Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DB08/3886E8B808F911F18084D086313D8C67/I5H7TZrtRKuA5q_Y2CChwGRDmCg.mft
File:                     I5H7TZrtRKuA5q_Y2CChwGRDmCg.mft (raw, json)
Hash identifier:          E4tOfDv3tBz9r6Ojbp7CQ2ni0Ql6euJAXgzVogX4nJE=
Subject key identifier:   C6:ED:AE:FD:1A:01:FA:3A:86:BB:78:46:20:5C:EB:CF:22:A1:DC:53
Authority key identifier: 23:91:FB:4D:9A:ED:44:AB:80:E6:AF:D8:D8:20:A1:C0:64:43:98:28
Certificate issuer:       /CN=A919DB08/serialNumber=2391FB4D9AED44AB80E6AFD8D820A1C064439828
Certificate serial:       5E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I5H7TZrtRKuA5q_Y2CChwGRDmCg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DB08/3886E8B808F911F18084D086313D8C67/I5H7TZrtRKuA5q_Y2CChwGRDmCg.mft
Manifest number:          5A
Signing time:             Mon 27 Jul 2026 10:32:18 +0000
Manifest this update:     Mon 27 Jul 2026 10:32:17 +0000
Manifest next update:     Mon 03 Aug 2026 10:32:17 +0000
Files and hashes:         1: I5H7TZrtRKuA5q_Y2CChwGRDmCg.crl (hash: F6pvCYM1YfBoSkwvsm0P4TkSQjp/x5zg6+POqjLI67I=)
                          2: 3F7E724808FA11F1B69E3FD3313D8C67.roa (hash: NZDM0P5b400zVrhyd2jzSLfxw/qGeaxR3jXe0NSn67o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DB08/3886E8B808F911F18084D086313D8C67/I5H7TZrtRKuA5q_Y2CChwGRDmCg.crl
                          rsync://rpki.apnic.net/member_repository/A919DB08/3886E8B808F911F18084D086313D8C67/I5H7TZrtRKuA5q_Y2CChwGRDmCg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I5H7TZrtRKuA5q_Y2CChwGRDmCg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:32:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94 (0x5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DB08, serialNumber=2391FB4D9AED44AB80E6AFD8D820A1C064439828
        Validity
            Not Before: Jul 27 10:32:17 2026 GMT
            Not After : Aug  3 10:32:17 2026 GMT
        Subject: CN=6a6733b2-3e61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d3:a5:7c:01:25:25:82:56:23:46:4b:aa:29:
                    48:4e:3c:99:2a:92:d0:1c:c2:a9:11:d4:45:7f:ca:
                    0a:a7:0c:c6:6d:72:12:6a:5d:9e:f7:ed:16:cc:c8:
                    ca:7b:f5:34:03:c7:09:64:37:27:53:64:1e:3e:4a:
                    d0:ed:18:f1:41:b7:08:68:d3:da:69:97:18:87:9a:
                    84:03:70:e1:d1:82:cb:7a:f8:97:a8:55:55:94:1c:
                    90:3c:a3:a0:9f:aa:37:23:f6:fa:81:36:ed:59:8a:
                    cd:bb:63:ed:b6:44:4b:96:74:72:ae:77:8c:f6:e1:
                    50:f6:e6:31:2a:1a:b0:90:9f:e6:e9:04:87:0d:d7:
                    aa:57:f8:b8:6d:12:95:b3:cc:6a:fd:13:b1:5a:10:
                    d9:e8:16:bd:14:3b:3a:16:cf:d8:77:43:06:72:96:
                    3d:d3:f7:6c:17:a7:12:77:3e:06:1d:73:41:44:b7:
                    e2:fa:fc:2d:51:f7:9f:19:84:3d:ea:a9:4e:7a:a4:
                    03:06:34:e7:f6:5d:12:98:03:85:fb:56:18:e2:b6:
                    8c:4e:7f:d0:27:33:c0:ee:3f:be:93:21:b9:22:ae:
                    8e:62:b3:43:52:ff:2c:08:e4:fd:f5:a6:ca:34:fc:
                    6c:1e:4c:18:db:fa:6e:09:3a:5a:68:4c:61:6b:63:
                    79:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:ED:AE:FD:1A:01:FA:3A:86:BB:78:46:20:5C:EB:CF:22:A1:DC:53
            X509v3 Authority Key Identifier:
                keyid:23:91:FB:4D:9A:ED:44:AB:80:E6:AF:D8:D8:20:A1:C0:64:43:98:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DB08/3886E8B808F911F18084D086313D8C67/I5H7TZrtRKuA5q_Y2CChwGRDmCg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I5H7TZrtRKuA5q_Y2CChwGRDmCg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DB08/3886E8B808F911F18084D086313D8C67/I5H7TZrtRKuA5q_Y2CChwGRDmCg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:c2:aa:13:24:37:7e:dc:b3:df:4b:09:69:32:48:f4:65:ce:
         9e:b7:12:03:5b:a5:cd:6c:8c:97:27:70:4a:52:d1:3c:b7:57:
         36:0a:66:fa:90:5e:59:34:4b:17:82:23:26:72:93:31:ca:88:
         ef:6a:cd:33:b2:c0:a3:53:e3:66:40:b5:5c:69:c6:81:60:f3:
         4b:7c:21:b2:f1:86:e5:32:8f:3a:60:97:d3:26:23:fa:9c:3b:
         c5:f5:40:af:3f:f1:6d:f3:41:9a:d3:af:ff:3d:8b:66:03:31:
         11:89:61:65:33:ae:5d:84:e2:1f:fc:af:38:43:67:b2:82:b8:
         4d:0a:ab:85:4c:a5:e7:7f:8d:85:4a:1a:c4:d8:bc:9b:ca:25:
         14:56:ef:19:d2:22:bb:e6:0f:b5:d2:6e:3a:9e:94:2c:2f:42:
         f1:80:e9:fb:6d:e1:77:da:fd:49:cd:77:a8:d9:0d:f5:25:d8:
         23:d8:9d:e0:62:c1:71:c7:1a:0a:20:21:3d:56:ea:b5:71:fd:
         42:a0:53:9e:49:c1:ce:21:1d:fa:92:33:64:26:ce:29:23:2e:
         77:cb:26:3c:21:dd:2d:91:23:de:d2:53:2e:82:76:6f:83:9f:
         2d:e0:34:22:19:c5:c0:af:73:22:89:ff:54:6d:2b:c4:f5:d3:
         19:47:57:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:41:59 2026 by rpki-client