Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.mft
File:                     53p5hBmz84yLAlkKKUx7NffDREw.mft (raw, json)
Hash identifier:          1FtiooUFUIE/hSpVxs8ogDrWReRfwriJotmu0/DPA04=
Subject key identifier:   12:21:F9:7B:76:C5:91:3C:38:94:C1:5E:C1:B9:A9:7E:9B:58:D4:B4
Authority key identifier: E7:7A:79:84:19:B3:F3:8C:8B:02:59:0A:29:4C:7B:35:F7:C3:44:4C
Certificate issuer:       /CN=A914530B/serialNumber=E77A798419B3F38C8B02590A294C7B35F7C3444C
Certificate serial:       0134
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/53p5hBmz84yLAlkKKUx7NffDREw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.mft
Manifest number:          012F
Signing time:             Fri 17 Jul 2026 06:48:57 +0000
Manifest this update:     Fri 17 Jul 2026 06:48:56 +0000
Manifest next update:     Fri 24 Jul 2026 06:48:56 +0000
Files and hashes:         1: 53p5hBmz84yLAlkKKUx7NffDREw.crl (hash: XQ393A0orPu6Kn+w59jJPbjHMaasYiYBlaiZSYXaqS4=)
                          2: 87A33C66B79D11EF9A384C65C4F9AE02.roa (hash: QkVPChArca7p58dKOFKdeRoa2Z6OFQu0S93mu5qNgts=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.crl
                          rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/53p5hBmz84yLAlkKKUx7NffDREw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 06:48:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 308 (0x134)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914530B, serialNumber=E77A798419B3F38C8B02590A294C7B35F7C3444C
        Validity
            Not Before: Jul 17 06:48:56 2026 GMT
            Not After : Jul 24 06:48:56 2026 GMT
        Subject: CN=6a59d059-5da0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c9:b0:c1:ec:53:99:20:50:a1:42:3a:e1:bb:
                    33:66:3f:0d:ff:15:d8:a5:89:79:87:0d:bd:78:60:
                    a8:13:f2:ae:6e:69:d0:89:f7:77:7d:6e:7c:c6:00:
                    ed:e6:5b:a3:73:36:73:5a:d0:1d:7f:06:84:e8:d1:
                    6c:b0:ed:60:bf:f3:90:c1:49:92:57:f0:20:d8:a4:
                    e7:f0:cd:ab:d8:d4:e6:1e:38:b7:02:35:a5:81:a5:
                    d2:38:18:ad:da:34:62:87:75:f9:5a:56:67:db:03:
                    9d:41:14:20:d4:a9:dd:26:35:02:04:ec:b9:e1:b2:
                    10:46:c6:e9:a8:93:40:52:0a:80:bd:73:c0:38:30:
                    2e:d0:8e:49:a4:fe:57:88:19:99:ee:1c:92:04:42:
                    a4:cd:79:3f:ce:c3:a8:d9:bd:7c:fa:8e:e8:8d:4b:
                    11:12:7f:05:87:5b:cf:93:01:17:62:a9:b9:2d:86:
                    12:4f:ef:c8:21:2e:2a:16:8d:b7:15:52:bb:11:66:
                    79:dc:01:a4:91:52:91:6c:1e:ea:48:51:33:9a:bd:
                    81:6c:8b:6f:4e:7b:a1:05:7b:34:4c:9c:37:f9:35:
                    db:22:f5:a2:42:69:aa:c1:47:17:ae:09:ef:c5:6d:
                    89:a3:ba:f8:51:26:31:65:9f:1e:bf:58:0f:9e:dd:
                    65:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:21:F9:7B:76:C5:91:3C:38:94:C1:5E:C1:B9:A9:7E:9B:58:D4:B4
            X509v3 Authority Key Identifier:
                keyid:E7:7A:79:84:19:B3:F3:8C:8B:02:59:0A:29:4C:7B:35:F7:C3:44:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/53p5hBmz84yLAlkKKUx7NffDREw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914530B/9E75DDB6B79A11EFA0D6975DC4F9AE02/53p5hBmz84yLAlkKKUx7NffDREw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:9e:63:3a:d2:e0:2e:1b:19:8b:be:74:dc:64:b7:cd:38:ff:
         fd:13:a7:c4:5e:ed:f1:95:56:97:d3:2f:00:ad:ef:84:28:f8:
         ed:11:92:a8:79:7b:01:da:e6:e5:74:5c:fd:43:8c:13:5d:80:
         d0:cb:0a:fb:42:99:d0:14:32:7c:69:fc:c5:2b:80:19:49:8f:
         97:d9:75:85:d5:dd:0f:b2:9d:a3:3e:04:b2:c0:60:78:f6:ab:
         2c:a8:17:d8:21:0c:b0:72:56:95:30:b3:19:64:23:de:d4:d8:
         04:96:65:fa:88:74:2d:55:c3:7d:9d:19:28:5d:38:1f:32:bb:
         b9:3c:48:98:35:31:85:49:b7:8c:2b:c1:e9:a8:07:f5:c2:df:
         9e:23:51:88:03:28:dc:6f:d5:11:1f:a8:9e:c7:13:04:d6:1f:
         61:05:d2:0f:f1:b9:c4:c6:ef:18:a4:9b:b1:14:2e:a5:ed:18:
         35:8f:61:79:30:95:e6:c4:ac:04:f0:ce:71:ac:d2:57:70:8f:
         81:18:22:27:2f:90:6c:54:c5:87:91:df:1f:87:42:31:de:6b:
         ae:6d:cd:c8:3e:78:fc:54:7d:85:8c:cb:fe:e8:05:ce:c2:fe:
         b9:c2:3b:32:78:c7:f9:05:dd:15:1a:cb:81:b2:1d:98:6e:e6:
         55:ca:95:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:44 2026 by rpki-client