Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA444/8DCE274AB11D11EEA3363319C4F9AE02/cx5XsN_ep5G6TV1xly2oEF3JPos.mft
File:                     cx5XsN_ep5G6TV1xly2oEF3JPos.mft (raw, json)
Hash identifier:          m022aWlPzecH2YQiHL3RUIP0VtIZVFEX7KzWq0ICQUU=
Subject key identifier:   8A:39:19:B1:38:AB:9E:74:07:EC:F5:0F:DC:1C:28:BA:D3:10:67:C3
Authority key identifier: 73:1E:57:B0:DF:DE:A7:91:BA:4D:5D:71:97:2D:A8:10:5D:C9:3E:8B
Certificate issuer:       /CN=A91AA444/serialNumber=731E57B0DFDEA791BA4D5D71972DA8105DC93E8B
Certificate serial:       01E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx5XsN_ep5G6TV1xly2oEF3JPos.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA444/8DCE274AB11D11EEA3363319C4F9AE02/cx5XsN_ep5G6TV1xly2oEF3JPos.mft
Manifest number:          01DC
Signing time:             Thu 23 Jul 2026 04:53:38 +0000
Manifest this update:     Thu 23 Jul 2026 04:53:37 +0000
Manifest next update:     Thu 30 Jul 2026 04:53:37 +0000
Files and hashes:         1: cx5XsN_ep5G6TV1xly2oEF3JPos.crl (hash: uFbIivE2azJZ7R+esedm13YszYRqvttUMPfVreVRJKk=)
                          2: 24DD519CEEA311EFA5EDDD76C4F9AE02.roa (hash: oYkxtXccfNzhupGam+/pGKaAabTu5hknTCz4hIdu2D0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AA444/8DCE274AB11D11EEA3363319C4F9AE02/cx5XsN_ep5G6TV1xly2oEF3JPos.crl
                          rsync://rpki.apnic.net/member_repository/A91AA444/8DCE274AB11D11EEA3363319C4F9AE02/cx5XsN_ep5G6TV1xly2oEF3JPos.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx5XsN_ep5G6TV1xly2oEF3JPos.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:53:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 481 (0x1e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA444, serialNumber=731E57B0DFDEA791BA4D5D71972DA8105DC93E8B
        Validity
            Not Before: Jul 23 04:53:37 2026 GMT
            Not After : Jul 30 04:53:37 2026 GMT
        Subject: CN=6a619e51-ec36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fc:7f:af:06:93:8b:05:c3:c9:ac:ad:28:0d:
                    40:52:d2:5c:67:4b:c6:32:1d:eb:ac:f6:4c:0f:25:
                    fe:ce:b9:1b:8c:d0:cd:d4:7b:e8:6d:0d:62:8d:29:
                    98:bc:20:e7:d8:0d:9c:52:34:c2:e0:73:67:d3:4a:
                    b3:35:ea:e3:7f:c1:e0:47:26:3c:65:3d:a1:d0:9f:
                    59:f3:5f:3a:1e:62:ae:bc:c2:0a:b4:75:2a:5b:06:
                    91:46:ec:49:50:0a:e3:13:4c:7c:d1:4f:d2:5f:50:
                    1c:90:e1:f6:ae:48:5f:4d:b5:86:9c:d1:9d:76:4e:
                    1e:99:ca:83:8f:03:d8:e6:aa:35:ff:16:ba:50:50:
                    d4:15:32:83:a8:f9:50:b0:84:c4:91:96:f5:f5:be:
                    d7:ea:3d:f1:b7:d5:40:bf:6b:cc:9d:ff:69:b8:09:
                    d4:66:9d:dd:e2:df:a4:cb:7c:cf:32:d7:5d:a3:4d:
                    8c:70:00:b4:33:b9:20:f7:4b:eb:da:6b:eb:a1:22:
                    79:8c:d1:1f:e7:77:6b:ba:fc:0f:6e:2d:53:3c:4e:
                    d7:0f:36:f2:88:a9:33:94:35:75:36:23:92:b8:4f:
                    e7:eb:f1:09:a0:aa:e8:54:09:a2:d3:ae:e0:b2:8a:
                    7e:5d:20:42:fa:15:1c:7e:fd:9b:ea:20:e0:08:47:
                    d9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:39:19:B1:38:AB:9E:74:07:EC:F5:0F:DC:1C:28:BA:D3:10:67:C3
            X509v3 Authority Key Identifier:
                keyid:73:1E:57:B0:DF:DE:A7:91:BA:4D:5D:71:97:2D:A8:10:5D:C9:3E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA444/8DCE274AB11D11EEA3363319C4F9AE02/cx5XsN_ep5G6TV1xly2oEF3JPos.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx5XsN_ep5G6TV1xly2oEF3JPos.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA444/8DCE274AB11D11EEA3363319C4F9AE02/cx5XsN_ep5G6TV1xly2oEF3JPos.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:af:e5:ce:42:f5:bb:b8:1d:20:9d:6d:9f:e5:db:fc:a1:e8:
         5c:af:3f:80:7a:64:c5:39:76:6b:ee:e7:a0:f1:74:38:e7:59:
         e7:86:cc:b7:e9:3d:b6:7a:a2:8f:fe:4b:cb:b4:82:e2:c4:ef:
         cb:34:ce:66:29:80:31:4c:8e:e7:64:92:85:4e:d4:7b:ce:2f:
         23:be:80:4e:23:a5:39:07:ee:73:76:b4:39:77:5a:d8:f8:86:
         62:9a:f4:6d:64:83:37:88:47:92:22:fe:22:a2:2d:10:83:1c:
         9a:7c:66:61:b8:6f:95:28:5f:e4:55:0f:7a:59:2a:02:9e:7a:
         aa:cd:bb:dd:bd:e6:a8:4c:ae:e8:a3:13:00:7b:53:76:1b:f4:
         7c:c3:0c:47:12:e7:10:bb:fb:6a:dd:fc:cd:57:f8:58:1e:53:
         f3:95:43:04:cb:4f:91:4d:da:ce:36:32:9d:c4:56:a5:10:c6:
         6d:96:03:79:44:b9:d9:5b:5b:32:90:90:48:18:dd:aa:ca:4a:
         bb:4b:14:59:c9:11:b6:f5:b4:35:53:16:28:f5:c6:c9:b7:24:
         96:fb:68:2c:18:a4:c9:60:9b:2a:40:0e:22:62:64:f9:75:2e:
         ca:dc:ab:15:4d:8f:9d:6c:32:8c:2d:f0:7e:ee:48:84:6a:94:
         0d:67:49:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:52:43 2026 by rpki-client