Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/5S3osZGTOKPiVWZOiASKVpihINA.mft
File:                     5S3osZGTOKPiVWZOiASKVpihINA.mft (raw, json)
Hash identifier:          jLN3nhak1su3YL8CWwr3Z4r0vNpWDLa+HAI447mEIwo=
Subject key identifier:   DA:B9:7F:9F:D6:8F:5C:9B:A2:2A:9D:DE:7A:C2:C5:6A:BF:27:F2:35
Authority key identifier: E5:2D:E8:B1:91:93:38:A3:E2:55:66:4E:88:04:8A:56:98:A1:20:D0
Certificate issuer:       /CN=A9160701/serialNumber=E52DE8B1919338A3E255664E88048A5698A120D0
Certificate serial:       0C60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S3osZGTOKPiVWZOiASKVpihINA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/5S3osZGTOKPiVWZOiASKVpihINA.mft
Manifest number:          0C53
Signing time:             Tue 18 Aug 2026 18:58:26 +0000
Manifest this update:     Tue 18 Aug 2026 18:58:26 +0000
Manifest next update:     Tue 25 Aug 2026 18:58:26 +0000
Files and hashes:         1: 5S3osZGTOKPiVWZOiASKVpihINA.crl (hash: raerXuGjhj3izMHaq3aR5JgA5atVO6rc3EYP6w0t5/E=)
                          2: 6DCC06C231BC11EA9AACCA4BC4F9AE02.roa (hash: NDA9/ZIdOnZog2sK2a7R7CTd4jfshQqjGD+nO4awG3w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/5S3osZGTOKPiVWZOiASKVpihINA.crl
                          rsync://rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/5S3osZGTOKPiVWZOiASKVpihINA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S3osZGTOKPiVWZOiASKVpihINA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 18:58:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3168 (0xc60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160701, serialNumber=E52DE8B1919338A3E255664E88048A5698A120D0
        Validity
            Not Before: Aug 18 18:58:26 2026 GMT
            Not After : Aug 25 18:58:26 2026 GMT
        Subject: CN=6a84ab52-1996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cd:db:d7:e5:d3:8e:56:52:0f:c4:5d:47:97:
                    71:f4:25:cc:8b:9e:96:de:dd:15:cc:9f:88:ed:77:
                    b9:9b:d4:53:4b:42:3e:00:05:7e:40:2f:0c:f9:72:
                    d4:de:6d:52:ca:c0:ae:88:77:30:66:03:6c:64:96:
                    78:53:ca:08:28:6d:00:19:bd:06:8a:35:71:c6:cc:
                    da:c7:cf:d6:d3:31:2a:ca:5a:0d:c9:d7:ee:7b:91:
                    cb:64:e8:45:c2:9a:3c:01:8e:05:b2:9d:ca:e2:88:
                    02:bd:46:83:50:4e:16:fa:04:e0:88:f7:c2:ad:ce:
                    32:e0:21:5f:6b:57:81:bd:c4:87:31:dd:eb:66:b7:
                    44:1c:e0:3f:ac:83:b2:41:93:c9:ba:be:27:24:a8:
                    53:ae:03:d8:71:bc:de:ea:7a:c3:19:09:4b:61:32:
                    29:ca:e0:5a:2a:eb:36:a5:11:7b:ab:2b:a8:7d:e5:
                    2d:53:fa:0d:d9:bf:f6:28:b0:68:5e:fa:f6:f5:db:
                    7e:40:bf:c2:ec:16:77:21:74:2b:e7:34:ee:67:b7:
                    8a:b8:6e:f5:17:3e:d2:71:32:03:f4:c4:0c:5b:be:
                    1c:e9:3d:fe:5f:1e:97:f5:23:97:c1:b8:08:8a:74:
                    36:b0:5b:68:b4:bb:54:69:e5:5b:4d:7d:08:c4:00:
                    83:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:B9:7F:9F:D6:8F:5C:9B:A2:2A:9D:DE:7A:C2:C5:6A:BF:27:F2:35
            X509v3 Authority Key Identifier:
                keyid:E5:2D:E8:B1:91:93:38:A3:E2:55:66:4E:88:04:8A:56:98:A1:20:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/5S3osZGTOKPiVWZOiASKVpihINA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S3osZGTOKPiVWZOiASKVpihINA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/5S3osZGTOKPiVWZOiASKVpihINA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:8b:76:35:b8:b2:92:2b:df:b8:40:c8:d9:76:82:28:e0:2f:
         7a:ff:25:be:42:64:c3:d5:b6:3f:2f:09:32:cf:6c:3a:b2:4b:
         6c:2c:06:fb:94:48:56:4d:ce:d7:cc:da:5d:09:48:bf:17:bf:
         14:53:bb:6c:f7:b1:52:a6:2c:b7:e3:81:ef:a2:eb:65:70:ff:
         69:c7:f4:c3:a7:5d:ff:11:35:d3:6d:51:64:89:af:b0:b2:18:
         5c:9c:26:6c:ea:db:6e:f3:6b:7b:32:02:d8:45:35:5a:07:cf:
         bb:81:4b:78:6d:7e:d7:63:8a:b2:06:0a:72:d6:55:19:ef:d6:
         6a:d8:dc:4e:9f:5b:56:03:89:74:0a:6a:dc:fe:61:2b:36:75:
         c0:35:d3:f4:90:f1:1b:cf:b5:36:73:1b:24:0e:d6:f0:dc:86:
         17:a0:c7:d4:54:b1:47:29:56:9c:c8:d7:cf:50:f6:8f:6e:1d:
         e8:8a:9b:7a:d9:2e:e9:79:6e:04:dc:f1:9d:a4:59:0a:bf:91:
         7d:f0:7e:89:02:d1:2b:75:64:f5:d6:d8:1d:80:15:b7:93:76:
         27:8e:28:fb:df:fd:ef:5d:1f:c8:b7:1e:cf:05:9a:c6:28:5c:
         d3:f6:17:6b:81:bc:37:5f:e0:51:d4:51:9d:16:e5:67:5c:ed:
         9b:0a:0d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:39:23 2026 by rpki-client