Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.mft
File:                     xIoOQPt_45dbEsI-AwrFTFIFcWM.mft (raw, json)
Hash identifier:          2aKbyDLvYGpP2N20wB8eGz/ZSuFzgEuhFSk8YMHbmKs=
Subject key identifier:   97:F2:0F:BB:F9:EC:F2:9B:71:D7:D5:4E:B6:FA:03:5D:59:C1:5F:77
Authority key identifier: C4:8A:0E:40:FB:7F:E3:97:5B:12:C2:3E:03:0A:C5:4C:52:05:71:63
Certificate issuer:       /CN=A91D28BC/serialNumber=C48A0E40FB7FE3975B12C23E030AC54C52057163
Certificate serial:       0637
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIoOQPt_45dbEsI-AwrFTFIFcWM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.mft
Manifest number:          0630
Signing time:             Wed 22 Jul 2026 23:28:56 +0000
Manifest this update:     Wed 22 Jul 2026 23:28:55 +0000
Manifest next update:     Wed 29 Jul 2026 23:28:55 +0000
Files and hashes:         1: xIoOQPt_45dbEsI-AwrFTFIFcWM.crl (hash: /O/X3VbpID3B9gsoAMXDI49cwyrUlh/k0NUfgtdQgpg=)
                          2: 2B07FA82EADC11EBBE430B5EC4F9AE02.roa (hash: bBojOiS31o6PX2SPb7aw0i/v7gUX2MMQIPUxqEZpkrw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.crl
                          rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIoOQPt_45dbEsI-AwrFTFIFcWM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:28:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1591 (0x637)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D28BC, serialNumber=C48A0E40FB7FE3975B12C23E030AC54C52057163
        Validity
            Not Before: Jul 22 23:28:55 2026 GMT
            Not After : Jul 29 23:28:55 2026 GMT
        Subject: CN=6a615238-3690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:2f:b0:8b:04:e7:1e:4e:a1:b1:60:1c:21:09:
                    43:c4:1a:19:00:77:f0:44:e7:4d:ff:96:1c:33:13:
                    8a:d5:ac:2b:e2:e8:4b:11:7a:43:f9:0d:3b:71:b4:
                    2a:57:88:a2:69:18:31:03:07:82:08:fe:43:bf:aa:
                    fd:60:7b:7a:32:1f:57:58:ce:a5:ac:4a:f4:25:dd:
                    a6:8b:9f:06:ac:4d:f9:d7:78:13:df:6a:36:08:cc:
                    b4:7c:39:3c:c0:2e:5e:b8:4f:1c:e8:68:fc:f4:ab:
                    fd:44:19:e9:fa:60:b3:64:b5:68:65:13:5c:c2:5f:
                    76:70:4b:ad:65:2d:a8:72:ac:a7:a8:09:df:47:55:
                    e8:af:ac:b0:fe:ef:e9:0f:3c:85:a6:ea:ac:c8:1b:
                    d0:e8:19:c8:6d:40:e6:29:68:bc:cd:8d:59:f8:75:
                    1f:5d:25:09:c7:81:ed:5c:45:ea:37:f6:6e:a7:dc:
                    df:23:d6:26:60:2e:bb:8e:26:f9:bd:8a:64:e0:83:
                    e5:16:60:0f:84:9c:c0:f5:42:01:63:c8:5c:97:34:
                    b4:86:74:dc:37:1d:25:5e:6b:68:7d:c8:d9:0f:00:
                    b9:97:34:ef:c8:4d:fa:5d:62:35:d1:dc:9b:05:47:
                    fa:fa:36:17:23:aa:23:7b:30:75:bf:16:ac:f1:4e:
                    b3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:F2:0F:BB:F9:EC:F2:9B:71:D7:D5:4E:B6:FA:03:5D:59:C1:5F:77
            X509v3 Authority Key Identifier:
                keyid:C4:8A:0E:40:FB:7F:E3:97:5B:12:C2:3E:03:0A:C5:4C:52:05:71:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIoOQPt_45dbEsI-AwrFTFIFcWM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:7c:b3:32:cd:65:71:10:a3:4f:bf:28:e7:48:f1:a8:91:61:
         6c:f3:e5:36:57:3e:80:ad:a7:99:d3:4e:cf:d1:ed:d0:98:e9:
         3e:84:b8:4b:5e:53:c0:7f:1d:f3:ec:89:ec:4b:b8:55:26:49:
         ea:2e:ad:4c:e6:9f:e0:75:a9:2d:6b:09:2d:ea:38:65:24:c0:
         30:56:5b:80:9f:af:9e:6a:c3:43:79:9c:5c:21:e9:56:1d:9c:
         51:d6:ad:89:a3:d2:28:1d:0c:11:45:22:26:ed:2e:00:52:83:
         4c:da:ba:c1:4a:d4:9a:2f:0f:84:0d:38:32:54:f0:f7:53:97:
         27:11:e3:93:be:e0:dc:e0:79:fe:ec:3c:dd:4b:46:8f:4c:32:
         87:6d:a3:66:a7:57:c0:39:1e:0c:9a:cb:95:bf:ac:60:f2:47:
         f9:c4:32:ce:9a:85:05:cf:54:93:34:0c:a9:4c:6e:51:8d:c0:
         e1:f0:9d:2f:3f:06:42:46:f2:a8:77:60:a8:23:4d:c6:e5:f7:
         4a:3b:64:29:03:10:1b:a8:16:fb:d1:f4:94:c3:0a:39:ba:a1:
         03:de:e6:28:33:03:4b:05:3f:24:b4:3c:19:8a:a8:1d:6e:0e:
         c2:0f:6c:6d:c2:4e:c7:a5:4f:3d:23:60:a5:26:28:1b:e2:b2:
         a3:f0:c7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:15:25 2026 by rpki-client