Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft
File:                     xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft (raw, json)
Hash identifier:          tvMTzGcLqzBZJk5mfVxhrA89HnHYKjwfqWWAnJplGKM=
Subject key identifier:   30:4B:92:84:DC:6E:45:42:36:5C:F4:E8:D4:1A:50:6C:36:54:BF:8A
Authority key identifier: C5:45:25:E9:70:5B:D6:9D:61:42:4D:BE:E7:B0:49:3F:5F:D6:F0:A4
Certificate issuer:       /CN=A912D1D5/serialNumber=C54525E9705BD69D61424DBEE7B0493F5FD6F0A4
Certificate serial:       0285
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUUl6XBb1p1hQk2-57BJP1_W8KQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft
Manifest number:          0279
Signing time:             Thu 23 Jul 2026 03:12:18 +0000
Manifest this update:     Thu 23 Jul 2026 03:12:17 +0000
Manifest next update:     Thu 30 Jul 2026 03:12:17 +0000
Files and hashes:         1: xUUl6XBb1p1hQk2-57BJP1_W8KQ.crl (hash: WsGKLmINPRDEQK600l/XZkWmdGYLa8FNuKfzkBC2nZo=)
                          2: 19E19DA0E5CE11EDB697BC74C4F9AE02.roa (hash: 41mYeLJTrr6m5wB9HGw37UApRa2JZ2ZaJVCcumD/aT0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.crl
                          rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUUl6XBb1p1hQk2-57BJP1_W8KQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:12:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 645 (0x285)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D1D5, serialNumber=C54525E9705BD69D61424DBEE7B0493F5FD6F0A4
        Validity
            Not Before: Jul 23 03:12:17 2026 GMT
            Not After : Jul 30 03:12:17 2026 GMT
        Subject: CN=6a618692-c45f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:50:ac:49:99:b8:f4:43:a0:25:2f:a8:59:2a:
                    f0:ff:76:06:24:d9:e5:0c:95:e9:9b:6b:e7:ca:1f:
                    e9:15:73:90:8a:30:d7:fb:cf:2c:1c:fb:e0:f4:d7:
                    bf:ec:5d:6e:e4:8f:c0:fd:2f:90:64:cc:d7:24:b0:
                    09:cb:d6:72:09:d4:a8:f5:11:87:ae:34:10:4a:9d:
                    4b:c4:ed:d6:f9:fa:6f:3a:72:d4:f0:8b:83:79:6e:
                    d0:94:30:2f:8f:7b:75:fb:2b:c8:37:62:e1:ae:a4:
                    60:a3:94:3d:21:f8:3d:17:e4:e1:8f:da:a5:fb:ae:
                    24:a8:a8:81:91:69:08:19:50:39:8b:7f:bd:e4:5d:
                    16:8e:37:32:92:dc:2c:e1:aa:d0:ee:cf:5d:1d:cf:
                    37:43:5d:84:e3:66:92:e2:1b:8a:e4:39:94:6d:b8:
                    67:ae:bf:db:0b:30:30:19:4c:91:48:72:0e:14:7a:
                    67:94:4e:c0:2c:4b:59:c3:d4:11:e1:e0:00:58:a8:
                    18:09:0f:42:07:bb:2c:19:f1:9d:5d:5c:55:30:f8:
                    84:88:bf:27:2b:d8:a2:6f:e8:9d:18:d9:a4:a7:14:
                    08:fe:e6:a0:20:46:db:4a:3a:73:55:45:6c:05:df:
                    9f:d6:5c:54:bc:1f:d8:5c:72:23:8a:c6:52:40:69:
                    52:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:4B:92:84:DC:6E:45:42:36:5C:F4:E8:D4:1A:50:6C:36:54:BF:8A
            X509v3 Authority Key Identifier:
                keyid:C5:45:25:E9:70:5B:D6:9D:61:42:4D:BE:E7:B0:49:3F:5F:D6:F0:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUUl6XBb1p1hQk2-57BJP1_W8KQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:8c:9c:ab:33:d3:58:4c:a2:41:1a:f7:b4:d4:20:ab:c5:06:
         cb:d6:e9:a1:39:92:72:74:b7:75:dc:e8:10:19:23:13:f5:e6:
         6b:8e:88:b1:e7:7a:fc:5a:f7:1e:22:50:b0:e3:67:ac:30:cf:
         61:c5:7c:1d:f0:38:94:7d:6f:7c:f4:d8:50:f8:99:7a:80:14:
         74:df:29:f8:19:d6:f1:d4:ed:5a:5e:5b:90:02:01:9f:36:50:
         e0:4b:b5:d3:e3:85:51:bc:65:e9:e5:60:b0:86:4e:33:0e:94:
         05:a1:f7:95:6c:8b:d9:a3:33:7c:01:f5:3b:a2:86:0f:61:ba:
         7c:35:c4:ab:29:78:36:41:3d:92:1a:03:77:d6:25:9e:34:a7:
         f5:12:5c:45:83:be:d7:ea:68:cb:01:aa:c4:ee:73:14:a2:f5:
         d5:dc:90:65:3f:13:ed:3b:bb:5a:c7:17:b8:59:94:8a:03:9b:
         fa:bd:9a:8c:84:21:69:4a:22:28:db:06:4b:f5:a4:ce:86:03:
         29:5c:9e:57:d7:0b:e1:10:7e:dd:b9:35:4a:e9:fb:8f:2c:40:
         e3:4b:21:76:ed:14:72:2f:ee:9a:a6:7f:30:f0:2b:8d:e4:ba:
         54:bd:97:65:00:0f:b2:68:a2:69:84:97:6f:d1:dd:58:2f:f2:
         37:24:7a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:54:44 2026 by rpki-client