Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft
File:                     5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft (raw, json)
Hash identifier:          xoyoY1plRUEAHTC1698lyu22+1iqkLIq6GeEweRjB5s=
Subject key identifier:   59:8F:89:58:F5:EB:D6:8E:54:37:12:B8:38:92:99:1F:DD:EC:9E:B2
Authority key identifier: E5:2D:7F:7F:BA:AC:1F:75:AF:FA:76:2E:DB:3F:28:16:0B:CF:BD:25
Certificate issuer:       /CN=A914A47A/serialNumber=E52D7F7FBAAC1F75AFFA762EDB3F28160BCFBD25
Certificate serial:       356D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft
Manifest number:          3565
Signing time:             Tue 28 Jul 2026 14:55:06 +0000
Manifest this update:     Tue 28 Jul 2026 14:55:06 +0000
Manifest next update:     Tue 04 Aug 2026 14:55:06 +0000
Files and hashes:         1: 5S1_f7qsH3Wv-nYu2z8oFgvPvSU.crl (hash: k7b6YKArq0NE4hwiEq1r4Ts9v/NPeM6RVaZ4uitPoiE=)
                          2: A5C01D6ED15511EA904EF30BC4F9AE02.roa (hash: k52zzNPlnYvuAvYWIlxb4hsiHOOq9dzm/h/OPeTzfmw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.crl
                          rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 14:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13677 (0x356d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A47A, serialNumber=E52D7F7FBAAC1F75AFFA762EDB3F28160BCFBD25
        Validity
            Not Before: Jul 28 14:55:06 2026 GMT
            Not After : Aug  4 14:55:06 2026 GMT
        Subject: CN=6a68c2ca-96f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ee:0a:53:31:65:8a:3a:c2:e0:d2:bd:ca:70:
                    7a:7c:8d:7b:a1:fb:22:50:29:e1:59:d4:d9:fa:5f:
                    04:e8:5f:95:ab:c7:48:01:b8:62:8e:50:3c:0c:dc:
                    8f:1a:76:e1:10:98:71:f7:18:61:da:20:2d:9d:c5:
                    8c:b3:bf:69:9c:d8:55:09:43:9a:6d:86:fd:e5:06:
                    a7:57:ee:b9:2f:2a:42:58:a3:a7:95:4d:c9:3f:59:
                    a1:16:91:04:ae:8a:cd:c7:a5:30:58:c2:1b:09:3c:
                    44:b0:22:c5:65:3f:49:18:21:01:93:71:5c:c4:a3:
                    50:2f:c9:39:e4:cb:ca:45:61:df:ab:cf:3a:24:fe:
                    6c:b0:df:3f:58:20:63:53:8b:f6:bc:0d:ce:5b:c3:
                    4c:87:d2:98:29:9e:7c:53:cf:39:6d:73:1e:db:15:
                    e2:66:4e:b9:ea:0e:d6:da:da:cb:33:7b:ca:fe:3a:
                    3f:1c:11:94:38:72:95:69:a1:46:8d:ac:34:71:a1:
                    81:b4:94:cc:ae:ff:c2:b6:28:aa:d8:f2:e2:32:67:
                    e2:70:5a:ed:f0:ef:29:90:0b:70:18:9b:43:ea:70:
                    1b:81:74:0a:ce:f9:aa:5b:74:1e:11:b8:f1:26:ba:
                    2d:c5:49:b9:9f:34:9a:e5:b1:f1:a7:48:89:99:75:
                    86:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:8F:89:58:F5:EB:D6:8E:54:37:12:B8:38:92:99:1F:DD:EC:9E:B2
            X509v3 Authority Key Identifier:
                keyid:E5:2D:7F:7F:BA:AC:1F:75:AF:FA:76:2E:DB:3F:28:16:0B:CF:BD:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:1f:78:f5:e9:0f:ac:a4:40:9b:00:29:bc:d4:a7:f3:6d:a4:
         ba:1e:87:65:85:96:9c:43:73:a3:dd:34:c0:a8:fd:93:8a:1e:
         32:d9:35:07:45:11:6c:72:c0:a2:30:e5:5b:da:70:95:4c:b6:
         59:6f:55:cf:72:db:ba:31:91:0b:2f:6c:f0:d2:93:39:6e:a7:
         8c:5a:b6:bc:d6:37:e6:6b:6c:11:9f:21:84:d7:ba:5b:86:c9:
         c3:01:fd:f5:57:f3:57:5f:70:2e:09:8d:51:81:6f:4b:99:a0:
         c5:17:90:8c:7c:10:84:1e:79:66:5b:a9:38:c9:32:50:fa:f7:
         23:e5:21:f2:51:e2:5d:28:49:6b:5b:ca:6d:2c:a3:c3:73:38:
         7c:9a:e3:7e:09:89:ba:1b:4a:49:e2:0d:18:0c:4b:ba:ca:6e:
         14:f4:a6:e5:2a:58:3e:80:14:f3:e0:06:e1:4a:c3:32:4c:65:
         e7:5e:1c:d7:12:72:71:ef:a9:5c:c5:e9:52:d7:49:41:05:11:
         b5:bc:bf:19:5b:8a:0b:5f:01:c2:f0:f2:69:2d:ff:f3:77:3a:
         5c:6d:9e:ea:69:4b:97:88:25:65:9b:6c:24:12:8c:b1:53:01:
         3a:bf:4c:34:04:63:8a:70:78:d5:9c:e7:bd:d0:71:9b:95:8f:
         a3:a8:56:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:34:05 2026 by rpki-client