Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft
File:                     c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft (raw, json)
Hash identifier:          QqSwJycm8x8XdpRLIickg6SZx2vKn5ckH23HLYqR7VQ=
Subject key identifier:   87:9D:47:BB:16:90:61:D7:B1:00:10:3E:A1:21:1C:AA:2B:9F:FA:10
Authority key identifier: 73:98:7E:CC:E7:7E:44:EB:36:65:1E:09:8D:33:75:0F:A8:64:E6:76
Certificate issuer:       /CN=A91316E5/serialNumber=73987ECCE77E44EB36651E098D33750FA864E676
Certificate serial:       024C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft
Manifest number:          0246
Signing time:             Sat 03 Oct 2026 03:03:22 +0000
Manifest this update:     Sat 03 Oct 2026 03:03:22 +0000
Manifest next update:     Sat 10 Oct 2026 03:03:22 +0000
Files and hashes:         1: c5h-zOd-ROs2ZR4JjTN1D6hk5nY.crl (hash: oekfBdiwl36XKXyR2521HgAaZOAn5c9IhrWYp/1wWMo=)
                          2: C1A8182646D011EE8BE5AE80C4F9AE02.roa (hash: GaiJN8sQVRxQhxF84N/8bkdFVJqBpd2e+8ULBvpRalM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.crl
                          rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 03:03:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 588 (0x24c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91316E5, serialNumber=73987ECCE77E44EB36651E098D33750FA864E676
        Validity
            Not Before: Oct  3 03:03:22 2026 GMT
            Not After : Oct 10 03:03:22 2026 GMT
        Subject: CN=6ac0707a-2d9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:12:d7:50:29:b9:2e:d0:2a:ee:7d:b6:9f:75:
                    f0:40:4b:67:7e:eb:d0:72:0c:5b:98:27:e6:d6:92:
                    52:76:63:db:72:3b:76:10:c0:cb:e1:ed:62:b6:d9:
                    48:9b:49:f0:fc:80:e9:e6:f3:b0:a3:53:30:0b:cb:
                    dc:a3:93:3f:50:28:4d:1e:85:45:e0:2b:7b:01:fd:
                    9b:72:f5:c1:c6:ad:a6:41:03:26:29:4f:2d:56:21:
                    0d:a4:10:f2:b5:26:fd:51:7e:25:43:40:81:58:92:
                    9b:88:6e:9e:c8:17:43:16:a1:96:ab:f1:e9:39:a4:
                    43:7f:b8:c6:87:6e:6d:b9:55:9b:5a:73:35:96:87:
                    3a:72:36:7d:03:a7:83:9e:b8:83:bd:10:34:53:fe:
                    f7:e8:d1:49:17:86:31:a5:2e:32:5b:5a:22:ea:79:
                    c8:1a:cf:cb:c5:64:4c:c8:b6:03:b7:fa:b5:5d:09:
                    99:be:6b:b4:40:89:40:ea:09:58:59:ec:4d:c8:f7:
                    87:bc:51:81:6a:ff:35:7b:96:8a:87:20:3a:30:4b:
                    4a:20:68:10:b2:a6:d2:8f:68:60:28:90:2d:25:bd:
                    fa:af:c8:19:f9:85:40:64:89:fe:b1:5f:7c:41:5e:
                    3f:13:b4:17:4d:d4:28:de:b1:0a:c7:27:37:0d:c7:
                    c9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:9D:47:BB:16:90:61:D7:B1:00:10:3E:A1:21:1C:AA:2B:9F:FA:10
            X509v3 Authority Key Identifier:
                keyid:73:98:7E:CC:E7:7E:44:EB:36:65:1E:09:8D:33:75:0F:A8:64:E6:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:6d:59:04:6a:6d:6c:51:13:a1:ce:d0:01:ff:e9:a6:f7:c0:
         46:44:2d:a7:76:2d:6c:0b:7e:84:e9:0c:3c:e4:f6:33:cd:ec:
         ee:fc:64:b5:77:ef:dc:af:e6:a3:cc:f0:43:f2:00:ab:49:7a:
         5c:1a:fc:58:44:3f:b4:d0:ef:45:8e:59:d0:1f:d2:62:1e:51:
         db:3c:5b:57:d0:94:16:57:3b:ab:c1:8f:91:36:24:25:a4:84:
         3a:75:de:82:1b:5c:5a:d5:db:0a:52:fd:81:d5:57:a7:e5:8a:
         93:54:47:e6:b7:d7:89:2d:34:bc:13:f2:94:63:c1:62:23:c6:
         3b:e5:e0:30:80:cd:1d:cd:0a:76:82:a2:3b:d1:cc:0c:34:f0:
         cc:00:a8:3a:87:0a:d0:78:33:11:5e:d0:30:d0:c8:3f:89:2c:
         2f:cb:ff:b7:5a:6f:31:86:52:8d:12:24:5a:2b:f6:d2:ec:fc:
         68:47:f6:c0:b0:64:5b:92:a5:e2:ec:48:77:4e:11:2f:29:e6:
         ba:94:bb:ac:7e:71:52:59:b2:0e:83:de:ba:01:a5:71:d8:f1:
         9e:df:5f:46:3e:b1:e9:bc:76:65:2b:89:bd:4f:04:4f:cd:08:
         54:9f:a4:7d:75:e3:01:35:95:f7:d8:aa:51:11:7e:9c:9c:30:
         68:8e:a8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:35:54 2026 by rpki-client