Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft
File:                     s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft (raw, json)
Hash identifier:          atIuuNn9oQvDBJTc3bNpX5woCOyvBH6KQCUM5NKRuVQ=
Subject key identifier:   72:76:56:7E:76:CF:54:E4:A7:70:59:51:07:30:30:B5:6F:0E:D4:76
Authority key identifier: B3:99:2F:0D:49:BA:F6:A3:6F:DA:65:8E:5B:45:94:69:52:1E:5B:44
Certificate issuer:       /CN=A917530D/serialNumber=B3992F0D49BAF6A36FDA658E5B459469521E5B44
Certificate serial:       0213
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft
Manifest number:          0201
Signing time:             Fri 11 Sep 2026 03:23:31 +0000
Manifest this update:     Fri 11 Sep 2026 03:23:30 +0000
Manifest next update:     Fri 18 Sep 2026 03:23:30 +0000
Files and hashes:         1: s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl (hash: oDEDhMCpSPJOuyJ674TwG6VS9aZchnQLyDSMsUFkUrw=)
                          2: A97CBD42A06611EFA888B57DC4F9AE02.roa (hash: 4V1R4yBz9L+Ygkp9Jd1O9idd1/44LPhkeQiPf1Qbp1Q=)
                          3: 762CACD0B04311EF95390327C4F9AE02.roa (hash: cvBldBadb8nJSATgwrsmCmmppZB2HYAM+GSD2SpFaCg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl
                          rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 03:23:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 531 (0x213)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917530D, serialNumber=B3992F0D49BAF6A36FDA658E5B459469521E5B44
        Validity
            Not Before: Sep 11 03:23:30 2026 GMT
            Not After : Sep 18 03:23:30 2026 GMT
        Subject: CN=6aa37433-89a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:21:82:86:94:5f:20:31:d2:a3:35:4d:b2:3d:
                    30:1d:aa:f3:89:d4:2c:81:50:e4:51:84:85:1d:dc:
                    78:31:65:f8:83:62:c9:65:33:79:d5:1e:26:a3:7e:
                    61:dc:a6:7c:59:4c:c6:8a:82:27:36:d8:18:ec:cf:
                    f3:35:a7:4b:b9:50:65:a8:d9:d6:2f:bc:10:d1:2d:
                    d4:1f:17:aa:e9:c8:7f:73:9a:b8:72:80:66:d6:f1:
                    98:54:0f:9d:ac:2b:2e:e8:45:19:54:40:78:d3:22:
                    3b:00:44:18:fa:70:95:fc:a5:51:46:8a:a8:d9:a7:
                    d7:f6:fe:17:53:96:c4:44:5d:30:74:04:b3:24:56:
                    13:90:dd:8b:c5:51:8a:81:3a:e6:f6:8c:64:1b:49:
                    a1:3a:e9:a7:3d:69:b5:e6:75:9a:3b:9c:aa:1d:59:
                    c9:eb:d5:f4:c9:c1:8b:b7:20:bd:3a:a7:16:9f:ec:
                    87:2b:b7:c8:ec:05:00:8a:94:43:73:7f:2d:d7:34:
                    57:39:ae:9e:17:23:f5:23:6d:e8:ba:09:7d:84:0c:
                    1e:87:a9:87:2c:12:b5:d0:fd:b6:04:f7:f0:4b:05:
                    07:a4:64:df:a0:d5:e7:f0:de:60:c9:b9:b7:d3:8b:
                    4d:e5:89:a6:61:b7:97:94:42:6b:ce:d5:a2:25:43:
                    fb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:76:56:7E:76:CF:54:E4:A7:70:59:51:07:30:30:B5:6F:0E:D4:76
            X509v3 Authority Key Identifier:
                keyid:B3:99:2F:0D:49:BA:F6:A3:6F:DA:65:8E:5B:45:94:69:52:1E:5B:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:0f:85:0b:5d:51:d3:80:3b:5d:b6:0c:8e:86:2b:14:8a:38:
         d9:a1:6c:7f:74:55:4e:95:c7:a9:c8:91:01:ba:c7:98:d6:8a:
         ab:0e:5c:35:3d:9d:4b:3a:a4:5a:e0:9d:01:a5:89:1d:74:75:
         63:9a:f5:0b:f9:ca:ae:fb:d7:a5:dd:19:e0:fa:67:02:89:a7:
         23:c8:d5:91:c5:fb:96:0a:ad:88:12:b1:5b:a8:bf:f4:fe:c5:
         aa:3d:f2:60:d8:a8:f1:fe:62:12:a1:f7:a7:c8:78:16:9f:4b:
         e8:3b:55:51:34:06:bc:8f:6b:4b:48:2a:a3:19:7a:97:74:95:
         5a:0d:3b:ea:b5:80:48:6e:b9:bc:de:4a:ec:5d:6b:64:c8:15:
         bf:f9:f0:a5:e3:4b:25:e1:a4:3d:be:36:bf:bb:f6:59:f2:a0:
         20:67:ca:89:43:83:3b:23:c8:0f:d4:26:77:6e:13:27:5b:5f:
         26:67:ad:f3:06:eb:86:3d:14:49:68:2a:19:70:e6:4a:e7:6b:
         8e:d7:b7:a4:38:aa:27:d3:90:40:41:81:8c:6b:e1:e4:01:dd:
         a2:49:6d:d4:51:d6:e9:22:9b:9c:ef:43:5e:45:fa:86:cd:58:
         e0:2b:b1:9e:84:13:fa:03:51:05:32:9f:da:49:99:8a:3b:b9:
         97:4c:57:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:30:09 2026 by rpki-client