Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D8400/F681BBA4781111ECA397D034C4F9AE02/5dmsjXWxbbnyPICt2LO72OWLaHg.mft
File:                     5dmsjXWxbbnyPICt2LO72OWLaHg.mft (raw, json)
Hash identifier:          +vIcgkIBlVyNS4nivhVUbmh6YSKacwqduJ/43Ur11po=
Subject key identifier:   58:C8:26:57:DE:65:69:91:1D:1D:B7:D8:9A:24:87:E5:2D:12:AF:C9
Authority key identifier: E5:D9:AC:8D:75:B1:6D:B9:F2:3C:80:AD:D8:B3:BB:D8:E5:8B:68:78
Certificate issuer:       /CN=A91D8400/serialNumber=E5D9AC8D75B16DB9F23C80ADD8B3BBD8E58B6878
Certificate serial:       04F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5dmsjXWxbbnyPICt2LO72OWLaHg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8400/F681BBA4781111ECA397D034C4F9AE02/5dmsjXWxbbnyPICt2LO72OWLaHg.mft
Manifest number:          04F0
Signing time:             Sun 20 Sep 2026 23:30:54 +0000
Manifest this update:     Sun 20 Sep 2026 23:30:53 +0000
Manifest next update:     Sun 27 Sep 2026 23:30:53 +0000
Files and hashes:         1: 5dmsjXWxbbnyPICt2LO72OWLaHg.crl (hash: zy8R4YArhckligxx3yS9TFrjNyWjZRXidIJIvhs4H34=)
                          2: 46C1646C781611ECADCDAB0EC4F9AE02.roa (hash: B7LPS8CpZf2Ll5s7URpWr8ddqKyO/ADwdlYXyVT4rEQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8400/F681BBA4781111ECA397D034C4F9AE02/5dmsjXWxbbnyPICt2LO72OWLaHg.crl
                          rsync://rpki.apnic.net/member_repository/A91D8400/F681BBA4781111ECA397D034C4F9AE02/5dmsjXWxbbnyPICt2LO72OWLaHg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5dmsjXWxbbnyPICt2LO72OWLaHg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 23:30:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1272 (0x4f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8400, serialNumber=E5D9AC8D75B16DB9F23C80ADD8B3BBD8E58B6878
        Validity
            Not Before: Sep 20 23:30:53 2026 GMT
            Not After : Sep 27 23:30:53 2026 GMT
        Subject: CN=6ab06cae-62ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ab:87:1b:8e:12:0a:b4:ae:83:b9:c3:55:19:
                    26:4f:0a:e2:42:e4:29:e4:44:0d:02:dc:d3:57:c7:
                    2e:14:41:a1:dd:52:39:e6:48:a3:97:90:af:6f:c9:
                    51:8c:eb:00:f4:71:15:73:dc:0c:fa:cb:82:0c:13:
                    e3:1b:91:d8:88:2d:32:2b:de:18:2c:c0:c1:79:aa:
                    c1:0a:2c:45:e9:c2:61:fa:1c:fd:0c:72:ac:ea:94:
                    b7:d3:15:7d:cc:33:ab:ae:07:a8:06:0a:0a:c5:2f:
                    88:79:39:60:f9:7c:d4:0c:e8:9f:73:cf:7a:4b:a1:
                    17:f9:a9:fa:dc:cb:2c:01:1e:7c:19:05:5e:0e:fd:
                    0a:20:47:5d:e1:d6:7a:55:55:5b:b8:1f:25:e7:80:
                    80:35:57:1e:9e:ff:93:07:37:88:ac:85:aa:19:6b:
                    9b:08:f5:17:94:32:e4:cb:5f:a2:14:c2:40:92:bf:
                    f7:79:4a:be:0f:bb:43:62:8b:d4:8b:14:59:9a:5e:
                    72:d3:6b:18:1e:37:bb:98:2a:18:81:6c:b2:9c:b2:
                    b8:a5:98:67:97:44:42:74:fc:9b:21:34:56:bf:7c:
                    e6:56:5d:bc:37:d1:19:8c:6f:71:13:d6:df:c2:9a:
                    c7:99:ac:c5:e6:f1:14:37:fa:c4:98:8c:3d:32:36:
                    84:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:C8:26:57:DE:65:69:91:1D:1D:B7:D8:9A:24:87:E5:2D:12:AF:C9
            X509v3 Authority Key Identifier:
                keyid:E5:D9:AC:8D:75:B1:6D:B9:F2:3C:80:AD:D8:B3:BB:D8:E5:8B:68:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8400/F681BBA4781111ECA397D034C4F9AE02/5dmsjXWxbbnyPICt2LO72OWLaHg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5dmsjXWxbbnyPICt2LO72OWLaHg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8400/F681BBA4781111ECA397D034C4F9AE02/5dmsjXWxbbnyPICt2LO72OWLaHg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:b8:84:ea:d6:6d:5b:02:94:e9:fc:60:a8:56:b5:05:27:de:
         bd:51:68:ab:d3:7f:8f:9f:bc:aa:a0:fb:70:7f:d8:58:3f:21:
         c2:5f:a2:d8:84:ed:9e:c8:8b:4e:e8:de:9a:f4:76:46:a2:86:
         e1:94:ae:df:4b:41:af:5b:cf:fc:85:b2:ad:7e:67:50:1d:74:
         02:86:3b:1c:28:bd:66:b0:3d:bc:f1:75:c8:94:26:62:1d:ae:
         e9:62:39:ba:5e:e0:17:1a:31:bc:07:c1:ff:32:e2:c5:4f:cb:
         09:b7:2f:4f:cb:c6:53:fc:2e:53:c9:4f:9d:a5:8c:20:18:40:
         d4:2f:74:4b:b3:6b:d9:e0:76:7e:a7:b1:90:77:8d:40:f7:e9:
         ad:f9:6d:88:75:98:5f:f6:5a:91:b2:d9:a4:62:c5:88:a6:9c:
         16:72:8d:49:56:7b:bf:39:5b:7e:9f:9c:84:24:75:d7:4a:fb:
         a2:4d:5c:87:9a:f4:68:a3:83:c8:1a:5d:18:b2:00:fe:10:fd:
         df:ca:ff:ab:e9:92:e0:b0:10:56:ec:13:40:a3:56:93:1e:67:
         72:b6:0e:34:0b:79:f2:d3:ab:68:93:d1:f4:48:d5:f5:68:25:
         24:a5:d9:db:70:20:a8:17:ec:a6:a2:f9:3b:6c:b7:ce:b4:ca:
         f3:1f:58:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:47:24 2026 by rpki-client