Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft
File:                     5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft (raw, json)
Hash identifier:          emZwP7MDeJoer551uvQBf9iY6SBeeR9kNwC1SP63eeg=
Subject key identifier:   DA:C5:A4:2C:60:7C:79:35:34:C1:35:84:F9:4B:10:6A:B4:CC:E6:7E
Authority key identifier: E5:18:E9:48:15:C4:6D:7D:8E:6F:EF:4E:BC:3D:18:DF:0E:21:F8:36
Certificate issuer:       /CN=A9183DB7/serialNumber=E518E94815C46D7D8E6FEF4EBC3D18DF0E21F836
Certificate serial:       0EF4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft
Manifest number:          0ED7
Signing time:             Sun 20 Sep 2026 17:39:01 +0000
Manifest this update:     Sun 20 Sep 2026 17:39:01 +0000
Manifest next update:     Sun 27 Sep 2026 17:39:01 +0000
Files and hashes:         1: 5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl (hash: mQ1KHhCO+KpoCsGi+QgRdKXX3e/0v2UwSi+z+fWefpk=)
                          2: 6A5EC93A70DE11EC8B944928C4F9AE02.roa (hash: zDVZOx/RnTHyqu+JHRSyRqE5JFgxRqECtSMYFaFDkBc=)
                          3: 6B7E8FC670DE11EC8B944928C4F9AE02.roa (hash: CZD8DnkvSuecJc1rAO4JQy1E4lxowJK/FQipvSL/+xU=)
                          4: 9F14D15E70DB11ECACCABD21C4F9AE02.roa (hash: pUVWoeWAUERXbgaMgmwGhCNGaQUSTJhJ6tnKgpGaDus=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl
                          rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 17:39:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3828 (0xef4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183DB7, serialNumber=E518E94815C46D7D8E6FEF4EBC3D18DF0E21F836
        Validity
            Not Before: Sep 20 17:39:01 2026 GMT
            Not After : Sep 27 17:39:01 2026 GMT
        Subject: CN=6ab01a35-92c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d7:33:05:ca:4f:1a:b5:16:86:aa:dc:3b:56:
                    6c:43:11:72:ad:9e:53:df:57:76:0b:2d:74:de:b2:
                    9b:59:6f:de:df:11:4a:76:70:33:47:24:92:dc:0a:
                    b9:14:a6:fd:ac:ac:8a:8d:8f:cd:29:47:53:40:45:
                    24:ce:2e:77:3b:96:00:93:5f:98:91:e2:51:59:8e:
                    cd:53:0c:cf:11:25:e2:82:51:33:a8:c7:ad:d5:ba:
                    6a:b8:ce:ff:4f:e6:72:99:a6:18:a2:94:f3:4a:40:
                    59:38:9e:a5:43:a2:f0:76:78:9f:a8:3b:24:7e:5e:
                    26:aa:9b:06:be:ea:ab:61:82:6c:c8:7d:6c:ec:ad:
                    22:6e:c8:31:00:c5:e4:18:3c:4f:09:84:24:0e:3a:
                    56:72:23:8c:7b:49:e2:85:7b:9b:f3:85:09:2b:ca:
                    f1:99:67:d7:aa:0e:25:42:02:68:4b:54:89:ca:6c:
                    22:ed:9d:35:6b:b6:d8:f1:0b:3b:fa:81:a8:56:79:
                    dc:8d:7c:16:20:46:d4:4a:65:8d:0c:92:a0:69:e8:
                    95:82:bd:b3:2e:42:4d:5e:4f:fe:90:95:b5:e7:52:
                    d5:ef:f3:be:88:09:31:16:47:13:a8:dc:88:77:e6:
                    37:f6:ac:93:2d:06:9e:0a:b4:16:f4:61:0d:f7:06:
                    ab:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C5:A4:2C:60:7C:79:35:34:C1:35:84:F9:4B:10:6A:B4:CC:E6:7E
            X509v3 Authority Key Identifier:
                keyid:E5:18:E9:48:15:C4:6D:7D:8E:6F:EF:4E:BC:3D:18:DF:0E:21:F8:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:94:1d:13:a1:73:4d:9d:bb:30:ce:3a:22:58:18:f1:ea:89:
         c6:1c:b3:76:79:3d:79:c1:b1:16:2f:8f:27:ff:5b:79:41:c0:
         b4:8a:7b:99:e9:5f:c3:4c:86:35:16:ec:b7:11:94:94:85:3c:
         17:91:26:6a:96:5b:74:54:aa:70:08:2c:fa:df:1d:03:98:1e:
         2a:ac:06:9d:3f:51:15:4c:58:c9:b9:a9:ca:2c:41:31:1f:08:
         3e:d4:ca:ce:de:b1:53:80:e8:9a:69:71:0f:d1:e9:d1:7f:42:
         8c:25:c2:b1:53:46:dc:38:a6:d8:d1:6f:4e:9a:4c:79:c4:10:
         e7:63:be:61:0b:ec:68:72:a4:2f:e7:41:b3:70:7a:58:18:ef:
         e0:ff:d8:05:e8:4e:3e:b6:a8:5c:d4:cf:7f:0b:b4:96:9f:c4:
         f0:a8:bf:7d:34:23:c9:72:cb:e6:b5:f5:d8:99:48:6d:4b:96:
         78:d8:1e:ca:5e:4e:5e:a8:9a:12:f2:af:97:d6:8a:80:4a:37:
         a4:c7:ca:6f:d7:6c:82:8b:a0:d5:5b:0c:4d:e0:5b:9d:ee:db:
         e7:00:39:f8:bb:34:f2:f7:89:76:9f:34:9d:bf:a5:ba:e2:71:
         2d:5e:be:e6:91:b2:8f:08:fd:c6:e9:04:c5:64:92:6d:76:ba:
         9e:9d:1c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:08:18 2026 by rpki-client