Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91509B3/7570014283AC11F0AD540D1BC4F9AE02/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.mft
File:                     5XJh_8gQcUB5NLZQSiK7o8FQ4XM.mft (raw, json)
Hash identifier:          AglO3uxHUCBhfFqT+a8IfvZWXBbYtgrt1SrgaV9egXU=
Subject key identifier:   69:7D:4F:1C:6D:7D:24:FA:60:B7:20:E9:EB:3A:D9:42:44:CB:6A:54
Authority key identifier: E5:72:61:FF:C8:10:71:40:79:34:B6:50:4A:22:BB:A3:C1:50:E1:73
Certificate issuer:       /CN=A91509B3/serialNumber=E57261FFC81071407934B6504A22BBA3C150E173
Certificate serial:       E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91509B3/7570014283AC11F0AD540D1BC4F9AE02/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.mft
Manifest number:          D9
Signing time:             Mon 05 Oct 2026 07:06:37 +0000
Manifest this update:     Mon 05 Oct 2026 07:06:37 +0000
Manifest next update:     Mon 12 Oct 2026 07:06:37 +0000
Files and hashes:         1: 5XJh_8gQcUB5NLZQSiK7o8FQ4XM.crl (hash: fce+ApHEWmGSVdbztA6B3L4KCoP5kMcAtTyNJrIP3GI=)
                          2: FD5873EC83BA11F089D8E166C4F9AE02.roa (hash: pgcMYTWRFf4gkxcC+wpc0bSO3rwahz7ouBwd4bk4x64=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91509B3/7570014283AC11F0AD540D1BC4F9AE02/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.crl
                          rsync://rpki.apnic.net/member_repository/A91509B3/7570014283AC11F0AD540D1BC4F9AE02/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 07:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 225 (0xe1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91509B3, serialNumber=E57261FFC81071407934B6504A22BBA3C150E173
        Validity
            Not Before: Oct  5 07:06:37 2026 GMT
            Not After : Oct 12 07:06:37 2026 GMT
        Subject: CN=6ac34c7d-9708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0b:e6:b0:0c:87:53:6d:1a:75:cf:69:d9:71:
                    d4:41:e5:3a:88:54:47:83:7d:17:d4:ad:1d:e3:bd:
                    44:1b:44:38:6c:1b:5f:03:ff:83:e6:55:59:19:b6:
                    94:a8:21:f6:13:48:45:85:b2:c0:0a:e4:47:b4:ca:
                    94:05:d6:ac:88:40:3a:09:9b:ab:f3:b8:54:40:0e:
                    8c:04:17:68:96:a4:dd:f0:c4:5a:80:47:66:29:62:
                    e9:21:13:1d:0a:e9:a6:89:00:47:30:b8:90:ae:18:
                    c3:6f:fc:15:a8:8a:fc:4f:e0:fb:35:38:b2:7e:33:
                    dd:4b:45:36:63:b8:50:a9:33:5f:eb:90:f4:3f:2d:
                    5c:5c:53:89:db:35:72:bf:41:af:e4:2b:fb:f7:a3:
                    78:e2:17:80:9d:53:cf:d4:90:2c:35:63:96:41:0e:
                    32:04:4e:91:16:06:30:b2:3c:2f:d4:c4:df:56:46:
                    aa:2c:0b:15:ec:87:6c:36:41:f4:d8:26:c3:fe:63:
                    23:74:2e:98:da:d8:31:92:fc:81:9e:d9:b6:18:12:
                    ec:da:1e:99:2a:8b:ff:fa:45:e4:2e:b9:8b:9a:dd:
                    7d:dd:db:22:89:7c:3d:74:36:05:f9:98:f8:50:25:
                    ee:9f:25:2a:c0:0d:38:f0:a7:28:04:56:6c:67:8e:
                    97:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:7D:4F:1C:6D:7D:24:FA:60:B7:20:E9:EB:3A:D9:42:44:CB:6A:54
            X509v3 Authority Key Identifier:
                keyid:E5:72:61:FF:C8:10:71:40:79:34:B6:50:4A:22:BB:A3:C1:50:E1:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91509B3/7570014283AC11F0AD540D1BC4F9AE02/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91509B3/7570014283AC11F0AD540D1BC4F9AE02/5XJh_8gQcUB5NLZQSiK7o8FQ4XM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:eb:a2:42:23:47:1b:a7:8e:44:97:b2:7e:db:9c:b5:d5:31:
         65:75:b2:7a:db:2a:2c:24:6d:a5:48:6d:c0:74:6f:da:06:ab:
         0d:37:d2:b8:a8:04:b2:ba:8e:91:82:50:01:a0:76:64:37:8e:
         c2:c2:1e:70:7d:48:bb:c1:fc:fb:03:52:29:51:69:27:b5:5b:
         d7:26:ba:00:04:2d:ee:d9:87:a2:2b:09:af:33:08:5d:a9:ad:
         b6:cb:62:37:df:ad:7f:f3:85:8e:5a:a0:bf:d6:26:57:7b:02:
         1c:3e:68:e6:fb:0b:35:40:f7:43:8e:53:dc:7b:51:5b:e9:0a:
         64:80:15:15:67:af:91:54:91:0c:da:e6:d8:8a:cf:13:00:a3:
         08:7f:33:b0:d5:39:84:26:c9:b0:68:20:db:44:82:a4:47:c4:
         34:a0:05:ad:3a:c2:17:ed:84:53:1d:8d:d9:3d:e6:4c:96:f9:
         d9:e3:d3:cd:46:2d:2a:03:d7:78:2b:2f:79:b8:da:75:6a:a8:
         71:f6:7d:66:e7:04:ac:b6:4d:cb:25:ba:e7:9c:df:72:ab:33:
         49:cb:7e:34:bb:2b:13:19:fa:42:e0:ca:93:ef:11:af:d0:8e:
         fb:c3:c0:8a:0c:78:38:b1:af:26:f2:c2:0e:7d:48:11:da:8c:
         4f:54:97:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 19:54:19 2026 by rpki-client