Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft
File:                     5NzsWVobtnOJciNlasY5uVNS3XM.mft (raw, json)
Hash identifier:          1IrEsOWTC3dOZ++6bbbe6yGgYp9urNDKS7GQd0FvugE=
Subject key identifier:   16:19:10:54:23:9C:6A:F9:99:77:12:30:73:36:6E:A6:2A:A9:41:61
Authority key identifier: E4:DC:EC:59:5A:1B:B6:73:89:72:23:65:6A:C6:39:B9:53:52:DD:73
Certificate issuer:       /CN=A91D604E/serialNumber=E4DCEC595A1BB673897223656AC639B95352DD73
Certificate serial:       0D93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft
Manifest number:          0D81
Signing time:             Tue 28 Jul 2026 18:07:00 +0000
Manifest this update:     Tue 28 Jul 2026 18:07:00 +0000
Manifest next update:     Tue 04 Aug 2026 18:07:00 +0000
Files and hashes:         1: 5NzsWVobtnOJciNlasY5uVNS3XM.crl (hash: sv8FJ7o1oMemHBM+dJbDkjz/Jd32Y/jSF74kDaMXsO8=)
                          2: D1C40E28183411EF99FD8776C4F9AE02.roa (hash: 62d4jzUjfsj/dKFMhMN/kf/dBUMWoPHad4ewLC0GCPQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.crl
                          rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 18:06:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3475 (0xd93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D604E, serialNumber=E4DCEC595A1BB673897223656AC639B95352DD73
        Validity
            Not Before: Jul 28 18:07:00 2026 GMT
            Not After : Aug  4 18:07:00 2026 GMT
        Subject: CN=6a68efc4-75a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:45:8a:1f:06:85:15:14:c7:f1:81:5b:fd:1b:
                    fd:7d:59:ef:9f:9f:e7:74:e8:1c:79:09:b5:fd:76:
                    9f:08:d8:fe:64:42:bd:2a:94:f8:4e:72:e0:7a:d5:
                    eb:a2:98:d4:09:07:92:71:73:75:46:d5:a1:08:af:
                    39:f6:99:78:30:6a:2f:2e:eb:3c:85:0f:a2:b0:d4:
                    0e:ac:9f:f9:3e:61:f1:80:ec:24:b5:ce:4a:55:a0:
                    b0:f7:16:b7:a3:46:a7:6f:36:42:e0:d1:cc:ec:0b:
                    d5:a0:60:47:31:39:43:4a:9e:ec:1d:c8:83:97:3d:
                    98:be:64:bc:27:55:37:94:30:4f:e7:66:88:2a:e0:
                    bf:a9:21:22:f0:2a:1d:a9:87:06:45:60:55:45:a4:
                    f3:64:ce:1a:cd:46:86:38:75:96:d7:cc:fa:e7:f5:
                    7f:39:23:55:50:cd:ed:c6:b4:ce:16:a8:74:a3:03:
                    e9:a3:9c:5c:de:97:67:93:ad:00:e1:59:8e:f6:fb:
                    50:71:d4:7d:38:6c:80:93:0e:b2:07:0c:bb:eb:bc:
                    6b:f9:fb:66:4a:4f:bd:ac:fb:2d:11:b9:00:cf:7c:
                    2f:93:d1:e8:dd:1d:59:8c:7c:42:0f:71:7c:99:2c:
                    ad:76:5c:58:76:b0:b1:b2:53:a8:eb:93:45:5b:ed:
                    1d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:19:10:54:23:9C:6A:F9:99:77:12:30:73:36:6E:A6:2A:A9:41:61
            X509v3 Authority Key Identifier:
                keyid:E4:DC:EC:59:5A:1B:B6:73:89:72:23:65:6A:C6:39:B9:53:52:DD:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:01:44:26:69:a6:40:39:cf:4e:6b:2f:71:d1:83:cc:89:8d:
         1a:ec:e2:2f:cc:7b:8e:91:06:19:6d:22:d5:90:58:1c:60:f7:
         34:94:53:39:6a:78:21:15:78:01:2d:07:5f:ae:49:2a:71:f9:
         61:b9:e8:1c:44:52:e3:8e:a8:b5:9e:ac:4d:40:7f:35:e4:07:
         6c:9f:12:42:bf:20:4b:7b:6f:5a:81:63:67:5d:23:c0:2a:c2:
         19:19:50:80:53:e8:2d:8a:c5:e0:80:6e:b6:e6:a9:dd:b2:4b:
         5b:ea:2b:7e:54:67:d0:25:29:e9:0d:0c:c3:3a:17:22:fa:b4:
         9e:19:77:82:c4:a6:fa:b9:3b:72:6c:8d:98:98:8e:5e:64:47:
         b4:95:6f:a5:15:ff:12:57:04:94:1a:a1:b9:04:32:9f:41:13:
         f4:cc:85:fe:11:0f:d5:e4:d2:b3:1a:76:0b:21:65:8e:3c:4b:
         19:fc:fd:80:95:32:84:60:08:e6:27:eb:16:9b:60:32:51:e5:
         d7:21:41:99:22:9e:21:3d:f7:5f:b0:a6:4d:d4:46:06:92:06:
         4e:d2:ca:1d:64:6a:06:94:88:87:7b:aa:75:6f:be:57:6b:3f:
         94:73:5f:ec:53:e3:50:e9:22:60:0d:ac:f6:8b:b6:7a:b1:aa:
         7d:41:66:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:45:11 2026 by rpki-client