Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918FE64/1641D0DE5E3911F1B10499CF007AAC22/5-hBazlJjR8g7vTYMdsv_s3l8wE.mft
File:                     5-hBazlJjR8g7vTYMdsv_s3l8wE.mft (raw, json)
Hash identifier:          XOaef/pQMl+TWsW6rq+HbYjlNqQFt2Gt84DAIo6U/d0=
Subject key identifier:   D1:19:D7:95:AC:02:BE:FE:C4:FA:F8:F7:2B:68:17:2C:C8:65:E1:65
Authority key identifier: E7:E8:41:6B:39:49:8D:1F:20:EE:F4:D8:31:DB:2F:FE:CD:E5:F3:01
Certificate issuer:       /CN=A918FE64/serialNumber=E7E8416B39498D1F20EEF4D831DB2FFECDE5F301
Certificate serial:       31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5-hBazlJjR8g7vTYMdsv_s3l8wE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FE64/1641D0DE5E3911F1B10499CF007AAC22/5-hBazlJjR8g7vTYMdsv_s3l8wE.mft
Manifest number:          30
Signing time:             Thu 03 Sep 2026 08:53:38 +0000
Manifest this update:     Thu 03 Sep 2026 08:53:37 +0000
Manifest next update:     Thu 10 Sep 2026 08:53:37 +0000
Files and hashes:         1: 5-hBazlJjR8g7vTYMdsv_s3l8wE.crl (hash: FNcHWmRgMNOo1zoQ5qWpPsKpeKDg8nMdv5arlkUeZlA=)
                          2: A966E0CA5E3911F1AE025C80017AAC22.roa (hash: pmtjjwkJfcllfi5+ob6MblnqfEjyL3i5W+8VkNGojAg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FE64/1641D0DE5E3911F1B10499CF007AAC22/5-hBazlJjR8g7vTYMdsv_s3l8wE.crl
                          rsync://rpki.apnic.net/member_repository/A918FE64/1641D0DE5E3911F1B10499CF007AAC22/5-hBazlJjR8g7vTYMdsv_s3l8wE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5-hBazlJjR8g7vTYMdsv_s3l8wE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 08:53:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FE64, serialNumber=E7E8416B39498D1F20EEF4D831DB2FFECDE5F301
        Validity
            Not Before: Sep  3 08:53:37 2026 GMT
            Not After : Sep 10 08:53:37 2026 GMT
        Subject: CN=6a993592-d023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:00:e2:2c:94:1c:52:26:e1:23:28:51:d3:84:
                    4a:68:d6:2e:62:7f:a2:81:c9:ed:be:e2:0a:12:23:
                    32:4e:86:d2:74:7f:55:ea:4f:ba:e9:a8:33:8b:04:
                    13:f0:b1:23:24:30:fe:41:c5:81:f2:aa:1f:4b:39:
                    3c:6e:7e:f7:30:4b:1a:f2:37:cc:5f:b8:11:30:ff:
                    c0:63:e6:6b:10:fc:e1:75:2a:49:17:59:79:39:5d:
                    8d:65:b6:3f:d7:9d:0e:c8:8d:0c:4d:be:2c:c8:4f:
                    d0:95:5a:51:a1:02:9d:b2:ce:b9:74:51:43:68:07:
                    32:e2:04:4f:22:5a:6a:94:bf:af:7d:95:92:aa:33:
                    dc:c4:1b:41:53:31:a0:e0:0c:b1:37:08:a6:59:e7:
                    ae:6f:30:78:85:96:bb:54:ac:ff:e9:1e:28:5f:49:
                    af:38:63:e4:aa:11:2b:da:ca:d7:d2:0d:8f:8d:be:
                    8b:00:ba:3c:ee:73:5c:b6:c8:c6:12:e9:62:4b:c7:
                    fa:33:09:2e:6a:12:9f:a2:ec:98:43:b7:a5:be:35:
                    37:90:89:4a:7d:45:0c:cf:4f:6e:2f:f0:e4:2f:fe:
                    94:08:e9:82:c3:ee:8b:3b:16:8c:06:5a:83:12:d1:
                    4a:14:d0:a5:2e:56:66:22:da:63:5a:db:f3:ad:82:
                    01:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:19:D7:95:AC:02:BE:FE:C4:FA:F8:F7:2B:68:17:2C:C8:65:E1:65
            X509v3 Authority Key Identifier:
                keyid:E7:E8:41:6B:39:49:8D:1F:20:EE:F4:D8:31:DB:2F:FE:CD:E5:F3:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FE64/1641D0DE5E3911F1B10499CF007AAC22/5-hBazlJjR8g7vTYMdsv_s3l8wE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5-hBazlJjR8g7vTYMdsv_s3l8wE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FE64/1641D0DE5E3911F1B10499CF007AAC22/5-hBazlJjR8g7vTYMdsv_s3l8wE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:64:c9:cb:e6:b5:ac:c7:36:b5:b1:03:38:d3:7d:ae:1d:3b:
         e2:77:aa:25:44:61:48:04:f4:2b:5c:4e:22:3d:21:dd:dd:88:
         c8:6d:c6:ae:55:03:0d:16:ed:e0:4b:3e:76:b6:76:e1:cc:fd:
         ed:54:13:54:1b:79:08:d6:fc:31:0d:9c:ac:69:78:ba:7f:74:
         4c:b4:f6:80:e6:3c:3b:6f:b2:54:e8:0a:08:15:64:13:81:2c:
         b9:40:74:8e:fc:1c:45:5f:a6:6b:92:58:8d:ed:3a:bd:8c:e2:
         fb:dd:de:93:9e:45:77:29:dc:e8:d6:79:0d:78:cf:5f:9d:57:
         26:a4:4a:fa:40:cb:f0:72:f8:5a:6b:84:e5:cf:c8:86:dc:f7:
         f9:4c:d8:60:9b:2c:ea:05:46:ea:9e:f4:49:64:5e:99:57:91:
         55:9d:05:e8:2b:bc:74:e6:d5:18:81:2b:36:26:50:e8:bd:26:
         42:52:71:59:41:97:94:38:70:3c:31:a2:52:fa:af:8a:42:31:
         e4:7d:03:2a:48:a1:72:11:55:d8:2a:74:b6:26:e6:2a:ff:59:
         21:16:db:01:88:dc:03:2d:a7:66:40:04:f1:fd:22:5b:ef:cf:
         e8:62:3c:74:41:0c:c1:5e:f0:8f:7a:f5:ea:bd:9e:5b:b2:83:
         cb:bd:9b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:05:40 2026 by rpki-client