Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft
File:                     xA63gWRRh1SG2mQ_j5Nht337IaM.mft (raw, json)
Hash identifier:          Ry/aK9sJW3xxkJ96ttwg2r2uvcGX6AmfcVIt14R4RaM=
Subject key identifier:   7A:A7:9C:59:E7:75:06:FF:2C:16:F8:DD:67:1A:9D:D3:B0:8E:20:89
Authority key identifier: C4:0E:B7:81:64:51:87:54:86:DA:64:3F:8F:93:61:B7:7D:FB:21:A3
Certificate issuer:       /CN=A9125590/serialNumber=C40EB7816451875486DA643F8F9361B77DFB21A3
Certificate serial:       3597
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft
Manifest number:          357C
Signing time:             Wed 22 Jul 2026 14:19:48 +0000
Manifest this update:     Wed 22 Jul 2026 14:19:47 +0000
Manifest next update:     Wed 29 Jul 2026 14:19:47 +0000
Files and hashes:         1: xA63gWRRh1SG2mQ_j5Nht337IaM.crl (hash: yNYMAKaElPqcR6kvRtzmz0Sx8fkzwYEbpAUgaTBFvC0=)
                          2: 26E02598562F11EB94FD0463C4F9AE02.roa (hash: w327Pi+TEmh3026Kes4gzOM+DtAPkeVB2eFJdQaVwbI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.crl
                          rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 14:19:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13719 (0x3597)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125590, serialNumber=C40EB7816451875486DA643F8F9361B77DFB21A3
        Validity
            Not Before: Jul 22 14:19:47 2026 GMT
            Not After : Jul 29 14:19:47 2026 GMT
        Subject: CN=6a60d184-07a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:8a:15:09:03:e3:41:ff:4a:cd:33:5f:98:56:
                    48:73:29:63:9e:aa:01:60:6f:65:a8:66:8b:a5:f6:
                    87:78:8e:1e:a0:d8:0b:29:0a:41:a0:0c:b3:b6:a1:
                    89:11:6c:68:1b:80:34:78:52:b4:cc:b3:d7:31:cf:
                    06:12:a4:05:02:e6:e6:2d:c3:f8:10:95:c7:d1:a0:
                    ee:57:ad:9e:33:dd:5d:4a:12:45:e0:ae:95:2d:ac:
                    5d:7e:b9:d6:43:88:a0:0c:1b:31:81:98:20:e7:e8:
                    ff:5f:ab:76:60:cc:09:47:a1:68:00:d4:f5:b6:a9:
                    bf:43:c5:a3:a4:0b:94:4c:64:60:2b:7e:8b:8f:37:
                    2f:24:2c:02:b2:0b:b1:c4:3c:10:43:40:4c:35:9e:
                    c1:22:5e:13:f8:9d:66:3c:0f:d9:cd:7d:ff:c3:31:
                    14:d7:c6:e7:b3:57:98:b7:9b:7b:9b:97:0f:dc:0e:
                    1d:da:49:db:a6:6b:f7:4d:c7:31:4f:cb:b5:bb:62:
                    15:0d:a8:4c:b7:c5:16:17:86:0c:98:b4:eb:7c:6f:
                    30:3e:af:69:f0:87:93:e5:01:06:99:13:f5:4b:87:
                    ed:9f:45:d7:a0:73:be:f2:f9:09:9b:e9:92:d1:68:
                    5a:25:af:a9:7d:61:fd:70:0d:61:04:90:0b:ba:ae:
                    df:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A7:9C:59:E7:75:06:FF:2C:16:F8:DD:67:1A:9D:D3:B0:8E:20:89
            X509v3 Authority Key Identifier:
                keyid:C4:0E:B7:81:64:51:87:54:86:DA:64:3F:8F:93:61:B7:7D:FB:21:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:64:93:93:34:c2:c3:74:36:e6:97:ed:94:79:69:58:86:4f:
         8e:da:bf:ef:58:8b:b2:ca:a8:c4:71:b0:e9:47:c6:a3:f9:1f:
         0a:6b:bd:5e:1e:2d:3d:b1:71:1d:ec:fb:19:6e:dd:33:cb:ae:
         d9:b9:0a:8a:36:f3:78:d8:88:3f:3e:83:eb:b6:19:2e:b7:23:
         d0:7c:38:4f:cd:d0:66:b0:7a:7c:a8:a2:bb:c9:a0:cb:af:e1:
         1d:84:22:56:a3:63:f6:d4:e3:94:2a:e0:0c:3f:ec:7e:00:14:
         a3:a5:f9:bd:02:86:d1:e3:4a:39:b0:04:9d:e4:bf:5a:96:19:
         30:1e:0d:c4:5c:01:51:d9:75:75:f1:8c:96:cc:13:07:65:6a:
         ba:97:b5:1b:b9:de:9b:3d:89:42:a2:5a:6d:1d:3a:e5:0f:15:
         49:b2:1f:f5:39:6b:2b:d9:4b:7a:4f:07:97:0f:d6:76:bb:e6:
         45:83:7d:60:f9:d9:45:05:fe:55:f8:d7:24:c8:1e:1f:ad:f9:
         d7:d6:bd:18:c2:b1:b2:25:05:a7:af:a9:5d:b7:9c:e9:f0:70:
         62:59:de:20:97:0b:e1:34:92:a7:00:a1:5b:d2:84:8b:dd:82:
         53:38:38:db:f5:f1:94:ec:b0:fa:98:14:63:c7:30:f5:12:7c:
         22:c1:12:8e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjU1OTAxMTAvBgNVBAUTKEM0MEVCNzgxNjQ1MTg3NTQ4NkRBNjQzRjhGOTM2MUI3
N0RGQjIxQTMwHhcNMjYwNzIyMTQxOTQ3WhcNMjYwNzI5MTQxOTQ3WjAYMRYwFAYD
VQQDEw02YTYwZDE4NC0wN2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkooVCQPjQf9KzTNfmFZIcyljnqoBYG9lqGaLpfaHeI4eoNgLKQpBoAyztqGJ
EWxoG4A0eFK0zLPXMc8GEqQFAubmLcP4EJXH0aDuV62eM91dShJF4K6VLaxdfrnW
Q4igDBsxgZgg5+j/X6t2YMwJR6FoANT1tqm/Q8WjpAuUTGRgK36LjzcvJCwCsgux
xDwQQ0BMNZ7BIl4T+J1mPA/ZzX3/wzEU18bns1eYt5t7m5cP3A4d2knbpmv3Tccx
T8u1u2IVDahMt8UWF4YMmLTrfG8wPq9p8IeT5QEGmRP1S4ftn0XXoHO+8vkJm+mS
0WhaJa+pfWH9cA1hBJALuq7f4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHqnnFnn
dQb/LBb43WcandOwjiCJMB8GA1UdIwQYMBaAFMQOt4FkUYdUhtpkP4+TYbd9+yGj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTU5MC9GQzQ0QjM4QTFE
NzAxMUUyODk1MUE5QjUwOEIwMkNEMi94QTYzZ1dSUmgxU0cybVFfajVOaHQzMzdJ
YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hBNjNnV1JSaDFTRzJtUV9qNU5odDMzN0lhTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NTU5MC9GQzQ0QjM4QTFENzAxMUUyODk1MUE5QjUwOEIwMkNEMi94QTYzZ1dSUmgx
U0cybVFfajVOaHQzMzdJYU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFWSTkzTCw3Q25pftlHlpWIZPjtq/71iLssqoxHGw6UfGo/kfCmu9Xh4tPbFx
Hez7GW7dM8uu2bkKijbzeNiIPz6D67YZLrcj0Hw4T83QZrB6fKiiu8mgy6/hHYQi
VqNj9tTjlCrgDD/sfgAUo6X5vQKG0eNKObAEneS/WpYZMB4NxFwBUdl1dfGMlswT
B2Vqupe1G7nemz2JQqJabR065Q8VSbIf9TlrK9lLek8Hlw/WdrvmRYN9YPnZRQX+
VfjXJMgeH63519a9GMKxsiUFp6+pXbec6fBwYlneIJcL4TSSpwChW9KEi92CUzg4
2/XxlOyw+pgUY8cw9RJ8IsESjg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:10:21 2026 by rpki-client