Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft
File:                     s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft (raw, json)
Hash identifier:          P+QGhCVZ62Ou2sgkR5SK0rOXeW3Zm1DJuzeFsBrrggY=
Subject key identifier:   C5:2C:A7:9E:7E:33:69:0B:7A:A2:A3:4B:F6:8F:89:0A:35:A1:73:5A
Authority key identifier: B3:99:2F:0D:49:BA:F6:A3:6F:DA:65:8E:5B:45:94:69:52:1E:5B:44
Certificate issuer:       /CN=A917530D/serialNumber=B3992F0D49BAF6A36FDA658E5B459469521E5B44
Certificate serial:       0219
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft
Manifest number:          0207
Signing time:             Wed 23 Sep 2026 03:07:48 +0000
Manifest this update:     Wed 23 Sep 2026 03:07:48 +0000
Manifest next update:     Wed 30 Sep 2026 03:07:48 +0000
Files and hashes:         1: s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl (hash: cAyDPH2aKMc49hM/DAP0wsEDnDaiqRWX3hz2QYUhi/8=)
                          2: A97CBD42A06611EFA888B57DC4F9AE02.roa (hash: 4V1R4yBz9L+Ygkp9Jd1O9idd1/44LPhkeQiPf1Qbp1Q=)
                          3: 762CACD0B04311EF95390327C4F9AE02.roa (hash: cvBldBadb8nJSATgwrsmCmmppZB2HYAM+GSD2SpFaCg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl
                          rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 03:07:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 537 (0x219)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917530D, serialNumber=B3992F0D49BAF6A36FDA658E5B459469521E5B44
        Validity
            Not Before: Sep 23 03:07:48 2026 GMT
            Not After : Sep 30 03:07:48 2026 GMT
        Subject: CN=6ab34284-c7b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:59:90:5d:d1:fb:4e:26:59:9e:8e:6f:bc:62:
                    dd:f2:8c:73:ef:ee:25:70:52:19:d0:f6:cb:7a:22:
                    c7:98:88:84:02:4d:ac:f9:52:76:79:c6:d2:c2:65:
                    33:0e:91:fe:f7:12:3a:a8:12:e1:2c:88:dc:7d:08:
                    d4:0b:01:9a:34:e8:56:ae:53:53:3e:43:5b:46:90:
                    1b:41:c9:93:c7:d3:10:7e:02:05:9f:ee:07:07:56:
                    ad:80:01:52:e2:f1:a2:db:ca:e7:29:46:46:40:75:
                    a3:db:5a:24:75:98:9b:0b:bb:9f:2c:44:45:a3:b1:
                    bd:a8:c5:58:94:15:88:2f:03:8d:24:fa:21:d9:23:
                    f6:a0:e8:6d:78:d4:e3:22:69:08:b9:e3:95:50:78:
                    41:e8:70:4f:e3:91:eb:19:34:dc:32:f8:37:65:19:
                    91:9c:09:f8:be:69:19:4f:41:35:96:00:09:a7:ec:
                    da:f4:a3:17:1d:f4:67:c8:66:bf:33:0b:07:14:d7:
                    85:ab:ec:76:86:a4:42:2f:a0:e8:c8:35:09:a7:e0:
                    95:f6:96:26:54:19:38:a0:43:91:b8:f9:28:b5:2a:
                    c9:69:89:dc:79:8a:7e:7d:0f:79:2d:f4:72:76:9e:
                    a3:ef:38:d7:69:ac:92:b5:50:19:07:f5:8e:d1:c3:
                    e9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:2C:A7:9E:7E:33:69:0B:7A:A2:A3:4B:F6:8F:89:0A:35:A1:73:5A
            X509v3 Authority Key Identifier:
                keyid:B3:99:2F:0D:49:BA:F6:A3:6F:DA:65:8E:5B:45:94:69:52:1E:5B:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:53:23:37:11:7d:b0:50:8c:9a:11:6d:4b:8b:8c:19:18:0d:
         c1:a9:48:f2:6d:8a:d5:ae:73:4f:eb:04:75:1f:e3:73:1d:e2:
         5c:0d:2c:3d:dd:ff:7d:b3:24:c8:38:f5:d6:fd:a2:25:95:fa:
         cd:ed:8f:b6:ce:7d:8f:59:d4:ff:48:59:48:df:8f:18:19:4b:
         d2:67:05:08:62:e0:9f:99:48:06:f6:71:66:08:49:7b:00:ac:
         c9:e8:70:2e:03:f4:0b:95:b8:7a:14:9a:98:72:db:77:e1:d2:
         c0:cc:4e:9f:1f:08:08:2c:89:8d:7a:58:e7:5a:fc:38:47:04:
         41:3b:40:ce:de:ab:73:ca:02:cf:ea:7f:7c:f9:7c:dc:15:12:
         b2:98:6e:d0:b5:99:72:94:63:9f:df:04:90:27:97:e6:ef:04:
         80:f5:21:25:e8:1f:b1:39:d4:f0:ba:7f:8f:06:bb:dd:d9:35:
         74:50:f3:e8:cb:61:ee:fd:a7:d4:ed:4f:0e:5a:53:c4:ad:7c:
         3d:fc:6e:91:85:c2:3b:df:56:04:24:b4:41:19:af:d9:ed:42:
         20:36:e1:af:2b:c7:8c:a6:8c:ee:1e:4d:7c:a4:05:2b:4c:f1:
         b3:ff:cf:34:7a:ce:1f:62:26:30:52:1f:3f:85:54:bc:f3:3e:
         77:0b:79:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:05:04 2026 by rpki-client