Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0727/EE4443C249FD11F1A0F1D14DBD833773/5J1jIBhnqR-y6ZUAKnzLU_NB51s.mft
File:                     5J1jIBhnqR-y6ZUAKnzLU_NB51s.mft (raw, json)
Hash identifier:          +/yiybD7i5IkfR2Bg8FGm3PIh1KiDjLPWuOurHdzztk=
Subject key identifier:   77:20:34:A1:D9:DD:6C:0B:38:59:9B:4B:92:1B:0C:CE:4A:41:DA:2B
Authority key identifier: E4:9D:63:20:18:67:A9:1F:B2:E9:95:00:2A:7C:CB:53:F3:41:E7:5B
Certificate issuer:       /CN=A91E0727/serialNumber=E49D63201867A91FB2E995002A7CCB53F341E75B
Certificate serial:       28
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5J1jIBhnqR-y6ZUAKnzLU_NB51s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0727/EE4443C249FD11F1A0F1D14DBD833773/5J1jIBhnqR-y6ZUAKnzLU_NB51s.mft
Manifest number:          26
Signing time:             Fri 17 Jul 2026 10:09:55 +0000
Manifest this update:     Fri 17 Jul 2026 10:09:55 +0000
Manifest next update:     Fri 24 Jul 2026 10:09:55 +0000
Files and hashes:         1: 5J1jIBhnqR-y6ZUAKnzLU_NB51s.crl (hash: PH0vFnKYqEFfdVvQu0lAN5rk8a+LM/u9UfmG95/25Eo=)
                          2: 36ACD53E49FE11F1B48580CBBD833773.roa (hash: 2h8Ac5NQWyyJjC325JvGwENZEWd/12mzHWYCD7GMM3Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0727/EE4443C249FD11F1A0F1D14DBD833773/5J1jIBhnqR-y6ZUAKnzLU_NB51s.crl
                          rsync://rpki.apnic.net/member_repository/A91E0727/EE4443C249FD11F1A0F1D14DBD833773/5J1jIBhnqR-y6ZUAKnzLU_NB51s.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5J1jIBhnqR-y6ZUAKnzLU_NB51s.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 10:09:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0727, serialNumber=E49D63201867A91FB2E995002A7CCB53F341E75B
        Validity
            Not Before: Jul 17 10:09:55 2026 GMT
            Not After : Jul 24 10:09:55 2026 GMT
        Subject: CN=6a59ff73-8855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cd:16:09:49:f1:89:ef:31:4d:56:0d:98:d7:
                    7b:36:2e:11:ff:f1:26:d2:65:97:e6:19:56:50:b8:
                    92:ab:a0:83:7b:9a:14:4f:63:e9:93:c0:a3:62:e7:
                    23:51:41:e5:17:08:82:2d:38:29:04:5b:ca:1b:3a:
                    97:51:78:dd:d8:a2:01:a5:86:6b:2f:d8:1b:55:6d:
                    39:ac:e3:fa:c1:ae:6c:63:da:72:e3:42:4a:40:6f:
                    49:07:26:a9:7e:50:6e:5e:56:60:b7:5e:87:9e:e5:
                    6a:e6:e1:11:7d:64:25:7c:d3:1b:14:59:34:44:9b:
                    42:9e:ab:73:99:8b:2f:c1:9e:c1:f3:ca:bb:28:1e:
                    9c:0a:ea:69:26:5e:d4:84:e7:99:69:1d:f1:48:91:
                    43:5e:c0:e6:6a:b3:e1:09:cb:80:9c:99:e3:9b:f6:
                    ee:fe:44:7d:2e:aa:ef:16:bd:72:dd:c0:80:cf:5f:
                    28:75:ca:a2:f3:d3:41:98:25:0d:f0:de:81:de:cb:
                    6f:01:08:f2:30:85:6a:6c:bc:c0:bc:2a:cd:bf:14:
                    d4:eb:cc:02:8b:40:23:03:bc:2b:41:d4:78:2b:88:
                    19:14:65:de:07:58:21:98:5d:0c:23:9e:83:8c:36:
                    2e:31:c3:42:68:68:e1:b4:84:fc:09:4b:77:e6:fd:
                    f4:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:20:34:A1:D9:DD:6C:0B:38:59:9B:4B:92:1B:0C:CE:4A:41:DA:2B
            X509v3 Authority Key Identifier:
                keyid:E4:9D:63:20:18:67:A9:1F:B2:E9:95:00:2A:7C:CB:53:F3:41:E7:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0727/EE4443C249FD11F1A0F1D14DBD833773/5J1jIBhnqR-y6ZUAKnzLU_NB51s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5J1jIBhnqR-y6ZUAKnzLU_NB51s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0727/EE4443C249FD11F1A0F1D14DBD833773/5J1jIBhnqR-y6ZUAKnzLU_NB51s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:e2:fe:7e:31:79:17:95:1d:ee:4b:f5:f5:d3:41:ee:ac:77:
         a8:b8:a6:3b:c9:e3:9e:e3:db:39:61:22:8b:ff:43:de:44:21:
         ee:bc:d3:90:cb:e3:c4:ec:f9:cd:96:5c:f5:dd:ba:ca:e1:7d:
         2a:4a:26:97:21:62:4c:aa:92:3a:fd:57:43:86:34:e7:12:69:
         3e:07:7f:b0:57:3e:f1:7c:2f:d2:38:28:f3:b8:19:8e:3b:84:
         8f:d5:91:bb:d4:64:49:d8:46:67:3c:b5:45:19:7e:51:37:75:
         8b:94:aa:2c:89:12:cc:e2:75:3a:37:bf:f6:0e:aa:e8:23:20:
         d7:34:a9:5f:66:04:46:d2:6a:76:db:b4:6f:cd:cb:33:0c:b5:
         48:2d:66:c2:1b:e2:1a:87:d6:7e:b1:e1:5f:9e:85:9a:a3:77:
         56:ed:44:23:45:a7:65:09:09:b7:fe:16:f2:19:42:be:9d:ba:
         44:4a:69:a8:70:42:32:e7:8b:e5:d2:18:7b:27:9b:bc:48:3e:
         c8:9f:75:79:63:15:be:ac:5b:df:bd:e2:ac:0e:63:1f:eb:50:
         ed:72:d5:b3:75:ce:47:47:40:62:ec:da:9c:f1:35:e7:4a:97:
         b7:d8:8a:80:a3:e8:7c:7b:c8:a8:a8:34:05:f3:08:16:18:30:
         c5:ea:ef:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:54 2026 by rpki-client