Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8400/F681BBA4781111ECA397D034C4F9AE02/5dmsjXWxbbnyPICt2LO72OWLaHg.mft
File:                     5dmsjXWxbbnyPICt2LO72OWLaHg.mft (raw, json)
Hash identifier:          cJ3/OCGWivgoCCyHCHXqr5sdaHa5oKkjgsuacfCFRzs=
Subject key identifier:   69:20:1C:D9:1E:D2:56:35:2B:94:F8:70:D9:CC:71:4C:39:8E:30:00
Authority key identifier: E5:D9:AC:8D:75:B1:6D:B9:F2:3C:80:AD:D8:B3:BB:D8:E5:8B:68:78
Certificate issuer:       /CN=A91D8400/serialNumber=E5D9AC8D75B16DB9F23C80ADD8B3BBD8E58B6878
Certificate serial:       04E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5dmsjXWxbbnyPICt2LO72OWLaHg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8400/F681BBA4781111ECA397D034C4F9AE02/5dmsjXWxbbnyPICt2LO72OWLaHg.mft
Manifest number:          04DF
Signing time:             Wed 19 Aug 2026 00:06:45 +0000
Manifest this update:     Wed 19 Aug 2026 00:06:44 +0000
Manifest next update:     Wed 26 Aug 2026 00:06:44 +0000
Files and hashes:         1: 5dmsjXWxbbnyPICt2LO72OWLaHg.crl (hash: 7XOwFhjvUXL+9tR9DPmKw7BV0v10KIVQjqvDNLIQ51I=)
                          2: 46C1646C781611ECADCDAB0EC4F9AE02.roa (hash: B7LPS8CpZf2Ll5s7URpWr8ddqKyO/ADwdlYXyVT4rEQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8400/F681BBA4781111ECA397D034C4F9AE02/5dmsjXWxbbnyPICt2LO72OWLaHg.crl
                          rsync://rpki.apnic.net/member_repository/A91D8400/F681BBA4781111ECA397D034C4F9AE02/5dmsjXWxbbnyPICt2LO72OWLaHg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5dmsjXWxbbnyPICt2LO72OWLaHg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 00:06:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1255 (0x4e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8400, serialNumber=E5D9AC8D75B16DB9F23C80ADD8B3BBD8E58B6878
        Validity
            Not Before: Aug 19 00:06:44 2026 GMT
            Not After : Aug 26 00:06:44 2026 GMT
        Subject: CN=6a84f395-40be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:44:c9:c8:29:4c:de:49:68:60:d0:2d:43:04:
                    41:1c:33:3b:59:50:07:2b:d7:0c:b9:75:3f:a1:4d:
                    af:80:31:71:ae:2a:8a:30:1a:1b:a5:15:cb:e5:99:
                    6f:c2:f8:ba:40:61:98:90:ea:64:29:11:99:07:64:
                    e9:f0:b5:53:81:e7:4d:75:5f:b3:a5:d8:cc:4b:d9:
                    6c:94:ac:73:b2:78:a4:fa:d3:ef:59:73:42:a2:96:
                    d3:ee:d5:4a:e1:8f:f2:7e:d4:f5:2a:a3:42:eb:30:
                    b9:7a:55:80:57:8f:54:ab:6f:37:ea:40:ad:2d:1c:
                    0d:87:ea:e8:fe:10:e0:c4:40:84:98:56:55:0c:db:
                    6b:9b:0a:e4:d6:53:fc:0c:b0:6f:8d:de:4e:32:7d:
                    cf:40:44:d1:f9:82:fa:6c:47:bb:cb:af:09:8f:8f:
                    a9:89:75:96:d4:36:45:52:ec:02:a3:f9:73:1f:4e:
                    b4:78:1e:dc:a3:75:d5:4a:83:83:6f:ad:71:f7:55:
                    97:54:fe:2e:d0:a3:ab:27:96:41:88:d1:7d:2a:64:
                    e9:96:93:73:b0:43:b3:c6:1f:3e:db:2e:9e:ae:0d:
                    79:64:ce:48:e9:e0:eb:e6:3c:4d:7f:7a:d0:1d:a0:
                    4d:1c:c4:92:cb:cb:2d:24:37:94:3a:92:70:12:75:
                    6f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:20:1C:D9:1E:D2:56:35:2B:94:F8:70:D9:CC:71:4C:39:8E:30:00
            X509v3 Authority Key Identifier:
                keyid:E5:D9:AC:8D:75:B1:6D:B9:F2:3C:80:AD:D8:B3:BB:D8:E5:8B:68:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8400/F681BBA4781111ECA397D034C4F9AE02/5dmsjXWxbbnyPICt2LO72OWLaHg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5dmsjXWxbbnyPICt2LO72OWLaHg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8400/F681BBA4781111ECA397D034C4F9AE02/5dmsjXWxbbnyPICt2LO72OWLaHg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:2e:5f:8e:86:08:16:bd:7c:cb:b0:95:5f:fa:38:4a:8e:20:
         fd:e6:51:60:db:53:24:c5:c1:71:e0:87:1c:27:d6:07:fb:0e:
         6f:f2:3c:e4:98:cd:ae:82:c4:cb:a3:d8:1b:1c:22:32:c5:52:
         2e:ab:87:11:ec:da:96:21:1e:97:8d:cc:f8:fa:8a:c4:6d:9b:
         98:20:07:a2:c7:8a:37:e3:04:9b:92:3d:cb:b7:9b:57:4e:a9:
         48:ac:d6:66:22:2f:b2:f8:d2:02:ad:fa:f3:ee:59:8e:97:a8:
         8f:51:12:a1:01:7b:b8:a7:16:d6:03:5a:02:6a:98:ec:d1:82:
         13:3e:53:8e:1b:33:6a:56:64:6f:71:eb:c8:33:c6:b8:41:ff:
         ce:62:5c:eb:7f:3c:71:82:c7:e3:2c:ec:95:43:2e:5d:ee:5e:
         cb:b2:6e:a8:01:b4:43:d3:ca:7e:f8:66:6a:71:a7:26:da:f3:
         28:a4:25:10:dc:67:bd:c8:f5:16:c5:91:df:6e:56:13:71:08:
         ae:b8:ef:71:9f:38:69:63:d5:eb:25:e0:d6:43:7e:49:c7:2b:
         86:97:29:09:ef:e7:a1:89:ed:79:01:2d:4e:02:c3:4f:3d:34:
         08:e8:d0:0b:70:65:43:c4:43:a1:6c:fe:e7:1c:79:e1:b0:aa:
         0c:7b:a0:6c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDg0MDAxMTAvBgNVBAUTKEU1RDlBQzhENzVCMTZEQjlGMjNDODBBREQ4QjNCQkQ4
RTU4QjY4NzgwHhcNMjYwODE5MDAwNjQ0WhcNMjYwODI2MDAwNjQ0WjAYMRYwFAYD
VQQDEw02YTg0ZjM5NS00MGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApETJyClM3kloYNAtQwRBHDM7WVAHK9cMuXU/oU2vgDFxriqKMBobpRXL5Zlv
wvi6QGGYkOpkKRGZB2Tp8LVTgedNdV+zpdjMS9lslKxzsnik+tPvWXNCopbT7tVK
4Y/yftT1KqNC6zC5elWAV49Uq2836kCtLRwNh+ro/hDgxECEmFZVDNtrmwrk1lP8
DLBvjd5OMn3PQETR+YL6bEe7y68Jj4+piXWW1DZFUuwCo/lzH060eB7co3XVSoOD
b61x91WXVP4u0KOrJ5ZBiNF9KmTplpNzsEOzxh8+2y6erg15ZM5I6eDr5jxNf3rQ
HaBNHMSSy8stJDeUOpJwEnVvhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGkgHNke
0lY1K5T4cNnMcUw5jjAAMB8GA1UdIwQYMBaAFOXZrI11sW258jyArdizu9jli2h4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODQwMC9GNjgxQkJBNDc4
MTExMUVDQTM5N0QwMzRDNEY5QUUwMi81ZG1zalhXeGJibnlQSUN0MkxPNzJPV0xh
SGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVkbXNqWFd4YmJueVBJQ3QyTE83Mk9XTGFIZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
ODQwMC9GNjgxQkJBNDc4MTExMUVDQTM5N0QwMzRDNEY5QUUwMi81ZG1zalhXeGJi
bnlQSUN0MkxPNzJPV0xhSGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeS5fjoYIFr18y7CVX/o4So4g/eZRYNtTJMXBceCHHCfWB/sOb/I85JjNroLE
y6PYGxwiMsVSLquHEezaliEel43M+PqKxG2bmCAHoseKN+MEm5I9y7ebV06pSKzW
ZiIvsvjSAq368+5Zjpeoj1ESoQF7uKcW1gNaAmqY7NGCEz5TjhszalZkb3HryDPG
uEH/zmJc6388cYLH4yzslUMuXe5ey7JuqAG0Q9PKfvhmanGnJtrzKKQlENxnvcj1
FsWR325WE3EIrrjvcZ84aWPV6yXg1kN+SccrhpcpCe/noYnteQEtTgLDTz00COjQ
C3BlQ8RDoWz+5xx54bCqDHugbA==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:49:57 2026 by rpki-client