Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.mft
File:                     _XxIEch8Vm71Xtqw50P_BmufqGY.mft (raw, json)
Hash identifier:          9x2c8i0m2isbXiuOXavKRQrC0mIPPHEwYKfXDdulQ9E=
Subject key identifier:   86:FA:8C:B6:8B:E9:45:DA:99:C7:11:E6:16:FB:E2:2E:6E:B8:BF:DF
Authority key identifier: FD:7C:48:11:C8:7C:56:6E:F5:5E:DA:B0:E7:43:FF:06:6B:9F:A8:66
Certificate issuer:       /CN=A91935EA/serialNumber=FD7C4811C87C566EF55EDAB0E743FF066B9FA866
Certificate serial:       1777
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XxIEch8Vm71Xtqw50P_BmufqGY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.mft
Manifest number:          1768
Signing time:             Wed 22 Jul 2026 16:41:20 +0000
Manifest this update:     Wed 22 Jul 2026 16:41:19 +0000
Manifest next update:     Wed 29 Jul 2026 16:41:19 +0000
Files and hashes:         1: _XxIEch8Vm71Xtqw50P_BmufqGY.crl (hash: TDY1br2uxxgwNg1huyNw2ZGokryEcKsdBVyqpmsyxo8=)
                          2: 01B2AC1E064111E8A62EF586C4F9AE02.roa (hash: sfg45i8bTUpft2/BCIglF2LRfqPQiZusP6gRlhlo9Ck=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.crl
                          rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XxIEch8Vm71Xtqw50P_BmufqGY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:41:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6007 (0x1777)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91935EA, serialNumber=FD7C4811C87C566EF55EDAB0E743FF066B9FA866
        Validity
            Not Before: Jul 22 16:41:19 2026 GMT
            Not After : Jul 29 16:41:19 2026 GMT
        Subject: CN=6a60f2af-57e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9a:e1:f4:ef:c5:55:76:b3:eb:df:f8:b9:db:
                    e5:9f:e3:29:24:a8:84:1b:c9:f3:ee:8c:fb:42:0d:
                    8a:7e:fc:a4:7a:55:de:eb:4f:a2:4e:6d:73:05:49:
                    97:69:78:8b:16:07:c7:70:34:49:f5:f9:09:b5:91:
                    b6:1e:a0:12:52:58:a4:bc:fb:eb:2c:d8:8b:40:b5:
                    08:97:61:df:7c:ee:5f:78:d4:4f:6e:dc:2e:46:98:
                    b5:d1:fc:2b:91:26:fd:26:5f:fb:bc:b6:38:8e:3d:
                    2a:c2:cc:95:4a:31:c6:c7:d9:48:6b:f1:9d:dc:d3:
                    28:a5:42:a7:47:37:52:8c:8d:10:7a:03:7d:90:22:
                    62:d0:e1:23:6c:5e:f6:48:d0:9a:5a:64:7f:e5:84:
                    39:ed:92:15:f2:cb:76:a4:fa:e4:68:d9:57:1e:95:
                    a9:ba:6d:c5:e3:6c:4c:0a:f4:be:d2:46:41:15:02:
                    be:ec:72:20:00:b2:48:f5:6e:2f:24:af:50:db:6e:
                    13:c4:4d:d5:f2:d0:0b:49:7f:c3:2c:42:f3:82:b7:
                    e3:26:a8:7d:a5:6e:aa:38:50:4c:23:fe:09:3a:0d:
                    c2:cb:c7:20:8b:24:ed:15:4b:10:7b:47:00:05:b0:
                    cb:1a:87:ff:4c:1e:3e:c7:60:ca:27:6c:4d:9b:06:
                    b2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:FA:8C:B6:8B:E9:45:DA:99:C7:11:E6:16:FB:E2:2E:6E:B8:BF:DF
            X509v3 Authority Key Identifier:
                keyid:FD:7C:48:11:C8:7C:56:6E:F5:5E:DA:B0:E7:43:FF:06:6B:9F:A8:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XxIEch8Vm71Xtqw50P_BmufqGY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:ef:02:23:ef:49:35:45:af:12:10:24:fb:64:3d:b5:eb:15:
         e8:c6:63:73:2e:3c:27:1b:56:5b:a4:f4:19:a1:b7:93:49:3a:
         88:c1:08:06:91:cb:7d:15:d9:b2:ba:a9:fd:82:35:aa:92:3a:
         53:ac:67:21:69:69:9d:e0:ed:f3:5c:1e:3f:71:22:2a:7e:88:
         6b:5e:5a:41:d7:80:74:4a:ad:e1:83:b2:cf:2b:f0:44:44:3e:
         36:c4:e6:ab:33:66:61:db:21:fb:b6:46:c7:64:ad:0e:32:3e:
         35:3a:cf:90:69:79:ed:6b:58:95:f2:9e:04:dd:3b:92:a6:68:
         68:cd:14:c0:96:11:5d:d8:16:71:94:e5:a4:72:0b:be:c8:ad:
         8a:de:68:f7:e6:b3:6b:d5:74:20:ec:e8:e4:9e:b3:34:d7:92:
         59:20:9e:35:95:76:3a:d7:4e:58:1e:ed:3b:81:16:77:ec:7b:
         c8:ea:73:65:5e:e5:ea:df:a1:8e:3d:c5:ae:25:75:4c:74:b8:
         b4:51:8c:3f:47:0f:6f:ad:da:c8:8e:a1:19:20:e0:72:2c:28:
         16:93:4a:0f:0b:10:67:06:98:e1:ae:8f:6c:0c:9a:ca:a0:ed:
         45:bf:6f:a4:0a:ac:b5:a9:9d:0e:52:34:5f:d7:8b:7b:9d:7b:
         c1:24:29:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:43:13 2026 by rpki-client