Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft
File:                     5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft (raw, json)
Hash identifier:          JYvCEtTlS6XBFOqU1I1ywwAd7B9/3J6nEPRARWiPPss=
Subject key identifier:   C3:67:6E:5F:CF:5B:3A:6D:B8:FE:97:B4:FE:4D:17:02:F5:FC:1D:A2
Authority key identifier: E5:18:E9:48:15:C4:6D:7D:8E:6F:EF:4E:BC:3D:18:DF:0E:21:F8:36
Certificate issuer:       /CN=A9183DB7/serialNumber=E518E94815C46D7D8E6FEF4EBC3D18DF0E21F836
Certificate serial:       0EC8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft
Manifest number:          0EAE
Signing time:             Mon 06 Jul 2026 18:03:41 +0000
Manifest this update:     Mon 06 Jul 2026 18:03:40 +0000
Manifest next update:     Mon 13 Jul 2026 18:03:40 +0000
Files and hashes:         1: 5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl (hash: JxKnwTVynjN2/riu7HKqMrjAnVqR8h/LGIxh9SfsR8g=)
                          2: 6A5EC93A70DE11EC8B944928C4F9AE02.roa (hash: 2vmyMW6TtcbaqXFP7Qp6BP+UrMdH5alLGCt5uNXx+l8=)
                          3: 6B7E8FC670DE11EC8B944928C4F9AE02.roa (hash: DEYl4xuRBtxqmhzfpUHokIt3OryoQ/FdXNVfb0S7BgA=)
                          4: 9F14D15E70DB11ECACCABD21C4F9AE02.roa (hash: xvrivgHeCdDydOD/ZktKC2lGC9vuqeY8ZsH11+NgJlU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl
                          rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Jul 2026 18:03:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3784 (0xec8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183DB7, serialNumber=E518E94815C46D7D8E6FEF4EBC3D18DF0E21F836
        Validity
            Not Before: Jul  6 18:03:40 2026 GMT
            Not After : Jul 13 18:03:40 2026 GMT
        Subject: CN=6a4bedfc-03b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3e:7b:e9:9e:49:7b:11:fd:d2:35:9d:76:c1:
                    de:63:b9:06:32:45:c6:7c:fc:01:94:39:54:15:04:
                    9a:e0:ed:fd:f6:bc:8d:18:5b:1f:be:08:bf:bc:54:
                    27:12:74:95:6b:1f:3d:f0:89:67:27:c6:42:b2:e9:
                    60:c9:b1:4a:62:73:59:e9:77:c3:13:2a:d3:d1:5b:
                    d2:53:c4:24:a1:3c:7c:4d:bb:59:03:a7:a4:31:cc:
                    a0:df:ae:1f:eb:84:f6:f1:20:52:66:f3:6c:ae:ac:
                    e6:0c:14:db:bf:51:63:7a:b4:33:23:3f:e6:72:23:
                    5a:f7:4b:1c:c6:f7:fc:ae:08:cb:94:c7:42:7a:f8:
                    0e:37:f9:b9:7a:af:1f:a5:1c:b9:b4:9a:94:70:e9:
                    16:18:c8:2c:49:18:c6:c6:c7:62:20:5c:66:49:7f:
                    4b:70:f9:03:20:05:79:1f:d3:88:94:8d:5e:fa:f8:
                    42:91:85:1e:ef:af:7c:66:87:20:f5:df:2c:18:65:
                    e5:15:36:7b:e7:bb:c3:63:8a:bf:f2:c5:30:de:6d:
                    22:a7:7f:61:76:a4:a6:53:a5:7c:50:59:43:52:7d:
                    38:aa:f6:0d:b9:0a:7e:fd:b6:dd:6e:66:64:ea:d7:
                    40:f0:56:7f:fc:34:3f:e8:d5:1b:59:7f:1a:12:b9:
                    75:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:67:6E:5F:CF:5B:3A:6D:B8:FE:97:B4:FE:4D:17:02:F5:FC:1D:A2
            X509v3 Authority Key Identifier:
                keyid:E5:18:E9:48:15:C4:6D:7D:8E:6F:EF:4E:BC:3D:18:DF:0E:21:F8:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:20:ee:c2:c4:b1:c0:48:75:b8:4f:9f:4a:5a:ed:9c:8d:f9:
         77:f9:98:d2:d0:0c:32:33:fc:ba:a8:e1:03:b2:64:3f:66:4a:
         e9:7d:56:c9:a1:89:49:52:2f:38:da:86:fa:1c:9e:38:a7:3e:
         cc:a0:ff:8b:95:de:84:7e:1c:c2:d2:9a:97:42:74:66:94:7d:
         99:98:90:52:d4:37:d0:89:11:bb:85:67:dc:70:45:6e:b0:3f:
         ce:8e:06:54:3f:57:48:69:49:1e:41:04:08:e2:d2:fe:7a:c5:
         b2:74:1e:2d:a8:ac:85:92:f9:8a:ba:18:90:7d:6b:75:2f:4f:
         71:a0:f2:76:c6:22:9f:43:cc:b3:ae:df:0b:c7:80:0b:8b:a2:
         a9:d8:ff:c9:f0:a9:08:91:06:12:de:e8:8c:91:46:d6:6c:14:
         ed:5b:83:2e:a7:da:bd:58:39:1f:94:27:90:28:40:f3:31:ec:
         4f:eb:c9:43:5f:b2:43:98:ac:9f:d7:da:2c:22:fd:a2:bb:93:
         31:7f:75:4c:86:fd:33:0a:c9:58:18:da:cc:e9:fb:68:c5:5d:
         a1:47:60:70:0e:95:fa:36:7d:d8:97:1a:36:6b:ed:ab:28:3a:
         0c:71:e5:d8:b3:02:a9:53:e1:31:6d:ac:d3:1d:c9:1a:b7:31:
         90:72:91:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 23:19:50 2026 by rpki-client