Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91656C7/5451324A408311F08B03AB65C4F9AE02/e38qjYSvvYwzKp9LTmcJs65_CvY.mft
File:                     e38qjYSvvYwzKp9LTmcJs65_CvY.mft (raw, json)
Hash identifier:          xOlshqPIUTZvdAFHPnbLMNhXi1DUSdsOFhFUpv54+Z0=
Subject key identifier:   1E:E4:14:4B:24:B3:68:50:BD:C0:7B:AA:DE:C1:F1:3A:D9:71:12:D0
Authority key identifier: 7B:7F:2A:8D:84:AF:BD:8C:33:2A:9F:4B:4E:67:09:B3:AE:7F:0A:F6
Certificate issuer:       /CN=A91656C7/serialNumber=7B7F2A8D84AFBD8C332A9F4B4E6709B3AE7F0AF6
Certificate serial:       DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e38qjYSvvYwzKp9LTmcJs65_CvY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91656C7/5451324A408311F08B03AB65C4F9AE02/e38qjYSvvYwzKp9LTmcJs65_CvY.mft
Manifest number:          D5
Signing time:             Tue 07 Jul 2026 07:54:33 +0000
Manifest this update:     Tue 07 Jul 2026 07:54:33 +0000
Manifest next update:     Tue 14 Jul 2026 07:54:33 +0000
Files and hashes:         1: e38qjYSvvYwzKp9LTmcJs65_CvY.crl (hash: 88PniyFatHep+bMM2xtSp70F1yjgDKVPEbXTqvvhtIQ=)
                          2: 0930CE00408411F0A6916727C4F9AE02.roa (hash: 5e7uRpjp4LbTN28bWS11lUc0oDiHjTplRVP3KjeglPI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91656C7/5451324A408311F08B03AB65C4F9AE02/e38qjYSvvYwzKp9LTmcJs65_CvY.crl
                          rsync://rpki.apnic.net/member_repository/A91656C7/5451324A408311F08B03AB65C4F9AE02/e38qjYSvvYwzKp9LTmcJs65_CvY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e38qjYSvvYwzKp9LTmcJs65_CvY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 07:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 219 (0xdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91656C7, serialNumber=7B7F2A8D84AFBD8C332A9F4B4E6709B3AE7F0AF6
        Validity
            Not Before: Jul  7 07:54:33 2026 GMT
            Not After : Jul 14 07:54:33 2026 GMT
        Subject: CN=6a4cb0b9-bcc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:26:95:a1:17:8a:ae:ac:cf:a6:3b:31:ee:a7:
                    9d:38:bf:e2:8c:e1:55:6b:f0:c7:05:75:86:88:23:
                    30:09:23:a6:40:7e:99:da:38:73:f7:83:d4:4f:8c:
                    49:dc:43:10:bc:c6:7a:5c:40:64:70:cf:7e:e0:98:
                    36:34:57:8e:e7:67:5c:f3:56:7e:9a:ec:e5:6d:27:
                    ef:9c:0e:91:a4:64:1e:ff:c2:a0:bf:ad:e0:88:b6:
                    9a:eb:54:9b:73:ed:b6:b9:6b:7a:46:84:c0:65:6f:
                    6f:20:d1:9e:45:7a:65:15:37:95:96:18:7a:26:d3:
                    29:60:77:3d:d9:c7:ed:60:b0:07:b7:b2:25:37:40:
                    64:a7:eb:1d:16:39:61:b4:f3:6e:a4:93:e5:63:d8:
                    75:33:08:54:da:0b:63:40:52:4f:b4:42:9a:41:ff:
                    e2:c0:b5:e1:24:0d:47:b2:88:91:ee:38:bc:19:15:
                    a6:4e:fc:55:ce:42:41:6d:fe:70:98:10:9c:e5:52:
                    99:3d:36:dc:2b:bf:99:0f:c1:81:ae:4a:fd:99:7e:
                    f6:29:7a:70:26:0f:a9:03:10:ac:74:f7:46:fc:2e:
                    4c:13:6e:6f:00:0a:8a:b0:ca:13:9e:85:7a:ae:7b:
                    5d:f1:da:1b:b2:2d:a8:54:c8:73:bd:f3:9b:e9:0e:
                    a9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E4:14:4B:24:B3:68:50:BD:C0:7B:AA:DE:C1:F1:3A:D9:71:12:D0
            X509v3 Authority Key Identifier:
                keyid:7B:7F:2A:8D:84:AF:BD:8C:33:2A:9F:4B:4E:67:09:B3:AE:7F:0A:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91656C7/5451324A408311F08B03AB65C4F9AE02/e38qjYSvvYwzKp9LTmcJs65_CvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e38qjYSvvYwzKp9LTmcJs65_CvY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91656C7/5451324A408311F08B03AB65C4F9AE02/e38qjYSvvYwzKp9LTmcJs65_CvY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:b2:69:a3:60:5c:2d:1a:fb:ae:ed:1b:48:2c:da:70:91:18:
         56:49:90:34:8b:0e:33:3c:d5:fe:73:f2:7e:e7:09:3a:60:4d:
         ec:2f:f4:a8:5b:c6:b4:e8:32:4e:cd:64:d9:e4:2a:40:cc:cd:
         6e:88:91:12:50:59:5d:e4:d1:75:ae:b5:a2:42:0e:67:96:c9:
         35:03:09:50:f8:05:e0:72:05:e1:0f:52:a3:ae:c5:bc:46:56:
         46:09:ba:91:41:61:60:42:d3:59:9c:d4:84:5f:e0:34:eb:cf:
         2b:e3:c4:13:69:4f:3e:76:bc:c0:7d:32:43:27:c7:4d:53:27:
         83:99:17:dd:ef:42:20:a0:d8:fe:94:50:ce:bb:b9:47:5a:f2:
         5c:69:35:13:1c:94:cd:9b:40:41:f0:1f:e5:3e:a5:12:ce:a2:
         58:84:af:13:b2:6e:1b:56:79:cd:7e:bf:45:22:df:c9:e3:24:
         7b:64:56:91:30:d4:4c:67:ef:c0:9d:85:03:fc:36:19:ed:38:
         d9:4d:4a:2b:48:70:9b:1f:07:08:be:ff:75:23:c4:6d:7f:e4:
         cd:d6:94:a5:40:ef:22:93:c2:10:85:42:13:18:73:9f:60:b7:
         55:52:0b:12:c9:97:72:b6:89:0f:33:6d:82:91:3e:b4:26:18:
         d0:74:e2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 20:45:14 2026 by rpki-client