Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft
File:                     o5hxRib4es6-X2_QHlBwGRWqfRU.mft (raw, json)
Hash identifier:          gjKz1hgvqgryBbn13R9yFqQlvzIa/hmXvjnKEgVBN98=
Subject key identifier:   E0:7B:7E:4F:A7:92:57:D4:2E:BA:81:65:2F:19:59:03:FF:CF:72:7F
Authority key identifier: A3:98:71:46:26:F8:7A:CE:BE:5F:6F:D0:1E:50:70:19:15:AA:7D:15
Certificate issuer:       /CN=A91827C5/serialNumber=A398714626F87ACEBE5F6FD01E50701915AA7D15
Certificate serial:       0158
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5hxRib4es6-X2_QHlBwGRWqfRU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft
Manifest number:          0158
Signing time:             Wed 19 Aug 2026 05:41:35 +0000
Manifest this update:     Wed 19 Aug 2026 05:41:35 +0000
Manifest next update:     Wed 26 Aug 2026 05:41:35 +0000
Files and hashes:         1: o5hxRib4es6-X2_QHlBwGRWqfRU.crl (hash: t8MjzpU9Gky+aLKsVTYHHV5VmJpLtRXqWpF24Ov2Ijw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.crl
                          rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5hxRib4es6-X2_QHlBwGRWqfRU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 05:41:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 344 (0x158)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91827C5, serialNumber=A398714626F87ACEBE5F6FD01E50701915AA7D15
        Validity
            Not Before: Aug 19 05:41:35 2026 GMT
            Not After : Aug 26 05:41:35 2026 GMT
        Subject: CN=6a85420f-a057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7f:d7:f7:de:9c:a6:1d:ee:8a:95:16:20:df:
                    7a:09:66:ab:45:7d:53:63:fb:96:69:88:e9:54:5a:
                    c8:ee:a4:45:2c:89:b9:8f:f7:a6:d8:84:af:8f:11:
                    2f:3b:75:88:a7:a4:13:d3:97:b5:67:54:ee:23:5a:
                    a1:ce:b2:e3:80:c3:38:8d:80:5e:1b:40:24:97:f3:
                    f2:8e:59:09:9d:a0:99:cf:70:39:57:8b:c6:c3:4a:
                    01:da:ee:33:e7:05:1a:4b:84:cb:d8:67:30:e6:11:
                    a0:15:7d:f8:66:e6:14:6d:2f:16:e8:1d:06:f1:e9:
                    fa:af:4e:37:d5:70:d9:56:59:ea:5d:a0:ba:68:5e:
                    a5:a7:2a:2b:f9:44:ea:95:f4:73:9b:3e:b3:c2:1f:
                    4e:87:96:eb:2a:77:bc:78:ac:d9:5f:ad:87:d7:4e:
                    29:d6:42:01:b4:b3:37:8e:3a:f2:8d:48:96:35:b9:
                    42:70:f1:38:a7:74:06:7c:13:8d:2f:f3:ae:81:2a:
                    f8:6f:7e:9d:fd:98:98:84:d9:9e:81:31:91:e8:8a:
                    98:d9:9b:88:3c:ee:42:d4:e8:35:9c:ab:b3:31:aa:
                    c6:45:ef:13:84:a0:2b:77:3e:52:f2:62:c3:3c:a7:
                    2b:6c:c8:04:54:9c:bf:c4:4b:4e:76:ca:3f:4c:c7:
                    00:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:7B:7E:4F:A7:92:57:D4:2E:BA:81:65:2F:19:59:03:FF:CF:72:7F
            X509v3 Authority Key Identifier:
                keyid:A3:98:71:46:26:F8:7A:CE:BE:5F:6F:D0:1E:50:70:19:15:AA:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5hxRib4es6-X2_QHlBwGRWqfRU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:e5:2e:96:d6:4f:05:a0:7e:4f:75:74:2b:92:73:84:b3:42:
         dd:ef:28:2f:06:12:40:0f:37:6b:b4:b5:02:a0:84:bb:a9:78:
         9f:d3:bd:c2:7b:51:e4:16:7e:24:5b:63:ab:55:eb:f1:da:05:
         85:52:af:ae:ee:64:0e:02:39:fa:ac:4f:91:51:8c:83:bf:ea:
         e0:3e:b9:69:1e:8f:78:41:20:12:36:9d:00:de:3f:6c:9c:c3:
         29:6a:be:43:03:79:53:e5:54:4a:a7:29:37:84:06:25:19:1b:
         d3:cd:08:84:74:7f:ff:25:33:50:97:d2:ce:66:d7:41:30:17:
         bf:77:a4:d2:bb:aa:14:77:ca:20:68:be:c5:4c:34:1e:09:be:
         0d:ba:8d:84:c4:86:81:61:e3:3c:ce:21:77:ec:35:a2:41:89:
         3e:15:bc:c4:20:aa:dc:b3:db:96:a8:1b:d6:5d:a4:2e:d7:b7:
         01:ad:8b:37:be:c3:c8:c9:f0:f2:4d:87:9b:7d:74:bf:98:35:
         ff:64:8e:5a:d0:ad:57:fb:14:29:05:67:94:ca:1b:5b:41:aa:
         34:f5:fa:70:3d:05:41:84:79:05:14:10:0c:b1:44:f3:d4:3e:
         0e:99:62:a0:2e:82:bb:8a:7a:78:44:4e:16:fc:12:1c:a5:d2:
         49:98:e9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:55:43 2026 by rpki-client