Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft
File:                     5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft (raw, json)
Hash identifier:          bVuy5szFzoSNFALNrT8vzIYo4FplToCUq0wi435PiJE=
Subject key identifier:   4D:C1:2E:60:F3:F2:27:7B:9B:C1:A1:1D:D5:17:3C:E4:F4:20:65:69
Authority key identifier: E4:E1:01:EE:F4:43:15:0C:62:11:0A:CA:FA:88:15:54:C0:89:FC:53
Certificate issuer:       /CN=A9131612/serialNumber=E4E101EEF443150C62110ACAFA881554C089FC53
Certificate serial:       0EA7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft
Manifest number:          0E89
Signing time:             Tue 28 Jul 2026 17:51:57 +0000
Manifest this update:     Tue 28 Jul 2026 17:51:56 +0000
Manifest next update:     Tue 04 Aug 2026 17:51:56 +0000
Files and hashes:         1: 5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl (hash: 9Bz688TTRsLxqqOHAXIYcgpqUlKYZNK3xVSveJblom4=)
                          2: 923C51A8BE8811E998F37222C4F9AE02.roa (hash: gUZUG0XGqciwniJGSiDxz0DgvPWakTbupjgNjJySVdM=)
                          3: 26F281DEDDF811EAA553705EC4F9AE02.roa (hash: I42/yCc2sXng95yV5V9rJYMIeKVTpAqNcLtZHIVHLHg=)
                          4: 279B0372DDF811EAA553705EC4F9AE02.roa (hash: LK9lFz+9N11fqfPC0jVRHD9FeANyPw0tdvt1fpUzGLQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl
                          rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 17:51:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3751 (0xea7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131612, serialNumber=E4E101EEF443150C62110ACAFA881554C089FC53
        Validity
            Not Before: Jul 28 17:51:56 2026 GMT
            Not After : Aug  4 17:51:56 2026 GMT
        Subject: CN=6a68ec3d-d96d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:95:96:66:38:20:18:74:16:02:29:22:7b:1c:
                    a9:c1:cf:f1:e7:a6:73:98:80:35:fa:d7:e5:bb:16:
                    09:d4:dd:b3:70:ed:29:61:e7:ad:93:7e:ac:af:3c:
                    a8:c9:06:c5:4b:07:eb:88:c1:6e:c4:4e:6d:37:f4:
                    dd:ec:27:3a:f0:45:a5:86:dc:15:8b:e2:56:49:ac:
                    2f:c2:12:08:a0:a0:b4:e3:d6:49:fb:0a:90:4c:f7:
                    55:00:70:e8:64:8d:b1:b7:ec:02:57:f3:56:d7:d7:
                    19:f0:82:70:db:ac:6d:d5:c2:77:bf:49:97:10:73:
                    d7:2f:0e:d1:68:c4:2a:58:b0:7e:41:56:9d:1b:31:
                    61:35:59:6c:71:f8:cb:29:3a:2a:91:68:80:9d:36:
                    d3:22:66:e7:42:b5:71:d9:4e:e1:d8:e8:c6:83:f9:
                    b6:06:f2:ff:ae:ae:d8:8b:49:6c:95:7e:75:29:d6:
                    13:b5:d3:7d:99:64:78:ea:ea:28:9c:78:20:88:46:
                    c1:c5:66:ce:a4:d0:51:6f:eb:e9:3c:25:eb:ff:37:
                    f5:4f:e0:76:bc:49:e7:c9:79:cd:c0:d3:eb:84:31:
                    63:c3:fe:2f:af:c2:dc:4b:a3:6d:a4:a3:bb:59:85:
                    d9:d4:67:60:97:db:c4:69:21:6d:71:b1:a9:83:9d:
                    8f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C1:2E:60:F3:F2:27:7B:9B:C1:A1:1D:D5:17:3C:E4:F4:20:65:69
            X509v3 Authority Key Identifier:
                keyid:E4:E1:01:EE:F4:43:15:0C:62:11:0A:CA:FA:88:15:54:C0:89:FC:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:9c:30:28:1f:bd:8f:f5:87:bd:d9:2f:d8:8d:7e:0e:46:c6:
         1b:43:bc:9b:30:ab:21:68:1d:86:6c:33:0c:64:d0:db:cb:ca:
         c8:c9:6e:fc:25:83:fe:8c:00:c1:9c:9f:89:61:b8:99:af:3d:
         92:89:8b:e6:40:e9:72:b4:1c:c9:ee:a5:6b:4a:78:fc:f3:b1:
         66:a2:93:45:21:a6:f9:85:2a:d9:58:cc:e7:9e:09:8b:5b:18:
         90:93:95:3a:c1:f4:4d:d2:67:fd:1d:fa:31:c1:76:86:8d:0a:
         cf:82:c2:e7:26:97:ab:f7:16:9c:4b:e0:07:f5:f2:3f:c9:9c:
         af:41:68:bf:97:26:f0:a5:6f:88:9e:06:d9:c1:21:36:97:51:
         c8:20:d6:5c:24:8b:ea:c6:be:2a:71:be:1c:b6:07:14:46:d6:
         9d:09:d2:a9:70:c6:da:e4:c6:5c:f9:d5:50:d4:9f:76:64:fe:
         6f:64:9e:56:4f:a1:f6:96:82:a8:cf:5e:57:fc:85:b5:15:2d:
         d3:c1:0f:67:24:b8:52:96:18:16:a1:e8:6e:54:b9:38:bc:b4:
         a5:71:bb:2a:83:5c:ab:40:f4:12:e7:49:9e:13:89:98:9e:59:
         49:84:d2:43:20:d6:f5:07:6b:11:60:72:86:20:a7:a6:f8:b5:
         64:ad:ed:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:55:21 2026 by rpki-client