Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft
File:                     5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft (raw, json)
Hash identifier:          OjemJbM94FILWghtJi4kZeb0oYwxrRpNbH+AhnmMGP4=
Subject key identifier:   D6:6F:4F:0B:5D:D6:75:3A:96:BB:72:4B:5B:66:ED:69:3E:B1:02:4F
Authority key identifier: E4:7B:F7:02:54:53:26:97:D2:0D:0D:31:10:F6:25:37:0D:65:FA:83
Certificate issuer:       /CN=A91B59E5/serialNumber=E47BF70254532697D20D0D3110F625370D65FA83
Certificate serial:       02A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft
Manifest number:          0275
Signing time:             Mon 27 Jul 2026 04:14:08 +0000
Manifest this update:     Mon 27 Jul 2026 04:14:07 +0000
Manifest next update:     Mon 03 Aug 2026 04:14:07 +0000
Files and hashes:         1: 5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.crl (hash: Ch5LgiINCSUi5oqEnAbL9QJLMJ0mF+1CoVEm6qYwAuY=)
                          2: 9EEE3C44D94F11EF916BCF23C4F9AE02.roa (hash: /zrcL4nSpe3zdFYdi/0iqkSLzijJlxJzGF9A4BLkUeg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.crl
                          rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 677 (0x2a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B59E5, serialNumber=E47BF70254532697D20D0D3110F625370D65FA83
        Validity
            Not Before: Jul 27 04:14:07 2026 GMT
            Not After : Aug  3 04:14:07 2026 GMT
        Subject: CN=6a66db10-5c18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:95:4f:19:cb:54:a1:1b:db:d7:d6:40:2d:2f:
                    4e:1b:12:d0:0d:51:aa:97:f6:53:8f:a4:4f:34:72:
                    a1:ae:9e:47:57:55:e2:74:49:0c:93:6c:f9:1f:3f:
                    2c:06:e8:03:22:74:35:4c:be:ce:9f:60:0f:bf:ca:
                    2e:a8:ca:5e:3f:66:e7:e2:d0:4c:b3:12:64:0a:c4:
                    e9:b1:d2:41:d0:9f:f8:11:50:53:72:a4:9d:86:a1:
                    b8:30:77:68:16:02:c8:4c:99:47:28:28:dd:36:6a:
                    de:1d:2f:7b:d5:67:38:10:d0:e5:3b:93:3d:20:0d:
                    72:20:ff:0b:1c:ed:50:02:9c:e9:81:55:e4:f7:b2:
                    03:fb:53:bc:32:a6:f0:e9:c4:f8:9e:38:de:a2:fe:
                    5c:8f:2e:75:73:af:09:cc:10:ba:da:19:89:fa:a8:
                    57:b0:fc:0f:32:ac:3c:56:b6:bf:27:2b:6f:ff:d4:
                    2c:dd:d5:a2:17:37:40:0c:ef:cf:16:e8:e7:eb:3b:
                    4f:6b:b8:76:ac:d0:14:0b:ad:dc:6d:b9:ed:27:f2:
                    e4:63:03:d0:dc:69:0e:9e:55:5e:49:41:c1:2a:6d:
                    36:ee:17:f5:4f:28:82:0f:3b:5e:6a:fa:06:60:48:
                    37:a3:2a:45:db:10:91:e6:c3:db:8e:4d:61:0f:2a:
                    2b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:6F:4F:0B:5D:D6:75:3A:96:BB:72:4B:5B:66:ED:69:3E:B1:02:4F
            X509v3 Authority Key Identifier:
                keyid:E4:7B:F7:02:54:53:26:97:D2:0D:0D:31:10:F6:25:37:0D:65:FA:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:8f:7c:de:e4:74:e3:2d:66:eb:62:ec:bf:ea:4a:4e:66:7b:
         58:74:21:4b:a1:ff:27:d0:65:31:0d:a3:91:ea:9b:36:51:e1:
         c8:fb:ec:f5:37:ad:01:d6:5e:c0:8d:de:9e:b5:3a:f7:92:b0:
         3b:38:e1:72:29:c4:e9:01:2f:bd:77:b9:ce:54:d8:77:e8:9c:
         e4:7c:b8:58:c7:c9:cd:a9:b6:32:68:31:d8:06:9f:be:6f:c8:
         2b:7d:91:91:28:fd:57:7c:78:8a:a5:28:44:23:33:bf:21:35:
         d6:c2:c9:22:6e:36:34:1c:5a:f7:29:6b:70:50:d8:b3:e4:96:
         6d:6f:73:64:23:31:af:a0:a4:a7:d0:5b:de:72:4e:6a:af:f3:
         82:ac:c7:d8:00:16:2d:2d:6a:7a:e9:af:49:ea:26:24:c6:bd:
         2d:8d:b8:b2:0b:d6:0c:25:af:a8:a1:17:4b:29:9b:de:b4:20:
         8f:0e:14:de:9e:7e:dc:49:8b:ae:a0:15:9b:8c:33:ee:52:fa:
         11:91:f3:44:7a:15:f1:13:f5:3e:e0:18:88:11:f5:08:5d:e6:
         52:b0:08:a2:8d:81:4b:0d:5c:96:1d:b1:54:05:66:47:65:3d:
         bb:e0:7e:b6:b4:67:0e:58:fa:80:3f:11:67:a2:18:cd:9a:f9:
         1d:56:ea:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:56:34 2026 by rpki-client