Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft
File:                     xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft (raw, json)
Hash identifier:          I1taOd3Ik+d1tP+bQoznPeVWwjNFrygsEVJGQUmWAO4=
Subject key identifier:   3A:C5:70:84:79:E2:B6:A5:41:48:2A:4F:11:92:C3:87:05:51:5D:B6
Authority key identifier: C5:B9:F3:81:B4:5C:E1:11:49:39:3E:1F:43:84:92:5D:EA:52:54:8A
Certificate issuer:       /CN=A916BE88/serialNumber=C5B9F381B45CE11149393E1F4384925DEA52548A
Certificate serial:       08A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbnzgbRc4RFJOT4fQ4SSXepSVIo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft
Manifest number:          089C
Signing time:             Wed 22 Jul 2026 21:07:31 +0000
Manifest this update:     Wed 22 Jul 2026 21:07:30 +0000
Manifest next update:     Wed 29 Jul 2026 21:07:30 +0000
Files and hashes:         1: xbnzgbRc4RFJOT4fQ4SSXepSVIo.crl (hash: My6o2oTVIhHrKhVLCD0QobCpV0qOTesTqhcSZORLogk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.crl
                          rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbnzgbRc4RFJOT4fQ4SSXepSVIo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:07:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2216 (0x8a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BE88, serialNumber=C5B9F381B45CE11149393E1F4384925DEA52548A
        Validity
            Not Before: Jul 22 21:07:30 2026 GMT
            Not After : Jul 29 21:07:30 2026 GMT
        Subject: CN=6a613112-70e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:aa:aa:c8:b9:bd:f5:0b:e9:d3:eb:e1:3b:d3:
                    43:26:c1:08:49:9d:b3:67:5a:93:a0:b4:74:9d:26:
                    1c:cb:82:cf:0f:1d:06:bf:db:24:1c:90:5a:3b:6c:
                    01:dc:de:45:34:d7:72:ec:f4:cb:b8:d5:79:69:42:
                    2f:be:57:6f:56:a1:c0:b2:1b:4f:2c:36:dd:d3:08:
                    f7:29:8b:ca:2f:f7:ba:22:23:89:c8:06:b2:5b:d0:
                    32:d6:21:82:ac:31:d4:cb:0f:e8:e6:93:05:aa:9c:
                    07:c4:a6:32:dd:c6:e7:7f:8f:9a:04:41:ba:a4:7b:
                    eb:10:21:b7:12:de:f6:1b:62:62:54:4d:94:3e:07:
                    79:62:3f:b6:26:5e:d9:a2:45:4e:13:65:50:d8:2e:
                    c5:02:d3:49:1a:54:38:bd:cd:bd:0c:9b:ba:a7:2f:
                    7e:25:d8:81:9f:b3:35:95:ec:10:49:d3:55:e6:61:
                    42:39:be:d1:e3:e3:23:47:e5:43:49:73:f1:ae:b4:
                    0b:5d:c4:16:74:c8:f0:9c:e4:d9:92:97:7d:9d:39:
                    42:bb:53:3f:6e:76:8a:08:05:38:d9:68:a1:7e:2b:
                    03:9f:8f:76:81:a7:85:68:9f:b4:f5:13:b0:ab:b4:
                    63:2c:d8:b4:72:31:f1:72:08:c7:db:90:a1:57:ff:
                    bb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:C5:70:84:79:E2:B6:A5:41:48:2A:4F:11:92:C3:87:05:51:5D:B6
            X509v3 Authority Key Identifier:
                keyid:C5:B9:F3:81:B4:5C:E1:11:49:39:3E:1F:43:84:92:5D:EA:52:54:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbnzgbRc4RFJOT4fQ4SSXepSVIo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:32:2b:44:f8:8a:84:32:e4:33:0c:fb:87:2b:5d:96:c9:19:
         f2:27:78:ec:6f:bb:08:30:da:e7:2c:20:ac:44:5d:c7:82:c6:
         ea:a9:2c:07:32:66:7d:2e:f0:66:14:1c:84:4e:02:82:cb:5f:
         9e:1e:49:d9:71:cb:d0:34:d6:bd:3f:83:01:b9:f3:84:12:24:
         82:2e:d1:12:f7:4f:ac:88:a9:10:d0:b8:9a:ab:a7:4f:e5:46:
         4a:87:93:66:6d:4e:de:4a:80:37:99:cc:33:25:d7:cb:50:22:
         7f:06:ba:3a:c5:a5:fe:b9:bb:b8:24:8c:35:41:f6:42:ad:89:
         ca:5f:1d:6f:49:b0:8e:44:ce:5f:85:a2:e9:6a:25:65:e3:72:
         bc:29:19:5a:37:ad:ea:f8:c4:22:2b:c1:47:2b:16:36:b8:0f:
         58:4c:83:bc:31:58:e4:4e:06:0e:c1:1c:14:d7:3a:59:26:2a:
         85:b2:37:e0:c7:84:67:c2:65:64:77:c6:25:6d:a4:be:5e:83:
         5e:be:cf:ae:fa:75:d5:63:2c:2c:50:1f:9a:61:5b:9d:7b:1f:
         c7:0e:33:b4:6b:97:59:eb:a5:6f:66:d1:f0:cf:43:38:4d:ec:
         e6:49:f3:27:b1:35:a2:c5:1e:b5:f9:24:cd:61:27:15:32:9f:
         22:97:2a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:03:30 2026 by rpki-client