Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.mft
File:                     5cOmhsg97m0zv-xUHqy0pKCJknk.mft (raw, json)
Hash identifier:          bNLTv8TfLj2A0SBDIDSpPT4FrwDpcc8LECcSbDSXt7s=
Subject key identifier:   6E:7E:CC:57:20:77:41:43:B5:C4:0B:2E:84:C5:6C:A4:EC:29:DA:3D
Authority key identifier: E5:C3:A6:86:C8:3D:EE:6D:33:BF:EC:54:1E:AC:B4:A4:A0:89:92:79
Certificate issuer:       /CN=A9153AA6/serialNumber=E5C3A686C83DEE6D33BFEC541EACB4A4A0899279
Certificate serial:       17BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5cOmhsg97m0zv-xUHqy0pKCJknk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.mft
Manifest number:          17AE
Signing time:             Tue 18 Aug 2026 16:43:13 +0000
Manifest this update:     Tue 18 Aug 2026 16:43:13 +0000
Manifest next update:     Tue 25 Aug 2026 16:43:13 +0000
Files and hashes:         1: 5cOmhsg97m0zv-xUHqy0pKCJknk.crl (hash: WPLy+ldw7oJ196q1dNWmJEU76HlYhWL1KKActjguvJs=)
                          2: 99C6F94CF52511E7948D5A0BC4F9AE02.roa (hash: NaLzQS9c7fL8mInokKmqBOO4x/Gb8moo1XbJ4Dbrrvo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.crl
                          rsync://rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5cOmhsg97m0zv-xUHqy0pKCJknk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 16:43:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6075 (0x17bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153AA6, serialNumber=E5C3A686C83DEE6D33BFEC541EACB4A4A0899279
        Validity
            Not Before: Aug 18 16:43:13 2026 GMT
            Not After : Aug 25 16:43:13 2026 GMT
        Subject: CN=6a848ba1-583d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7a:75:68:43:45:ac:6f:b1:0f:6d:87:69:14:
                    ff:bf:7a:2f:a5:ee:80:6d:41:52:28:f1:31:b3:7a:
                    7c:4a:c1:fe:ac:c6:4c:63:8b:75:ca:a7:5a:15:eb:
                    5a:f1:b0:35:0e:63:6b:92:6e:bd:c4:c4:53:bb:df:
                    2e:99:f2:df:73:cc:eb:5b:c4:b4:0f:2d:7e:71:8b:
                    81:25:7f:9a:0e:bb:a7:78:06:ed:38:7e:e8:db:15:
                    db:da:8e:99:24:06:88:b4:13:af:66:bc:97:73:54:
                    fe:88:75:9a:12:3f:8e:9a:ab:c8:07:5f:e6:d7:16:
                    a4:a9:44:85:ff:26:a2:d1:f9:73:ac:94:12:87:e5:
                    de:4f:e9:46:9b:6a:4e:6f:61:cf:03:e8:1b:6b:fe:
                    0c:22:9f:f9:47:8a:20:7f:ab:9d:4f:fd:e0:21:0c:
                    ab:26:bb:3d:bf:eb:eb:b1:20:6b:cf:a6:bf:be:3b:
                    3d:69:c9:0e:ac:f9:56:54:18:6b:0a:8b:f3:b6:32:
                    54:82:dc:73:b0:0a:4b:e9:b2:e0:cb:9e:7b:57:6d:
                    e4:a9:ce:25:49:78:4e:4d:ca:71:b4:34:3b:a3:d4:
                    31:68:b8:7d:e5:2f:3d:f1:de:68:49:24:55:70:ab:
                    5c:a6:a1:22:41:dd:05:35:1d:37:6a:f9:d8:e0:ba:
                    7f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:7E:CC:57:20:77:41:43:B5:C4:0B:2E:84:C5:6C:A4:EC:29:DA:3D
            X509v3 Authority Key Identifier:
                keyid:E5:C3:A6:86:C8:3D:EE:6D:33:BF:EC:54:1E:AC:B4:A4:A0:89:92:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5cOmhsg97m0zv-xUHqy0pKCJknk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:42:df:6b:ce:0f:95:c8:07:8e:3f:7b:2d:ca:8f:4a:50:66:
         03:00:e4:12:8e:73:09:b8:c4:03:64:5c:1d:b4:54:4a:80:cb:
         39:b3:df:60:59:04:cc:07:39:18:9c:65:9a:cc:74:7e:40:07:
         6b:93:0f:d4:3d:bd:c8:c7:c2:c1:c0:d2:d6:1e:96:a2:81:6c:
         ae:d3:a3:25:97:b3:b8:b8:34:e1:c4:12:43:1a:5a:42:79:6e:
         f4:5b:8d:2d:28:aa:7c:bb:5c:99:c1:1d:05:50:a0:fb:06:dd:
         e3:d3:96:01:d1:93:b1:4b:c0:7a:f5:c8:b8:b3:42:c5:d1:2c:
         fe:3c:83:47:f1:ef:e9:42:cd:ad:7b:15:67:9a:3c:52:94:f1:
         88:41:9e:bf:e2:e6:32:67:72:2b:f4:72:4b:db:db:87:9c:bf:
         9f:7a:47:8d:87:67:b5:c2:85:d9:77:e8:98:e7:34:16:d4:bb:
         00:28:b8:3c:25:11:91:8b:04:a1:27:f7:1d:05:44:d3:f0:32:
         87:a4:f5:6c:de:bb:73:a7:74:47:a5:25:fc:dc:3f:64:9a:3f:
         2e:00:4a:44:a2:b9:e9:85:a4:01:bb:49:7b:bd:ee:30:36:04:
         81:72:65:85:09:a3:0f:f1:ce:b0:d6:35:67:87:2e:c7:fc:e3:
         31:7e:b8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:41:50 2026 by rpki-client