Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft
File:                     5iFGnNWlePlHq0frDs6Ik5uH6_s.mft (raw, json)
Hash identifier:          aJiV2VDySZVbGokOEYGm4sSrquxYRylyeUW7xxnFIms=
Subject key identifier:   24:FB:EA:AE:42:4F:26:74:0C:01:EE:51:22:6E:7E:CB:BB:B8:B0:5C
Authority key identifier: E6:21:46:9C:D5:A5:78:F9:47:AB:47:EB:0E:CE:88:93:9B:87:EB:FB
Certificate issuer:       /CN=A9170982/serialNumber=E621469CD5A578F947AB47EB0ECE88939B87EBFB
Certificate serial:       04A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iFGnNWlePlHq0frDs6Ik5uH6_s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft
Manifest number:          0474
Signing time:             Sat 15 Aug 2026 00:09:12 +0000
Manifest this update:     Sat 15 Aug 2026 00:09:12 +0000
Manifest next update:     Sat 22 Aug 2026 00:09:12 +0000
Files and hashes:         1: 5iFGnNWlePlHq0frDs6Ik5uH6_s.crl (hash: SH+Fblwn0d76FWVH4ccwn2t/QNKgn1Ow791MngL4WtA=)
                          2: C8165660822F11EEABA7D533C4F9AE02.roa (hash: TWI7/AHi80APjR4S5j80I9E6yRO+kebGNcad/BHi2Mc=)
                          3: 2B2CF35A35A411ED89F95974C4F9AE02.roa (hash: 8jF/NpHwWErBgGhdC58vIaXRoe97OZ3zIJ5DPfjZVz4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.crl
                          rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iFGnNWlePlHq0frDs6Ik5uH6_s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Aug 2026 00:09:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1185 (0x4a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170982, serialNumber=E621469CD5A578F947AB47EB0ECE88939B87EBFB
        Validity
            Not Before: Aug 15 00:09:12 2026 GMT
            Not After : Aug 22 00:09:12 2026 GMT
        Subject: CN=6a7fae28-c803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:78:8d:22:35:41:40:1a:b1:a6:c1:ec:e5:b8:
                    5a:95:f5:91:4b:a8:b9:54:17:fe:62:9e:4f:34:bd:
                    e4:91:ae:1c:e6:70:2d:c6:d3:b2:f0:52:8e:8c:46:
                    8a:fd:86:78:eb:f9:e6:e8:a8:be:45:49:87:34:1e:
                    84:c4:8f:2d:35:94:78:9b:29:aa:36:a4:3f:ed:e7:
                    61:62:3e:14:e9:3f:d6:5d:a6:89:eb:78:d6:d2:4e:
                    a6:c1:4a:76:70:77:ae:c1:02:d8:b7:8a:3f:b7:5e:
                    e0:02:7f:23:39:73:71:56:3c:0a:cc:12:37:b4:50:
                    d1:7e:b5:78:65:09:69:5c:50:04:0f:2b:0c:5c:6d:
                    3f:90:b8:55:de:e5:30:ca:fe:ea:d2:dc:3c:97:87:
                    21:14:e2:3e:ad:b5:d7:61:50:27:b8:21:cb:bd:37:
                    2d:32:ba:8d:14:39:0b:8f:a7:aa:4f:a2:02:fc:7a:
                    60:63:57:0b:45:62:c7:20:60:60:ce:82:a6:a3:35:
                    fc:21:16:e1:6e:47:f5:74:f3:2b:43:58:78:d9:f3:
                    76:e8:e6:ba:b8:55:97:23:1f:e7:ec:10:7b:89:a7:
                    ec:7f:c6:67:20:de:fd:fe:5b:db:b1:2b:37:c1:a3:
                    04:85:3a:30:c2:fc:31:6e:8f:28:62:34:c8:1c:2f:
                    04:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:FB:EA:AE:42:4F:26:74:0C:01:EE:51:22:6E:7E:CB:BB:B8:B0:5C
            X509v3 Authority Key Identifier:
                keyid:E6:21:46:9C:D5:A5:78:F9:47:AB:47:EB:0E:CE:88:93:9B:87:EB:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iFGnNWlePlHq0frDs6Ik5uH6_s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:29:31:60:a0:bd:c9:bb:7a:31:22:ca:38:6b:00:c2:eb:b3:
         89:0d:60:5a:a9:3b:60:c1:36:32:29:d1:f7:b4:7f:02:88:c4:
         58:b6:fd:51:27:d9:c5:e3:41:5f:a5:99:2b:72:da:41:24:29:
         dd:df:01:57:3c:6e:9f:d3:b9:dc:a8:8a:72:ca:46:fe:fe:f3:
         e6:cf:a8:38:9c:99:cb:55:3f:4e:b6:2d:4e:a9:58:9c:4c:1e:
         5d:bc:9c:35:4d:9e:6b:22:74:f3:fe:85:24:44:c4:67:c2:84:
         ab:5f:fb:ff:57:7f:f6:ad:fa:91:f2:f8:dd:59:cd:1f:ed:40:
         d5:2b:91:eb:b8:2f:f0:5b:d3:25:d1:df:d5:59:17:28:98:f5:
         6e:e6:88:fc:db:8e:79:79:1d:74:06:93:a7:91:ab:9f:2d:36:
         13:30:95:b0:07:36:c1:c8:d7:c4:7e:32:1c:15:53:ef:aa:83:
         bd:0c:2f:f5:d5:56:be:ec:12:f9:42:a8:79:8a:c2:81:10:7e:
         e4:64:6c:25:e0:f9:06:28:c5:ac:e8:7d:91:73:43:8d:ee:fb:
         73:e8:1d:09:85:71:4f:0f:46:5d:77:2d:dc:58:ad:84:82:c8:
         05:f3:67:81:c8:14:4c:60:00:4e:74:a8:37:f3:ed:de:31:67:
         2e:94:f6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:40:51 2026 by rpki-client