Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft
File:                     5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft (raw, json)
Hash identifier:          Ldt7fTxvpVy4RI0f07ZX5f3213Zrh0hNU510dgcIY08=
Subject key identifier:   36:10:FD:D4:90:E8:8E:CA:1F:65:8F:01:D8:8E:85:EB:10:A6:61:D0
Authority key identifier: E6:22:C8:11:4F:3F:24:AA:6A:80:7C:81:41:E3:96:4B:55:1B:B9:30
Certificate issuer:       /CN=A91EEEB8/serialNumber=E622C8114F3F24AA6A807C8141E3964B551BB930
Certificate serial:       35CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft
Manifest number:          3599
Signing time:             Tue 22 Sep 2026 15:02:41 +0000
Manifest this update:     Tue 22 Sep 2026 15:02:41 +0000
Manifest next update:     Tue 29 Sep 2026 15:02:41 +0000
Files and hashes:         1: 5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl (hash: NA4q5oiOP9oloRPtEMsbdGiWnRTniR7R6qnnWaHgtkE=)
                          2: 60DA0694D9E111EA82120960C4F9AE02.roa (hash: iiBtufSHWf33321WKi8LpLk6XSy2WK+DXaj/oX9ilrc=)
                          3: FC75A532DBAC11EA9FF2FA1FC4F9AE02.roa (hash: +cnloCvAjSUYswAcE+33yHayQWC3V459pWxL1JTtDvI=)
                          4: 9A4EE834EB8111EA87E2C165C4F9AE02.roa (hash: jgk1tUOLfmMQ7B3N1+T3FYlJzB2NIx4NII7QMsy+y8c=)
                          5: 32DFCCDCEB8011EAAB806163C4F9AE02.roa (hash: lFKHdRG/VsHJ+DcVPofYkA6W4POH4suRyuwB6wTeuGE=)
                          6: 70B22B22950D11F0ACB76B28C4F9AE02.roa (hash: bsyO+xd24543MnKnjSqgPnvGXDSnrTi05p7630zqHEk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl
                          rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 15:02:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13772 (0x35cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEEB8, serialNumber=E622C8114F3F24AA6A807C8141E3964B551BB930
        Validity
            Not Before: Sep 22 15:02:41 2026 GMT
            Not After : Sep 29 15:02:41 2026 GMT
        Subject: CN=6ab29891-2da2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1a:50:c7:22:69:57:fe:ed:e8:26:23:3a:4e:
                    20:4b:70:e4:a6:18:1f:fe:24:4b:06:44:9b:b3:fe:
                    15:ba:35:75:e3:22:64:5c:bf:39:ed:76:8c:f6:87:
                    59:75:ef:0b:af:fd:ad:7c:d2:12:ac:87:e0:5d:c9:
                    e3:fb:25:d1:50:fa:09:a0:17:bf:1a:2c:9d:0b:96:
                    fc:72:0f:ed:2b:40:28:55:ba:2d:2d:0f:a2:d6:49:
                    86:e1:65:21:20:be:60:f3:22:e2:97:ce:66:9c:04:
                    4d:ec:3f:75:15:60:76:9b:72:c2:e2:16:49:66:83:
                    19:76:d9:1b:40:88:a4:9a:8b:41:8b:ea:d1:f4:d9:
                    9b:65:66:1c:59:c6:14:ac:97:84:a9:15:f4:74:86:
                    2d:e7:21:73:de:f6:d1:82:f5:73:08:b4:5a:02:c7:
                    fd:88:28:58:a0:f2:24:6b:8b:96:fe:0e:a0:e1:f6:
                    b2:8b:6d:44:2d:a7:9f:7a:2f:85:f3:37:58:02:6e:
                    4c:f1:6e:79:23:cf:e8:e4:de:74:74:0f:82:e5:42:
                    f0:d6:4a:cf:63:d0:61:4e:91:4a:27:a8:0b:f3:27:
                    26:45:b6:bc:c2:02:a2:aa:f4:26:e9:06:b4:48:58:
                    99:45:54:0a:53:99:ae:25:c4:49:e9:5b:cd:58:55:
                    1f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:10:FD:D4:90:E8:8E:CA:1F:65:8F:01:D8:8E:85:EB:10:A6:61:D0
            X509v3 Authority Key Identifier:
                keyid:E6:22:C8:11:4F:3F:24:AA:6A:80:7C:81:41:E3:96:4B:55:1B:B9:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:9c:ee:ef:7a:32:3c:fe:ad:e5:a4:13:de:09:52:70:b7:37:
         1c:8f:51:e8:24:bf:e4:b4:5e:40:e5:ae:85:2b:5c:14:6f:8b:
         be:c5:75:43:53:d6:ea:31:34:b8:4f:42:da:68:ac:ef:4b:c9:
         d9:91:82:8a:7b:47:be:8d:59:07:86:9e:e8:ac:8f:99:22:a2:
         3f:08:e7:d7:4f:60:a1:60:de:94:06:08:93:5a:f8:20:9f:63:
         b8:46:a0:f0:00:d8:7d:61:ac:8d:74:d0:a6:a1:79:f0:7b:0e:
         3b:c4:d7:ff:5e:8f:ea:af:a1:ba:9a:64:87:47:96:5f:98:aa:
         94:28:a1:be:00:52:4b:52:13:6f:79:50:5a:6b:ee:71:c3:56:
         db:48:6b:e5:6d:22:a7:77:ed:ff:00:86:37:11:ae:76:37:d7:
         a8:e8:a8:ac:b2:89:67:58:c5:c4:8c:f3:4f:ed:d8:7c:cb:bc:
         2e:45:5b:24:b0:f8:35:40:62:80:c0:b2:f7:3f:2f:3c:8f:28:
         fa:00:d1:bb:59:d9:71:7a:fa:0c:cc:4f:dc:27:f4:fa:c8:0d:
         13:7f:e5:e0:3d:c5:7c:56:92:e2:81:a9:41:5c:0f:76:4c:07:
         24:8f:c8:7e:0c:bf:99:9f:89:4c:52:c4:f1:ea:6e:d7:06:a3:
         36:29:41:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:21:21 2026 by rpki-client