Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.mft
File:                     xBHC1yQB9T7KAWNXiJ1-ujvM_c0.mft (raw, json)
Hash identifier:          TEIpI+P7Tx9Fp3PY1Hqh0u1BtleH+eu49ZRJs/ncNsA=
Subject key identifier:   E8:42:8A:AE:A0:31:31:EA:BA:5A:B7:84:2D:00:46:C3:4E:55:6A:6F
Authority key identifier: C4:11:C2:D7:24:01:F5:3E:CA:01:63:57:88:9D:7E:BA:3B:CC:FD:CD
Certificate issuer:       /CN=A91B6F60/serialNumber=C411C2D72401F53ECA016357889D7EBA3BCCFDCD
Certificate serial:       05D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.mft
Manifest number:          05C9
Signing time:             Wed 22 Jul 2026 23:49:38 +0000
Manifest this update:     Wed 22 Jul 2026 23:49:38 +0000
Manifest next update:     Wed 29 Jul 2026 23:49:38 +0000
Files and hashes:         1: xBHC1yQB9T7KAWNXiJ1-ujvM_c0.crl (hash: otXw6QtwwFSUPfmrZ4Gk+EX1kN7yvBXuBFN5Wjwvj2U=)
                          2: 52A8AE84152E11EC94BCB264C4F9AE02.roa (hash: hUb/PviHrPrqE4zrhQwQV4B+eXkDR5dBY/Tef/Z6vLc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.crl
                          rsync://rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:49:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1490 (0x5d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6F60, serialNumber=C411C2D72401F53ECA016357889D7EBA3BCCFDCD
        Validity
            Not Before: Jul 22 23:49:38 2026 GMT
            Not After : Jul 29 23:49:38 2026 GMT
        Subject: CN=6a615712-0c93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b6:d9:ed:bf:8e:81:cb:a2:ee:28:bb:1a:dd:
                    9a:ed:5c:59:b1:b5:ad:c2:19:9e:3d:09:b6:6e:76:
                    24:be:f9:22:e1:a1:69:32:e7:2b:52:cd:29:27:01:
                    1a:a6:ec:60:4b:71:df:8f:4c:a5:ff:de:76:b9:3a:
                    1e:bb:b4:18:2c:dc:d0:19:13:46:7f:94:d6:36:be:
                    dc:74:d2:49:83:18:65:e0:5b:50:a4:c4:63:e8:56:
                    44:68:6a:86:5a:7d:44:ed:7e:2c:eb:db:56:b7:47:
                    1a:78:5f:87:7b:32:26:95:ad:f4:74:b3:47:a1:9c:
                    5b:da:53:28:89:a2:88:75:57:8d:19:3d:a0:7f:8b:
                    33:5b:b8:5a:63:6f:9a:45:dd:b8:73:29:c4:46:1a:
                    49:b5:df:7e:a4:49:6c:ba:b6:62:2a:4e:45:7d:7c:
                    59:d5:ce:59:63:f3:76:bc:14:83:42:2e:1a:c0:e6:
                    d6:14:42:da:5a:a0:fb:3b:b8:af:66:06:e5:73:05:
                    9e:63:d0:8f:c9:16:e8:e7:11:cd:47:52:3e:fe:bd:
                    3a:a3:f4:81:d3:9c:0f:70:21:92:32:d0:bd:eb:34:
                    10:21:fc:26:08:81:eb:cf:a6:82:1b:27:4f:dc:2f:
                    36:1d:fd:23:e7:33:55:97:8a:cf:20:21:a1:a0:ac:
                    3f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:42:8A:AE:A0:31:31:EA:BA:5A:B7:84:2D:00:46:C3:4E:55:6A:6F
            X509v3 Authority Key Identifier:
                keyid:C4:11:C2:D7:24:01:F5:3E:CA:01:63:57:88:9D:7E:BA:3B:CC:FD:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:cb:25:cd:42:a8:e5:bf:c9:84:70:1c:a9:83:0a:c2:03:60:
         6b:58:ab:96:48:67:d9:e2:b3:7c:0c:3e:1e:73:d9:71:f7:85:
         85:ae:b1:9b:2e:eb:3b:8a:cf:24:5a:06:8b:5a:64:18:7b:c7:
         71:8d:5f:22:13:67:90:d2:d4:b0:d5:15:98:a1:06:80:4d:a5:
         4f:db:2e:0a:fb:b2:e6:70:41:3e:db:8b:da:49:1d:dc:8a:9a:
         41:79:e6:1f:cb:a6:04:bd:7a:1b:7a:c1:1c:40:83:87:bf:74:
         1e:f6:43:b0:b6:6d:44:23:2b:3d:9a:c6:8b:0d:c5:12:b8:6c:
         3e:d7:8b:d0:01:5b:5b:dc:b9:86:cd:52:d3:ee:67:02:22:94:
         ce:58:b4:d4:05:c0:5b:75:66:f0:d1:3e:c9:d0:c0:09:03:a4:
         14:7a:7e:23:de:e9:5f:22:01:2d:42:0c:56:c0:44:d7:a0:3e:
         96:62:14:84:db:cf:b8:26:d8:f8:e8:f3:53:1c:d6:80:84:9b:
         06:57:18:19:71:d6:a6:90:ae:73:79:63:be:52:9e:e9:2c:25:
         ce:7c:a6:a8:74:fc:aa:7d:8e:77:bb:e3:9f:bb:1f:59:27:da:
         d2:a9:71:48:89:c3:9e:be:1b:b6:cd:a6:ec:e1:30:22:bc:48:
         53:44:b0:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:31:59 2026 by rpki-client