Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft
File:                     xCkJXLK5d7BnGRGTtDubL14Zyug.mft (raw, json)
Hash identifier:          HUI504GuBE0APyCfHkW4nHaG6gUEDZS0UM3VK+8lz54=
Subject key identifier:   AC:C5:98:09:92:7A:5A:C4:E3:F8:6A:C6:E6:B6:A6:A4:F5:9B:03:4C
Authority key identifier: C4:29:09:5C:B2:B9:77:B0:67:19:11:93:B4:3B:9B:2F:5E:19:CA:E8
Certificate issuer:       /CN=A91CDBF5/serialNumber=C429095CB2B977B067191193B43B9B2F5E19CAE8
Certificate serial:       0125
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft
Manifest number:          0124
Signing time:             Thu 23 Jul 2026 07:24:47 +0000
Manifest this update:     Thu 23 Jul 2026 07:24:46 +0000
Manifest next update:     Thu 30 Jul 2026 07:24:46 +0000
Files and hashes:         1: xCkJXLK5d7BnGRGTtDubL14Zyug.crl (hash: aqOPE8peYyJLH0rgFmDqB5KvG4DqAsYWaigeqeX4O8A=)
                          2: 51AEB7D2836811F1A730906667A30FBC.roa (hash: OqhaAJ3ECSKv9M44757UyMlEksc22ddZ45TQ4k8QygY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.crl
                          rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:24:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 293 (0x125)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDBF5, serialNumber=C429095CB2B977B067191193B43B9B2F5E19CAE8
        Validity
            Not Before: Jul 23 07:24:46 2026 GMT
            Not After : Jul 30 07:24:46 2026 GMT
        Subject: CN=6a61c1be-62c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5f:5a:9d:43:2d:3c:0e:4b:b8:7b:f4:bb:d5:
                    04:73:18:0d:8c:3b:92:bb:eb:b8:55:11:8c:bb:df:
                    6e:eb:21:44:25:f5:38:14:30:a8:4f:36:c5:6f:d5:
                    da:7b:d8:75:80:7f:bb:15:81:4d:96:42:ad:60:c8:
                    be:7d:77:1a:c4:16:6f:d2:78:6f:6a:13:6c:8c:ff:
                    b2:10:c7:df:de:15:f5:55:9a:56:0b:d1:7e:0a:7c:
                    d7:ad:4e:ac:b4:07:1b:f5:2d:e5:2d:2b:ed:e5:13:
                    a0:a3:83:65:01:cf:2b:a4:20:93:3d:16:21:0d:02:
                    4f:7a:c1:be:cb:69:af:de:83:10:a2:99:e6:95:54:
                    86:68:f9:c9:e5:db:d6:03:92:e4:63:6e:5e:24:e1:
                    41:c0:35:aa:e0:8c:74:ee:a6:cc:c6:88:68:20:7a:
                    15:60:93:db:a4:a1:d2:d5:c1:c9:b2:71:16:c2:91:
                    42:f2:07:47:a6:6e:cf:30:25:a0:f4:80:d8:d2:6e:
                    3f:f3:f1:79:91:a1:8f:da:92:c5:5c:28:77:72:55:
                    3a:de:cd:13:dc:33:74:e3:23:f3:e2:57:56:72:a9:
                    37:4a:ff:dd:61:38:4b:0f:2a:88:73:5c:cc:63:26:
                    0a:f5:00:57:14:2a:6f:4e:33:a4:8d:b0:61:f6:4f:
                    75:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C5:98:09:92:7A:5A:C4:E3:F8:6A:C6:E6:B6:A6:A4:F5:9B:03:4C
            X509v3 Authority Key Identifier:
                keyid:C4:29:09:5C:B2:B9:77:B0:67:19:11:93:B4:3B:9B:2F:5E:19:CA:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:fc:71:a6:5a:f7:3c:0e:c5:cd:b6:a6:7f:e3:b8:4a:4c:78:
         2e:2a:d1:b7:57:63:cf:fc:6c:e5:91:ff:8a:a8:5f:58:53:dd:
         2e:87:15:68:27:68:7c:87:e5:bb:dc:9c:c0:b3:ee:05:f9:7b:
         0f:e0:22:aa:0d:ac:df:1f:a7:5e:30:70:fc:fc:25:4b:b3:07:
         1b:61:58:0a:74:0c:c6:35:9a:8a:ed:f3:55:86:4a:cc:ea:bd:
         93:97:4d:55:8a:4c:da:5b:4b:dc:e9:6b:35:27:b6:ce:3a:6d:
         a2:14:32:c0:a8:5c:ae:f9:bb:2f:74:5c:d9:4f:70:4b:82:12:
         f5:29:b1:27:cd:43:7e:ed:1c:92:79:87:1a:9e:1c:a4:69:d4:
         34:9a:d9:65:12:bc:49:16:3b:c6:98:57:c5:7f:35:cf:f4:59:
         7b:24:1d:d6:58:c7:a2:c6:1a:f4:9e:b4:6d:13:3b:f6:bc:b1:
         3a:87:48:3c:16:8e:08:8c:01:9d:1b:87:3e:1b:b6:c0:d7:53:
         9f:0f:6c:8a:6d:9c:90:91:28:ed:bc:fe:d4:db:c8:61:c4:c3:
         70:ff:e3:76:05:51:21:eb:07:39:49:1f:7a:aa:7f:f4:d0:2b:
         78:02:08:08:5d:e9:dc:33:4b:40:0c:6a:af:b2:f8:3e:1d:bb:
         bd:c0:97:0a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0RCRjUxMTAvBgNVBAUTKEM0MjkwOTVDQjJCOTc3QjA2NzE5MTE5M0I0M0I5QjJG
NUUxOUNBRTgwHhcNMjYwNzIzMDcyNDQ2WhcNMjYwNzMwMDcyNDQ2WjAYMRYwFAYD
VQQDEw02YTYxYzFiZS02MmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsF9anUMtPA5LuHv0u9UEcxgNjDuSu+u4VRGMu99u6yFEJfU4FDCoTzbFb9Xa
e9h1gH+7FYFNlkKtYMi+fXcaxBZv0nhvahNsjP+yEMff3hX1VZpWC9F+CnzXrU6s
tAcb9S3lLSvt5ROgo4NlAc8rpCCTPRYhDQJPesG+y2mv3oMQopnmlVSGaPnJ5dvW
A5LkY25eJOFBwDWq4Ix07qbMxohoIHoVYJPbpKHS1cHJsnEWwpFC8gdHpm7PMCWg
9IDY0m4/8/F5kaGP2pLFXCh3clU63s0T3DN04yPz4ldWcqk3Sv/dYThLDyqIc1zM
YyYK9QBXFCpvTjOkjbBh9k91HwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKzFmAmS
elrE4/hqxua2pqT1mwNMMB8GA1UdIwQYMBaAFMQpCVyyuXewZxkRk7Q7my9eGcro
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREJGNS82NjU5RjUxRUNC
NTExMUVGOTA0MDBEMTdDNEY5QUUwMi94Q2tKWExLNWQ3Qm5HUkdUdER1YkwxNFp5
dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hDa0pYTEs1ZDdCbkdSR1R0RHViTDE0Wnl1Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
REJGNS82NjU5RjUxRUNCNTExMUVGOTA0MDBEMTdDNEY5QUUwMi94Q2tKWExLNWQ3
Qm5HUkdUdER1YkwxNFp5dWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAifxxplr3PA7Fzbamf+O4Skx4LirRt1djz/xs5ZH/iqhfWFPdLocVaCdofIfl
u9ycwLPuBfl7D+Aiqg2s3x+nXjBw/PwlS7MHG2FYCnQMxjWaiu3zVYZKzOq9k5dN
VYpM2ltL3OlrNSe2zjptohQywKhcrvm7L3Rc2U9wS4IS9SmxJ81Dfu0cknmHGp4c
pGnUNJrZZRK8SRY7xphXxX81z/RZeyQd1ljHosYa9J60bRM79ryxOodIPBaOCIwB
nRuHPhu2wNdTnw9sim2ckJEo7bz+1NvIYcTDcP/jdgVRIesHOUkfeqp/9NAreAII
CF3p3DNLQAxqr7L4Ph27vcCXCg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:50:33 2026 by rpki-client