Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.mft
File:                     XSeFtU0WPtAepUGLz6NPG3RWtxM.mft (raw, json)
Hash identifier:          OlBHuonqoaH0tcT5gdHOlowBtxQNmzp+ZjlEr1t0wco=
Subject key identifier:   AC:79:CB:45:54:C8:05:53:3E:94:0F:8B:1A:B6:ED:67:41:F6:AD:EC
Authority key identifier: 5D:27:85:B5:4D:16:3E:D0:1E:A5:41:8B:CF:A3:4F:1B:74:56:B7:13
Certificate issuer:       /CN=A9167CC5/serialNumber=5D2785B54D163ED01EA5418BCFA34F1B7456B713
Certificate serial:       0576
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XSeFtU0WPtAepUGLz6NPG3RWtxM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.mft
Manifest number:          0555
Signing time:             Thu 23 Jul 2026 00:14:04 +0000
Manifest this update:     Thu 23 Jul 2026 00:14:04 +0000
Manifest next update:     Thu 30 Jul 2026 00:14:04 +0000
Files and hashes:         1: XSeFtU0WPtAepUGLz6NPG3RWtxM.crl (hash: v1XVroq63JGCbLPJFEDXz+/e8DAiXwQjDMnCVSKvoCc=)
                          2: ACE844F047AA11ECA0F05026C4F9AE02.roa (hash: xF2IvoVXmAincHuvdv8xT2emt6/vG3hUCriU6a0X2F4=)
                          3: 1F77EFA44C4011EC952D5A23C4F9AE02.roa (hash: TtIgh6p3MeT87i0AxcRjiCaJmw5Zn2R/2iZkAkCBffQ=)
                          4: 6337963E4C3D11ECB5FF844FC4F9AE02.roa (hash: YlLnh1haCAguuDMWLHxz+klHykWczeyMGFHRpbzDxJg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.crl
                          rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XSeFtU0WPtAepUGLz6NPG3RWtxM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 00:14:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1398 (0x576)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167CC5, serialNumber=5D2785B54D163ED01EA5418BCFA34F1B7456B713
        Validity
            Not Before: Jul 23 00:14:04 2026 GMT
            Not After : Jul 30 00:14:04 2026 GMT
        Subject: CN=6a615ccc-b039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b4:61:f6:11:0b:45:cc:6a:70:fa:8b:97:79:
                    da:75:38:4b:5f:64:97:cd:52:24:d9:80:68:56:ae:
                    bf:87:ef:10:1c:f6:18:94:93:90:38:cc:36:92:da:
                    ee:61:1f:c8:a4:0a:04:33:4c:48:a5:0b:34:d0:3a:
                    f5:4b:a1:5e:a0:c1:11:0a:be:1e:e4:85:7c:e9:8a:
                    c6:e9:7c:fb:df:a8:9f:8b:e7:df:8c:e8:fe:b5:4f:
                    9e:84:ba:a2:8e:54:50:86:ae:7c:75:36:26:ba:77:
                    0e:66:de:c0:43:61:c7:27:7f:19:14:09:08:aa:0b:
                    55:2f:69:65:40:eb:8f:99:86:47:bc:9c:54:a7:3b:
                    81:39:99:15:09:33:e8:68:2b:d8:9a:e8:aa:01:91:
                    c3:9f:c7:98:c4:21:9f:bd:1c:c1:bc:a1:e2:45:a4:
                    69:69:77:ab:14:41:60:94:41:dd:3e:12:58:ed:79:
                    75:9b:d6:17:47:ec:f5:d1:08:d6:aa:27:f2:e9:f4:
                    03:72:f1:42:80:b5:18:96:a5:fc:16:6d:81:d6:f9:
                    06:e3:81:36:00:ee:92:d7:48:6c:67:90:c3:cb:4b:
                    d5:eb:27:fd:3e:b8:e7:fe:8a:f3:20:84:95:93:4b:
                    d6:36:a0:1c:eb:7f:2e:ff:0d:66:1d:65:54:ea:a1:
                    40:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:79:CB:45:54:C8:05:53:3E:94:0F:8B:1A:B6:ED:67:41:F6:AD:EC
            X509v3 Authority Key Identifier:
                keyid:5D:27:85:B5:4D:16:3E:D0:1E:A5:41:8B:CF:A3:4F:1B:74:56:B7:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XSeFtU0WPtAepUGLz6NPG3RWtxM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:29:7f:b4:36:97:c8:6b:0a:5e:b2:83:4b:a6:da:26:02:e3:
         81:15:36:65:da:04:e3:a2:90:6c:61:43:44:42:24:dd:9e:c0:
         50:bb:8e:76:be:b4:fa:b4:bc:b2:c5:38:f3:f3:5c:34:06:dd:
         e2:02:e8:09:1f:d2:d3:eb:94:f4:cf:eb:df:fe:3e:fd:20:35:
         ae:da:27:31:0d:84:66:8e:e3:00:e7:19:d1:30:2c:63:08:50:
         9e:03:6f:6c:4d:e7:19:88:0b:ee:d8:f3:a0:e9:e1:6d:54:a6:
         14:c8:8f:6a:de:31:06:8b:6c:fe:03:84:09:81:8a:23:74:fa:
         fc:ba:5f:85:77:87:bd:5a:c9:aa:89:31:bb:07:f9:cf:20:a8:
         8e:b4:29:ab:e2:41:38:eb:f2:92:31:05:74:2e:50:77:6b:4d:
         b6:50:85:05:90:31:9f:ae:ab:31:26:33:f6:82:7d:7f:ea:a4:
         ea:f2:3a:33:17:33:34:b1:06:ae:1d:40:95:8d:4c:49:5c:aa:
         17:d2:ce:8b:ec:a2:7c:c3:98:aa:75:ae:08:c4:e3:43:e9:c1:
         f3:33:95:e4:af:d5:b1:3b:48:38:79:37:c2:14:ba:5a:a6:6e:
         2e:91:e6:01:96:3f:43:7c:96:07:70:ec:1f:9e:47:c5:25:c3:
         07:3d:b4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:28:23 2026 by rpki-client