Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.mft
File:                     _5I0f11UaIEf0lOki_xp_lcKpFA.mft (raw, json)
Hash identifier:          Tzr9y8ZslebQ5L2W7FTqo4bCg+dDbMd6SKLAGwJTuwg=
Subject key identifier:   B7:75:F9:68:1A:BB:35:A6:77:4B:21:F2:ED:F9:47:6E:94:FE:E0:E4
Authority key identifier: FF:92:34:7F:5D:54:68:81:1F:D2:53:A4:8B:FC:69:FE:57:0A:A4:50
Certificate issuer:       /CN=A9191769/serialNumber=FF92347F5D5468811FD253A48BFC69FE570AA450
Certificate serial:       016C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5I0f11UaIEf0lOki_xp_lcKpFA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.mft
Manifest number:          0168
Signing time:             Wed 19 Aug 2026 05:31:54 +0000
Manifest this update:     Wed 19 Aug 2026 05:31:53 +0000
Manifest next update:     Wed 26 Aug 2026 05:31:53 +0000
Files and hashes:         1: _5I0f11UaIEf0lOki_xp_lcKpFA.crl (hash: Qj1U80Ftkm2WHMElTBE48uAmGTUiNzdr4Cvmdiuf/Fw=)
                          2: 4D36C07677C311EF84D38A3BC4F9AE02.roa (hash: BG38xp1qdPOphhsvgqxFogv8PzPFWjOjpb4tZ2pNWLo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.crl
                          rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5I0f11UaIEf0lOki_xp_lcKpFA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 05:31:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 364 (0x16c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191769, serialNumber=FF92347F5D5468811FD253A48BFC69FE570AA450
        Validity
            Not Before: Aug 19 05:31:53 2026 GMT
            Not After : Aug 26 05:31:53 2026 GMT
        Subject: CN=6a853fca-25c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:71:fa:85:da:17:a2:a3:f1:ab:dd:ae:df:8f:
                    d9:59:38:f5:ee:7b:b5:f9:70:d6:b4:47:b0:db:93:
                    01:aa:9e:09:40:48:12:08:77:55:ac:84:33:b1:ec:
                    96:5d:51:d5:61:4a:6f:2b:cc:a6:4a:fc:f1:90:1a:
                    26:e7:a3:60:3d:b7:f7:14:30:85:d4:ac:ce:5b:bf:
                    37:00:e2:81:44:0a:bc:06:77:49:d2:aa:9a:06:ea:
                    03:a2:0d:b5:f9:42:d5:9c:e5:89:cb:f4:ce:4a:de:
                    50:51:5f:ad:9f:56:79:a4:45:47:f1:f1:14:0a:3e:
                    a0:20:30:9a:a2:d2:51:9f:34:25:d2:d9:73:f3:a6:
                    35:4d:7e:0f:b8:ef:c6:54:e2:c9:ed:7e:13:7d:47:
                    d7:50:24:d0:49:fe:12:e5:04:72:5a:53:89:3d:40:
                    3f:4e:81:25:b2:b2:69:df:bd:9f:48:9e:30:8b:f6:
                    b5:ab:39:6d:be:7f:57:04:30:3c:c0:7c:e1:dc:de:
                    8e:e7:84:62:38:a3:0c:1b:99:9a:4f:88:df:9a:a0:
                    bf:31:b7:34:e0:7e:80:50:ed:c1:c7:08:47:5f:07:
                    99:b3:53:a3:12:e5:dd:6a:ce:a9:71:94:41:51:8f:
                    aa:05:08:81:ec:13:8c:9e:af:2f:35:da:b4:88:90:
                    d7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:75:F9:68:1A:BB:35:A6:77:4B:21:F2:ED:F9:47:6E:94:FE:E0:E4
            X509v3 Authority Key Identifier:
                keyid:FF:92:34:7F:5D:54:68:81:1F:D2:53:A4:8B:FC:69:FE:57:0A:A4:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5I0f11UaIEf0lOki_xp_lcKpFA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:b7:40:28:35:e5:81:ac:4d:3c:8d:6a:a8:7d:1f:4d:13:e3:
         17:73:36:0f:a5:b8:4c:65:16:2a:22:6a:cb:46:0c:db:a9:d3:
         fc:60:03:c7:02:f2:a5:f4:e2:28:b5:05:cf:36:14:73:3a:9d:
         87:49:f0:b5:fc:7f:12:db:4e:37:fe:55:c3:8e:df:de:99:f1:
         09:36:22:40:32:01:55:a0:bb:34:a4:54:5a:bc:81:bc:32:17:
         f6:64:b8:2e:7f:ae:01:66:1b:2b:b5:e3:8f:e3:cd:f8:dd:98:
         1f:ae:4b:71:51:1c:cf:1d:46:72:8f:92:0c:bd:98:f4:55:6a:
         5d:a1:3f:a3:f8:3b:e3:81:24:a3:1d:52:c8:de:c0:41:55:5b:
         7b:3f:9f:69:f2:9b:bc:67:cb:8f:f8:0d:f0:26:4c:c0:06:39:
         5f:be:4c:95:8e:e4:e9:61:59:b7:ff:54:07:50:ad:eb:99:da:
         b8:41:11:74:a7:35:9b:a5:d1:35:01:84:6b:34:c4:ab:be:bb:
         db:69:5f:eb:dc:56:e2:ae:be:33:7c:39:77:e4:78:09:4b:98:
         48:69:fb:89:60:7f:94:4e:8b:f1:9a:4b:0e:a7:53:0f:16:f7:
         ed:8b:f4:9b:35:ab:41:6b:e9:a5:ba:c6:5d:22:b2:8a:47:40:
         ff:a9:62:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:50:47 2026 by rpki-client