Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9181C93/6D0F640E619711EEA62A3676C4F9AE02/5zsrW0iY5HX_6GmyTTSFzsh90Us.mft
File:                     5zsrW0iY5HX_6GmyTTSFzsh90Us.mft (raw, json)
Hash identifier:          B5NTZUdgtKkL+u5NJuMN8ItpngYEPHIF99xeDPsG0j8=
Subject key identifier:   91:59:D7:04:4F:14:48:C0:FF:5C:EA:AD:91:12:AE:2F:6A:FE:E5:4C
Authority key identifier: E7:3B:2B:5B:48:98:E4:75:FF:E8:69:B2:4D:34:85:CE:C8:7D:D1:4B
Certificate issuer:       /CN=A9181C93/serialNumber=E73B2B5B4898E475FFE869B24D3485CEC87DD14B
Certificate serial:       0240
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zsrW0iY5HX_6GmyTTSFzsh90Us.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181C93/6D0F640E619711EEA62A3676C4F9AE02/5zsrW0iY5HX_6GmyTTSFzsh90Us.mft
Manifest number:          0238
Signing time:             Wed 07 Oct 2026 03:02:23 +0000
Manifest this update:     Wed 07 Oct 2026 03:02:23 +0000
Manifest next update:     Wed 14 Oct 2026 03:02:23 +0000
Files and hashes:         1: 5zsrW0iY5HX_6GmyTTSFzsh90Us.crl (hash: 1DKUCj/L+h/Gsk+tdGMwEXg8ozBqc8Fdbn+Ks1xDEE4=)
                          2: A2ED9CA2619D11EE8699DD20C4F9AE02.roa (hash: +lWWO9i+47FRbNqWoktdoiVNQPkrt6DN94tfbAGRugY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181C93/6D0F640E619711EEA62A3676C4F9AE02/5zsrW0iY5HX_6GmyTTSFzsh90Us.crl
                          rsync://rpki.apnic.net/member_repository/A9181C93/6D0F640E619711EEA62A3676C4F9AE02/5zsrW0iY5HX_6GmyTTSFzsh90Us.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zsrW0iY5HX_6GmyTTSFzsh90Us.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 03:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 576 (0x240)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181C93, serialNumber=E73B2B5B4898E475FFE869B24D3485CEC87DD14B
        Validity
            Not Before: Oct  7 03:02:23 2026 GMT
            Not After : Oct 14 03:02:23 2026 GMT
        Subject: CN=6ac5b63f-e5b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ff:19:2f:84:ca:36:56:24:3c:ae:c4:8e:ba:
                    5c:ef:e9:97:dc:c0:29:16:63:8b:19:3c:8b:dd:f2:
                    57:15:1b:31:03:89:a2:99:d0:0e:1c:8b:d2:3a:66:
                    f9:0e:04:99:cc:15:31:c8:4e:97:48:23:be:74:b3:
                    11:c2:d8:cf:30:ee:11:0d:cd:53:0d:2c:94:a9:14:
                    28:46:db:08:34:a1:2c:6c:e9:38:ce:32:db:2c:07:
                    86:e1:d2:1c:4a:d5:2d:07:3d:46:51:5b:db:08:f9:
                    a8:a4:ea:33:32:72:38:81:61:1a:b2:39:ee:0e:3c:
                    4e:51:9d:26:c2:6d:e0:64:09:43:70:d0:2c:48:11:
                    02:77:24:bc:d1:40:32:5d:7e:a5:90:da:b0:4b:fd:
                    7e:83:41:1b:a3:5b:b1:ff:1d:e0:90:30:51:51:5d:
                    c2:4a:f5:10:88:04:ee:4d:60:6a:b6:ea:9c:be:27:
                    e8:fb:36:de:9c:0d:bf:f2:8f:56:44:02:6e:66:be:
                    e5:74:18:e5:b6:b0:4b:60:bc:fa:51:03:db:d8:ba:
                    79:f8:1c:a6:0d:66:86:41:b1:15:20:86:9f:82:e3:
                    83:8b:ed:8e:05:2b:4e:50:53:ab:e5:9e:02:0d:b4:
                    1b:f2:aa:13:a4:9c:66:64:bf:30:b7:31:57:bc:a3:
                    2d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:59:D7:04:4F:14:48:C0:FF:5C:EA:AD:91:12:AE:2F:6A:FE:E5:4C
            X509v3 Authority Key Identifier:
                keyid:E7:3B:2B:5B:48:98:E4:75:FF:E8:69:B2:4D:34:85:CE:C8:7D:D1:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181C93/6D0F640E619711EEA62A3676C4F9AE02/5zsrW0iY5HX_6GmyTTSFzsh90Us.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zsrW0iY5HX_6GmyTTSFzsh90Us.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181C93/6D0F640E619711EEA62A3676C4F9AE02/5zsrW0iY5HX_6GmyTTSFzsh90Us.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:ef:83:2e:48:0d:af:89:b7:2d:04:d3:b3:3f:70:5d:0c:be:
         63:0c:69:73:2d:3a:70:20:01:80:c9:ba:31:e5:cd:98:1b:b3:
         6d:c5:e9:c2:13:a3:b4:f0:0f:bb:e4:3b:48:e2:8d:37:36:d7:
         11:50:70:69:4b:ac:d7:a3:60:b5:f6:fe:07:a0:6d:b6:5e:58:
         d0:e6:e1:4d:a3:88:c2:89:1d:8f:c8:53:b0:55:a0:9b:05:ca:
         db:68:be:2c:54:30:c2:ef:67:1c:b9:41:05:00:3b:44:25:51:
         43:ec:8b:95:f9:79:2e:e2:02:3f:e2:be:8f:cd:6d:69:17:5d:
         0d:9e:8f:c0:12:07:3f:43:4e:ed:83:23:b4:19:19:ab:e8:0a:
         a7:1b:c7:a3:90:f8:ed:bc:71:48:84:ce:3b:b4:f3:44:d7:9c:
         d4:ad:45:d2:a6:74:65:57:28:98:5f:a5:e6:b3:ca:b0:67:8e:
         c4:c3:e6:a4:e4:0b:87:5a:e0:e6:92:04:87:06:2a:33:3b:53:
         0a:f3:08:90:9e:88:b0:13:78:ff:d7:29:35:9a:71:c5:5f:0d:
         30:47:db:d8:d9:19:c6:32:a3:8c:22:92:2a:73:1b:8a:03:44:
         85:fd:84:f0:c5:19:29:16:c6:e2:66:49:03:0a:27:de:68:46:
         65:40:44:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 13:15:48 2026 by rpki-client