9:f0:d4:65:0e:a9:f3:62:3a:
         fe:49:e4:26:6a:20:a8:06:a9:a2:7c:62:76:af:7d:4d:a7:45:
         d2:06:fe:ad:8e:e3:7f:de:09:56:d3:ab:c5:6b:7d:f5:d5:96:
         01:5e:9b:03:3d:72:9f:ab:5c:6b:4d:69:d0:de:dc:ed:8d:a3:
         c6:fe:05:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:38:39 2026 by rpki-client