Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.mft
File:                     5B7XVgdLN63ceU-UC9H1Pj9na5M.mft (raw, json)
Hash identifier:          0Z94gjQVsXNp7SYsUxvzIkLCSl3oj0PvOMrYJJW0njM=
Subject key identifier:   15:BE:1D:EC:72:56:7E:3A:D8:7D:31:3C:6D:45:FF:EE:F9:7F:79:12
Authority key identifier: E4:1E:D7:56:07:4B:37:AD:DC:79:4F:94:0B:D1:F5:3E:3F:67:6B:93
Certificate issuer:       /CN=A913B5C7/serialNumber=E41ED756074B37ADDC794F940BD1F53E3F676B93
Certificate serial:       01B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5B7XVgdLN63ceU-UC9H1Pj9na5M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.mft
Manifest number:          01B4
Signing time:             Tue 21 Jul 2026 05:23:58 +0000
Manifest this update:     Tue 21 Jul 2026 05:23:58 +0000
Manifest next update:     Tue 28 Jul 2026 05:23:58 +0000
Files and hashes:         1: 5B7XVgdLN63ceU-UC9H1Pj9na5M.crl (hash: Oxw5Tuyqi613ti5tOXhwQBtF8Qy0kNbQnCFYWikbR5k=)
                          2: B0CE94A0E80911EEADE3420AC4F9AE02.roa (hash: 4FDg9GWcMF+h0lyc+szQBWG2v8yyKRA36ab+Hfgr7nM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.crl
                          rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5B7XVgdLN63ceU-UC9H1Pj9na5M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 05:23:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 441 (0x1b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B5C7, serialNumber=E41ED756074B37ADDC794F940BD1F53E3F676B93
        Validity
            Not Before: Jul 21 05:23:58 2026 GMT
            Not After : Jul 28 05:23:58 2026 GMT
        Subject: CN=6a5f026e-079c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3e:8d:89:56:c5:42:df:bb:f2:cd:ad:69:fa:
                    3b:e8:cc:7d:70:ef:ae:9a:80:88:9c:f7:df:d7:04:
                    96:b3:5c:d4:6b:95:c5:ce:1c:90:8d:07:be:a5:51:
                    ef:c9:fc:b6:5e:d5:b5:3d:a3:ac:f5:7f:51:d8:44:
                    9e:ab:50:e2:e3:73:d1:e2:6e:02:af:b0:ec:72:95:
                    7c:66:69:28:be:9c:f2:b8:02:73:86:01:07:5e:8e:
                    01:6b:22:d5:b3:6c:9f:e1:9f:96:99:6e:30:67:73:
                    e7:6d:d4:c2:0b:59:5e:cc:50:7c:b3:42:8c:61:7b:
                    ee:59:cc:c9:17:8a:15:2c:57:51:5f:ce:1b:fb:d0:
                    02:4e:44:63:a8:65:6e:25:d7:aa:05:f2:d5:59:2a:
                    f6:f7:9a:9f:ca:24:75:1f:1c:07:3c:19:03:fb:aa:
                    9a:b5:5f:b2:a6:bf:6b:a9:61:47:0f:94:54:0b:55:
                    37:e8:1f:cd:5c:94:65:33:61:59:97:0d:38:e1:8c:
                    4b:e3:c0:86:4e:81:f0:3e:75:1f:ab:7f:7a:e7:6e:
                    4d:2e:8a:19:2f:e9:03:b6:8b:d6:1a:1e:de:b0:21:
                    a1:1f:4c:f9:47:8a:d5:79:e5:0b:11:7d:f7:7c:b2:
                    15:2d:9f:b1:63:a9:77:d6:ed:64:05:82:c6:44:e9:
                    67:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:BE:1D:EC:72:56:7E:3A:D8:7D:31:3C:6D:45:FF:EE:F9:7F:79:12
            X509v3 Authority Key Identifier:
                keyid:E4:1E:D7:56:07:4B:37:AD:DC:79:4F:94:0B:D1:F5:3E:3F:67:6B:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5B7XVgdLN63ceU-UC9H1Pj9na5M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:73:28:af:27:ca:8e:d0:52:08:d7:2d:0c:ff:cd:e9:98:cf:
         69:87:73:01:66:2b:41:0f:c8:e4:ea:a6:46:4f:75:b2:88:a3:
         f6:29:c6:2d:a3:7c:0c:59:91:b7:ce:ec:00:d0:7f:a3:05:cb:
         cd:a9:c4:58:d7:b6:51:44:48:01:af:eb:b7:43:27:6b:7c:7d:
         3e:10:25:bc:b5:db:b7:8f:70:bc:b5:f0:55:23:0c:8e:af:72:
         30:c7:e7:24:ba:62:55:86:cb:ff:94:0e:74:5f:95:dd:c1:b6:
         25:c2:2b:fa:fd:f3:43:9e:35:f3:77:a4:6b:bf:87:2a:98:28:
         3e:e8:b9:f0:07:89:39:81:97:e9:5a:93:6a:63:85:1e:f4:a3:
         32:ab:73:9c:0d:34:47:16:35:cc:66:0f:41:cb:39:e6:3c:0a:
         d0:26:30:77:94:ec:b2:df:87:4a:c1:28:9f:7e:34:6b:36:42:
         f2:fb:45:28:2c:05:f3:35:f9:1f:c3:49:45:e1:06:0c:3d:44:
         21:3a:07:2f:c2:fb:21:a3:7d:c3:a2:c8:3c:92:98:e6:b2:fa:
         7c:fb:f9:d8:04:90:94:c4:06:69:3e:c7:7f:fe:76:65:55:48:
         5d:8a:d4:06:aa:81:74:76:85:64:bf:ac:da:17:30:de:d8:65:
         49:0e:b9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:51:00 2026 by rpki-client