Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197650/D2B615700D9611F1942361D32B3D8C67/6B98qs6m95z87OFlMxRpL94sTpQ.mft
File:                     6B98qs6m95z87OFlMxRpL94sTpQ.mft (raw, json)
Hash identifier:          EApJ8XsLHfK8FihjCDFOwjNjJpIYPJHpd2eS4oLyxWk=
Subject key identifier:   1F:AC:72:50:8F:77:A0:F1:1F:44:E3:28:AC:B3:15:AB:2E:1E:FC:23
Authority key identifier: E8:1F:7C:AA:CE:A6:F7:9C:FC:EC:E1:65:33:14:69:2F:DE:2C:4E:94
Certificate issuer:       /CN=A9197650/serialNumber=E81F7CAACEA6F79CFCECE1653314692FDE2C4E94
Certificate serial:       5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6B98qs6m95z87OFlMxRpL94sTpQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197650/D2B615700D9611F1942361D32B3D8C67/6B98qs6m95z87OFlMxRpL94sTpQ.mft
Manifest number:          5A
Signing time:             Mon 03 Aug 2026 09:48:56 +0000
Manifest this update:     Mon 03 Aug 2026 09:48:56 +0000
Manifest next update:     Mon 10 Aug 2026 09:48:56 +0000
Files and hashes:         1: 6B98qs6m95z87OFlMxRpL94sTpQ.crl (hash: IZwA+j2ecZ163YCv5qBI8yyZQp0/2SfR0MKfA290D94=)
                          2: F1550AF80D9711F198E5D2412C3D8C67.roa (hash: bVGNrwzX27qpEIfnzYCkpUgFXShaiaz0HH5FxYYIcss=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197650/D2B615700D9611F1942361D32B3D8C67/6B98qs6m95z87OFlMxRpL94sTpQ.crl
                          rsync://rpki.apnic.net/member_repository/A9197650/D2B615700D9611F1942361D32B3D8C67/6B98qs6m95z87OFlMxRpL94sTpQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6B98qs6m95z87OFlMxRpL94sTpQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Aug 2026 09:48:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197650, serialNumber=E81F7CAACEA6F79CFCECE1653314692FDE2C4E94
        Validity
            Not Before: Aug  3 09:48:56 2026 GMT
            Not After : Aug 10 09:48:56 2026 GMT
        Subject: CN=6a706408-457d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:37:1f:e9:08:a6:fb:e9:cb:8e:7d:4d:84:cc:
                    3a:5c:1d:98:00:b4:a0:db:73:8b:8c:43:e1:7c:65:
                    7d:da:e4:78:d8:26:dd:c3:0c:7b:bb:f8:9e:c7:6f:
                    88:ff:0c:76:73:80:a1:2f:f5:be:e7:9f:58:fb:4a:
                    3f:f6:4c:5f:63:35:ce:d7:a3:83:62:a5:fd:a1:ef:
                    c2:75:c5:64:d9:4a:eb:49:41:9a:ce:01:61:db:62:
                    ff:b5:2d:4a:2b:48:50:9a:60:b0:e4:e1:41:46:ae:
                    41:37:0b:2d:7e:dd:ac:b0:e2:4d:9b:ab:55:8f:7b:
                    57:a8:82:25:92:ea:f9:6f:64:f5:82:7d:10:fa:0f:
                    b0:81:85:93:f0:d6:de:e0:a3:a5:df:38:96:86:ad:
                    de:3a:ee:4e:d6:9c:f9:a7:68:94:fd:bf:86:c2:58:
                    aa:9f:28:1f:69:05:9b:4c:1f:a2:89:d3:58:19:93:
                    71:81:92:52:3a:57:78:d7:d1:82:61:97:04:e8:38:
                    58:02:59:e1:33:c3:53:1b:3e:b1:48:4e:9f:15:c8:
                    1b:fd:e4:04:7d:df:31:5d:2d:ef:f6:bb:a1:c8:72:
                    0e:6e:74:21:55:b7:41:3c:5f:1e:ab:39:6b:b5:ed:
                    22:67:67:01:82:a8:23:b6:fb:55:79:6b:6f:67:ec:
                    e7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:AC:72:50:8F:77:A0:F1:1F:44:E3:28:AC:B3:15:AB:2E:1E:FC:23
            X509v3 Authority Key Identifier:
                keyid:E8:1F:7C:AA:CE:A6:F7:9C:FC:EC:E1:65:33:14:69:2F:DE:2C:4E:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197650/D2B615700D9611F1942361D32B3D8C67/6B98qs6m95z87OFlMxRpL94sTpQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6B98qs6m95z87OFlMxRpL94sTpQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197650/D2B615700D9611F1942361D32B3D8C67/6B98qs6m95z87OFlMxRpL94sTpQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:e4:2b:d5:e1:b4:e6:8e:61:46:d6:de:aa:42:8d:be:4c:69:
         6e:db:36:47:71:94:e9:39:c4:a2:e5:44:0d:a4:cd:2f:73:f2:
         2c:c6:dd:7f:01:1c:ea:34:b4:ef:98:77:28:e7:ba:25:0b:db:
         f2:c2:af:dc:65:31:f8:82:f4:d6:6c:c1:bd:9d:57:72:86:d8:
         b1:40:eb:28:6c:61:82:32:7f:15:34:25:b7:ea:8e:82:47:12:
         6b:ed:2c:c0:c2:11:f7:90:b6:f9:af:ba:3e:94:35:6b:e0:e1:
         5c:42:e0:b3:c9:89:e9:98:8a:4d:cd:a5:cf:a1:6f:43:8b:0b:
         b1:d0:d7:46:6d:4d:7c:eb:2a:a4:e8:28:aa:0b:93:72:76:42:
         3d:7d:c4:44:f9:f3:01:bc:ca:c0:c3:55:8a:5b:9c:66:41:38:
         8c:0d:d5:2b:a6:34:2f:35:ae:cf:53:b2:2d:b8:de:96:97:00:
         eb:1e:ab:74:c4:d6:22:0f:cf:1c:1c:21:b6:6c:8d:c3:8a:09:
         1e:16:94:b6:cd:0a:7d:1b:0a:b6:17:4c:f1:89:ca:94:37:4f:
         13:05:68:44:74:47:13:e7:71:af:d8:54:25:d8:55:7f:90:2c:
         36:8c:60:98:17:dc:dc:cb:4d:ad:b2:7a:d0:e7:db:da:bf:a2:
         1a:ca:f3:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 20:13:29 2026 by rpki-client