Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.mft
File:                     XiiKKIBK_-76DkRDEJedfO6Y5DI.mft (raw, json)
Hash identifier:          alQIviN9SXf18UK2TdPHRqtaOllB59yzw3LtiSbNac0=
Subject key identifier:   D9:A4:26:26:06:E6:1A:9D:11:38:D6:7E:84:FC:EB:E0:6C:EF:BF:9D
Authority key identifier: 5E:28:8A:28:80:4A:FF:EE:FA:0E:44:43:10:97:9D:7C:EE:98:E4:32
Certificate issuer:       /CN=A91B5F8A/serialNumber=5E288A28804AFFEEFA0E444310979D7CEE98E432
Certificate serial:       78
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XiiKKIBK_-76DkRDEJedfO6Y5DI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.mft
Manifest number:          78
Signing time:             Thu 23 Jul 2026 09:44:22 +0000
Manifest this update:     Thu 23 Jul 2026 09:44:21 +0000
Manifest next update:     Thu 30 Jul 2026 09:44:21 +0000
Files and hashes:         1: XiiKKIBK_-76DkRDEJedfO6Y5DI.crl (hash: 4LCaYZ/Ij8jmg/qvuCH0zHQ+AKSNovKNHDDrWvF4v/s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.crl
                          rsync://rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XiiKKIBK_-76DkRDEJedfO6Y5DI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:44:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120 (0x78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5F8A, serialNumber=5E288A28804AFFEEFA0E444310979D7CEE98E432
        Validity
            Not Before: Jul 23 09:44:21 2026 GMT
            Not After : Jul 30 09:44:21 2026 GMT
        Subject: CN=6a61e276-ea96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:65:87:cf:52:60:34:cb:ff:59:52:95:ce:48:
                    b9:6e:f2:48:cd:9f:e4:8b:e0:21:e2:78:9c:77:3a:
                    c5:fe:d0:6b:13:17:62:ec:a2:02:4b:8d:1c:af:de:
                    f4:ff:52:cf:2a:29:2a:5d:0b:1c:c1:13:95:9e:c9:
                    ff:9f:c3:db:47:4c:30:99:25:2f:79:f9:b3:7c:a4:
                    ce:85:3d:79:5e:07:00:ee:aa:ff:97:0d:37:ea:ea:
                    60:ff:14:d0:20:75:d4:dd:ad:f6:b7:82:17:02:76:
                    14:ee:45:f1:e3:a8:1e:f2:f2:51:2e:6c:13:29:7f:
                    f7:73:cd:a9:44:c1:d8:71:b5:45:c8:20:36:1f:e6:
                    5d:d1:37:36:93:e9:4c:ff:d7:52:87:14:97:78:03:
                    b1:9a:be:fe:e3:66:ad:77:f2:14:b2:8d:eb:73:a1:
                    55:80:15:2d:48:6c:9f:55:48:c3:01:9b:73:75:f9:
                    55:3f:64:87:f2:3e:fb:d3:05:eb:04:6f:4c:04:5e:
                    d5:31:2b:d2:02:1c:72:77:a0:91:64:24:33:62:01:
                    ba:da:04:be:49:f3:0f:c9:f5:67:16:41:03:db:ea:
                    e2:ff:36:fa:3d:25:7b:eb:eb:87:f9:fd:99:5b:ad:
                    17:4c:69:6f:9a:d7:f5:9d:56:c0:65:26:38:7b:7b:
                    f9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:A4:26:26:06:E6:1A:9D:11:38:D6:7E:84:FC:EB:E0:6C:EF:BF:9D
            X509v3 Authority Key Identifier:
                keyid:5E:28:8A:28:80:4A:FF:EE:FA:0E:44:43:10:97:9D:7C:EE:98:E4:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XiiKKIBK_-76DkRDEJedfO6Y5DI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:0c:6b:37:99:7d:0d:a3:e0:16:5c:3c:56:94:80:7b:1a:82:
         5d:a5:ed:34:cc:fa:c4:28:94:72:cd:99:7b:66:43:fb:a9:1b:
         88:f1:ec:82:cc:c8:98:f7:c0:9c:c1:73:63:51:d3:0c:40:7a:
         0b:23:ed:d7:c6:d1:42:0e:f9:94:7a:21:df:57:e6:dd:62:18:
         ec:17:33:7a:57:18:32:10:79:61:f5:f8:2c:be:12:7a:24:76:
         01:80:a0:58:f2:7f:28:15:2c:bb:e5:a3:e3:d8:01:36:43:0b:
         06:65:9b:15:8c:f6:2b:1e:c8:24:56:f7:26:f0:a6:a3:91:70:
         e6:66:e3:bc:2e:fc:16:89:a1:24:d4:ce:dc:0e:a5:3a:bc:3d:
         7c:09:a3:18:d8:a7:55:43:cd:a1:af:b8:d6:7d:a5:d8:39:e4:
         97:d5:1c:57:46:21:44:bd:21:b4:59:2a:1a:7c:f4:38:ba:2d:
         a3:14:59:db:de:49:f3:ca:51:99:3e:ac:d2:2c:35:17:1d:8c:
         b4:8f:52:f5:9e:93:29:e4:cb:68:11:47:ff:b8:d0:20:7c:7a:
         2e:4f:b2:29:41:87:cc:b0:53:11:91:50:e0:02:db:17:7b:cd:
         c2:b2:40:b5:8e:13:e7:13:11:d1:f1:06:b4:fe:3f:7a:9f:51:
         07:ff:df:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:01:53 2026 by rpki-client