Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.mft
File:                     5RAgj9OQQuM2YhMKQqj4P-7PvnQ.mft (raw, json)
Hash identifier:          /+J0Ce7GRNY+Qg3cyP908bUgT9N7PtPpOowvSw25hYI=
Subject key identifier:   7F:1E:41:0E:A4:5B:A4:80:33:1D:6F:6B:F4:0F:5F:5C:E2:77:38:B7
Authority key identifier: E5:10:20:8F:D3:90:42:E3:36:62:13:0A:42:A8:F8:3F:EE:CF:BE:74
Certificate issuer:       /CN=A9125DDA/serialNumber=E510208FD39042E33662130A42A8F83FEECFBE74
Certificate serial:       D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.mft
Manifest number:          D5
Signing time:             Sat 03 Oct 2026 07:21:14 +0000
Manifest this update:     Sat 03 Oct 2026 07:21:14 +0000
Manifest next update:     Sat 10 Oct 2026 07:21:14 +0000
Files and hashes:         1: 5RAgj9OQQuM2YhMKQqj4P-7PvnQ.crl (hash: JJICN3JpZKvzGWPSP+RjjiQ0S2g39JcWO0XTglFnsGQ=)
                          2: F91331C4796E11F095D14275C4F9AE02.roa (hash: 5kreoxgcCJUQZsNMEHK/Y4fOtdmTmyIsApDfpOqWQVs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.crl
                          rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 07:21:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 215 (0xd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125DDA, serialNumber=E510208FD39042E33662130A42A8F83FEECFBE74
        Validity
            Not Before: Oct  3 07:21:14 2026 GMT
            Not After : Oct 10 07:21:14 2026 GMT
        Subject: CN=6ac0acea-413a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1a:1d:2e:d0:04:64:79:78:8e:36:77:10:8a:
                    ce:3b:5d:00:ff:11:9a:fc:09:a3:6e:fd:f0:c6:bc:
                    1e:19:b1:7d:63:4b:39:85:d1:29:e2:40:cc:d8:4c:
                    65:03:68:32:08:26:af:39:b6:e3:79:59:6e:d0:df:
                    e5:69:40:8e:7b:32:43:fa:6c:19:d1:8b:09:6e:0f:
                    f0:e1:e5:bb:6b:fc:14:41:42:34:5f:f8:71:7c:ce:
                    9b:f7:19:ab:10:8a:31:c9:28:12:0f:75:5e:bb:45:
                    3a:77:9d:32:0c:e3:8c:82:22:79:65:3b:b7:12:99:
                    33:91:0d:0f:72:1a:0a:84:ad:42:d2:c6:0e:de:de:
                    df:5e:7c:c5:b0:e9:ff:fa:fd:8b:a1:42:06:2e:d6:
                    dc:b0:5d:85:d3:d1:7d:ca:07:9e:57:a4:3e:66:04:
                    c6:57:c4:48:b7:3e:5c:12:10:91:55:3f:2e:4c:ad:
                    5f:27:c0:2c:04:87:51:a8:44:23:40:68:ab:5e:54:
                    06:90:21:d6:7d:80:3a:8f:26:bc:f2:4e:50:d9:5d:
                    c5:03:d7:af:50:44:47:86:a7:d3:96:b9:81:8c:1e:
                    a4:53:19:17:8c:90:eb:32:4b:0d:3b:6b:2e:86:cd:
                    00:5d:94:2f:1c:8f:96:01:da:b0:c1:04:04:c5:ca:
                    11:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:1E:41:0E:A4:5B:A4:80:33:1D:6F:6B:F4:0F:5F:5C:E2:77:38:B7
            X509v3 Authority Key Identifier:
                keyid:E5:10:20:8F:D3:90:42:E3:36:62:13:0A:42:A8:F8:3F:EE:CF:BE:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:9e:1e:04:1e:ac:0a:76:e1:c2:62:42:b6:d7:e7:a3:2c:82:
         b8:28:3f:8c:63:3b:54:b1:de:7e:9b:40:5d:1e:20:46:57:46:
         c6:37:6e:58:81:8e:fe:58:23:fb:91:52:b2:6a:82:d8:be:5c:
         42:4d:37:6d:31:a7:33:be:d6:c5:ab:4f:a9:2d:e9:de:cd:a6:
         ed:64:b6:f8:98:09:d3:ec:70:45:f0:2f:01:1e:ea:d5:ce:3e:
         ac:f7:49:2e:43:5b:44:f6:5f:8c:3d:3d:14:3c:16:70:66:96:
         e6:85:b3:54:f8:e7:6d:22:5a:46:e1:83:34:c8:99:91:1f:7b:
         df:9e:fe:c3:0e:d2:65:3b:39:4d:33:cd:10:77:7a:7e:77:97:
         c2:c4:a7:9a:1a:6a:5d:a0:85:32:37:c9:99:cf:14:c2:58:74:
         10:c9:d4:f9:04:40:4d:e2:99:6d:3f:ec:a8:53:bb:c6:1c:ad:
         d7:0f:75:73:76:5d:ed:57:89:e3:c1:4e:cd:f2:fa:95:24:58:
         c3:8f:5f:bf:00:95:53:a2:48:de:5b:c0:ed:a6:a0:26:25:fe:
         0c:f1:e4:7b:f1:45:da:62:ea:bf:10:e2:df:01:b2:d2:fc:e4:
         31:d1:b3:30:0f:8d:23:cf:ba:7f:18:eb:13:8c:a3:94:ec:f7:
         4f:6b:61:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 10:11:26 2026 by rpki-client