Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9118EDB/309BE6BE1DDD11EC883B4423C4F9AE02/5tdlUVTja2lxFXTiB5a2gCxDtxU.mft
File:                     5tdlUVTja2lxFXTiB5a2gCxDtxU.mft (raw, json)
Hash identifier:          f/0RiRfRiJsQf8KR/H7R9CDGFLB4S+bpYFl2z3zVzhQ=
Subject key identifier:   C2:79:02:2E:00:2F:04:81:5B:90:01:D9:47:1B:F3:E9:5E:04:D1:E9
Authority key identifier: E6:D7:65:51:54:E3:6B:69:71:15:74:E2:07:96:B6:80:2C:43:B7:15
Certificate issuer:       /CN=A9118EDB/serialNumber=E6D7655154E36B69711574E20796B6802C43B715
Certificate serial:       05E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5tdlUVTja2lxFXTiB5a2gCxDtxU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118EDB/309BE6BE1DDD11EC883B4423C4F9AE02/5tdlUVTja2lxFXTiB5a2gCxDtxU.mft
Manifest number:          05D9
Signing time:             Sun 20 Sep 2026 22:53:01 +0000
Manifest this update:     Sun 20 Sep 2026 22:53:00 +0000
Manifest next update:     Sun 27 Sep 2026 22:53:00 +0000
Files and hashes:         1: 5tdlUVTja2lxFXTiB5a2gCxDtxU.crl (hash: MQURWjoqnyv1R5VDsCnuAVxQjsSv4fTt2N+CH0yi0fU=)
                          2: 3365B10A8D5D11F199116F566A11F970.roa (hash: oGAmL2ULPBu/H/HpprYNf9TKDDmGG8yiupaKIHDxFmg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118EDB/309BE6BE1DDD11EC883B4423C4F9AE02/5tdlUVTja2lxFXTiB5a2gCxDtxU.crl
                          rsync://rpki.apnic.net/member_repository/A9118EDB/309BE6BE1DDD11EC883B4423C4F9AE02/5tdlUVTja2lxFXTiB5a2gCxDtxU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5tdlUVTja2lxFXTiB5a2gCxDtxU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 22:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1510 (0x5e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118EDB, serialNumber=E6D7655154E36B69711574E20796B6802C43B715
        Validity
            Not Before: Sep 20 22:53:00 2026 GMT
            Not After : Sep 27 22:53:00 2026 GMT
        Subject: CN=6ab063cd-9dd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e8:36:da:c2:06:6e:dc:25:04:19:c3:f7:70:
                    ff:99:b5:7c:1b:a8:06:0f:42:bf:95:31:fd:1c:63:
                    bd:40:8c:f3:ce:49:d0:4e:45:d0:a9:de:1f:56:24:
                    05:01:d4:bc:4f:6a:7b:8c:23:12:c6:1c:90:b6:db:
                    78:3f:1e:a2:bd:eb:2b:c1:27:69:87:96:d7:bb:32:
                    8a:91:2a:65:ee:49:f9:52:e9:1c:06:75:e1:2e:c5:
                    83:1b:28:2f:99:64:cc:54:9f:32:3d:ca:4a:fe:11:
                    eb:27:c1:f8:42:5f:78:44:2c:f3:73:9a:bb:c6:4e:
                    c8:57:45:50:03:9d:3d:de:e4:2c:da:59:ff:8a:23:
                    3f:9f:d6:aa:38:7c:3f:92:7b:e2:96:2e:86:9d:b7:
                    ca:db:fe:e7:5e:30:3b:65:6c:dc:60:a2:7b:bb:e8:
                    c6:d5:2d:a1:79:fc:2e:60:76:be:62:01:2a:a0:85:
                    3f:0b:cf:bb:14:a5:e5:43:c4:a0:d8:ce:16:98:f1:
                    1e:af:09:6f:6c:31:4d:00:b2:86:86:9e:e0:08:3a:
                    15:bf:23:c5:3a:16:86:e4:ef:91:9e:8f:9f:35:dc:
                    8b:aa:68:12:5a:e1:58:ba:76:67:15:a2:f2:15:4d:
                    0c:aa:25:45:48:ea:e0:14:b6:31:52:93:67:2f:24:
                    79:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:79:02:2E:00:2F:04:81:5B:90:01:D9:47:1B:F3:E9:5E:04:D1:E9
            X509v3 Authority Key Identifier:
                keyid:E6:D7:65:51:54:E3:6B:69:71:15:74:E2:07:96:B6:80:2C:43:B7:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118EDB/309BE6BE1DDD11EC883B4423C4F9AE02/5tdlUVTja2lxFXTiB5a2gCxDtxU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5tdlUVTja2lxFXTiB5a2gCxDtxU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118EDB/309BE6BE1DDD11EC883B4423C4F9AE02/5tdlUVTja2lxFXTiB5a2gCxDtxU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:11:51:4e:76:28:19:47:7a:f2:26:89:b8:32:d5:ea:b0:6f:
         c3:5e:df:ff:e8:e1:df:fe:80:70:60:b3:03:f2:eb:2a:60:b2:
         8e:33:3f:63:c6:ce:6a:c3:6b:83:e8:f7:8e:6b:c9:c1:5b:5a:
         28:32:cf:2a:ac:e4:ae:26:00:d0:be:6e:03:0e:f3:d1:6f:ce:
         19:ce:32:ad:a2:d5:b6:ae:d6:9c:85:f6:4a:24:be:d8:3f:32:
         7f:a7:36:88:a2:93:8f:8b:d2:f4:4f:e0:f2:51:b6:57:94:1e:
         28:07:0e:7b:86:dc:aa:97:1a:d4:cf:68:48:ed:ac:c5:40:fa:
         81:75:3f:9b:49:3c:b6:03:86:35:f0:73:a3:44:50:99:4e:af:
         5d:23:eb:8b:f1:47:85:77:f4:5c:12:86:c8:f7:a5:81:61:4d:
         32:2a:26:bc:21:77:d3:3f:dd:31:f1:09:28:e6:fe:e4:24:22:
         bc:5b:9f:33:e2:0b:56:29:e8:b1:70:a9:c1:21:cc:f4:5e:ae:
         84:2e:d5:8a:17:15:58:62:0d:b5:27:6f:36:b7:d4:87:74:b3:
         a4:88:23:03:6b:91:09:3a:8b:85:3e:4b:2d:d2:91:2d:6b:4e:
         8d:38:4b:df:85:2c:cb:76:1d:39:a2:d7:ca:fc:d2:ca:dc:24:
         b3:e5:41:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:20:01 2026 by rpki-client