Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0C2B/D27E6ED0CB9611EDAC349B79C4F9AE02/5bsti54YaXwBWe2BMuXzS4axN7E.mft
File:                     5bsti54YaXwBWe2BMuXzS4axN7E.mft (raw, json)
Hash identifier:          vElgftO/ei8qp4kopdV1eJWmMv2GIdaNg74DGGWL6fA=
Subject key identifier:   F0:8D:02:69:6C:82:B6:DD:AA:7D:4D:25:30:0C:09:04:00:06:BF:87
Authority key identifier: E5:BB:2D:8B:9E:18:69:7C:01:59:ED:81:32:E5:F3:4B:86:B1:37:B1
Certificate issuer:       /CN=A91E0C2B/serialNumber=E5BB2D8B9E18697C0159ED8132E5F34B86B137B1
Certificate serial:       027D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bsti54YaXwBWe2BMuXzS4axN7E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0C2B/D27E6ED0CB9611EDAC349B79C4F9AE02/5bsti54YaXwBWe2BMuXzS4axN7E.mft
Manifest number:          0276
Signing time:             Mon 27 Jul 2026 03:25:24 +0000
Manifest this update:     Mon 27 Jul 2026 03:25:23 +0000
Manifest next update:     Mon 03 Aug 2026 03:25:23 +0000
Files and hashes:         1: 5bsti54YaXwBWe2BMuXzS4axN7E.crl (hash: C/ao0Sm4/qEQyA5rhsQNrAbDKRRhwO8TA6E7wBVejAY=)
                          2: 12B9A5DECBC211EDB6F09516C4F9AE02.roa (hash: r/QdasLc5bg8TvtpOH3qUVDciFGg4kgkaUmfu3ixoOU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0C2B/D27E6ED0CB9611EDAC349B79C4F9AE02/5bsti54YaXwBWe2BMuXzS4axN7E.crl
                          rsync://rpki.apnic.net/member_repository/A91E0C2B/D27E6ED0CB9611EDAC349B79C4F9AE02/5bsti54YaXwBWe2BMuXzS4axN7E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bsti54YaXwBWe2BMuXzS4axN7E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 03:25:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 637 (0x27d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0C2B, serialNumber=E5BB2D8B9E18697C0159ED8132E5F34B86B137B1
        Validity
            Not Before: Jul 27 03:25:23 2026 GMT
            Not After : Aug  3 03:25:23 2026 GMT
        Subject: CN=6a66cfa3-db45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:61:b8:0a:fc:62:a4:cc:5e:0a:3d:a2:d9:85:
                    6d:53:c2:f0:f7:bb:3e:c1:80:7b:97:81:42:03:e9:
                    d4:39:41:ab:fb:52:d5:86:78:33:f4:1d:44:86:bf:
                    34:f0:4a:b0:81:ef:1e:5a:f7:5d:c5:79:5c:54:55:
                    ab:69:99:89:54:e0:66:25:12:59:6e:90:06:17:a8:
                    c3:fb:61:a2:dc:73:df:09:96:51:c1:26:84:6b:ed:
                    06:a2:f4:95:f1:ef:36:cf:15:87:c9:b3:a0:7a:5a:
                    d7:41:12:6f:5f:f7:d2:95:ad:58:c1:1e:77:7e:af:
                    ef:fa:4a:95:82:91:a6:70:9e:b4:da:c5:f3:5d:3c:
                    90:88:d4:3e:86:fd:ea:4a:53:ff:a6:f9:f5:e1:ca:
                    2c:31:37:3d:c2:7d:30:08:b6:09:62:63:40:67:9e:
                    be:e8:f2:ad:36:f9:d0:45:1c:e1:16:ad:7e:d0:42:
                    cc:45:b2:fa:ca:04:91:22:22:e6:57:95:93:ce:f0:
                    43:3b:27:66:ff:bb:81:c4:2e:c3:c1:8e:e7:d6:4a:
                    dc:a8:fe:67:4e:6d:22:62:e8:16:99:bf:68:4a:62:
                    ee:5a:fb:e4:a2:89:31:51:2c:4e:73:52:81:9c:09:
                    23:dc:de:9f:ca:91:3a:3a:22:d1:92:65:1f:fe:74:
                    fd:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:8D:02:69:6C:82:B6:DD:AA:7D:4D:25:30:0C:09:04:00:06:BF:87
            X509v3 Authority Key Identifier:
                keyid:E5:BB:2D:8B:9E:18:69:7C:01:59:ED:81:32:E5:F3:4B:86:B1:37:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0C2B/D27E6ED0CB9611EDAC349B79C4F9AE02/5bsti54YaXwBWe2BMuXzS4axN7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bsti54YaXwBWe2BMuXzS4axN7E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0C2B/D27E6ED0CB9611EDAC349B79C4F9AE02/5bsti54YaXwBWe2BMuXzS4axN7E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:ad:cb:84:76:0d:fd:61:eb:9f:43:7c:43:78:be:79:58:1f:
         3a:e0:a6:f2:f3:98:b1:cd:df:74:72:87:00:a3:b5:98:7e:ab:
         25:e9:67:f5:b5:4d:56:dc:c3:55:29:75:3c:12:54:da:cb:b7:
         c5:06:fc:f0:b9:d4:83:9d:d5:17:cc:06:1f:e6:4d:b1:1a:86:
         48:c4:c1:f4:8c:79:77:66:94:64:41:2a:35:a8:b8:a1:a6:13:
         33:e1:71:91:f2:01:fa:10:9b:91:66:ef:04:61:aa:eb:dc:3a:
         3d:ce:f6:f1:c3:50:33:f5:b0:b3:62:b0:d9:ad:63:98:31:70:
         4d:11:7f:e3:9b:ac:a8:23:cd:77:e1:1e:fa:9b:b7:e0:e8:85:
         10:4f:b5:4e:ee:5a:69:4b:10:ad:16:e2:02:09:d2:8a:ed:a0:
         4b:f1:38:a8:32:b2:9c:79:c6:4e:6d:07:83:63:a8:ac:c8:60:
         cf:48:9f:a3:3c:35:7d:c8:d9:3b:7d:ac:a8:8c:00:34:cc:a5:
         4b:12:59:8d:ad:6b:05:04:68:ab:98:7d:7f:d0:71:de:bf:51:
         48:28:53:4f:dc:d4:bb:44:57:8d:fa:ae:90:19:46:92:f7:fe:
         35:9e:c5:d6:89:df:16:4f:f9:5d:de:9c:21:86:ab:c4:9c:d3:
         4b:28:d4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:55:53 2026 by rpki-client