Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft
File:                     5MWJuJPSconPhG3wWt-1lgNkKP0.mft (raw, json)
Hash identifier:          3V6OwzjdAra+ejKMdLae8pmYv3RzT8tPWfV3hyYCr6E=
Subject key identifier:   39:0E:23:7D:C5:11:19:C5:13:45:B1:B5:9A:FC:AE:B7:1C:88:D9:CA
Authority key identifier: E4:C5:89:B8:93:D2:72:89:CF:84:6D:F0:5A:DF:B5:96:03:64:28:FD
Certificate issuer:       /CN=A91B8AC8/serialNumber=E4C589B893D27289CF846DF05ADFB596036428FD
Certificate serial:       015D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5MWJuJPSconPhG3wWt-1lgNkKP0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft
Manifest number:          0157
Signing time:             Mon 21 Sep 2026 05:15:02 +0000
Manifest this update:     Mon 21 Sep 2026 05:15:01 +0000
Manifest next update:     Mon 28 Sep 2026 05:15:01 +0000
Files and hashes:         1: 5MWJuJPSconPhG3wWt-1lgNkKP0.crl (hash: mDMKIX7dXAaKHNbDkJlLQiwjnEkgvxpsrWEX0eoArGE=)
                          2: 8FFA61D4B13D11EF9EFDE433C4F9AE02.roa (hash: WmeiamuyqIiXqThgaQ7WjBlL81T70JeikrMmaNzPLPQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.crl
                          rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5MWJuJPSconPhG3wWt-1lgNkKP0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 05:15:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 349 (0x15d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8AC8, serialNumber=E4C589B893D27289CF846DF05ADFB596036428FD
        Validity
            Not Before: Sep 21 05:15:01 2026 GMT
            Not After : Sep 28 05:15:01 2026 GMT
        Subject: CN=6ab0bd56-151e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:49:ed:d3:4a:9e:82:08:df:63:e7:bc:d1:95:
                    2f:a9:55:00:f6:c1:26:bc:5e:25:60:b3:14:39:fa:
                    f5:42:0a:9c:13:da:d8:e0:81:2d:9e:bf:42:87:f6:
                    cf:71:cf:89:aa:ca:dc:44:93:30:96:53:8d:79:37:
                    87:36:92:7c:f2:a2:ec:71:ce:7c:ad:4c:c8:70:68:
                    da:f3:b5:33:28:72:5e:5f:86:58:2d:09:85:ec:de:
                    0f:73:a8:d0:d4:17:66:c0:9f:af:ed:a2:b3:aa:44:
                    48:28:4b:a8:34:a5:12:26:d1:d3:fc:7a:91:a8:88:
                    16:92:73:91:8c:e2:20:9c:67:7e:ea:10:d3:18:a9:
                    c5:a9:01:37:8e:99:fd:de:fa:cc:66:2f:3c:59:cd:
                    c5:e1:96:a1:c1:64:b4:09:f4:90:b8:1c:18:5f:76:
                    44:68:04:91:f7:0c:1f:3d:c2:80:2f:52:e4:ba:78:
                    68:d8:d2:cc:6d:70:51:a9:a4:76:22:0e:44:2a:77:
                    38:6f:50:44:70:b0:37:c2:2a:1e:bd:b3:a6:db:ca:
                    0b:48:5f:d4:c0:09:dd:f7:3f:43:d2:b2:ad:f3:c8:
                    7b:69:46:72:24:ba:ce:d3:16:fd:29:fd:55:4a:be:
                    2e:c3:4e:ed:ca:4e:fa:08:5a:26:1f:30:42:f2:65:
                    f3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:0E:23:7D:C5:11:19:C5:13:45:B1:B5:9A:FC:AE:B7:1C:88:D9:CA
            X509v3 Authority Key Identifier:
                keyid:E4:C5:89:B8:93:D2:72:89:CF:84:6D:F0:5A:DF:B5:96:03:64:28:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5MWJuJPSconPhG3wWt-1lgNkKP0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:55:40:fc:d7:c4:cf:e9:d2:41:a8:a3:65:d2:66:ba:59:1e:
         83:c3:48:1b:64:7a:1b:43:06:03:d4:a7:77:80:1c:7f:5d:18:
         b7:c9:63:c3:d9:3c:80:9b:b3:79:a0:3c:b7:1b:25:82:5a:b9:
         77:d1:08:db:b5:d0:4a:ea:a0:17:1b:cc:c7:a2:48:ad:f4:66:
         56:c0:5a:d6:6f:f5:da:cd:45:ec:6d:40:40:5a:a0:1e:1b:a4:
         07:a8:00:a8:1a:f6:78:54:cc:ec:3d:e4:3e:c1:db:28:21:2c:
         27:50:e1:67:1a:fc:85:01:17:a8:dd:82:91:8b:f6:e7:f6:47:
         c8:2e:6f:d5:52:a8:54:b7:8d:73:8b:48:f0:44:d0:fc:18:c8:
         25:94:61:0f:82:2e:32:57:a5:14:ad:a1:fa:71:3a:a7:8b:5b:
         29:07:1a:4b:05:05:e4:ad:c9:08:e0:12:35:d9:ea:f7:36:80:
         9b:98:94:7b:27:97:8e:f5:5f:1e:a6:05:9d:e3:70:2e:5f:7e:
         f0:61:80:29:01:76:e5:30:25:65:93:ea:7a:2c:e6:10:a9:b0:
         60:3b:c8:09:67:73:f8:3f:b7:64:de:83:8a:f0:89:e2:4f:37:
         62:fe:c3:07:9d:17:70:6c:6a:fd:28:c3:d7:aa:a5:bb:92:b0:
         c5:0b:f9:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:29:39 2026 by rpki-client