Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft
File:                     XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft (raw, json)
Hash identifier:          eEeqGYgOp9myJRw2C92mCGLiXlq4rnMnvH2rG+WR+GE=
Subject key identifier:   85:3A:A4:94:6E:16:C5:55:E4:47:C7:D0:18:A1:1B:3F:47:50:41:67
Authority key identifier: 5E:05:74:46:C4:96:1E:4D:26:C3:7F:FE:A8:AC:3F:7A:AD:D8:3B:32
Certificate issuer:       /CN=A91D83B3/serialNumber=5E057446C4961E4D26C37FFEA8AC3F7AADD83B32
Certificate serial:       0A79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft
Manifest number:          0A6F
Signing time:             Wed 22 Jul 2026 20:00:52 +0000
Manifest this update:     Wed 22 Jul 2026 20:00:52 +0000
Manifest next update:     Wed 29 Jul 2026 20:00:52 +0000
Files and hashes:         1: XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl (hash: fyTNxBJ/Vv9M2OXjo3k6+Oplv8285SSw6vCQ1IZqW7g=)
                          2: B01A5D448A0E11EAA8C40916C4F9AE02.roa (hash: uL14OpfP32+5y3tA0ivSjK4NgQZZVX7Ob3/KlBQRVf0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl
                          rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2681 (0xa79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D83B3, serialNumber=5E057446C4961E4D26C37FFEA8AC3F7AADD83B32
        Validity
            Not Before: Jul 22 20:00:52 2026 GMT
            Not After : Jul 29 20:00:52 2026 GMT
        Subject: CN=6a612174-e62c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:69:fe:99:1b:1d:99:19:59:9a:90:0c:05:d0:
                    31:46:17:63:6d:c6:a9:93:42:f4:f7:06:19:85:af:
                    ef:cb:4a:e4:59:36:f3:0f:39:09:1e:07:e3:e0:77:
                    9a:48:21:9c:03:4f:e0:1b:cb:7c:88:db:b0:24:5e:
                    ce:8e:97:75:41:e6:f3:da:0d:7b:20:5b:a2:a4:4a:
                    70:6e:98:c5:72:2a:f9:7c:20:7f:57:12:9c:59:ba:
                    7d:70:c3:16:c2:b4:4c:63:e6:55:a0:a9:18:1d:5f:
                    72:13:d2:80:ae:47:72:34:68:c3:f4:97:a3:80:77:
                    18:b1:87:a8:9b:a5:fe:3f:04:ee:84:df:d4:54:f4:
                    5d:b1:13:26:43:5f:40:0d:7e:84:e8:f3:75:24:d6:
                    94:d0:22:6d:4c:f6:92:b3:08:ad:47:cc:bd:7f:b2:
                    60:31:e6:9e:d7:b1:7f:78:70:fe:1a:1a:e8:e0:ad:
                    f5:19:82:e7:3a:88:25:fe:e1:25:6f:58:29:f2:6e:
                    ac:12:31:10:d4:8d:d2:62:d5:3e:53:cb:d1:ca:aa:
                    27:d4:5e:d5:d0:6c:18:77:67:41:8e:01:34:10:d3:
                    42:f8:a2:e4:9c:f4:c5:5f:94:aa:36:94:0e:90:27:
                    1e:53:2f:00:ec:d1:d0:b3:41:8f:50:fd:71:c7:ee:
                    92:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:3A:A4:94:6E:16:C5:55:E4:47:C7:D0:18:A1:1B:3F:47:50:41:67
            X509v3 Authority Key Identifier:
                keyid:5E:05:74:46:C4:96:1E:4D:26:C3:7F:FE:A8:AC:3F:7A:AD:D8:3B:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:54:8c:a8:13:ff:8b:db:52:ea:a3:c4:0a:a8:bc:c5:1a:18:
         01:b8:70:ff:89:78:57:79:c4:0a:98:06:6e:db:77:87:81:9b:
         f2:fd:a4:0b:69:aa:70:a5:b0:f2:40:31:61:ad:30:91:22:83:
         5e:db:0e:07:8d:3e:67:f5:de:a3:8e:4a:df:94:f1:bf:9f:ee:
         ca:56:a3:0a:31:c9:6d:11:56:c6:39:78:ae:16:c0:1d:c8:74:
         e8:e0:25:9a:81:cf:bd:86:5a:ba:2e:37:9b:7d:0f:10:49:53:
         79:c7:17:7c:b9:15:7e:33:02:94:f9:cb:ff:d3:f4:52:2c:2f:
         b8:23:fb:e2:f8:32:48:2f:5f:e4:02:75:c8:e6:4c:6f:f0:b9:
         74:b8:3e:d5:5f:06:e6:05:66:de:df:53:44:b2:85:e7:74:cb:
         f8:8c:4e:0a:3e:bf:60:38:9c:d9:92:b7:ea:21:18:18:97:2a:
         75:44:36:49:d4:f7:e5:c4:96:85:f2:37:9f:48:6a:5c:05:ba:
         f3:bc:4f:8c:fd:23:f7:9a:8f:3d:a7:98:44:92:4f:25:80:00:
         16:94:81:7c:55:c3:1a:05:70:b2:11:34:1a:f8:35:73:d9:e2:
         a9:aa:50:9f:d5:2b:8b:61:c5:a1:9b:96:0a:75:04:43:13:8e:
         b5:2a:ab:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:56:08 2026 by rpki-client