Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft
File:                     vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft (raw, json)
Hash identifier:          0h8L7xspJNG8gbnGfyN/xE0Ip5vBIT+6Rv5qgKD41ro=
Subject key identifier:   49:91:CC:C9:4E:B1:32:68:81:1F:2B:3B:F2:68:16:E4:A9:30:D1:5B
Authority key identifier: BD:1E:7E:64:1F:FD:96:D5:74:61:55:FC:42:1B:17:DD:C1:AA:77:62
Certificate issuer:       /CN=A9186B80/serialNumber=BD1E7E641FFD96D5746155FC421B17DDC1AA7762
Certificate serial:       0601
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft
Manifest number:          05F1
Signing time:             Sun 20 Sep 2026 22:48:58 +0000
Manifest this update:     Sun 20 Sep 2026 22:48:58 +0000
Manifest next update:     Sun 27 Sep 2026 22:48:58 +0000
Files and hashes:         1: vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl (hash: U/jo3h7uwYxnexjS2GVaNXlYEubhANKgSznKemLUg1k=)
                          2: 37FE553E5CAB11F08FCD0029C4F9AE02.roa (hash: 7vsEdUjO68wSnI82MSqqLNl6M5rdXWQoFEtu17LQhaE=)
                          3: 9B741CFE0C3411EDB8619843C4F9AE02.roa (hash: NVoTvNqptu8+2EEc4xwQ1XFeD946dIqVcf+QNOuWx54=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl
                          rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 22:48:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1537 (0x601)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186B80, serialNumber=BD1E7E641FFD96D5746155FC421B17DDC1AA7762
        Validity
            Not Before: Sep 20 22:48:58 2026 GMT
            Not After : Sep 27 22:48:58 2026 GMT
        Subject: CN=6ab062da-306b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:13:ba:59:7d:f2:58:fa:86:a5:83:c6:d2:57:
                    00:6b:1b:d9:5f:0e:69:c9:5d:71:01:6f:a7:68:c1:
                    c0:33:0f:73:23:0d:9e:46:f2:c5:0b:d3:eb:0f:c9:
                    8a:dd:bf:90:cb:19:5e:c3:97:45:b5:7a:7a:b9:b6:
                    80:25:83:01:95:25:eb:05:ac:48:b5:ea:05:d6:33:
                    a5:9c:38:95:35:00:3f:c2:c0:4d:ef:54:53:34:9c:
                    d0:0c:70:78:a0:45:31:bd:b4:9e:9f:74:32:c5:eb:
                    ac:1a:82:80:04:00:11:82:bb:fd:22:3d:da:58:ce:
                    23:38:4b:bc:8a:3f:41:99:ae:47:06:89:69:bc:a2:
                    1e:bf:e2:a6:db:f0:82:87:bc:6b:44:d8:ed:47:69:
                    37:54:44:d1:5b:52:16:4c:2f:50:1b:b8:44:a6:da:
                    65:c8:40:85:6c:f6:d1:de:4d:cd:44:de:0a:6a:43:
                    02:dc:03:2b:69:dd:0f:60:d6:26:76:7f:02:be:46:
                    5f:cd:c4:92:b4:c7:a3:ca:3f:9d:04:a7:7a:12:c1:
                    28:13:6d:d9:4a:9a:f7:35:e3:69:5c:9e:ec:26:40:
                    f9:ca:6e:e6:33:c8:1e:07:d7:e6:87:d6:30:c9:b0:
                    c5:3f:17:f4:41:a9:e8:76:65:6c:14:e3:5b:25:18:
                    8e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:91:CC:C9:4E:B1:32:68:81:1F:2B:3B:F2:68:16:E4:A9:30:D1:5B
            X509v3 Authority Key Identifier:
                keyid:BD:1E:7E:64:1F:FD:96:D5:74:61:55:FC:42:1B:17:DD:C1:AA:77:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:27:93:b3:94:75:0d:12:e8:16:ca:b5:b7:54:e9:46:e9:47:
         53:58:86:7f:cb:8a:e1:fb:e3:e4:6b:37:d7:cd:0d:7a:66:b5:
         4f:69:28:e5:ab:59:27:fe:61:ae:91:4d:3a:ea:32:07:4b:86:
         f2:d7:21:0e:8c:8b:78:af:af:30:bd:5c:60:54:d6:91:ae:dd:
         5d:59:a1:45:69:92:58:85:06:62:fa:91:b1:e7:e7:bf:57:41:
         f8:8e:35:72:f3:80:c1:47:51:10:f9:58:bf:ac:83:e1:7e:5f:
         1d:ed:6a:7c:8c:dd:85:53:f0:25:fc:55:a6:f5:96:a6:77:65:
         87:7d:2e:bc:4e:02:f2:4a:1e:50:ed:1f:b3:90:22:69:bb:15:
         32:a0:4e:2e:bf:e6:b8:28:c4:d1:04:d5:9b:62:b4:5f:8b:fd:
         76:aa:b8:91:5e:e5:b3:e0:f6:69:28:2d:8d:a7:8e:a6:74:7e:
         b3:0a:bc:fb:b6:18:d4:e3:b3:71:9b:42:cc:4a:10:fe:88:1b:
         1f:0f:03:4d:a4:36:56:38:66:78:32:7f:5c:68:d6:6b:6a:62:
         82:61:5a:20:21:54:bc:fe:6b:82:d8:4e:39:fa:70:6e:c6:13:
         d1:f7:ce:a5:02:e7:d2:f0:5f:64:b2:13:2a:81:c7:44:56:d4:
         5b:db:4c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:46:37 2026 by rpki-client