Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/XrCY701WVcxmtq-Bw83kBi2ALzs.mft
File:                     XrCY701WVcxmtq-Bw83kBi2ALzs.mft (raw, json)
Hash identifier:          q8v+1nUg2kQhd4Kig6Vo6D7fe8BCZKul8Ili2mdlm6M=
Subject key identifier:   5C:BB:74:EA:21:C4:24:F5:78:DB:95:42:67:8B:B3:8C:13:EB:D1:B7
Authority key identifier: 5E:B0:98:EF:4D:56:55:CC:66:B6:AF:81:C3:CD:E4:06:2D:80:2F:3B
Certificate issuer:       /CN=A919E3FB/serialNumber=5EB098EF4D5655CC66B6AF81C3CDE4062D802F3B
Certificate serial:       05A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XrCY701WVcxmtq-Bw83kBi2ALzs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/XrCY701WVcxmtq-Bw83kBi2ALzs.mft
Manifest number:          059E
Signing time:             Wed 22 Jul 2026 23:56:39 +0000
Manifest this update:     Wed 22 Jul 2026 23:56:39 +0000
Manifest next update:     Wed 29 Jul 2026 23:56:39 +0000
Files and hashes:         1: XrCY701WVcxmtq-Bw83kBi2ALzs.crl (hash: 3d1cTUQFapeXdYCO/PniJo9sC+bBYIhPOz5k9JPvGCg=)
                          2: B4D8E692267111ECA0546981C4F9AE02.roa (hash: CMK57h7d3VJ8Y5Z6L2ancbIus6PT121u0oU6HX7o5tQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/XrCY701WVcxmtq-Bw83kBi2ALzs.crl
                          rsync://rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/XrCY701WVcxmtq-Bw83kBi2ALzs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XrCY701WVcxmtq-Bw83kBi2ALzs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:56:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1446 (0x5a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E3FB, serialNumber=5EB098EF4D5655CC66B6AF81C3CDE4062D802F3B
        Validity
            Not Before: Jul 22 23:56:39 2026 GMT
            Not After : Jul 29 23:56:39 2026 GMT
        Subject: CN=6a6158b7-5047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:bd:f2:8b:85:01:25:86:bb:d6:0f:fc:f3:23:
                    5f:5f:11:cd:5a:9c:98:21:b1:a6:df:fc:9d:f8:73:
                    bb:0e:f0:bb:b3:72:be:c8:18:9e:e9:5b:d6:b5:18:
                    47:a0:43:c7:e4:3d:23:b5:fb:94:9a:1f:0d:22:8c:
                    a1:8c:a1:86:9c:32:13:8a:3e:31:a6:12:8c:1a:72:
                    e0:81:ab:78:65:eb:eb:43:dc:9d:80:62:49:ad:d2:
                    53:f6:6d:d1:aa:70:c0:b8:b6:a7:a4:4b:f6:e7:9f:
                    63:a0:81:fd:68:cc:53:44:7c:dd:ac:a1:cc:da:a9:
                    be:f4:72:af:1f:e2:1c:7c:c0:f1:8a:6b:7c:4c:2e:
                    5e:9b:f6:5c:da:ea:62:7a:1c:58:bc:ef:fd:72:10:
                    45:9f:73:77:fe:a8:e8:a3:2d:aa:00:bd:f6:14:72:
                    41:e0:b4:92:b6:cb:bc:32:da:5c:58:12:b4:92:20:
                    3d:52:58:b4:19:7e:1a:32:74:64:55:76:d3:06:42:
                    6c:90:e6:b7:01:92:83:85:b6:16:36:1b:e1:c2:41:
                    54:b7:ee:e2:53:56:ed:92:d4:91:06:00:6b:c7:a8:
                    f2:46:38:d2:95:72:83:ee:98:53:48:85:a3:ee:db:
                    53:de:e8:cc:b7:7c:19:c8:5d:62:19:39:37:96:55:
                    cf:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:BB:74:EA:21:C4:24:F5:78:DB:95:42:67:8B:B3:8C:13:EB:D1:B7
            X509v3 Authority Key Identifier:
                keyid:5E:B0:98:EF:4D:56:55:CC:66:B6:AF:81:C3:CD:E4:06:2D:80:2F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/XrCY701WVcxmtq-Bw83kBi2ALzs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XrCY701WVcxmtq-Bw83kBi2ALzs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/XrCY701WVcxmtq-Bw83kBi2ALzs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:3c:8f:d6:8f:1d:4d:97:8b:cb:fc:b5:87:54:93:6b:52:af:
         6c:65:28:2a:04:08:92:54:86:13:58:36:5c:2f:10:5b:35:31:
         f6:fb:de:ec:5a:3a:e6:08:15:6a:82:14:6a:db:45:7d:74:c0:
         e4:ad:fb:f4:dd:e4:5c:11:91:e1:e4:c1:26:0a:12:41:25:35:
         c0:41:f2:bc:d2:3a:c7:b9:c2:c2:80:22:60:e7:88:6c:cf:9a:
         9f:9d:28:d6:e4:1d:cc:97:5a:9c:5e:ff:98:53:e0:5a:e3:f5:
         b7:73:1d:fa:8b:1c:0a:ba:db:e0:ea:8a:bb:e0:04:c7:f2:22:
         f0:d2:3d:cb:1c:18:fe:5b:77:fa:45:44:d6:36:9b:9c:98:a9:
         34:67:ca:64:68:bf:0f:03:6e:f0:b8:f1:6c:ba:e2:bb:5d:3e:
         65:cc:18:8a:31:7b:67:08:cd:cd:19:09:13:e7:f2:b8:aa:54:
         a0:c1:95:7a:e2:a5:6e:f8:22:cd:7a:eb:c8:1e:d0:63:01:9a:
         86:d4:9c:c6:7e:c6:35:d3:eb:3a:54:c2:62:80:e4:bb:d6:2b:
         a6:1c:69:69:d8:be:91:32:a3:9f:9e:0c:7d:9c:a4:4d:7c:55:
         1f:e4:17:f6:e9:33:db:d0:16:b2:ff:47:2a:71:55:b9:2d:2c:
         88:3c:36:67
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUUzRkIxMTAvBgNVBAUTKDVFQjA5OEVGNEQ1NjU1Q0M2NkI2QUY4MUMzQ0RFNDA2
MkQ4MDJGM0IwHhcNMjYwNzIyMjM1NjM5WhcNMjYwNzI5MjM1NjM5WjAYMRYwFAYD
VQQDEw02YTYxNThiNy01MDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnL3yi4UBJYa71g/88yNfXxHNWpyYIbGm3/yd+HO7DvC7s3K+yBie6VvWtRhH
oEPH5D0jtfuUmh8NIoyhjKGGnDITij4xphKMGnLggat4ZevrQ9ydgGJJrdJT9m3R
qnDAuLanpEv2559joIH9aMxTRHzdrKHM2qm+9HKvH+IcfMDximt8TC5em/Zc2upi
ehxYvO/9chBFn3N3/qjooy2qAL32FHJB4LSStsu8MtpcWBK0kiA9Uli0GX4aMnRk
VXbTBkJskOa3AZKDhbYWNhvhwkFUt+7iU1btktSRBgBrx6jyRjjSlXKD7phTSIWj
7ttT3ujMt3wZyF1iGTk3llXPQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFy7dOoh
xCT1eNuVQmeLs4wT69G3MB8GA1UdIwQYMBaAFF6wmO9NVlXMZravgcPN5AYtgC87
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTNGQi9GREQ0NEMyMjI2
NkUxMUVDQUMwOTdDN0JDNEY5QUUwMi9YckNZNzAxV1ZjeG10cS1Cdzgza0JpMkFM
enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hyQ1k3MDFXVmN4bXRxLUJ3ODNrQmkyQUx6cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RTNGQi9GREQ0NEMyMjI2NkUxMUVDQUMwOTdDN0JDNEY5QUUwMi9YckNZNzAxV1Zj
eG10cS1Cdzgza0JpMkFMenMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKDyP1o8dTZeLy/y1h1STa1KvbGUoKgQIklSGE1g2XC8QWzUx9vve7Fo65ggV
aoIUattFfXTA5K379N3kXBGR4eTBJgoSQSU1wEHyvNI6x7nCwoAiYOeIbM+an50o
1uQdzJdanF7/mFPgWuP1t3Md+oscCrrb4OqKu+AEx/Ii8NI9yxwY/lt3+kVE1jab
nJipNGfKZGi/DwNu8LjxbLriu10+ZcwYijF7ZwjNzRkJE+fyuKpUoMGVeuKlbvgi
zXrryB7QYwGahtScxn7GNdPrOlTCYoDku9Yrphxpadi+kTKjn54MfZykTXxVH+QX
9ukz29AWsv9HKnFVuS0siDw2Zw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:49:29 2026 by rpki-client