Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft
File:                     XDfN_Mjp6QxBFko5HukDtN5U37E.mft (raw, json)
Hash identifier:          WVYJfkifX2fId+tJsi0Dknlt4NiyJnUQ8XM+3Vf9bFE=
Subject key identifier:   17:50:DC:1C:A1:DF:4B:EF:20:D7:8D:7B:89:8D:A3:8A:3D:A2:AD:E7
Authority key identifier: 5C:37:CD:FC:C8:E9:E9:0C:41:16:4A:39:1E:E9:03:B4:DE:54:DF:B1
Certificate issuer:       /CN=A91D1EBA/serialNumber=5C37CDFCC8E9E90C41164A391EE903B4DE54DFB1
Certificate serial:       071E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDfN_Mjp6QxBFko5HukDtN5U37E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft
Manifest number:          0716
Signing time:             Wed 22 Jul 2026 22:42:36 +0000
Manifest this update:     Wed 22 Jul 2026 22:42:35 +0000
Manifest next update:     Wed 29 Jul 2026 22:42:35 +0000
Files and hashes:         1: XDfN_Mjp6QxBFko5HukDtN5U37E.crl (hash: FvSkZueCiiaDhAcPyJtwUASXfmG8ToXcNnyQYATiprI=)
                          2: A14BDCE491EB11EBAD7A1530C4F9AE02.roa (hash: ya+5X2X8zd4MO/3KegCTLB9V6NcmJXOYCWI69T9MPig=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.crl
                          rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDfN_Mjp6QxBFko5HukDtN5U37E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 22:42:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1822 (0x71e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1EBA, serialNumber=5C37CDFCC8E9E90C41164A391EE903B4DE54DFB1
        Validity
            Not Before: Jul 22 22:42:35 2026 GMT
            Not After : Jul 29 22:42:35 2026 GMT
        Subject: CN=6a61475c-6e46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2a:f6:fa:45:e4:2e:40:fc:3b:e7:1e:f9:1b:
                    15:a0:9b:bf:9f:8a:3a:9b:b9:ba:dd:2d:f3:00:6f:
                    03:44:ac:0b:33:5a:b4:df:5b:e7:5f:1f:d0:30:aa:
                    29:de:a7:67:89:bb:bc:0d:b1:cd:9c:f2:c1:92:41:
                    ce:cf:67:39:4e:e3:04:ad:4c:c3:f5:3b:58:48:9d:
                    6c:eb:2e:96:fe:b9:d5:f5:89:ee:14:28:1e:e0:18:
                    e7:06:52:83:6c:12:6d:98:7c:28:60:e7:8c:62:0b:
                    df:f1:33:63:4d:03:05:4f:f5:a9:29:ce:72:b2:13:
                    ab:7c:79:b4:7c:ef:e1:ad:d7:a8:67:57:ae:74:59:
                    c8:97:4f:b6:46:fe:19:96:60:7a:d1:e5:e9:9e:08:
                    af:d5:98:2e:3e:f3:91:77:25:ae:de:e9:4d:6c:f4:
                    99:de:6d:1d:d5:ac:70:37:55:3d:ae:d0:b0:6b:b0:
                    62:9a:b7:c3:68:77:e4:4c:3e:d6:51:62:4a:0a:0c:
                    90:bc:c1:39:03:3e:78:10:53:1a:ee:3d:c3:dc:f6:
                    2b:25:5c:27:37:f2:c1:2a:32:34:82:b4:87:46:9a:
                    1c:7e:f8:c2:7b:31:94:1a:d2:03:8b:15:b7:54:a9:
                    b3:01:1c:39:4e:b7:80:fb:c4:f6:a0:61:1b:2c:82:
                    c7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:50:DC:1C:A1:DF:4B:EF:20:D7:8D:7B:89:8D:A3:8A:3D:A2:AD:E7
            X509v3 Authority Key Identifier:
                keyid:5C:37:CD:FC:C8:E9:E9:0C:41:16:4A:39:1E:E9:03:B4:DE:54:DF:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDfN_Mjp6QxBFko5HukDtN5U37E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:86:47:df:ef:71:56:40:6a:05:fe:10:81:32:e1:48:a6:04:
         af:1f:13:b3:df:5e:0a:c3:66:05:22:8b:2c:49:a8:55:6b:7e:
         96:e1:e8:54:03:22:1c:59:e1:b1:10:3e:44:87:ef:85:20:d3:
         27:c7:a8:19:ec:ed:ec:16:87:b8:44:28:d2:0f:26:91:14:86:
         f6:3e:5b:ce:4a:6c:e0:d2:44:82:d1:58:c5:9d:7b:d8:be:fb:
         10:00:1e:6e:8d:36:ed:34:30:cd:9e:e5:13:7b:13:1d:89:4a:
         e0:7d:1a:40:76:72:2f:0d:53:ad:54:78:8a:bd:22:24:4a:5c:
         9f:68:97:50:5b:63:f6:88:27:4f:de:f1:ec:f0:f2:e8:e5:d9:
         6b:66:ac:a5:c8:ce:5f:53:78:fc:e4:3d:27:53:2a:34:6e:1f:
         bb:06:44:72:5d:b4:48:0f:a5:65:7e:d2:c2:0e:67:fa:f0:bf:
         b5:18:17:18:e8:2c:46:8b:9e:72:f8:c2:f4:63:ec:e1:04:9b:
         a8:65:88:db:e3:e8:35:e8:ec:3a:cc:45:a8:8c:bd:2e:07:14:
         71:52:57:f2:60:53:28:24:03:95:9c:39:d0:78:79:ea:fb:41:
         0e:46:e1:73:fc:72:b8:69:9e:01:ff:f6:5e:3c:d9:c2:93:f8:
         02:b0:09:97
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBx4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDFFQkExMTAvBgNVBAUTKDVDMzdDREZDQzhFOUU5MEM0MTE2NEEzOTFFRTkwM0I0
REU1NERGQjEwHhcNMjYwNzIyMjI0MjM1WhcNMjYwNzI5MjI0MjM1WjAYMRYwFAYD
VQQDEw02YTYxNDc1Yy02ZTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlSr2+kXkLkD8O+ce+RsVoJu/n4o6m7m63S3zAG8DRKwLM1q031vnXx/QMKop
3qdnibu8DbHNnPLBkkHOz2c5TuMErUzD9TtYSJ1s6y6W/rnV9YnuFCge4BjnBlKD
bBJtmHwoYOeMYgvf8TNjTQMFT/WpKc5yshOrfHm0fO/hrdeoZ1eudFnIl0+2Rv4Z
lmB60eXpngiv1ZguPvORdyWu3ulNbPSZ3m0d1axwN1U9rtCwa7BimrfDaHfkTD7W
UWJKCgyQvME5Az54EFMa7j3D3PYrJVwnN/LBKjI0grSHRpocfvjCezGUGtIDixW3
VKmzARw5TreA+8T2oGEbLILHIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBdQ3Byh
30vvINeNe4mNo4o9oq3nMB8GA1UdIwQYMBaAFFw3zfzI6ekMQRZKOR7pA7TeVN+x
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUVCQS84Mzk0RTI1MDkx
RUExMUVCQUFEQkY5MkZDNEY5QUUwMi9YRGZOX01qcDZReEJGa281SHVrRHRONVUz
N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hEZk5fTWpwNlF4QkZrbzVIdWtEdE41VTM3RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MUVCQS84Mzk0RTI1MDkxRUExMUVCQUFEQkY5MkZDNEY5QUUwMi9YRGZOX01qcDZR
eEJGa281SHVrRHRONVUzN0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAN4ZH3+9xVkBqBf4QgTLhSKYErx8Ts99eCsNmBSKLLEmoVWt+luHoVAMiHFnh
sRA+RIfvhSDTJ8eoGezt7BaHuEQo0g8mkRSG9j5bzkps4NJEgtFYxZ172L77EAAe
bo027TQwzZ7lE3sTHYlK4H0aQHZyLw1TrVR4ir0iJEpcn2iXUFtj9ognT97x7PDy
6OXZa2aspcjOX1N4/OQ9J1MqNG4fuwZEcl20SA+lZX7Swg5n+vC/tRgXGOgsRoue
cvjC9GPs4QSbqGWI2+PoNejsOsxFqIy9LgcUcVJX8mBTKCQDlZw50Hh56vtBDkbh
c/xyuGmeAf/2XjzZwpP4ArAJlw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:36:14 2026 by rpki-client