Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.mft
File:                     5B7XVgdLN63ceU-UC9H1Pj9na5M.mft (raw, json)
Hash identifier:          q/H+SCpTKDqXTaI5LoY+GoPzCa4evg1aw7TXuYBAx8Y=
Subject key identifier:   8A:C4:85:F5:88:0C:53:A6:A6:4A:91:60:FA:32:0A:B4:9E:79:B8:93
Authority key identifier: E4:1E:D7:56:07:4B:37:AD:DC:79:4F:94:0B:D1:F5:3E:3F:67:6B:93
Certificate issuer:       /CN=A913B5C7/serialNumber=E41ED756074B37ADDC794F940BD1F53E3F676B93
Certificate serial:       01E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5B7XVgdLN63ceU-UC9H1Pj9na5M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.mft
Manifest number:          01DE
Signing time:             Sun 11 Oct 2026 04:06:06 +0000
Manifest this update:     Sun 11 Oct 2026 04:06:06 +0000
Manifest next update:     Sun 18 Oct 2026 04:06:06 +0000
Files and hashes:         1: 5B7XVgdLN63ceU-UC9H1Pj9na5M.crl (hash: BWkDeQhFAE0uj2LSfk+SBjygjsmMmvunsBubZRqE2es=)
                          2: B0CE94A0E80911EEADE3420AC4F9AE02.roa (hash: 4FDg9GWcMF+h0lyc+szQBWG2v8yyKRA36ab+Hfgr7nM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.crl
                          rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5B7XVgdLN63ceU-UC9H1Pj9na5M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 04:06:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 483 (0x1e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B5C7, serialNumber=E41ED756074B37ADDC794F940BD1F53E3F676B93
        Validity
            Not Before: Oct 11 04:06:06 2026 GMT
            Not After : Oct 18 04:06:06 2026 GMT
        Subject: CN=6acb0b2e-d1f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:47:4b:92:68:9a:5e:74:12:fb:65:c4:01:6d:
                    2b:5f:59:77:5b:e5:89:1d:86:1c:75:3b:b1:54:95:
                    d4:a2:a8:3d:53:82:c9:e4:46:2e:ff:16:02:75:2e:
                    a4:5c:0e:4b:a7:60:f6:1a:a8:38:65:99:82:6c:da:
                    2c:c1:eb:8a:99:9c:48:0c:de:29:cc:3e:ae:d2:dd:
                    3c:ca:69:d6:eb:0b:a7:c0:be:7d:7b:8f:9c:6d:8a:
                    6b:b9:da:6e:9a:fb:3e:3d:09:19:7d:d2:38:9c:41:
                    b9:76:90:cd:80:04:bc:31:df:33:9c:fc:31:43:1e:
                    5a:24:17:5d:75:84:d0:da:77:c0:f3:b8:aa:cb:35:
                    3a:06:1c:2f:d5:b1:9f:9e:85:d9:14:38:c2:61:4d:
                    4a:bf:be:61:e4:31:d2:b8:42:bd:9b:2f:24:cc:f0:
                    b6:9c:79:fa:bd:51:2e:81:0c:f4:e5:75:c2:90:80:
                    2c:59:5a:f2:9e:40:c0:69:63:59:98:72:a0:f6:d2:
                    12:a0:18:6c:73:5a:de:77:38:0c:21:f0:7b:b7:93:
                    b3:97:f8:74:08:9d:52:75:c0:b9:cc:0a:7e:70:00:
                    1c:e5:5b:b8:27:a1:16:19:84:2e:89:52:91:e1:6e:
                    7d:b4:5e:ea:c1:31:b0:a8:bd:c0:bf:f3:36:b6:bf:
                    09:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:C4:85:F5:88:0C:53:A6:A6:4A:91:60:FA:32:0A:B4:9E:79:B8:93
            X509v3 Authority Key Identifier:
                keyid:E4:1E:D7:56:07:4B:37:AD:DC:79:4F:94:0B:D1:F5:3E:3F:67:6B:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5B7XVgdLN63ceU-UC9H1Pj9na5M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:8c:fd:fe:e7:5b:48:9a:d4:b3:b6:f3:34:94:3b:13:40:0d:
         5c:d7:76:28:ce:0e:1e:87:9b:88:3f:81:f2:8f:64:a2:5c:ad:
         83:14:90:64:b2:53:ee:08:3a:01:a0:b4:17:87:8e:dc:ab:c7:
         b1:6d:0c:1c:16:6b:96:3e:02:ce:e4:36:ba:12:6b:0b:9c:9e:
         67:61:bc:e0:58:21:84:d4:1f:fb:e0:a5:a9:ab:b5:1f:55:35:
         83:e0:e8:08:32:f1:80:2c:f5:52:a3:74:95:38:b5:8f:1b:18:
         95:9f:69:4b:c7:0d:50:ad:9a:5a:41:57:8f:2b:22:d3:78:20:
         87:ba:97:9b:39:ae:3b:1a:b1:8c:c6:47:65:da:a7:51:a5:f0:
         f8:91:2f:32:20:b0:b9:94:84:a9:54:f4:b8:7d:7a:d4:f1:ae:
         4f:eb:5c:05:9f:95:e8:da:aa:66:71:ef:2b:d1:3c:31:5d:56:
         e2:f2:5b:d8:09:82:42:da:0c:e5:7a:f7:1f:a7:16:1a:cc:7b:
         8d:f7:66:10:d5:ff:00:17:ef:a8:69:54:e9:eb:5c:66:50:58:
         66:db:a5:e8:11:79:b1:09:19:ba:0c:1d:d7:63:6e:32:d2:b6:
         a6:73:b4:04:7e:b4:00:e3:1a:99:86:78:65:76:d4:c0:a1:f0:
         78:f7:a3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:54:50 2026 by rpki-client