Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.mft
File:                     5B7XVgdLN63ceU-UC9H1Pj9na5M.mft (raw, json)
Hash identifier:          0xmJwiQmoi1qoypLduafy6m1npb/kfdlN3JFhoSndLg=
Subject key identifier:   53:B0:91:4E:CB:B9:82:DC:CA:B1:71:AD:9F:D4:4A:7C:D1:0D:57:1B
Authority key identifier: E4:1E:D7:56:07:4B:37:AD:DC:79:4F:94:0B:D1:F5:3E:3F:67:6B:93
Certificate issuer:       /CN=A913B5C7/serialNumber=E41ED756074B37ADDC794F940BD1F53E3F676B93
Certificate serial:       01D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5B7XVgdLN63ceU-UC9H1Pj9na5M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.mft
Manifest number:          01CB
Signing time:             Thu 03 Sep 2026 03:54:55 +0000
Manifest this update:     Thu 03 Sep 2026 03:54:55 +0000
Manifest next update:     Thu 10 Sep 2026 03:54:55 +0000
Files and hashes:         1: 5B7XVgdLN63ceU-UC9H1Pj9na5M.crl (hash: nvc36o9tzflvXrtffqf0w/DXle3NY3u3D20myTGudzo=)
                          2: B0CE94A0E80911EEADE3420AC4F9AE02.roa (hash: 4FDg9GWcMF+h0lyc+szQBWG2v8yyKRA36ab+Hfgr7nM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.crl
                          rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5B7XVgdLN63ceU-UC9H1Pj9na5M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 03:54:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 464 (0x1d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B5C7, serialNumber=E41ED756074B37ADDC794F940BD1F53E3F676B93
        Validity
            Not Before: Sep  3 03:54:55 2026 GMT
            Not After : Sep 10 03:54:55 2026 GMT
        Subject: CN=6a98ef8f-145d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:44:1e:de:50:5c:e2:e3:1e:92:c1:5d:96:27:
                    1b:e9:f1:2a:66:c0:e5:2a:9d:d0:cf:6b:8e:6c:01:
                    1d:3b:a9:c0:fa:3a:b5:6f:2e:c5:d9:56:b4:1b:ab:
                    77:3f:25:f8:e8:1b:31:a7:ae:99:7c:ec:2d:ef:96:
                    b2:11:bb:dc:09:4b:2c:59:c3:89:89:94:77:20:0f:
                    ec:9c:5c:e0:8c:23:b6:7b:66:37:9a:82:55:d5:4d:
                    7e:58:27:75:84:63:63:49:26:a9:7c:e7:c9:72:be:
                    28:5b:04:a7:31:d3:f2:10:07:d3:98:7d:77:d8:b0:
                    e2:08:61:f3:42:b6:ca:67:c4:db:ec:83:66:31:8f:
                    4b:8e:54:43:8a:d8:ce:6f:e8:f5:0e:0f:c8:9f:21:
                    83:b3:6b:89:05:a8:03:16:ed:1b:5d:e1:22:dc:c7:
                    fd:eb:eb:7e:f5:89:93:0f:b2:a2:ca:3b:81:16:72:
                    be:e9:a9:ed:cf:45:85:42:ce:8f:0b:95:ae:09:a5:
                    f0:89:d9:b3:6c:f6:ad:57:c0:6b:de:f5:e2:34:02:
                    f7:80:12:94:ab:3f:7a:67:26:db:33:6b:d8:76:35:
                    9b:ba:da:50:c9:78:ad:4d:1b:24:70:96:9c:17:95:
                    cc:a4:be:e4:b5:a9:98:70:2b:17:80:bb:cb:78:c5:
                    0d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:B0:91:4E:CB:B9:82:DC:CA:B1:71:AD:9F:D4:4A:7C:D1:0D:57:1B
            X509v3 Authority Key Identifier:
                keyid:E4:1E:D7:56:07:4B:37:AD:DC:79:4F:94:0B:D1:F5:3E:3F:67:6B:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5B7XVgdLN63ceU-UC9H1Pj9na5M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B5C7/67D24396E80911EEBE489563C4F9AE02/5B7XVgdLN63ceU-UC9H1Pj9na5M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e1:62:d7:85:c3:f7:bb:56:36:35:43:21:54:66:73:f9:cb:05:
         6a:d4:e4:7d:42:38:f0:df:84:0d:fb:53:ec:33:b2:c7:71:32:
         7c:c4:e2:9a:e7:58:ad:15:b1:32:47:d2:fe:b6:a0:5e:a9:bd:
         39:2f:23:e9:f9:2e:b1:6f:00:fa:8c:4b:97:c4:ef:76:f8:f8:
         e8:09:0f:4e:25:80:82:7a:f0:51:ca:e0:60:c3:5a:cc:61:78:
         76:37:2c:26:de:7e:46:2a:a2:98:98:c9:a6:7d:f4:4d:ab:2b:
         b8:b4:21:f3:62:05:01:40:3d:26:d7:a6:cb:68:3f:3a:d2:aa:
         9b:dc:a3:de:fe:8b:49:47:cc:ea:61:82:ae:24:e8:0b:11:13:
         6a:5e:e3:26:b7:bf:c2:45:51:85:d9:82:09:bd:88:5d:02:11:
         2d:59:5e:3e:d0:5b:85:6a:93:8f:a2:a7:40:9a:d0:d3:41:c4:
         30:2a:8c:3a:0d:7f:d2:02:7b:ea:2c:64:10:d3:5d:ad:c2:cd:
         9f:5f:d8:90:b9:5e:43:62:b1:bb:67:c8:78:c4:0e:b9:56:02:
         6b:e4:6a:a6:ba:e7:d7:f3:5a:a6:b0:b5:e0:a6:70:4c:0f:f9:
         79:a8:1b:f1:46:a9:df:15:9a:0a:8a:32:97:83:cd:bc:3b:3d:
         30:50:c2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:06:08 2026 by rpki-client