Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.mft
File:                     xv9_8XAyqWoLIW8LwszDXwIgwnI.mft (raw, json)
Hash identifier:          KnRSkNrOz9MWWiPRQHPO8RUHqSRunv6st5YOSXGHPNs=
Subject key identifier:   08:41:85:E6:07:06:00:E2:AB:CA:88:40:89:FA:04:E5:AE:CC:C4:5D
Authority key identifier: C6:FF:7F:F1:70:32:A9:6A:0B:21:6F:0B:C2:CC:C3:5F:02:20:C2:72
Certificate issuer:       /CN=A91B7929/serialNumber=C6FF7FF17032A96A0B216F0BC2CCC35F0220C272
Certificate serial:       7C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xv9_8XAyqWoLIW8LwszDXwIgwnI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.mft
Manifest number:          7A
Signing time:             Thu 23 Jul 2026 09:41:17 +0000
Manifest this update:     Thu 23 Jul 2026 09:41:17 +0000
Manifest next update:     Thu 30 Jul 2026 09:41:17 +0000
Files and hashes:         1: xv9_8XAyqWoLIW8LwszDXwIgwnI.crl (hash: obH2BoMtlu9A5tt6rlHPai7ok6fohVIXm5p/oAwxqwE=)
                          2: 8709BBD4DB2011F0B6C890B887D3641D.roa (hash: EpL7U0XS/RThjCfzf6MnDPKqtdekXvQOYsOhN2Yrndg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.crl
                          rsync://rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xv9_8XAyqWoLIW8LwszDXwIgwnI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:41:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124 (0x7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7929, serialNumber=C6FF7FF17032A96A0B216F0BC2CCC35F0220C272
        Validity
            Not Before: Jul 23 09:41:17 2026 GMT
            Not After : Jul 30 09:41:17 2026 GMT
        Subject: CN=6a61e1bd-bd31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:79:43:d8:ea:b5:63:d7:35:d2:06:be:fc:98:
                    75:b7:ed:bc:82:d0:60:b3:ad:90:96:e1:97:ce:7c:
                    66:ce:da:ae:9d:55:79:87:99:7b:fe:56:3e:2d:33:
                    7f:7a:59:fe:f8:75:53:a2:6e:03:2a:02:29:d5:36:
                    48:e1:c6:a2:25:26:b7:30:6d:08:0b:40:1d:67:94:
                    1b:94:48:ca:5b:cf:d3:27:02:f3:ca:1b:a6:b5:83:
                    a5:c2:0c:b3:3a:24:74:13:87:ec:81:cf:96:75:b7:
                    1f:2d:a0:cf:f6:1e:14:4f:8d:8a:40:00:45:ba:08:
                    dd:be:38:b8:0a:9e:4b:b0:fd:94:8d:31:e0:b3:c1:
                    bd:45:03:d3:97:77:7c:00:6d:76:50:51:d4:88:fe:
                    4a:51:10:08:60:a1:a5:69:ae:61:6f:08:4f:02:5a:
                    c9:a5:eb:23:61:bc:ba:05:ca:86:27:0b:93:17:ac:
                    6a:f5:bc:c4:07:8f:14:01:09:83:95:9d:74:2d:07:
                    e3:84:eb:7a:9a:48:a4:f6:d3:a9:ab:96:95:62:ac:
                    04:1e:35:51:38:ec:8b:58:c4:17:1f:23:52:e2:c7:
                    e2:4c:28:57:8b:00:48:4f:be:e3:08:78:66:b1:d2:
                    ac:44:90:9c:a1:5e:77:9a:37:78:c5:d3:52:1e:f5:
                    06:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:41:85:E6:07:06:00:E2:AB:CA:88:40:89:FA:04:E5:AE:CC:C4:5D
            X509v3 Authority Key Identifier:
                keyid:C6:FF:7F:F1:70:32:A9:6A:0B:21:6F:0B:C2:CC:C3:5F:02:20:C2:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xv9_8XAyqWoLIW8LwszDXwIgwnI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:90:df:b1:ad:ad:43:cd:f3:17:01:a9:c6:92:dc:67:fa:0e:
         37:bc:45:ff:bb:07:d8:65:ff:ac:c1:aa:01:9a:60:6c:49:f9:
         08:02:cd:13:7d:47:fe:28:87:df:62:0d:e5:bb:4f:35:24:c1:
         11:12:aa:3f:26:0c:eb:c6:b3:7e:e4:b2:a0:5e:8c:50:41:19:
         a3:de:4c:d0:88:f0:26:87:17:42:4b:a2:58:16:69:bc:87:2a:
         04:d9:91:2f:b1:c9:c7:fb:12:e1:60:c4:04:87:7b:67:c0:3c:
         e9:2d:e0:22:be:39:27:cb:78:77:11:4d:ee:1a:4f:01:89:a3:
         b4:04:14:2b:81:a7:c7:87:60:f4:10:20:dd:1d:ea:ff:17:04:
         5a:a8:63:82:66:08:bc:6c:f1:90:76:37:39:9b:6e:77:9d:86:
         15:46:fe:01:16:b3:1f:77:a1:7a:e7:c3:45:29:12:63:49:6a:
         72:15:36:e8:e3:df:7d:6b:6f:7c:b8:ea:98:e4:bf:f9:2e:24:
         1a:f7:a5:4a:9e:55:db:ee:82:8c:a6:93:31:c7:b5:93:ac:00:
         40:5d:a9:bf:95:0c:87:c7:69:c1:67:78:37:6f:88:ef:f3:80:
         b8:b2:3a:44:4f:dc:38:1a:76:65:d9:4d:72:ab:97:76:6f:42:
         cf:d5:d0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:01:24 2026 by rpki-client