Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918966F/7E229016072311F1B4B3AAFB2A3D8C67/xh7aKdRphAjI5WdDhpTVNnJaEn0.mft
File:                     xh7aKdRphAjI5WdDhpTVNnJaEn0.mft (raw, json)
Hash identifier:          oR+2Ng51q5eMwocO+3n7pbN14+x1RCVLv5LBpAdHCAQ=
Subject key identifier:   E7:CB:60:A4:64:D4:50:FF:D4:25:59:4B:BE:A3:94:86:03:4E:90:92
Authority key identifier: C6:1E:DA:29:D4:69:84:08:C8:E5:67:43:86:94:D5:36:72:5A:12:7D
Certificate issuer:       /CN=A918966F/serialNumber=C61EDA29D4698408C8E567438694D536725A127D
Certificate serial:       57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xh7aKdRphAjI5WdDhpTVNnJaEn0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918966F/7E229016072311F1B4B3AAFB2A3D8C67/xh7aKdRphAjI5WdDhpTVNnJaEn0.mft
Manifest number:          55
Signing time:             Thu 23 Jul 2026 10:13:35 +0000
Manifest this update:     Thu 23 Jul 2026 10:13:34 +0000
Manifest next update:     Thu 30 Jul 2026 10:13:34 +0000
Files and hashes:         1: xh7aKdRphAjI5WdDhpTVNnJaEn0.crl (hash: CnqL/OJ2xiuN0h/IAq/3dE4Rg6XZcJsff+QfDEkv9YU=)
                          2: 7FA6A66E072511F18DD83FDE2B3D8C67.roa (hash: Yle2np8VHG9XuuKa/Zf8owqSx1f8Kx45AoedIOUz9Gg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918966F/7E229016072311F1B4B3AAFB2A3D8C67/xh7aKdRphAjI5WdDhpTVNnJaEn0.crl
                          rsync://rpki.apnic.net/member_repository/A918966F/7E229016072311F1B4B3AAFB2A3D8C67/xh7aKdRphAjI5WdDhpTVNnJaEn0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xh7aKdRphAjI5WdDhpTVNnJaEn0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87 (0x57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918966F, serialNumber=C61EDA29D4698408C8E567438694D536725A127D
        Validity
            Not Before: Jul 23 10:13:34 2026 GMT
            Not After : Jul 30 10:13:34 2026 GMT
        Subject: CN=6a61e94e-0875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:dd:71:39:af:47:60:10:be:84:fb:ea:35:3b:
                    ee:92:28:cf:55:74:53:86:e1:bd:21:ab:16:24:62:
                    05:0a:f1:64:d6:be:9e:52:91:05:7d:6f:ac:13:d7:
                    d9:1c:a8:5a:56:42:74:ae:ae:ed:e0:92:33:67:e7:
                    0c:64:cc:bb:60:28:b8:12:3d:39:d4:5f:25:14:b1:
                    9d:42:c7:35:b9:36:6d:7a:85:83:89:55:78:6d:e4:
                    fb:e9:9d:5c:ba:cc:9b:fc:fd:22:27:46:2f:26:4d:
                    0b:bb:1f:39:a2:dd:1c:31:40:b3:6f:94:13:df:cd:
                    ba:9f:7f:f8:bf:c3:4f:17:53:60:91:61:83:fb:7e:
                    0e:da:64:a2:4a:40:d6:6d:6e:7b:38:91:13:ee:25:
                    05:ed:b8:d7:ae:89:4e:50:6c:8c:5d:94:5f:a5:9e:
                    b9:4f:76:c6:21:da:6d:70:59:69:61:db:5e:5e:7b:
                    fe:df:f6:42:68:e3:70:12:76:a6:6b:39:e2:1d:ea:
                    e3:e4:a6:5c:25:5e:46:30:d9:63:8b:97:d3:0c:d1:
                    23:05:b4:21:4c:34:4c:c1:55:ba:12:c9:8b:ba:de:
                    56:8b:b5:5a:e7:ee:61:5d:f1:85:e9:14:ac:25:a6:
                    bd:db:25:22:fa:86:f6:94:42:5d:b3:1b:a7:e6:a5:
                    48:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:CB:60:A4:64:D4:50:FF:D4:25:59:4B:BE:A3:94:86:03:4E:90:92
            X509v3 Authority Key Identifier:
                keyid:C6:1E:DA:29:D4:69:84:08:C8:E5:67:43:86:94:D5:36:72:5A:12:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918966F/7E229016072311F1B4B3AAFB2A3D8C67/xh7aKdRphAjI5WdDhpTVNnJaEn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xh7aKdRphAjI5WdDhpTVNnJaEn0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918966F/7E229016072311F1B4B3AAFB2A3D8C67/xh7aKdRphAjI5WdDhpTVNnJaEn0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:2e:64:fc:de:4f:dc:7a:d9:7a:20:c8:2a:9a:01:52:a3:04:
         22:fe:9c:9c:c7:62:f3:18:ef:20:d8:6e:47:9e:ab:f3:18:cc:
         36:1f:16:35:6f:8b:34:94:13:82:da:61:95:7d:3a:a5:fa:68:
         ba:bc:92:b3:67:52:4b:fa:5b:ee:d9:6a:e2:a3:fc:24:4f:2b:
         e1:da:b3:55:7d:28:00:d5:ec:c4:f9:0b:35:14:8d:94:fd:a8:
         ac:98:e1:8d:72:56:01:de:2f:8b:bf:00:b4:fe:3d:29:c1:ee:
         72:c0:41:d3:fb:fa:66:20:23:81:1b:95:ce:cd:fd:94:b4:b6:
         f0:d5:cd:e2:b1:41:0f:d7:1f:f2:ee:28:93:13:0a:16:90:f3:
         5f:49:ac:b0:60:84:ac:81:bd:04:e2:d8:9d:95:64:d7:13:af:
         59:1d:f9:4f:6e:87:65:1c:fe:37:27:18:ae:c1:20:59:b7:a1:
         1c:36:7e:83:8f:01:c2:55:8f:96:7b:25:a2:64:a5:3b:d4:44:
         6f:97:7a:d5:d1:42:61:91:32:0b:d7:4a:d1:fc:81:57:e3:f4:
         d6:64:08:07:7e:ee:3c:df:9b:87:cc:c7:d9:b6:f0:b1:b8:53:
         5e:d3:ce:69:7c:6e:74:db:29:ec:06:e4:1b:71:aa:d3:a9:5a:
         04:e0:78:48
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
OTY2RjExMC8GA1UEBRMoQzYxRURBMjlENDY5ODQwOEM4RTU2NzQzODY5NEQ1MzY3
MjVBMTI3RDAeFw0yNjA3MjMxMDEzMzRaFw0yNjA3MzAxMDEzMzRaMBgxFjAUBgNV
BAMTDTZhNjFlOTRlLTA4NzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDG3XE5r0dgEL6E++o1O+6SKM9VdFOG4b0hqxYkYgUK8WTWvp5SkQV9b6wT19kc
qFpWQnSuru3gkjNn5wxkzLtgKLgSPTnUXyUUsZ1CxzW5Nm16hYOJVXht5PvpnVy6
zJv8/SInRi8mTQu7Hzmi3RwxQLNvlBPfzbqff/i/w08XU2CRYYP7fg7aZKJKQNZt
bns4kRPuJQXtuNeuiU5QbIxdlF+lnrlPdsYh2m1wWWlh215ee/7f9kJo43ASdqZr
OeId6uPkplwlXkYw2WOLl9MM0SMFtCFMNEzBVboSyYu63laLtVrn7mFd8YXpFKwl
pr3bJSL6hvaUQl2zG6fmpUg1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU58tgpGTU
UP/UJVlLvqOUhgNOkJIwHwYDVR0jBBgwFoAUxh7aKdRphAjI5WdDhpTVNnJaEn0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5NjZGLzdFMjI5MDE2MDcy
MzExRjFCNEIzQUFGQjJBM0Q4QzY3L3hoN2FLZFJwaEFqSTVXZERocFRWTm5KYUVu
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIveGg3YUtkUnBoQWpJNVdkRGhwVFZObkphRW4wLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5
NjZGLzdFMjI5MDE2MDcyMzExRjFCNEIzQUFGQjJBM0Q4QzY3L3hoN2FLZFJwaEFq
STVXZERocFRWTm5KYUVuMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQB2LmT83k/cetl6IMgqmgFSowQi/pycx2LzGO8g2G5HnqvzGMw2HxY1b4s0lBOC
2mGVfTql+mi6vJKzZ1JL+lvu2Wrio/wkTyvh2rNVfSgA1ezE+Qs1FI2U/aismOGN
clYB3i+LvwC0/j0pwe5ywEHT+/pmICOBG5XOzf2UtLbw1c3isUEP1x/y7iiTEwoW
kPNfSaywYISsgb0E4tidlWTXE69ZHflPbodlHP43JxiuwSBZt6EcNn6DjwHCVY+W
eyWiZKU71ERvl3rV0UJhkTIL10rR/IFX4/TWZAgHfu4835uHzMfZtvCxuFNe085p
fG502ynsBuQbcarTqVoE4HhI
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:09:25 2026 by rpki-client