Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft
File:                     xiZYMphXjR1K9yc-vXkccjCjdEk.mft (raw, json)
Hash identifier:          mvdibDosZuvm+lLVix35KA6kCtPFIArXbmW5r1LQ8pY=
Subject key identifier:   3B:9B:8A:99:E4:05:45:8D:38:F3:9E:CB:E2:8F:B4:60:31:0A:5C:AB
Authority key identifier: C6:26:58:32:98:57:8D:1D:4A:F7:27:3E:BD:79:1C:72:30:A3:74:49
Certificate issuer:       /CN=A91186C2/serialNumber=C626583298578D1D4AF7273EBD791C7230A37449
Certificate serial:       0126
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiZYMphXjR1K9yc-vXkccjCjdEk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft
Manifest number:          011E
Signing time:             Thu 23 Jul 2026 07:29:40 +0000
Manifest this update:     Thu 23 Jul 2026 07:29:39 +0000
Manifest next update:     Thu 30 Jul 2026 07:29:39 +0000
Files and hashes:         1: xiZYMphXjR1K9yc-vXkccjCjdEk.crl (hash: Md6yLp9j5i6WrYpFZBLVJvelpR9+17vrCxayVVc8kiY=)
                          2: 7DFFCDA4D17F11EF8FAE452BC4F9AE02.roa (hash: 88RG+IBp3+3IKje/6h9nyZS5YfSLYuAiRdPmohXdymE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.crl
                          rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiZYMphXjR1K9yc-vXkccjCjdEk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:29:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 294 (0x126)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91186C2, serialNumber=C626583298578D1D4AF7273EBD791C7230A37449
        Validity
            Not Before: Jul 23 07:29:39 2026 GMT
            Not After : Jul 30 07:29:39 2026 GMT
        Subject: CN=6a61c2e3-a692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:99:ca:41:85:26:b9:da:7e:d8:fe:cf:ee:da:
                    a3:c5:a6:74:d6:79:ce:77:90:be:be:bb:9d:ea:43:
                    ff:87:71:0f:9d:ed:fd:8f:13:ec:10:7f:6e:f6:d6:
                    64:f9:05:45:bd:fe:98:43:80:f2:5f:6b:6c:c2:11:
                    f8:03:c0:73:72:e2:1f:f7:7b:f1:26:09:b8:ec:7e:
                    65:6b:12:32:36:53:d1:d4:ad:a3:b7:52:86:4b:75:
                    5e:8b:bf:9a:76:e7:aa:ea:57:b2:af:b3:6f:cc:f6:
                    ee:8e:3b:ae:42:d3:69:ba:88:c0:29:bd:18:71:d7:
                    e4:ff:3b:f4:6f:7a:75:ca:43:e7:fa:48:0c:ca:09:
                    d7:1d:ee:68:59:af:b3:d4:92:c7:54:96:4f:f7:2e:
                    83:7e:8a:06:77:10:77:85:f7:99:00:0e:d7:59:20:
                    08:46:44:81:b4:0c:be:aa:10:ff:78:8a:6e:58:da:
                    4b:3b:a9:3c:e1:a5:dd:ed:bb:7d:39:53:5a:cc:cf:
                    3e:f5:80:33:c0:a7:6c:73:23:72:8b:3a:87:12:20:
                    24:62:a2:74:57:d2:14:39:f6:be:4f:43:9c:23:93:
                    31:3b:9a:a7:dc:89:6f:8d:35:58:63:70:f9:58:10:
                    d2:8e:3e:01:35:18:29:1f:93:32:d0:aa:e9:b6:32:
                    3f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:9B:8A:99:E4:05:45:8D:38:F3:9E:CB:E2:8F:B4:60:31:0A:5C:AB
            X509v3 Authority Key Identifier:
                keyid:C6:26:58:32:98:57:8D:1D:4A:F7:27:3E:BD:79:1C:72:30:A3:74:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiZYMphXjR1K9yc-vXkccjCjdEk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:4c:3a:c5:8b:f4:6a:c0:e9:27:f5:3d:2b:9c:bd:5e:f6:fb:
         b3:6f:61:dd:63:66:2b:68:98:0c:46:bb:e1:0c:40:39:cf:2e:
         9f:8f:14:ae:3f:08:81:85:e9:71:16:07:52:c2:1b:6f:08:ee:
         0d:7b:c7:e8:e5:e1:04:01:1f:de:d4:86:68:dc:b3:1d:0d:f4:
         82:f1:d9:7f:01:05:2c:c6:42:e3:39:98:f5:2c:cd:99:b0:fa:
         d8:a9:66:7a:e6:29:3d:dd:2b:0a:7e:88:3b:42:76:ff:eb:8a:
         af:aa:90:62:65:bf:dc:7d:bb:8a:87:3e:bb:4e:3f:fc:de:df:
         40:8b:05:9b:32:cc:8f:e1:8e:c7:a5:ec:c3:50:b3:42:b5:f2:
         46:8c:eb:b3:3a:b9:5b:87:91:9e:a4:e5:66:e6:fe:7a:e3:1f:
         2a:3b:c1:12:d2:5a:3e:bb:3b:68:47:48:fd:8b:01:83:3f:2c:
         3b:74:40:a7:b6:f0:07:46:e1:04:0d:e1:1a:e2:15:cd:0a:a1:
         02:e0:bf:80:da:fd:c7:21:a4:bf:51:85:71:c8:71:f9:53:e5:
         25:fb:0d:4e:63:be:70:3f:54:d2:73:f1:4d:19:d8:33:88:be:
         cf:43:49:97:8a:f5:86:c1:78:92:82:c6:2a:10:03:10:d9:8e:
         36:7d:64:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:20:11 2026 by rpki-client