Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft
File:                     5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft (raw, json)
Hash identifier:          n6EdSFptYwRi//sI0gUt5BE5ncQVAbQmvHJJaoK0mDc=
Subject key identifier:   26:EE:B1:D9:36:39:77:63:59:20:C0:52:CB:DF:02:AA:BF:CB:FB:73
Authority key identifier: E5:09:63:D7:04:68:72:73:56:B7:8B:7F:C4:38:09:74:42:9B:64:E1
Certificate issuer:       /CN=A914C7F8/serialNumber=E50963D70468727356B78B7FC4380974429B64E1
Certificate serial:       026A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qlj1wRocnNWt4t_xDgJdEKbZOE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft
Manifest number:          0257
Signing time:             Wed 29 Jul 2026 03:29:25 +0000
Manifest this update:     Wed 29 Jul 2026 03:29:25 +0000
Manifest next update:     Wed 05 Aug 2026 03:29:25 +0000
Files and hashes:         1: 5Qlj1wRocnNWt4t_xDgJdEKbZOE.crl (hash: 7NY7Z/fQ3NDdceclHsRbD+YoKa0zAo0V3lTzmzd0rOM=)
                          2: 960C9032C72711F0BD856955C4F9AE02.roa (hash: qtYHDF7MGXV3CNn5trlAgoV0imEdai1To/X8YfcEDdc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.crl
                          rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qlj1wRocnNWt4t_xDgJdEKbZOE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 03:29:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 618 (0x26a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C7F8, serialNumber=E50963D70468727356B78B7FC4380974429B64E1
        Validity
            Not Before: Jul 29 03:29:25 2026 GMT
            Not After : Aug  5 03:29:25 2026 GMT
        Subject: CN=6a697395-4059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a6:90:6a:82:b2:9e:32:6a:aa:d7:77:e2:15:
                    9c:51:2a:60:5c:4a:6a:b9:d1:8c:6d:a6:7b:2a:99:
                    2b:13:04:07:84:be:49:c2:5f:af:61:8d:9d:4d:9f:
                    83:85:49:3d:7f:1e:5d:cb:03:de:82:99:c9:dc:62:
                    49:83:3b:cf:d0:65:d2:dc:96:04:99:21:78:38:01:
                    d6:98:09:2f:0f:eb:f4:3f:1c:45:74:98:6f:35:10:
                    f6:26:d1:87:68:c4:13:6c:b0:82:40:cf:1a:88:62:
                    a6:fb:51:75:75:eb:e7:f1:25:3d:63:34:b6:c2:f5:
                    e5:b8:fc:3e:bb:87:60:7f:2e:f8:cf:e7:0a:9c:5d:
                    65:b2:63:d1:c8:ae:8a:06:7a:7a:7c:89:32:28:43:
                    44:f3:ae:04:7e:b7:d1:81:c7:09:c8:06:73:cb:cd:
                    14:c5:20:1d:ea:6e:f5:15:09:1b:9b:40:97:06:e1:
                    b8:d6:ce:67:0b:6f:1a:19:fa:c8:e4:16:ad:73:14:
                    a0:9f:33:8f:bb:93:29:90:5c:a1:68:fa:c6:02:ef:
                    e0:4c:51:8a:35:5d:71:d7:74:d5:1a:75:8d:bc:bf:
                    01:40:76:33:dd:7d:b5:ab:05:1d:9f:38:29:24:c7:
                    1c:fb:2d:dc:70:66:d9:a1:cb:30:6b:5a:93:ac:81:
                    19:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:EE:B1:D9:36:39:77:63:59:20:C0:52:CB:DF:02:AA:BF:CB:FB:73
            X509v3 Authority Key Identifier:
                keyid:E5:09:63:D7:04:68:72:73:56:B7:8B:7F:C4:38:09:74:42:9B:64:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qlj1wRocnNWt4t_xDgJdEKbZOE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:71:b3:9c:5e:53:6b:d7:cc:76:fe:4e:f1:d0:61:26:fd:84:
         b5:be:c0:32:9b:c9:40:2a:d2:a1:1d:3b:88:d4:db:bb:fd:3d:
         19:9a:a3:cc:91:63:1d:39:98:8c:5c:e9:c0:aa:a7:1b:30:18:
         4f:0f:7d:fd:d1:bd:ca:ba:79:b8:21:4b:da:5b:49:b5:6c:1f:
         fe:2f:eb:ca:c9:2b:09:0d:8b:9a:6a:2d:7e:48:b6:3a:2c:1a:
         60:9d:b2:0d:f6:26:68:66:31:4a:c1:49:23:f3:8e:b5:be:a9:
         98:5c:3b:2d:d6:98:de:4e:13:21:9c:93:46:fc:3e:11:b4:67:
         83:58:76:0a:61:1a:ac:6a:c0:df:5e:23:d6:81:9f:db:9e:fe:
         f5:a7:f8:9f:ea:e9:5f:13:40:04:66:17:11:e8:5b:79:cb:05:
         4e:65:04:04:d2:74:49:49:7c:a3:88:66:2c:34:00:7e:01:15:
         ee:cc:c2:a4:be:c0:ae:69:65:da:92:0e:d9:68:32:db:10:2a:
         05:eb:70:39:47:d2:d5:0e:e5:4f:04:e7:76:86:4a:3a:3f:2a:
         40:8f:48:3c:2d:95:f7:6c:f1:82:bf:ec:7b:1b:f7:79:df:7b:
         2a:60:ef:36:34:29:6f:15:1b:d7:87:6e:24:f3:31:59:b7:3f:
         9e:0f:78:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:01:06 2026 by rpki-client