Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft
File:                     5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft (raw, json)
Hash identifier:          Mlld87+h3shkzfmNpbDu7jyPbVMRVc1jNtEmnIw/qro=
Subject key identifier:   2E:15:9F:F5:BF:DF:9F:62:47:40:37:59:89:D6:C5:BF:56:B4:36:82
Authority key identifier: E5:67:2B:BF:18:C4:CF:EB:D3:F4:72:D1:3B:48:77:13:72:D3:4E:DF
Certificate issuer:       /CN=A9187313/serialNumber=E5672BBF18C4CFEBD3F472D13B48771372D34EDF
Certificate serial:       1AA7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft
Manifest number:          1A2E
Signing time:             Wed 12 Aug 2026 16:14:49 +0000
Manifest this update:     Wed 12 Aug 2026 16:14:49 +0000
Manifest next update:     Wed 19 Aug 2026 16:14:49 +0000
Files and hashes:         1: 5WcrvxjEz-vT9HLRO0h3E3LTTt8.crl (hash: 9jluwBkThaSd6wQ2wCVmI6hgtz1o5/1vzAuBCZapdU4=)
                          2: 97F31854777011E7BF7EED10C4F9AE02.roa (hash: YkCRNqQCS8jVIHV+a7IJFYqulDisT+tl/2C+71L8pZ0=)
                          3: 9787989A777011E7BF7EED10C4F9AE02.roa (hash: cMSDuBT3kjpyehv0+lJ2MFU5CMopK6TVvtYRY4GXdzU=)
                          4: 98E572FC777011E7BF7EED10C4F9AE02.roa (hash: oitbivbdUYSMdXh7VLPNdxq472u6AbzxgvTVwLHL+so=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.crl
                          rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Aug 2026 16:14:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6823 (0x1aa7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187313, serialNumber=E5672BBF18C4CFEBD3F472D13B48771372D34EDF
        Validity
            Not Before: Aug 12 16:14:49 2026 GMT
            Not After : Aug 19 16:14:49 2026 GMT
        Subject: CN=6a7c9bf9-54a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:19:4b:25:b6:7e:50:83:1d:1c:b4:98:30:f3:
                    62:d4:b3:b2:9f:3d:a4:61:eb:7f:81:11:31:b3:6d:
                    ab:fc:5c:5f:94:47:a8:04:49:7d:73:cf:6c:a2:79:
                    2b:ef:4b:52:4c:46:2d:36:3a:94:18:bc:7f:31:8c:
                    ef:91:27:0d:6e:9d:67:26:41:72:3f:3c:fd:d5:4b:
                    c2:dd:86:18:8b:d9:23:18:9a:88:5d:83:26:1c:c4:
                    68:11:9e:f3:1a:60:e3:e5:c2:b0:1b:26:ed:46:e6:
                    2e:3e:2e:d3:c2:29:57:d1:97:4d:42:be:51:9a:97:
                    b9:b9:61:e5:e0:18:43:9a:a3:fd:ec:7c:74:31:c9:
                    91:96:7b:b8:66:d4:20:2d:2e:9f:3e:71:fa:f7:f8:
                    97:65:03:2f:3e:45:42:fd:c7:39:6b:10:8e:78:d7:
                    2a:f1:8a:b9:21:e2:ef:21:a1:27:70:02:b4:65:c4:
                    db:ab:37:0e:08:7f:f4:dc:dc:c0:1e:78:06:bd:45:
                    39:d0:b5:e7:1b:bb:ae:1c:27:ce:dd:44:d7:a8:53:
                    ae:b4:0f:39:8e:14:4a:f6:80:fa:05:9b:31:6c:86:
                    9a:00:ad:35:ea:e3:2c:00:97:b3:32:c7:6c:51:f6:
                    1b:b5:6d:c5:6d:98:81:f5:ba:8a:2a:a9:fd:60:1f:
                    62:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:15:9F:F5:BF:DF:9F:62:47:40:37:59:89:D6:C5:BF:56:B4:36:82
            X509v3 Authority Key Identifier:
                keyid:E5:67:2B:BF:18:C4:CF:EB:D3:F4:72:D1:3B:48:77:13:72:D3:4E:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:ca:2f:21:70:a3:39:ab:5e:23:ff:3b:f7:84:b0:0a:1e:e3:
         46:32:c9:a1:74:6d:24:43:a3:26:4d:05:21:dc:31:13:86:da:
         75:35:df:d0:0e:8b:52:56:24:ae:e7:eb:9a:fd:c2:d6:9b:67:
         f7:b6:79:e2:67:b1:52:6e:76:7b:be:59:d8:22:cb:19:a4:48:
         16:7d:9a:1f:2b:f0:9b:65:04:81:12:b5:a4:d1:79:02:38:04:
         e2:7c:0b:2c:c4:e4:41:50:bb:18:00:03:b3:ab:c9:12:e6:5b:
         be:df:c7:51:b2:72:70:48:ec:6f:9b:59:8e:22:13:6d:de:71:
         e6:b1:2b:6d:d2:c6:30:cb:5d:ed:4c:ae:31:38:40:83:eb:fb:
         52:aa:a3:b2:63:01:e9:e8:6b:ab:df:ff:80:4e:7c:ec:da:48:
         d7:70:e9:61:e1:80:05:cc:ae:01:4b:4f:60:ef:d6:3c:f7:75:
         df:52:f4:60:09:27:4c:8c:d8:13:ea:bf:a8:44:d5:4a:2f:c0:
         8d:1f:35:4a:da:b4:10:b9:d2:1c:43:89:ca:3c:c4:45:b1:43:
         81:d6:7c:7e:22:23:83:63:e5:e5:ee:e2:4f:77:68:41:2f:4f:
         26:ff:5d:bb:06:54:cf:72:6c:52:7c:81:8b:bd:88:a9:4a:06:
         d1:37:ae:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 15:55:52 2026 by rpki-client