Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft
File:                     V5NDbSKpagYTaFEgO7clmE1wsBc.mft (raw, json)
Hash identifier:          t9Gci+qTWEAUfngrl455dSwfg5rhgkbYDUkkr0UI+eU=
Subject key identifier:   62:57:B8:30:2A:51:FD:9A:8D:1A:D1:75:3C:D1:41:34:2E:E2:33:3F
Authority key identifier: 57:93:43:6D:22:A9:6A:06:13:68:51:20:3B:B7:25:98:4D:70:B0:17
Certificate issuer:       /CN=A9159DCD/serialNumber=5793436D22A96A06136851203BB725984D70B017
Certificate serial:       023F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5NDbSKpagYTaFEgO7clmE1wsBc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft
Manifest number:          0237
Signing time:             Mon 27 Jul 2026 04:06:33 +0000
Manifest this update:     Mon 27 Jul 2026 04:06:33 +0000
Manifest next update:     Mon 03 Aug 2026 04:06:33 +0000
Files and hashes:         1: V5NDbSKpagYTaFEgO7clmE1wsBc.crl (hash: bhrGGs15iBKzXLmm5WiO7TQJO2NRqvAZUlVgHI9L+es=)
                          2: 29D600062C3311EEBFF69B6CC4F9AE02.roa (hash: hgm/D5LNWRnGDgjKMnyGYGnu+AiyhSvb6IXM1oBCLPY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.crl
                          rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5NDbSKpagYTaFEgO7clmE1wsBc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 575 (0x23f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9159DCD, serialNumber=5793436D22A96A06136851203BB725984D70B017
        Validity
            Not Before: Jul 27 04:06:33 2026 GMT
            Not After : Aug  3 04:06:33 2026 GMT
        Subject: CN=6a66d949-68de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9f:07:4d:6d:85:f9:6b:5c:f0:ac:fa:6e:c6:
                    12:f7:83:55:21:72:aa:20:d4:55:1b:72:8c:d6:b5:
                    8f:71:2c:69:ed:74:17:47:f6:bb:b3:3d:d1:e5:d1:
                    76:65:65:53:ce:0b:74:1f:6f:2f:c5:32:74:01:11:
                    8b:3c:57:31:cb:93:6d:fc:40:f3:6e:f1:ae:6d:4a:
                    a9:a1:da:5f:d3:ca:3f:6d:16:c3:ec:dd:40:48:d1:
                    11:83:80:da:c6:b6:45:74:fd:d4:2f:c5:10:6e:46:
                    44:48:99:ee:10:95:fd:d4:93:4b:a0:0e:82:cb:54:
                    8e:e7:16:8e:83:52:29:ae:34:b9:a2:0c:36:a6:53:
                    07:50:65:fb:87:26:d5:17:e0:2d:20:13:42:98:b8:
                    7e:c6:6c:c1:f2:b8:2f:c8:8f:11:69:3b:87:24:5d:
                    36:18:5d:23:d6:1b:8d:84:15:f3:60:f9:13:d0:47:
                    6a:1f:98:25:2d:12:4b:b2:17:b3:a6:c6:9c:0d:d2:
                    d3:72:f8:a8:ce:9c:4c:f9:f6:2a:55:9c:c8:63:cd:
                    d5:2c:e9:79:32:6e:fc:d3:93:d1:43:3f:34:db:4a:
                    9e:35:89:5f:15:27:28:ae:4c:96:92:7b:26:4a:54:
                    c9:33:fa:30:38:9e:34:33:6c:6c:3b:87:e5:5b:a8:
                    4c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:57:B8:30:2A:51:FD:9A:8D:1A:D1:75:3C:D1:41:34:2E:E2:33:3F
            X509v3 Authority Key Identifier:
                keyid:57:93:43:6D:22:A9:6A:06:13:68:51:20:3B:B7:25:98:4D:70:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5NDbSKpagYTaFEgO7clmE1wsBc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:e6:14:33:46:38:74:d7:10:57:bf:d4:9b:ee:74:97:cb:0a:
         3d:3a:86:6f:9b:ed:49:26:db:97:74:b2:b5:bd:52:70:d8:1a:
         e8:1e:21:83:17:04:ef:04:1b:70:49:33:63:47:8e:7c:20:e4:
         7a:d7:7c:91:5b:13:cb:bd:12:32:a1:f8:b0:69:c4:2e:33:a5:
         37:49:0d:16:c8:67:82:e5:03:45:0c:dc:36:48:5a:8b:a8:fb:
         50:09:df:05:9c:f7:00:09:ce:b1:d1:7a:46:6a:3f:77:28:f6:
         6b:6b:04:1a:8d:d6:42:17:6f:84:d2:c8:ea:9d:89:08:a4:9a:
         4f:d7:ac:68:1c:5a:da:06:64:9d:f0:82:e7:d9:ca:52:08:09:
         1d:63:23:7f:a7:9a:be:89:07:db:c8:23:9b:53:a1:a4:9e:55:
         ef:dc:96:83:50:88:dd:af:26:10:e1:8c:53:68:c1:48:fb:c9:
         3a:61:eb:75:89:8a:8e:9f:f9:bc:bf:a9:bc:e8:a7:3b:ed:e8:
         9d:16:7d:63:60:21:e9:ec:f9:c0:18:af:fd:f0:70:8f:f1:30:
         86:bf:6b:81:53:61:7d:d0:20:d4:eb:9c:52:cd:f8:c7:05:28:
         df:f1:9e:04:fe:21:ae:be:09:3b:f3:77:74:66:32:85:2d:d7:
         03:ba:0f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:04:56 2026 by rpki-client