Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft
File:                     dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft (raw, json)
Hash identifier:          2Zg/leXewNaylBBc+MtDoQt9ayB02JCrtPD8OwMsgA4=
Subject key identifier:   6A:E6:CB:02:B6:4A:12:04:57:87:78:AE:FC:4D:E2:85:A5:79:1A:68
Authority key identifier: 76:0E:6A:7F:08:B7:2F:F8:0E:B5:6F:67:50:32:3B:16:4A:70:DA:1D
Certificate issuer:       /CN=A9157DAE/serialNumber=760E6A7F08B72FF80EB56F6750323B164A70DA1D
Certificate serial:       056C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft
Manifest number:          0546
Signing time:             Thu 10 Sep 2026 16:57:50 +0000
Manifest this update:     Thu 10 Sep 2026 16:57:50 +0000
Manifest next update:     Thu 17 Sep 2026 16:57:50 +0000
Files and hashes:         1: dg5qfwi3L_gOtW9nUDI7Fkpw2h0.crl (hash: 5mPSY17KY0Twu3gCuLA/np81TTEHCwpFTRHxUnkcTtI=)
                          2: 13EE3260596A11ECB1394271C4F9AE02.roa (hash: 5Z7fKb2b95O7xf2REenK7dbH8KrSrAmTwTpVkXBeeOI=)
                          3: 9CD16392309711F09EFD0C4CC4F9AE02.roa (hash: 76p1LWBSiAURuIgRIP/lu1qZCJd79sZFpOsF7Mk4V7g=)
                          4: 1479C514596A11ECB1394271C4F9AE02.roa (hash: wpAJJYnFAicDNwa71hcmrPmPcdiAdvkl0r/mHo7+0do=)
                          5: F91F0C028A2E11EC98A2702CC4F9AE02.roa (hash: bjkkedoEzbUfC4GQvKwdaQZgxgq0YTl5qOigfpRvGaU=)
                          6: F5A921B85BE911EF8624AA20C4F9AE02.roa (hash: HtAUxiV2GGFLsnw5Ftue8AlO9jul/mJwmhYMXTb/CeY=)
                          7: D36F0B6ECF4411ECB6B61825C4F9AE02.roa (hash: Ylv7wHI65XMnQYhoDyQSygUwHrURYMjzNieL/UaPiGU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.crl
                          rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 16:57:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1388 (0x56c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157DAE, serialNumber=760E6A7F08B72FF80EB56F6750323B164A70DA1D
        Validity
            Not Before: Sep 10 16:57:50 2026 GMT
            Not After : Sep 17 16:57:50 2026 GMT
        Subject: CN=6aa2e18e-e5f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4f:fc:df:55:d4:89:b3:0f:1b:4f:61:25:c2:
                    41:b4:73:d1:2d:8a:1a:4d:21:9c:fd:51:3b:b4:01:
                    48:72:38:c5:7a:95:ff:07:91:be:11:40:05:09:bb:
                    80:f2:6d:73:a8:ff:4a:c4:04:ec:a3:68:5d:81:48:
                    7a:21:86:ac:4f:b8:71:5b:ac:e8:c8:e4:95:ee:96:
                    d6:51:b7:5e:b1:3c:ba:f5:63:fb:18:7e:5d:7e:56:
                    10:d2:4a:31:6e:d4:8f:67:ee:00:11:a3:4d:26:3d:
                    ad:5a:43:f6:2d:00:8f:68:e3:49:b0:42:d6:6f:39:
                    c0:12:22:d5:16:e4:55:1c:77:9c:0c:ce:3c:69:fc:
                    4a:75:cc:4f:f7:8b:36:05:ea:67:a1:ea:2b:f5:2f:
                    e9:00:90:10:88:6d:31:a5:b8:ae:d1:15:e6:65:c4:
                    c8:70:51:92:16:de:cb:36:a2:4a:67:5a:43:bd:88:
                    55:8f:51:af:6d:d5:57:09:46:b3:71:2a:c4:53:66:
                    0f:ce:0d:13:c5:ea:05:69:fb:f9:0c:75:4c:ed:b9:
                    14:fb:4c:8a:77:c5:61:14:a8:d6:fe:09:f4:94:21:
                    4a:54:4e:31:5d:56:6b:72:8a:21:9c:78:89:fb:eb:
                    28:4e:99:f4:f2:cf:08:b8:d4:7f:16:b4:f5:3f:64:
                    e6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E6:CB:02:B6:4A:12:04:57:87:78:AE:FC:4D:E2:85:A5:79:1A:68
            X509v3 Authority Key Identifier:
                keyid:76:0E:6A:7F:08:B7:2F:F8:0E:B5:6F:67:50:32:3B:16:4A:70:DA:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:76:94:ee:9c:f8:83:30:23:09:37:37:45:d2:0b:6b:20:bf:
         ee:0c:39:03:c6:84:56:63:2f:98:88:12:48:47:5b:5c:d4:44:
         f0:fb:91:4c:8d:7d:d8:c3:f1:11:5c:a6:5d:7b:14:45:d5:38:
         2d:16:ab:94:bf:af:96:cb:b4:4b:99:f5:9f:46:53:02:e4:fc:
         2f:a9:8e:d1:9a:79:cb:8c:e2:49:51:89:2c:fe:20:57:ba:f1:
         39:d9:90:ca:6c:58:fa:42:e2:4d:b1:f4:dc:de:d4:f2:39:be:
         2d:1c:95:2a:c1:57:7e:16:71:54:d4:f8:54:f5:fd:d9:2a:21:
         06:e6:e5:41:ba:eb:24:81:25:01:2b:ab:c5:78:6f:f9:2c:19:
         ff:ea:07:42:07:d1:68:4d:c5:66:e8:c0:3b:51:59:8b:d4:04:
         12:97:fd:d4:d9:f7:2d:d0:9f:13:c1:9e:17:c6:d1:55:ef:4d:
         4a:70:0e:a2:5e:19:22:13:bb:51:9d:1a:bb:33:82:1d:ab:6b:
         a5:32:c9:1e:69:d1:38:a1:cf:cd:c5:ec:b5:3c:32:b0:8d:08:
         c9:a9:20:64:de:5e:25:00:c2:2f:fc:e7:08:a2:85:9f:7f:18:
         44:4c:df:cb:f8:7d:2f:50:97:26:15:6e:49:dd:2f:ce:97:20:
         d7:08:f5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 07:06:41 2026 by rpki-client