Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft
File:                     xNe5S537ZPXBiScjMNvcrSp9AW4.mft (raw, json)
Hash identifier:          8UdaHqUTnBc/202XMUkP6ekU2aw/MzOdTbac+2of/SA=
Subject key identifier:   72:4F:06:3A:75:D4:56:DE:A6:39:BC:97:BB:E0:65:0C:82:49:70:0D
Authority key identifier: C4:D7:B9:4B:9D:FB:64:F5:C1:89:27:23:30:DB:DC:AD:2A:7D:01:6E
Certificate issuer:       /CN=A912E791/serialNumber=C4D7B94B9DFB64F5C189272330DBDCAD2A7D016E
Certificate serial:       05A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft
Manifest number:          0588
Signing time:             Thu 23 Jul 2026 00:07:54 +0000
Manifest this update:     Thu 23 Jul 2026 00:07:53 +0000
Manifest next update:     Thu 30 Jul 2026 00:07:53 +0000
Files and hashes:         1: xNe5S537ZPXBiScjMNvcrSp9AW4.crl (hash: heHqYv0791IXFtLPD5kZhSu3CIZhCwKRQ4KFfK4Pqpk=)
                          2: 9E9D5C66157C11F0B4CD801EC4F9AE02.roa (hash: XRPA2JKWpTIHSFaMOHgkHY8yCfbif5wXEREcy191bJ4=)
                          3: 83595478B65E11EF8DB85B32C4F9AE02.roa (hash: et9HDrh+GN5yOnO0QC3PHWe6pVv8xUnM/31aeD6iTS8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.crl
                          rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 00:07:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1442 (0x5a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E791, serialNumber=C4D7B94B9DFB64F5C189272330DBDCAD2A7D016E
        Validity
            Not Before: Jul 23 00:07:53 2026 GMT
            Not After : Jul 30 00:07:53 2026 GMT
        Subject: CN=6a615b5a-3017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d7:09:1c:74:21:a9:7d:39:02:4f:86:e9:dc:
                    7e:8f:2f:40:9e:6e:46:9b:d6:70:1b:7f:01:30:7e:
                    b5:fc:0e:d7:02:75:ab:f5:e4:d3:75:ab:11:23:22:
                    c7:53:5e:18:0c:58:c8:b3:1a:75:2e:97:88:64:53:
                    50:5c:4c:4f:b5:1d:d6:72:7b:7e:fd:12:89:bd:f9:
                    20:55:df:f7:a8:c9:7c:4d:40:33:cd:56:14:5d:df:
                    de:ce:f4:93:6e:44:59:7a:1d:0a:06:c0:85:0f:0b:
                    7f:26:bf:26:08:55:e3:3e:79:de:e9:cf:f7:0b:d9:
                    89:93:84:11:c8:9b:48:d9:03:d3:db:a8:51:90:4a:
                    d9:3f:ba:5b:af:20:41:fb:7b:20:37:af:17:9e:6c:
                    a5:f1:ea:a3:b1:ea:bc:f6:97:a7:02:71:7f:0e:35:
                    c1:89:ca:a2:2a:15:1b:9c:64:ef:a9:fb:81:6c:66:
                    ec:51:46:f7:a8:93:b4:01:29:f2:7f:43:c4:23:e3:
                    64:d3:38:8c:e4:ca:4a:e2:77:62:f2:ae:2a:69:c1:
                    e5:69:d2:a3:7c:21:78:0c:95:43:21:ba:b7:c2:b4:
                    04:6b:2f:60:e7:b4:50:c1:eb:66:15:25:18:53:0f:
                    b2:47:13:77:72:43:68:ce:13:b6:7b:1a:77:06:b4:
                    96:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:4F:06:3A:75:D4:56:DE:A6:39:BC:97:BB:E0:65:0C:82:49:70:0D
            X509v3 Authority Key Identifier:
                keyid:C4:D7:B9:4B:9D:FB:64:F5:C1:89:27:23:30:DB:DC:AD:2A:7D:01:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:d2:77:1f:e9:91:ef:93:43:8f:b7:7a:b4:d2:0d:21:02:5b:
         96:4a:ea:75:1b:8b:bd:aa:db:8e:c4:0a:ff:04:2f:d6:1e:ac:
         84:40:1c:36:69:f5:d2:d7:13:15:04:e0:80:eb:99:e1:dd:4f:
         33:8d:d5:18:ac:15:bc:8f:ef:e9:11:3f:a4:af:96:03:10:d6:
         11:b0:cc:fd:db:46:dc:da:0a:97:f0:e6:c0:b2:71:bb:86:e2:
         2f:8e:39:0c:27:fc:a5:d3:23:5a:d4:b8:7c:73:db:7b:89:0d:
         1e:0c:69:98:91:b8:e1:fc:71:ac:7f:97:24:a0:93:b9:ad:8c:
         cd:f6:71:11:64:01:34:c5:b5:b1:20:71:43:f8:a7:8e:71:69:
         eb:19:07:4b:87:52:1f:9a:f1:20:01:f2:be:b5:bd:61:c0:c9:
         57:a5:06:16:c2:52:24:a0:52:f5:77:29:45:ba:89:7a:d1:3e:
         4b:46:32:83:81:e8:57:4b:94:70:fd:f2:70:81:a4:42:18:0d:
         f4:e1:88:d7:d4:3b:1a:9d:e9:14:1d:ab:0c:0a:3d:d1:f2:15:
         a2:52:c5:cc:2d:3f:56:f5:f4:95:63:09:eb:3b:6a:00:a8:2a:
         9e:68:48:13:3d:bf:11:8c:51:f0:2d:95:cd:14:b0:e3:a3:df:
         80:8c:ae:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:04:45 2026 by rpki-client