Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918110B/BAEF0790869E11F1B0C3E0F36EA30FBC/xW0du4pgFr90xqhFxeNGKMJ4dzI.mft
File:                     xW0du4pgFr90xqhFxeNGKMJ4dzI.mft (raw, json)
Hash identifier:          LP/UkOyzv+CIZr+W0K+CCMxl0aSVLFrsgRXqAwbktyE=
Subject key identifier:   78:CD:7E:7D:74:4D:CD:09:24:19:78:9E:BF:BE:3C:73:19:2D:A6:D8
Authority key identifier: C5:6D:1D:BB:8A:60:16:BF:74:C6:A8:45:C5:E3:46:28:C2:78:77:32
Certificate issuer:       /CN=A918110B/serialNumber=C56D1DBB8A6016BF74C6A845C5E34628C2787732
Certificate serial:       03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xW0du4pgFr90xqhFxeNGKMJ4dzI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918110B/BAEF0790869E11F1B0C3E0F36EA30FBC/xW0du4pgFr90xqhFxeNGKMJ4dzI.mft
Manifest number:          02
Signing time:             Thu 23 Jul 2026 14:01:41 +0000
Manifest this update:     Thu 23 Jul 2026 14:01:40 +0000
Manifest next update:     Thu 30 Jul 2026 14:01:40 +0000
Files and hashes:         1: xW0du4pgFr90xqhFxeNGKMJ4dzI.crl (hash: Rq/0mfarwuWGfS7W/BJWSJSsUHNw0vLROgtdczCn7HQ=)
                          2: 044B9692869F11F18E46D7236FA30FBC.roa (hash: I7p/0pECs9pLSsuX4d892DqcQ7FtCtuQLKWoIDde+T4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918110B/BAEF0790869E11F1B0C3E0F36EA30FBC/xW0du4pgFr90xqhFxeNGKMJ4dzI.crl
                          rsync://rpki.apnic.net/member_repository/A918110B/BAEF0790869E11F1B0C3E0F36EA30FBC/xW0du4pgFr90xqhFxeNGKMJ4dzI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xW0du4pgFr90xqhFxeNGKMJ4dzI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 14:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918110B, serialNumber=C56D1DBB8A6016BF74C6A845C5E34628C2787732
        Validity
            Not Before: Jul 23 14:01:40 2026 GMT
            Not After : Jul 30 14:01:40 2026 GMT
        Subject: CN=6a621ec4-47dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b5:e8:8d:73:13:fb:47:a5:60:5b:b4:98:e5:
                    ae:44:16:11:62:48:02:45:19:e0:39:16:e2:25:3b:
                    b2:4a:4c:98:30:26:19:29:ad:41:c4:8f:74:b7:40:
                    be:3d:f2:86:69:f9:e2:0c:66:ef:73:4c:8f:64:14:
                    dc:36:f9:7a:c3:7e:d5:9e:81:c0:9e:d0:88:ca:c7:
                    61:86:89:4c:03:06:77:c4:67:c0:43:4c:0c:e4:78:
                    af:c5:ac:c2:be:45:6e:07:3a:e4:a6:40:0e:99:c0:
                    01:6c:b9:41:9e:5e:e8:c1:04:1b:92:61:0b:56:7a:
                    f0:29:51:bf:d0:a0:ee:ed:81:9d:51:90:24:45:6f:
                    62:4f:03:cd:86:3a:22:96:2d:47:51:6d:e9:e2:00:
                    f7:7a:5c:03:81:b9:7a:59:8d:d2:8e:ca:c4:e2:98:
                    db:6d:41:34:0c:05:96:d9:52:ae:0e:74:1b:d3:50:
                    97:ce:cb:40:65:2f:3b:2a:f0:c8:82:48:0e:9d:32:
                    4b:ab:2f:f8:ea:a8:29:47:f2:3d:b3:3d:6d:23:71:
                    45:4c:c7:b6:81:9d:f0:44:06:8e:68:93:25:6b:7f:
                    e9:fa:a9:5f:19:30:5e:80:d8:6c:ef:68:e3:d8:ef:
                    c2:33:45:57:d8:cd:83:2c:e1:df:d0:e7:79:c4:45:
                    bb:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:CD:7E:7D:74:4D:CD:09:24:19:78:9E:BF:BE:3C:73:19:2D:A6:D8
            X509v3 Authority Key Identifier:
                keyid:C5:6D:1D:BB:8A:60:16:BF:74:C6:A8:45:C5:E3:46:28:C2:78:77:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918110B/BAEF0790869E11F1B0C3E0F36EA30FBC/xW0du4pgFr90xqhFxeNGKMJ4dzI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xW0du4pgFr90xqhFxeNGKMJ4dzI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918110B/BAEF0790869E11F1B0C3E0F36EA30FBC/xW0du4pgFr90xqhFxeNGKMJ4dzI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:fe:6c:1f:50:ae:c3:30:f1:12:73:55:21:01:3a:6e:5d:5a:
         f3:b7:7f:0c:16:67:58:a0:e1:4b:f2:d4:e9:42:ed:3b:c9:81:
         99:be:f6:c6:f9:bb:74:a7:eb:83:a5:72:51:b2:e7:41:31:21:
         6d:ba:17:64:3a:f2:bf:4e:56:49:f8:e4:d9:d3:dc:cb:97:cf:
         a3:bc:db:ad:15:98:be:64:a0:6d:59:45:ea:5a:3c:58:d1:e3:
         b6:f0:b0:43:80:79:95:2f:5a:d1:e2:84:f3:2f:e8:44:fc:94:
         32:c5:11:2e:18:be:69:67:67:57:55:2a:ae:5d:81:72:c7:56:
         09:03:97:6e:d9:d9:ac:6d:f4:c0:51:e3:df:25:36:1d:bf:28:
         4c:29:15:1a:a1:1f:a0:a3:60:77:ef:d3:c3:69:02:ae:d9:85:
         04:21:6a:f9:fa:e4:59:71:d4:76:f1:40:3f:25:37:4f:43:88:
         6c:2b:79:ec:3f:f3:cd:79:f5:bd:9d:58:24:fb:91:74:55:54:
         d3:b6:0c:78:c4:1e:60:86:5e:fd:4e:e7:4a:3e:48:3a:18:4a:
         e4:ce:f5:28:a5:c2:7f:ef:84:22:fb:1d:25:01:d4:4d:d2:ca:
         00:40:90:3a:73:01:ed:4e:85:0d:62:ef:2f:28:5f:84:40:47:
         f6:20:f1:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:39:39 2026 by rpki-client