Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E070/89C5597CBC1011EE8BEB137AC4F9AE02/U5u3bIpDeaTeOZwFLTjBtFOmbxs.mft
File:                     U5u3bIpDeaTeOZwFLTjBtFOmbxs.mft (raw, json)
Hash identifier:          dCNGevNYEh3QrEql1ZOVhSoPJ0P3Uf+J137+DXPxcKo=
Subject key identifier:   90:A2:82:63:1D:32:76:57:37:5D:C4:E1:56:09:8C:6D:3D:90:05:13
Authority key identifier: 53:9B:B7:6C:8A:43:79:A4:DE:39:9C:05:2D:38:C1:B4:53:A6:6F:1B
Certificate issuer:       /CN=A914E070/serialNumber=539BB76C8A4379A4DE399C052D38C1B453A66F1B
Certificate serial:       01E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5u3bIpDeaTeOZwFLTjBtFOmbxs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E070/89C5597CBC1011EE8BEB137AC4F9AE02/U5u3bIpDeaTeOZwFLTjBtFOmbxs.mft
Manifest number:          01DD
Signing time:             Wed 29 Jul 2026 04:48:12 +0000
Manifest this update:     Wed 29 Jul 2026 04:48:12 +0000
Manifest next update:     Wed 05 Aug 2026 04:48:12 +0000
Files and hashes:         1: U5u3bIpDeaTeOZwFLTjBtFOmbxs.crl (hash: PGM4NDwyNIZz53g4EuSzVsU2qLJXoJnVYpJM9DmNMrY=)
                          2: 3772F678BC1211EE8C54FD2EC4F9AE02.roa (hash: w99PgfgQdaKiDqqq1ZXJsjJYVLkyPFxl1fD6GlPrkc8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E070/89C5597CBC1011EE8BEB137AC4F9AE02/U5u3bIpDeaTeOZwFLTjBtFOmbxs.crl
                          rsync://rpki.apnic.net/member_repository/A914E070/89C5597CBC1011EE8BEB137AC4F9AE02/U5u3bIpDeaTeOZwFLTjBtFOmbxs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5u3bIpDeaTeOZwFLTjBtFOmbxs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 04:48:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 488 (0x1e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E070, serialNumber=539BB76C8A4379A4DE399C052D38C1B453A66F1B
        Validity
            Not Before: Jul 29 04:48:12 2026 GMT
            Not After : Aug  5 04:48:12 2026 GMT
        Subject: CN=6a69860c-0f04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ad:97:5b:0a:61:3f:3f:93:99:81:1a:d6:d7:
                    ad:37:7e:0b:19:08:97:fd:17:4b:13:7d:6b:cb:c7:
                    cb:d9:57:c1:34:47:4a:e4:7a:73:f9:db:f5:16:bf:
                    52:c3:6f:7d:7a:9c:30:a4:af:0b:0f:69:d1:43:e3:
                    e1:cd:87:80:86:17:c9:97:9f:2c:65:04:96:24:e0:
                    82:7c:00:90:52:0d:51:d2:77:33:43:56:31:d2:2b:
                    4e:4b:da:e7:bc:8c:fc:9c:58:be:ea:d7:47:05:75:
                    55:c3:d4:55:6b:79:0c:38:9e:5d:98:28:34:8c:46:
                    5d:65:7a:bb:af:06:3c:52:df:6c:7c:a2:53:84:d0:
                    b5:f6:e6:42:2c:40:4e:66:65:82:34:20:ff:e8:ac:
                    40:fc:d7:25:77:b1:9f:f7:f3:cf:b5:e6:4a:6e:5d:
                    77:ad:e9:b6:3e:5c:ac:f4:30:c1:96:3f:56:68:c5:
                    87:5e:4a:a1:8b:34:eb:63:1e:e4:fb:24:66:3f:92:
                    06:05:c1:2e:64:4b:cb:c6:9e:d0:8f:02:05:dc:b6:
                    4e:b4:a8:70:1d:80:73:eb:24:f5:bb:34:85:39:f8:
                    b2:d8:12:0e:fd:3e:7e:86:c8:29:0c:3a:7f:5c:26:
                    39:10:d7:28:11:79:51:7c:46:db:98:8e:0a:9c:91:
                    c8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:A2:82:63:1D:32:76:57:37:5D:C4:E1:56:09:8C:6D:3D:90:05:13
            X509v3 Authority Key Identifier:
                keyid:53:9B:B7:6C:8A:43:79:A4:DE:39:9C:05:2D:38:C1:B4:53:A6:6F:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E070/89C5597CBC1011EE8BEB137AC4F9AE02/U5u3bIpDeaTeOZwFLTjBtFOmbxs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5u3bIpDeaTeOZwFLTjBtFOmbxs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E070/89C5597CBC1011EE8BEB137AC4F9AE02/U5u3bIpDeaTeOZwFLTjBtFOmbxs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:6b:5b:fd:68:05:d9:33:3c:fb:87:bd:8f:fa:09:58:04:14:
         35:a9:a6:93:35:87:52:e9:76:34:2f:5a:30:fd:dd:da:e3:4e:
         b2:ea:1a:e0:f6:04:b0:45:dc:a4:d0:63:92:16:71:dc:a0:67:
         c3:d0:9f:56:38:cf:25:ea:4b:72:94:78:ac:9c:92:62:28:98:
         a6:3a:78:4c:3c:1f:b6:75:22:40:19:2a:f9:f9:0d:84:69:33:
         40:aa:79:ae:78:6e:50:d1:3f:18:d5:15:96:af:a7:6c:f0:04:
         d9:a8:69:1c:67:94:4a:83:ee:1b:ef:bc:64:db:46:f0:c4:79:
         35:92:14:7a:c8:b3:5b:79:fe:ef:8e:0c:f8:fa:c7:fe:d1:db:
         b4:f4:a8:8f:24:6b:37:dd:da:eb:84:82:eb:de:60:66:7c:9d:
         14:f6:c3:dd:f7:21:c4:94:ba:49:3a:0f:d0:cd:25:38:f1:af:
         14:42:20:bc:e4:22:06:65:ac:b5:85:9b:39:70:1b:30:a4:5c:
         58:9c:dc:3c:03:e4:2c:33:79:74:a9:40:0a:bd:33:de:35:3b:
         dc:3a:c7:3c:42:ca:b5:b0:9e:45:06:36:7a:4e:ef:59:b4:2e:
         92:c5:fb:48:29:ab:4a:d5:44:73:81:b8:4b:7f:92:ce:34:f4:
         2c:8f:c1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:13:42 2026 by rpki-client