Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft
File:                     5VbchrlOkc-bLilEqF9xaS2glNI.mft (raw, json)
Hash identifier:          qrURXZoIWnhRaki3D47BuvQBZv+DbDSBPwUrXFdi6ds=
Subject key identifier:   F8:71:60:38:BF:A3:D0:47:14:76:06:49:34:7B:EC:C5:D3:A0:81:91
Authority key identifier: E5:56:DC:86:B9:4E:91:CF:9B:2E:29:44:A8:5F:71:69:2D:A0:94:D2
Certificate issuer:       /CN=A919B20D/serialNumber=E556DC86B94E91CF9B2E2944A85F71692DA094D2
Certificate serial:       0207
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VbchrlOkc-bLilEqF9xaS2glNI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft
Manifest number:          0200
Signing time:             Wed 19 Aug 2026 03:48:29 +0000
Manifest this update:     Wed 19 Aug 2026 03:48:29 +0000
Manifest next update:     Wed 26 Aug 2026 03:48:29 +0000
Files and hashes:         1: 5VbchrlOkc-bLilEqF9xaS2glNI.crl (hash: Z4mhXCZamlRwq8E9vSyRTJKTfiwYCfUvi/tVOvHEd4g=)
                          2: 4B3E4A0693DE11EE81D1045FC4F9AE02.roa (hash: JqhFhmjTQ7lTEerY4ZxrMkv0NK26Qh/GjDI/YArXFV4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.crl
                          rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VbchrlOkc-bLilEqF9xaS2glNI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 03:48:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 519 (0x207)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B20D, serialNumber=E556DC86B94E91CF9B2E2944A85F71692DA094D2
        Validity
            Not Before: Aug 19 03:48:29 2026 GMT
            Not After : Aug 26 03:48:29 2026 GMT
        Subject: CN=6a85278d-c7e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c0:66:7c:bb:4d:a1:12:3f:53:b8:1f:f4:94:
                    b7:cd:c0:89:ba:36:88:af:93:ac:9a:f0:ca:9c:0b:
                    a5:c6:6d:cd:52:fc:b8:7c:2c:71:3f:31:7b:b6:e0:
                    c3:a3:0c:80:b0:3a:8b:62:ff:09:00:e5:1c:30:0b:
                    b0:49:19:2c:ce:e2:b2:2b:e7:62:34:29:64:1b:5c:
                    00:cb:a6:c3:95:ad:b9:cc:89:47:02:bb:6b:66:81:
                    13:1b:14:95:6e:d3:21:d3:db:ba:81:04:27:36:1d:
                    00:d2:56:ff:31:10:99:d3:39:61:de:37:10:23:96:
                    7b:69:1b:98:4b:4c:5a:f9:f7:ad:df:76:f3:0e:72:
                    bb:87:12:19:d1:e9:e3:2e:10:ff:de:20:58:f5:fb:
                    ec:4b:87:ad:1a:10:81:31:67:bc:1d:97:af:37:56:
                    1e:97:09:72:df:66:a4:bd:ca:22:ab:41:2f:6c:c1:
                    c9:1e:5d:34:47:f9:5b:75:57:98:79:4b:ed:ce:d1:
                    1a:b5:61:28:96:5d:13:84:94:a5:46:c9:85:a4:ca:
                    f6:de:3f:c6:30:76:14:fc:27:60:96:ce:ac:5b:23:
                    22:2f:7b:cb:c5:b1:0c:47:73:76:56:45:53:da:d6:
                    ee:28:01:79:c7:43:54:56:a1:34:53:9c:90:ae:ce:
                    24:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:71:60:38:BF:A3:D0:47:14:76:06:49:34:7B:EC:C5:D3:A0:81:91
            X509v3 Authority Key Identifier:
                keyid:E5:56:DC:86:B9:4E:91:CF:9B:2E:29:44:A8:5F:71:69:2D:A0:94:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VbchrlOkc-bLilEqF9xaS2glNI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:71:d1:44:b2:16:f8:29:29:49:2a:67:75:41:83:fb:0c:bb:
         af:b0:04:de:eb:ec:5b:33:cd:e4:8e:b3:33:b9:b9:fd:09:3b:
         c4:12:c2:37:09:dc:8a:1a:f9:a5:6a:3e:23:b4:8c:0c:81:ed:
         39:24:e0:1f:52:ec:0f:5c:f9:0b:7d:61:99:ef:17:2c:ba:9b:
         15:74:55:4b:7f:d4:d1:37:7a:cf:4d:ef:b5:56:92:dc:d6:dc:
         ac:d4:08:cb:76:a0:c2:44:18:b9:7f:f0:96:3f:a5:3e:29:b5:
         19:e5:ff:6d:00:43:76:e3:7b:41:d8:37:d0:e7:a3:d0:bc:ee:
         2d:31:89:a3:36:55:51:a7:df:23:fe:a5:74:34:c1:9a:72:77:
         f5:28:e2:6a:ce:1f:17:59:51:51:52:82:75:22:06:3a:a8:bc:
         5c:fa:10:1d:75:77:9d:a9:14:54:e5:8f:8f:49:6c:31:61:65:
         4e:a0:ed:36:0f:85:00:23:f4:e7:27:51:8b:a6:3f:e5:d3:52:
         43:b6:cf:0c:c4:f9:d7:6b:cb:1c:31:6e:14:e1:e1:32:b7:94:
         77:31:0a:67:5a:b3:30:fd:ca:fc:4b:45:68:1f:f3:dc:85:44:
         9a:fe:38:db:5c:ec:9a:14:d7:e0:4a:e2:e8:60:9d:85:ec:c8:
         6d:f4:a2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:03 2026 by rpki-client