Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft
File:                     5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft (raw, json)
Hash identifier:          12fJ0C/+bH9utE+WMejuO4xK1CszPGWGdY2n9w6YiCI=
Subject key identifier:   3A:BC:17:A8:E5:65:C8:1B:39:7B:D9:80:31:28:33:C5:B4:68:C4:62
Authority key identifier: E5:18:E9:48:15:C4:6D:7D:8E:6F:EF:4E:BC:3D:18:DF:0E:21:F8:36
Certificate issuer:       /CN=A9183DB7/serialNumber=E518E94815C46D7D8E6FEF4EBC3D18DF0E21F836
Certificate serial:       0EFC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft
Manifest number:          0EDF
Signing time:             Tue 06 Oct 2026 17:45:50 +0000
Manifest this update:     Tue 06 Oct 2026 17:45:49 +0000
Manifest next update:     Tue 13 Oct 2026 17:45:49 +0000
Files and hashes:         1: 5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl (hash: vedo9Ll8309zeeuyY0V27C/6aDniSSK/FXINh8aOFLw=)
                          2: 6A5EC93A70DE11EC8B944928C4F9AE02.roa (hash: zDVZOx/RnTHyqu+JHRSyRqE5JFgxRqECtSMYFaFDkBc=)
                          3: 6B7E8FC670DE11EC8B944928C4F9AE02.roa (hash: CZD8DnkvSuecJc1rAO4JQy1E4lxowJK/FQipvSL/+xU=)
                          4: 9F14D15E70DB11ECACCABD21C4F9AE02.roa (hash: pUVWoeWAUERXbgaMgmwGhCNGaQUSTJhJ6tnKgpGaDus=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl
                          rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 17:45:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3836 (0xefc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183DB7, serialNumber=E518E94815C46D7D8E6FEF4EBC3D18DF0E21F836
        Validity
            Not Before: Oct  6 17:45:49 2026 GMT
            Not After : Oct 13 17:45:49 2026 GMT
        Subject: CN=6ac533ce-b788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1c:e2:ba:b9:6f:48:d2:ae:3b:a2:1b:47:7e:
                    ac:be:56:04:53:2a:c8:a9:db:e3:f8:a9:64:04:b8:
                    46:75:22:8e:d3:be:24:3a:7a:c9:11:89:0e:b5:e6:
                    62:83:e2:e0:2c:b2:ec:d6:b9:cb:58:8a:d9:58:13:
                    d7:c7:fa:72:0e:55:0a:70:02:ff:51:bc:24:a2:cc:
                    18:ff:ab:42:d9:55:3d:a6:08:1d:07:4d:e7:80:c8:
                    70:a6:25:23:1f:d3:82:15:4c:a7:83:86:7e:18:c6:
                    6f:4f:ad:3f:3a:b6:29:54:72:37:05:7e:38:7e:69:
                    a3:b4:ad:bd:2f:e6:81:96:c7:6e:80:3d:ec:f5:c0:
                    88:cb:16:22:b9:fb:e8:b1:f2:0d:b8:cb:36:18:7d:
                    8e:e7:d3:38:da:77:b9:6a:39:f2:a7:e9:47:88:fc:
                    79:af:46:01:b7:12:72:c9:d4:86:07:99:3f:7d:f3:
                    91:3b:92:95:81:44:2d:7c:18:66:af:60:18:8b:13:
                    7d:d1:8c:94:cb:54:c8:05:60:29:4f:f6:48:0f:f5:
                    74:76:5b:29:33:f9:b5:ac:74:b4:98:87:6d:b5:ae:
                    ea:86:10:84:83:57:c9:5c:d4:ec:49:ac:ed:ca:2a:
                    e8:52:47:8c:64:40:06:35:ed:2f:a3:87:2a:b7:65:
                    62:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:BC:17:A8:E5:65:C8:1B:39:7B:D9:80:31:28:33:C5:B4:68:C4:62
            X509v3 Authority Key Identifier:
                keyid:E5:18:E9:48:15:C4:6D:7D:8E:6F:EF:4E:BC:3D:18:DF:0E:21:F8:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:d3:0b:d7:d3:35:66:b1:33:73:a5:be:b8:84:d7:a3:56:97:
         41:49:f8:78:05:81:7f:02:f2:76:87:ad:65:15:48:d5:9b:51:
         eb:25:93:88:62:e3:b9:c2:cf:be:b7:4e:93:e9:d6:fd:5a:11:
         7e:5b:29:e3:3f:38:13:29:5a:bb:48:e9:4d:9d:c7:8c:61:6e:
         19:29:79:1e:e4:03:a6:db:4d:77:92:a6:ee:63:21:fa:09:fd:
         76:3f:12:32:1f:b7:82:20:29:c2:8c:20:ea:26:3d:c7:ed:8f:
         0f:b0:10:75:32:c6:ee:10:ea:3d:61:bd:17:9f:2c:73:27:72:
         d1:54:5b:07:9b:27:1a:65:cb:38:38:a6:b0:43:1f:17:4c:d5:
         02:ca:45:fe:60:35:1d:0a:3b:e5:bc:58:2e:99:a7:a3:9e:aa:
         a0:1a:11:17:92:3e:a1:62:d4:07:29:84:bb:ce:22:13:7e:59:
         fa:cd:5e:23:aa:b9:62:d7:77:e1:f3:5b:89:62:e4:14:26:c9:
         a2:1e:ac:bf:d2:5a:9b:22:9d:4d:fd:46:a5:63:d0:79:f9:50:
         77:a1:0d:3f:c8:72:5b:41:4d:83:8b:3e:ca:ac:f0:1a:8a:af:
         1c:27:d8:b6:3b:86:96:01:3c:4b:15:29:90:3f:65:8c:7b:3f:
         c9:04:dc:b4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODNEQjcxMTAvBgNVBAUTKEU1MThFOTQ4MTVDNDZEN0Q4RTZGRUY0RUJDM0QxOERG
MEUyMUY4MzYwHhcNMjYxMDA2MTc0NTQ5WhcNMjYxMDEzMTc0NTQ5WjAYMRYwFAYD
VQQDEw02YWM1MzNjZS1iNzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyhziurlvSNKuO6IbR36svlYEUyrIqdvj+KlkBLhGdSKO074kOnrJEYkOteZi
g+LgLLLs1rnLWIrZWBPXx/pyDlUKcAL/UbwkoswY/6tC2VU9pggdB03ngMhwpiUj
H9OCFUyng4Z+GMZvT60/OrYpVHI3BX44fmmjtK29L+aBlsdugD3s9cCIyxYiufvo
sfINuMs2GH2O59M42ne5ajnyp+lHiPx5r0YBtxJyydSGB5k/ffORO5KVgUQtfBhm
r2AYixN90YyUy1TIBWApT/ZID/V0dlspM/m1rHS0mIdtta7qhhCEg1fJXNTsSazt
yiroUkeMZEAGNe0vo4cqt2ViiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDq8F6jl
ZcgbOXvZgDEoM8W0aMRiMB8GA1UdIwQYMBaAFOUY6UgVxG19jm/vTrw9GN8OIfg2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0RCNy8wRjM3NTk5RUI1
MjExMUU5OEQ4QkFDNTJDNEY5QUUwMi81UmpwU0JYRWJYMk9iLTlPdkQwWTN3NGgt
RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVSanBTQlhFYlgyT2ItOU92RDBZM3c0aC1EWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
M0RCNy8wRjM3NTk5RUI1MjExMUU5OEQ4QkFDNTJDNEY5QUUwMi81UmpwU0JYRWJY
Mk9iLTlPdkQwWTN3NGgtRFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqNML19M1ZrEzc6W+uITXo1aXQUn4eAWBfwLydoetZRVI1ZtR6yWTiGLjucLP
vrdOk+nW/VoRflsp4z84Eylau0jpTZ3HjGFuGSl5HuQDpttNd5Km7mMh+gn9dj8S
Mh+3giApwowg6iY9x+2PD7AQdTLG7hDqPWG9F58scydy0VRbB5snGmXLODimsEMf
F0zVAspF/mA1HQo75bxYLpmno56qoBoRF5I+oWLUBymEu84iE35Z+s1eI6q5Ytd3
4fNbiWLkFCbJoh6sv9JamyKdTf1GpWPQeflQd6ENP8hyW0FNg4s+yqzwGoqvHCfY
tjuGlgE8SxUpkD9ljHs/yQTctA==
-----END CERTIFICATE-----
Generated at Wed Oct 7 13:05:29 2026 by rpki-client