Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D82E/E73132280B2011F1A2EFC93F3E3D8C67/_5Lsi9gN-r3TbmPJr0ynqG3ealc.mft
File:                     _5Lsi9gN-r3TbmPJr0ynqG3ealc.mft (raw, json)
Hash identifier:          f+crIhoYdvEBQh3kAegd1+BDqppy5gMskCP6+oRK7h4=
Subject key identifier:   F0:41:D5:FA:A1:76:87:2D:EE:B0:D2:4E:32:25:84:19:D0:D4:1C:CC
Authority key identifier: FF:92:EC:8B:D8:0D:FA:BD:D3:6E:63:C9:AF:4C:A7:A8:6D:DE:6A:57
Certificate issuer:       /CN=A917D82E/serialNumber=FF92EC8BD80DFABDD36E63C9AF4CA7A86DDE6A57
Certificate serial:       6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5Lsi9gN-r3TbmPJr0ynqG3ealc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D82E/E73132280B2011F1A2EFC93F3E3D8C67/_5Lsi9gN-r3TbmPJr0ynqG3ealc.mft
Manifest number:          6A
Signing time:             Wed 19 Aug 2026 08:49:25 +0000
Manifest this update:     Wed 19 Aug 2026 08:49:24 +0000
Manifest next update:     Wed 26 Aug 2026 08:49:24 +0000
Files and hashes:         1: _5Lsi9gN-r3TbmPJr0ynqG3ealc.crl (hash: Ef01MtkCP4Hlc0bcxnoTBAPxN01Sa65ixMwHV1h7c3A=)
                          2: F98F88FA7B4D11F1B405B1A597A30FBC.roa (hash: BpqLsVApY9HvMtOZTXGvPmVaZLx/kdyWheeXJkSjNHg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D82E/E73132280B2011F1A2EFC93F3E3D8C67/_5Lsi9gN-r3TbmPJr0ynqG3ealc.crl
                          rsync://rpki.apnic.net/member_repository/A917D82E/E73132280B2011F1A2EFC93F3E3D8C67/_5Lsi9gN-r3TbmPJr0ynqG3ealc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5Lsi9gN-r3TbmPJr0ynqG3ealc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 08:49:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111 (0x6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D82E, serialNumber=FF92EC8BD80DFABDD36E63C9AF4CA7A86DDE6A57
        Validity
            Not Before: Aug 19 08:49:24 2026 GMT
            Not After : Aug 26 08:49:24 2026 GMT
        Subject: CN=6a856e15-15bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cc:51:e2:cc:5c:37:ab:7b:20:96:a2:49:65:
                    4f:b5:e9:f7:73:e9:40:1d:2a:13:ca:fc:b1:fd:89:
                    3c:6d:ee:77:75:5d:97:e2:0c:e8:76:6a:40:0d:5b:
                    55:a9:83:1f:22:f0:d6:29:29:78:8c:c2:28:77:88:
                    18:bf:d6:6c:e0:57:90:24:82:11:4c:aa:81:bc:b7:
                    f4:1d:c7:67:20:87:50:c7:bb:bb:0f:49:26:7d:a2:
                    33:40:35:c2:64:f7:3b:d6:2b:38:7f:b6:66:1d:f4:
                    d0:77:d1:9b:a0:c0:66:50:3c:46:dd:6b:ba:d1:47:
                    6d:e8:21:d8:69:41:16:ee:8a:e5:6d:c1:4f:3e:a7:
                    ff:c5:37:14:26:ee:77:b5:a1:23:5a:45:df:e4:d2:
                    90:91:7b:b3:03:80:1b:c0:a8:a7:10:2b:35:c0:89:
                    ef:f9:c7:51:8d:41:36:15:4c:49:49:f4:90:af:68:
                    3d:2d:d4:7b:77:8e:0f:c1:11:e6:dd:a9:a6:44:a6:
                    90:8e:e5:04:bc:46:b1:a3:de:ef:0f:be:c3:ad:78:
                    ce:9c:8b:d8:5a:50:1b:12:b7:f6:5a:c0:b6:be:32:
                    7b:a8:c6:3d:c3:7a:c2:fa:c9:21:45:b8:b8:13:6d:
                    54:5f:40:21:37:2f:5b:10:58:1b:ac:9a:d9:27:a0:
                    e9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:41:D5:FA:A1:76:87:2D:EE:B0:D2:4E:32:25:84:19:D0:D4:1C:CC
            X509v3 Authority Key Identifier:
                keyid:FF:92:EC:8B:D8:0D:FA:BD:D3:6E:63:C9:AF:4C:A7:A8:6D:DE:6A:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D82E/E73132280B2011F1A2EFC93F3E3D8C67/_5Lsi9gN-r3TbmPJr0ynqG3ealc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5Lsi9gN-r3TbmPJr0ynqG3ealc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D82E/E73132280B2011F1A2EFC93F3E3D8C67/_5Lsi9gN-r3TbmPJr0ynqG3ealc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:63:87:6a:1f:78:fa:bd:9d:e0:f1:a2:83:a8:0a:82:fa:ff:
         88:69:c0:42:04:b0:d3:bc:df:ff:ec:62:07:af:c4:ac:37:7c:
         7d:fc:f5:25:bc:6c:2f:8f:cc:7e:d5:32:1e:33:bc:0b:ef:06:
         e1:6c:6e:59:c5:e1:13:bc:98:94:6c:60:25:8d:bd:19:8a:06:
         5d:cc:d4:2c:3d:7f:f1:85:bf:6b:95:75:52:4c:fb:5f:6d:c3:
         e2:ee:48:af:eb:04:ba:b2:4c:d1:85:5e:3c:82:ce:d1:56:54:
         15:e9:e3:29:c7:82:4d:43:fe:f4:bc:e5:90:c0:3f:13:54:1e:
         2b:7a:18:1f:12:20:73:44:5d:cd:6b:e3:67:d4:d1:0f:bf:25:
         02:e6:0d:28:c2:c9:7d:bd:42:fe:d4:2a:68:14:de:ec:35:9d:
         c2:4c:73:da:b3:4f:92:47:56:7e:1d:35:9b:87:9f:18:8d:0e:
         79:f5:71:1d:91:9a:5d:ee:a2:63:28:7c:25:ab:01:b3:99:5b:
         9a:7d:51:99:57:52:ab:d5:2e:7d:bc:b0:91:ad:95:c0:5b:2c:
         ce:8f:55:ba:25:e8:cf:ce:b2:cc:7b:6d:e3:5a:ea:cb:50:92:
         9b:b8:e8:e1:07:5d:49:e1:c1:6a:0d:3f:6b:39:ff:08:52:c0:
         22:d6:a1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:51:40 2026 by rpki-client