Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft
File:                     xQRWVXeumfYZHJeDPdvdYk7CTpI.mft (raw, json)
Hash identifier:          gOPn7LNZKJVhU66IGtFqbIZg2yRc1cY3mj5GmSxe/AY=
Subject key identifier:   5E:71:30:C5:0E:B0:53:59:0A:75:48:C9:BB:2E:14:00:F5:1A:D6:E0
Authority key identifier: C5:04:56:55:77:AE:99:F6:19:1C:97:83:3D:DB:DD:62:4E:C2:4E:92
Certificate issuer:       /CN=A916D128/serialNumber=C504565577AE99F6191C97833DDBDD624EC24E92
Certificate serial:       0828
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft
Manifest number:          07F5
Signing time:             Wed 22 Jul 2026 21:54:03 +0000
Manifest this update:     Wed 22 Jul 2026 21:54:02 +0000
Manifest next update:     Wed 29 Jul 2026 21:54:02 +0000
Files and hashes:         1: xQRWVXeumfYZHJeDPdvdYk7CTpI.crl (hash: PGGmQ22JmBTOrcKO9lLJlw4mmUYazw0dWnys64/02JY=)
                          2: B38547D6EDB611EEB49CEE2CC4F9AE02.roa (hash: wOEYlAAobb9nCZWU7ILmmI4WtLWkbwGu6k9TfmwOgrw=)
                          3: 19D427BA6AFD11EEA4AF1A0FC4F9AE02.roa (hash: 8wPCikKi+MQL34SMZFG04z7KedSfiNcxZCrwRnt7vrA=)
                          4: 8342D87641AC11ECACD65E18C4F9AE02.roa (hash: Z9Aj+lSx9qfZY/JZ1gYb96BwZ7DAL++xryjqUPWEopY=)
                          5: A2272F186E1D11EEB6A10A0CC4F9AE02.roa (hash: pdKfh0rHk6MsKSq/P/C5bZ/12KI4D++yBlGSjUNlgck=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.crl
                          rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2088 (0x828)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D128, serialNumber=C504565577AE99F6191C97833DDBDD624EC24E92
        Validity
            Not Before: Jul 22 21:54:02 2026 GMT
            Not After : Jul 29 21:54:02 2026 GMT
        Subject: CN=6a613bfa-b5c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:65:b5:17:86:3f:79:a7:94:64:5d:c5:45:3c:
                    80:e6:b8:a0:9d:43:4b:be:49:f9:40:34:60:25:03:
                    ab:ae:f1:74:08:4b:6b:16:80:e5:f5:03:ec:7a:67:
                    24:70:4a:c2:54:bb:09:86:70:23:28:05:7d:56:6d:
                    3b:e7:f3:23:05:29:71:f4:79:44:13:c3:f6:36:85:
                    f2:d4:62:5a:8f:74:7c:17:65:50:c8:da:92:59:da:
                    61:15:fd:76:56:ca:31:06:f2:39:34:d3:34:2c:6f:
                    c8:b4:bc:e0:9b:f0:d3:e8:76:6e:e3:7f:d0:19:9a:
                    98:42:06:13:0b:a3:4b:4b:87:50:9b:b2:0a:36:6e:
                    d0:fa:0c:80:08:f8:02:4e:5d:3b:4b:61:6c:9f:ca:
                    4d:00:f6:ec:67:63:eb:6d:2a:2b:73:81:78:7b:ea:
                    27:98:05:cf:6c:02:87:f1:83:0c:e9:04:4c:df:c2:
                    a4:d0:ec:5b:eb:8e:70:d1:69:8d:6b:09:28:bb:50:
                    1e:9f:19:7e:47:47:3e:60:9e:97:20:1c:5e:1c:b5:
                    c0:a8:4a:50:28:07:39:b7:56:fd:a9:00:9e:57:25:
                    c5:04:93:cb:48:4a:18:7d:e2:8f:80:05:15:00:d3:
                    1f:87:bb:78:05:7d:32:40:1e:28:c5:3a:b8:f3:3c:
                    25:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:71:30:C5:0E:B0:53:59:0A:75:48:C9:BB:2E:14:00:F5:1A:D6:E0
            X509v3 Authority Key Identifier:
                keyid:C5:04:56:55:77:AE:99:F6:19:1C:97:83:3D:DB:DD:62:4E:C2:4E:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:05:1d:b0:3d:79:81:70:71:81:b7:9c:c9:6e:f2:22:f6:34:
         42:ad:4c:03:61:03:64:fc:54:ff:73:d9:74:89:58:eb:af:d9:
         e8:08:32:37:fb:b2:34:86:f5:21:23:ea:0e:2a:ce:7e:ce:95:
         66:15:b5:83:ef:5a:83:de:99:89:c4:1a:2e:a2:b6:70:c2:6f:
         23:61:d7:c6:7c:8d:4a:c9:09:49:04:0a:38:33:49:ec:34:5f:
         8d:6c:2c:cf:d8:5a:8c:8c:18:f5:a3:17:19:f1:ed:3b:2c:16:
         2c:ac:b8:69:28:47:a6:81:e5:9d:a1:9d:27:6e:ea:67:2b:1f:
         5c:86:ba:ee:65:15:26:c6:3b:c4:dc:9b:ec:af:e1:82:b8:b4:
         55:ba:73:08:90:7a:9a:14:0c:a7:b9:eb:6e:3a:0a:06:36:9e:
         ad:c4:c6:26:5d:88:10:f8:e6:82:c5:e4:3d:06:1a:27:60:5b:
         81:a4:71:c7:b8:a6:3e:cd:18:7b:56:06:07:ff:e9:2e:08:b3:
         e9:17:f2:be:39:a2:28:0e:b2:83:f7:f6:52:a5:a9:86:7a:fb:
         e7:4f:b2:1d:93:cf:69:0f:ca:6c:c1:a6:28:92:7e:ef:5a:f9:
         00:e1:15:ee:40:64:d9:aa:58:7f:43:9c:b3:97:28:03:79:11:
         54:c7:13:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:31:24 2026 by rpki-client