Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft
File:                     x5XlnAMMfJKfy-R0Gfxexp4frP0.mft (raw, json)
Hash identifier:          kj5ZTwUB5gYMkVeGzOb/hk1ZdXzEx0SSvX32G6rXXuk=
Subject key identifier:   86:01:9F:86:7E:67:FD:CC:09:B2:C4:F9:05:3C:69:F6:0D:B4:07:21
Authority key identifier: C7:95:E5:9C:03:0C:7C:92:9F:CB:E4:74:19:FC:5E:C6:9E:1F:AC:FD
Certificate issuer:       /CN=A91A3FEB/serialNumber=C795E59C030C7C929FCBE47419FC5EC69E1FACFD
Certificate serial:       082A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5XlnAMMfJKfy-R0Gfxexp4frP0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft
Manifest number:          0822
Signing time:             Wed 22 Jul 2026 21:40:31 +0000
Manifest this update:     Wed 22 Jul 2026 21:40:31 +0000
Manifest next update:     Wed 29 Jul 2026 21:40:31 +0000
Files and hashes:         1: x5XlnAMMfJKfy-R0Gfxexp4frP0.crl (hash: bS6GynbffLPNovO4zZjq66JAFNX7N8Z1bwrfQrUyL1M=)
                          2: B722FC542A0411EB992DD32EC4F9AE02.roa (hash: 55CxpWCtuoXOi6t/gybs+bucccea1BToqnuBzxE+HNE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.crl
                          rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5XlnAMMfJKfy-R0Gfxexp4frP0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:40:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2090 (0x82a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3FEB, serialNumber=C795E59C030C7C929FCBE47419FC5EC69E1FACFD
        Validity
            Not Before: Jul 22 21:40:31 2026 GMT
            Not After : Jul 29 21:40:31 2026 GMT
        Subject: CN=6a6138cf-4acd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a0:d7:af:15:6f:d5:80:2a:3b:37:c4:6f:f4:
                    8d:40:81:0e:cd:16:1a:68:a4:87:4c:b2:7c:e0:ea:
                    56:5e:1e:78:44:73:7b:0b:d8:92:d0:1a:63:65:49:
                    d6:d1:62:96:69:96:94:7e:75:9e:09:2f:c9:fa:ba:
                    14:a7:15:36:4f:3f:4d:a8:cf:1c:f6:21:7c:f6:6c:
                    9c:a2:a0:29:0a:47:87:c7:2c:77:61:f1:cb:17:cf:
                    9f:10:db:48:c4:a2:02:60:37:a8:f0:92:b2:b7:7a:
                    23:5c:43:0c:5d:55:2d:65:53:3f:09:a2:86:d2:63:
                    3d:aa:8a:3a:1a:66:e8:d2:ee:38:bb:c6:7f:6a:4d:
                    05:40:77:ca:cd:b8:78:6b:55:15:b0:a7:f4:c1:89:
                    3b:6c:69:cc:10:04:0c:2c:16:48:e0:b3:e5:b2:4c:
                    21:31:bf:34:3c:79:b3:62:98:2f:1f:d8:a2:e7:2f:
                    6d:a7:cb:b4:e4:d1:a4:b6:2b:d0:33:43:11:cf:ca:
                    70:95:6c:39:a8:09:29:57:fa:71:7e:fe:a0:94:c6:
                    85:96:34:a9:a2:6c:a3:f3:8a:64:3f:36:a0:ee:19:
                    07:39:dc:99:e2:ff:da:35:ef:a4:d7:a7:ea:74:08:
                    be:52:c0:5e:65:76:2a:b7:b9:70:57:98:67:f4:cb:
                    2d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:01:9F:86:7E:67:FD:CC:09:B2:C4:F9:05:3C:69:F6:0D:B4:07:21
            X509v3 Authority Key Identifier:
                keyid:C7:95:E5:9C:03:0C:7C:92:9F:CB:E4:74:19:FC:5E:C6:9E:1F:AC:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5XlnAMMfJKfy-R0Gfxexp4frP0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:15:9f:83:b6:7a:bf:ca:a3:6e:a3:5f:02:f6:5e:d0:85:63:
         93:31:3f:5e:f7:c2:fa:3e:48:d2:d2:70:90:42:e2:8e:02:b0:
         f3:56:59:e1:3e:41:9c:d4:de:75:87:47:89:f3:ce:79:39:15:
         9f:f8:6f:ca:c9:ad:8f:56:e4:dd:5c:a2:74:5f:81:43:35:c1:
         e7:95:4d:4c:1f:df:d9:e5:3f:13:2a:e9:d0:4a:b0:bc:18:95:
         e3:ae:e2:25:7f:af:60:83:5c:49:f9:3d:0a:99:ba:2a:49:5b:
         10:b6:77:41:74:a7:fb:7a:b7:8c:1a:89:00:18:5c:4f:0f:c3:
         ce:0a:b7:66:b8:5c:f7:e9:58:33:fa:bc:c4:b8:51:9a:20:b6:
         47:25:17:be:ec:b5:ae:c6:48:e1:a9:e8:e4:50:f7:ba:69:64:
         f4:12:f4:4c:ec:3b:35:44:3f:6a:11:6e:fd:f2:da:63:79:50:
         c4:8f:7a:4c:95:26:5e:c1:12:01:d6:e7:a3:9a:72:ab:c5:e1:
         6c:9f:79:85:60:47:1a:4c:a7:d5:f3:d7:f5:33:cc:fe:a3:af:
         49:a2:b2:c7:11:51:ff:40:ed:64:8a:63:4b:cd:4a:c0:68:05:
         11:26:10:54:42:4e:e3:45:fc:b8:91:4a:bc:1a:9f:48:07:83:
         e4:a1:c3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:00:54 2026 by rpki-client