Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft
File:                     5hI_ServZkwi-UzV67rqztOHoW8.mft (raw, json)
Hash identifier:          wLNObSW7satvP8j7sa1tQqKnk2JrTgejyWmx2USEqAk=
Subject key identifier:   7F:D9:98:CB:AA:D4:D1:CE:4D:6E:B6:5F:CB:F4:86:30:FD:7A:FE:EE
Authority key identifier: E6:12:3F:49:EA:EF:66:4C:22:F9:4C:D5:EB:BA:EA:CE:D3:87:A1:6F
Certificate issuer:       /CN=A91B861D/serialNumber=E6123F49EAEF664C22F94CD5EBBAEACED387A16F
Certificate serial:       06DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft
Manifest number:          06D5
Signing time:             Wed 22 Jul 2026 22:56:56 +0000
Manifest this update:     Wed 22 Jul 2026 22:56:55 +0000
Manifest next update:     Wed 29 Jul 2026 22:56:55 +0000
Files and hashes:         1: 5hI_ServZkwi-UzV67rqztOHoW8.crl (hash: 9oQwvmbNzCMHbPGrmHjJ2KOZWMu8Bv3ghAL1Ke7IPko=)
                          2: 1D0BA0FC57EB11F096357F7CC4F9AE02.roa (hash: qYnHpPQuWWyQUppUZeSoLqg0pl5Eo+MYWVanyVnMZyM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.crl
                          rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 22:56:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1759 (0x6df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B861D, serialNumber=E6123F49EAEF664C22F94CD5EBBAEACED387A16F
        Validity
            Not Before: Jul 22 22:56:55 2026 GMT
            Not After : Jul 29 22:56:55 2026 GMT
        Subject: CN=6a614ab8-bfe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:67:bc:5d:03:c1:91:78:2e:cd:df:01:38:d4:
                    7c:55:31:da:81:7c:67:5c:f7:84:23:94:48:f9:c2:
                    12:fc:05:a7:c0:9c:9b:b2:b8:53:2c:52:a6:f9:a9:
                    38:bc:67:21:45:10:1c:9b:55:51:9f:2d:38:e9:d8:
                    f2:96:2d:38:e4:64:83:62:13:88:49:76:ea:fe:72:
                    b3:41:cc:a5:2a:9d:e0:03:d2:a4:69:56:76:52:55:
                    69:62:f1:30:2b:69:fc:94:c6:b6:f0:0e:b9:46:51:
                    b1:03:de:35:4b:8d:d6:1e:fd:f7:0d:61:f4:0b:7a:
                    a4:70:00:33:6c:99:f8:e4:d1:cd:ea:d0:0c:9c:2f:
                    2d:1d:1d:2c:ac:07:93:a1:b7:5c:14:35:ec:e1:b3:
                    90:86:e7:f2:6c:1d:3d:f8:75:f5:68:ec:b0:4a:db:
                    4e:1b:9c:c2:51:bf:ce:df:f8:96:a4:87:b4:63:0f:
                    39:26:3f:4a:6b:0b:f1:9e:74:24:60:12:ba:63:f1:
                    21:92:2c:70:c4:b5:f0:54:61:53:6d:29:27:6f:2d:
                    ce:4a:12:97:39:5b:bc:ae:1f:92:1f:03:31:5d:a7:
                    c1:e3:d5:f3:98:c2:5c:25:7b:9d:0b:93:c6:90:0e:
                    52:62:b4:9f:92:49:e2:55:e1:d5:db:b9:3b:1d:c2:
                    40:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D9:98:CB:AA:D4:D1:CE:4D:6E:B6:5F:CB:F4:86:30:FD:7A:FE:EE
            X509v3 Authority Key Identifier:
                keyid:E6:12:3F:49:EA:EF:66:4C:22:F9:4C:D5:EB:BA:EA:CE:D3:87:A1:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:cd:70:08:50:df:de:61:6c:64:a7:66:03:a5:9d:05:9b:6a:
         6d:c8:4c:f2:e6:0c:24:5e:57:71:25:e0:0e:a1:11:e3:11:e6:
         c6:bb:66:ed:6c:b3:fc:de:24:aa:d1:39:d3:d2:e1:57:5b:62:
         d9:56:88:97:05:aa:20:a7:ba:ed:d5:aa:96:60:a4:09:06:87:
         e1:ee:af:67:47:72:ac:71:e2:83:9a:b8:71:5b:e2:8d:d8:d7:
         ce:8c:c7:67:40:38:2c:80:5a:6f:19:16:be:ff:4d:06:c1:e4:
         4d:9d:18:0b:25:e0:49:63:ce:1f:06:44:05:c7:b4:ff:c0:61:
         c1:07:4c:6b:68:72:34:63:1e:11:d0:02:74:32:4c:f7:db:1b:
         19:bf:03:cb:a3:21:8d:cb:2f:c8:d2:19:46:54:e2:fb:77:24:
         36:e9:c2:b0:14:c9:46:39:08:f4:ce:f9:fd:2d:f7:6d:7c:96:
         38:35:2e:6d:4d:af:0d:9e:ec:e1:ce:f1:6a:60:95:c4:39:83:
         48:6a:d6:38:6a:ff:bc:ea:42:ef:64:32:47:58:0e:13:f1:67:
         e4:d6:8d:e4:7e:8f:b5:a1:4d:fc:a9:b3:e2:ad:e1:2e:db:6e:
         35:73:22:ff:a5:1a:02:b0:db:f1:f9:a5:4f:76:b5:2a:c7:10:
         49:ab:34:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:04:09 2026 by rpki-client