Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91964B3/55E1558E3FE911F18DB2AF097EEE528E/5x-HDnK9Im57-jqrGpGKtGIybF8.mft
File:                     5x-HDnK9Im57-jqrGpGKtGIybF8.mft (raw, json)
Hash identifier:          RCfIz+F4MoWAg0dVKkM3fr7qFgoLdwyQNsWJi+J57Is=
Subject key identifier:   30:8F:50:7E:D1:42:F0:E6:4A:8A:6C:4B:F1:B9:EB:C5:32:67:03:35
Authority key identifier: E7:1F:87:0E:72:BD:22:6E:7B:FA:3A:AB:1A:91:8A:B4:62:32:6C:5F
Certificate issuer:       /CN=A91964B3/serialNumber=E71F870E72BD226E7BFA3AAB1A918AB462326C5F
Certificate serial:       4A
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/5x-HDnK9Im57-jqrGpGKtGIybF8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91964B3/55E1558E3FE911F18DB2AF097EEE528E/5x-HDnK9Im57-jqrGpGKtGIybF8.mft
Manifest number:          40
Signing time:             Tue 28 Jul 2026 14:25:37 +0000
Manifest this update:     Tue 28 Jul 2026 14:25:36 +0000
Manifest next update:     Tue 04 Aug 2026 14:25:36 +0000
Files and hashes:         1: 5x-HDnK9Im57-jqrGpGKtGIybF8.crl (hash: HTpZnHycWDaDN9BDQ6t+ik+po2WMpo5djPJITsKjuSs=)
                          2: 86ED876641FA11F1981D4479BF833773.roa (hash: wpEZ66kuoyr7SVEgrWcX1562rxR0piPy4GQLCmkL6TA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91964B3/55E1558E3FE911F18DB2AF097EEE528E/5x-HDnK9Im57-jqrGpGKtGIybF8.crl
                          rsync://rpki.apnic.net/member_repository/A91964B3/55E1558E3FE911F18DB2AF097EEE528E/5x-HDnK9Im57-jqrGpGKtGIybF8.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/5x-HDnK9Im57-jqrGpGKtGIybF8.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 14:25:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91964B3, serialNumber=E71F870E72BD226E7BFA3AAB1A918AB462326C5F
        Validity
            Not Before: Jul 28 14:25:36 2026 GMT
            Not After : Aug  4 14:25:36 2026 GMT
        Subject: CN=6a68bbe0-a179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a4:1e:c9:8b:a6:b1:3a:45:4c:0e:3a:a2:d8:
                    dc:6b:9b:3c:fb:61:cc:95:c4:3c:3f:bf:cd:d9:0c:
                    5f:98:19:f7:50:09:b6:cd:cc:42:a4:b6:77:5a:87:
                    96:84:8b:7c:a1:c3:48:05:36:d6:b7:75:da:a9:9b:
                    5f:ae:b2:6a:4a:09:2e:46:e5:4d:f3:92:24:28:e0:
                    69:7c:cb:14:f1:87:f9:d6:12:8f:a3:86:5a:a4:3b:
                    bb:4e:b4:87:cd:47:bf:89:55:50:37:48:a9:0f:22:
                    6c:ef:1c:c0:cb:0c:dc:f7:c4:a0:5b:2e:d8:6c:49:
                    1c:78:c2:b3:a2:b7:1e:e8:ee:4f:ac:77:e3:91:b4:
                    ba:b3:33:67:84:9a:f8:30:32:e7:95:36:6d:a1:be:
                    32:a1:67:97:3a:a2:51:b0:aa:fe:33:0f:93:36:b3:
                    78:c8:e7:e7:05:4b:7d:74:6f:8b:9a:a6:e7:87:1a:
                    99:3b:d0:ed:a0:d3:9f:62:91:f8:33:44:a6:8c:e7:
                    3d:30:8c:7e:2a:f4:fd:1b:4c:c2:b7:ae:04:e5:a7:
                    48:7f:de:43:9f:82:d2:30:61:4a:c4:3a:c8:ee:b5:
                    e5:a4:cf:0d:76:d8:d5:31:8f:5f:09:aa:ab:5d:9e:
                    bc:0a:f6:69:9d:53:6c:4d:ca:ad:3b:58:cf:6a:e2:
                    36:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:8F:50:7E:D1:42:F0:E6:4A:8A:6C:4B:F1:B9:EB:C5:32:67:03:35
            X509v3 Authority Key Identifier:
                keyid:E7:1F:87:0E:72:BD:22:6E:7B:FA:3A:AB:1A:91:8A:B4:62:32:6C:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91964B3/55E1558E3FE911F18DB2AF097EEE528E/5x-HDnK9Im57-jqrGpGKtGIybF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/5x-HDnK9Im57-jqrGpGKtGIybF8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91964B3/55E1558E3FE911F18DB2AF097EEE528E/5x-HDnK9Im57-jqrGpGKtGIybF8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:d2:cc:4e:0d:b1:e0:4f:eb:77:e5:93:09:13:11:de:cc:b5:
         a1:d9:27:87:f8:13:10:66:1c:95:d0:87:77:45:5a:ad:82:d5:
         a6:03:f6:3b:87:90:c3:7b:d9:c2:c4:37:a9:b0:09:e8:f0:1f:
         2c:b0:6f:79:06:68:87:84:6e:7a:f8:e2:e0:99:ea:e1:2d:ff:
         9a:33:15:91:3b:07:5e:54:64:d3:8f:19:ab:3e:a3:86:38:e6:
         3b:97:44:98:f8:ab:6f:af:44:db:22:e9:13:d6:0b:17:f5:04:
         1a:ac:cf:3c:1b:22:54:94:87:6f:ce:ef:dd:40:ba:ea:7d:ff:
         a8:d5:8c:30:35:b5:bc:e1:ca:f0:6a:e9:78:3f:d8:96:d0:49:
         9f:1e:91:63:b0:c2:4b:7e:b7:3e:76:44:c2:c2:5f:5d:73:5d:
         60:e0:fa:9d:1c:60:71:85:4a:5e:8e:62:c0:45:e1:6c:04:6e:
         da:62:b7:c9:e6:2a:18:fa:ab:28:47:3f:8c:a7:e3:86:c4:2b:
         a3:ce:db:71:53:a6:1a:47:42:f1:7d:bd:25:05:ea:52:8d:90:
         06:3a:46:49:aa:d5:70:e2:9d:6b:56:27:7a:da:e4:0b:bc:bc:
         ac:b9:d7:7c:dc:01:17:fd:6a:a4:e4:0f:00:82:4f:0e:d9:48:
         d9:f3:48:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:12:28 2026 by rpki-client