Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft
File:                     Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft (raw, json)
Hash identifier:          +fdZJ8CXCJcu6dO1mCGrCaHcuB4hNRm9WsFZY1unIsw=
Subject key identifier:   6C:81:4A:49:7E:48:FC:A0:57:70:02:F3:0E:E0:90:4A:2D:0D:F9:66
Authority key identifier: 5E:BD:D4:D5:F3:6C:6A:A5:9B:01:2C:9E:89:9A:AD:3C:27:EA:D8:ED
Certificate issuer:       /CN=A91275FD/serialNumber=5EBDD4D5F36C6AA59B012C9E899AAD3C27EAD8ED
Certificate serial:       260F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft
Manifest number:          25FB
Signing time:             Wed 22 Jul 2026 15:43:52 +0000
Manifest this update:     Wed 22 Jul 2026 15:43:51 +0000
Manifest next update:     Wed 29 Jul 2026 15:43:51 +0000
Files and hashes:         1: Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl (hash: 2QlvjFdXcLDpIyqLAtrX8QcHFqVo9N5U+bv1+SCGZ0M=)
                          2: 9461B15C144611EBA5418244C4F9AE02.roa (hash: 2QSZtWOqDrHks96zM5GIiao6cA8Lcs0F/CmHj2Ncbeg=)
                          3: C5218598F91711EDBB78FE3CC4F9AE02.roa (hash: H9FBin+3iFpCvFQYKLKBdVVFwBLL9x/T3GklTxzrl8g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl
                          rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 15:43:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9743 (0x260f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91275FD, serialNumber=5EBDD4D5F36C6AA59B012C9E899AAD3C27EAD8ED
        Validity
            Not Before: Jul 22 15:43:51 2026 GMT
            Not After : Jul 29 15:43:51 2026 GMT
        Subject: CN=6a60e538-6e81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:42:e1:aa:bf:5e:65:57:c1:13:04:c7:eb:ab:
                    5a:58:da:81:a8:1f:20:da:57:5d:31:2e:fd:b4:e9:
                    ba:75:95:d9:34:26:fa:63:15:e6:6d:b3:bd:ee:b1:
                    a6:ea:f3:6a:3f:59:03:e4:a3:64:f3:2c:41:a2:94:
                    1b:4e:64:f5:4e:c8:5c:0f:2f:a0:97:0e:3f:08:d5:
                    72:ff:e4:5c:bc:09:ae:13:93:0b:7b:49:3f:7c:57:
                    9f:ca:a5:7c:a0:5f:97:a7:48:28:51:4d:f1:8d:ee:
                    28:0a:c4:38:3a:9f:5b:1d:bf:fa:f9:3b:c7:9d:9d:
                    3d:29:48:7f:81:b2:17:3a:5b:e3:03:ca:4c:6e:52:
                    07:c6:65:db:f1:8a:c5:1b:4d:2b:50:f1:a2:08:2f:
                    37:53:21:2e:95:b1:1f:f3:50:a5:2b:1b:11:22:7a:
                    23:29:16:82:7d:34:8c:ca:e7:1c:d8:32:39:c0:3d:
                    6a:cb:4e:ac:40:30:c1:d6:6a:bd:7e:6a:5e:75:55:
                    5d:fa:d3:0c:cb:93:d9:5a:12:ab:70:d9:99:33:35:
                    29:b9:02:d3:3b:e4:8f:2c:1e:e1:9a:d0:9c:1e:00:
                    fb:9b:ac:10:ee:33:a8:d1:fa:fd:4b:aa:28:9c:4a:
                    8c:33:2e:88:33:3c:b8:64:1d:45:01:71:6d:85:f5:
                    7c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:81:4A:49:7E:48:FC:A0:57:70:02:F3:0E:E0:90:4A:2D:0D:F9:66
            X509v3 Authority Key Identifier:
                keyid:5E:BD:D4:D5:F3:6C:6A:A5:9B:01:2C:9E:89:9A:AD:3C:27:EA:D8:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:8b:a2:a8:b1:43:76:8c:58:93:45:c7:9d:e5:fe:87:39:06:
         fc:43:9c:91:3c:3f:d3:22:88:f6:fc:b1:1d:08:46:43:c2:28:
         8c:a2:0f:48:c9:18:d9:86:e0:3f:e2:d1:fd:fb:ff:24:26:1c:
         eb:1a:eb:ed:f3:56:fc:b8:5e:75:9f:b3:ae:3a:e0:2b:07:a9:
         a6:7c:b7:9d:56:dd:5f:84:59:35:5a:4b:a6:8f:28:30:9a:14:
         96:be:48:fb:c7:29:42:18:eb:5c:6d:47:88:b4:b1:5b:7d:2e:
         88:09:7f:30:dd:45:bf:86:34:a4:15:d7:2f:e7:8e:cf:8a:7f:
         5f:a7:47:f9:50:33:c9:83:22:27:c7:51:94:3f:1c:86:33:72:
         21:1a:47:6d:80:ca:7e:83:f0:28:2b:de:3d:71:97:1c:f4:5b:
         8f:14:10:ae:38:25:7e:8f:10:70:13:26:77:82:93:b8:1e:57:
         f1:c5:fb:e8:a0:d7:de:21:87:b6:00:92:9e:5f:26:b2:bd:d5:
         12:a3:75:22:17:d1:c6:d9:da:43:72:63:38:2b:72:3a:0c:4d:
         a3:af:d9:3c:0f:4a:29:2d:c3:81:bb:55:62:bd:3f:8e:2b:18:
         64:38:68:48:ba:e5:4f:81:be:21:07:05:16:71:c1:2c:b0:d8:
         68:44:45:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:22:33 2026 by rpki-client