Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft
File:                     xvo-z74pzTYwaQdi6zKIEDptCKA.mft (raw, json)
Hash identifier:          aRBVIxEikpABn9NEXJxb8TNK4k0BMJ4fXTj3QqXxlew=
Subject key identifier:   33:F7:8D:B2:7E:A6:3B:37:4F:CA:E0:8A:90:CD:7D:DF:99:1D:85:14
Authority key identifier: C6:FA:3E:CF:BE:29:CD:36:30:69:07:62:EB:32:88:10:3A:6D:08:A0
Certificate issuer:       /CN=A91D9A6D/serialNumber=C6FA3ECFBE29CD3630690762EB3288103A6D08A0
Certificate serial:       0DFD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft
Manifest number:          0DF1
Signing time:             Wed 22 Jul 2026 18:03:45 +0000
Manifest this update:     Wed 22 Jul 2026 18:03:45 +0000
Manifest next update:     Wed 29 Jul 2026 18:03:45 +0000
Files and hashes:         1: xvo-z74pzTYwaQdi6zKIEDptCKA.crl (hash: fX71tpBB/LNc0r+nZJdNP/IUGBx6WuZcO7S9gP4dE3w=)
                          2: 959C0ABE93EA11EE91A46031C4F9AE02.roa (hash: o03RGCe0M4Rcb7aja2eQGJ8mh/lLVGkF7+Q0rj78MZA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.crl
                          rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:03:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3581 (0xdfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9A6D, serialNumber=C6FA3ECFBE29CD3630690762EB3288103A6D08A0
        Validity
            Not Before: Jul 22 18:03:45 2026 GMT
            Not After : Jul 29 18:03:45 2026 GMT
        Subject: CN=6a610601-540c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c7:44:6b:f4:41:6b:31:da:80:9a:0a:48:7a:
                    5c:e6:72:29:57:0e:1d:ea:6b:81:ba:83:bb:9a:80:
                    92:00:c1:9c:64:17:f7:a3:fd:09:65:29:eb:b9:af:
                    f6:90:e8:79:d1:7c:3f:ed:62:a6:fc:b2:d8:e6:86:
                    fe:57:13:ab:ef:2f:a2:bf:25:b0:4a:84:a1:e2:88:
                    7b:3f:7e:1b:fb:95:fd:b7:6c:1b:04:3a:40:5d:8a:
                    ab:5e:00:2a:50:1f:63:38:31:35:76:bc:a2:b2:5e:
                    51:32:62:22:81:d2:96:85:97:75:57:f7:8a:b8:1a:
                    e9:35:a2:46:1e:69:a0:af:7d:df:e1:d5:e9:8a:c1:
                    33:5d:7b:30:20:48:da:36:e1:47:1d:0b:93:4e:19:
                    2e:2a:85:34:23:58:e5:94:3c:31:c6:72:eb:2e:7a:
                    81:67:ab:af:55:c7:fc:16:81:4f:9d:04:42:7c:1a:
                    13:a6:50:c5:c7:bc:a7:14:87:21:54:7a:0e:bd:54:
                    29:7e:a5:7f:78:00:c7:59:c1:0f:0b:b3:3f:66:74:
                    17:c2:16:d9:c9:47:87:d1:b8:11:a8:7e:3e:80:92:
                    9b:2a:57:82:b9:d7:67:a2:a8:5e:70:f0:7f:27:3b:
                    6e:dd:9a:c4:f9:9a:f6:59:a1:f0:1d:74:1b:3c:5f:
                    bf:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F7:8D:B2:7E:A6:3B:37:4F:CA:E0:8A:90:CD:7D:DF:99:1D:85:14
            X509v3 Authority Key Identifier:
                keyid:C6:FA:3E:CF:BE:29:CD:36:30:69:07:62:EB:32:88:10:3A:6D:08:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:f1:2f:16:b0:36:97:de:7f:59:c2:96:5e:0c:2e:02:38:3a:
         78:36:34:ac:53:20:03:e3:b5:1f:1f:0e:aa:fc:e3:97:c6:0f:
         51:ae:97:00:4b:13:fe:cb:c5:3c:6d:49:c6:a6:cd:13:bd:95:
         ed:ef:bb:da:3d:63:55:f5:e8:12:0f:cb:eb:21:cb:ac:4c:db:
         d2:c9:e1:1f:9f:66:5a:ba:bb:4a:c8:05:81:2c:1a:82:fc:fa:
         bb:be:37:b9:8b:22:8e:cb:90:76:f9:e6:8c:ca:45:4b:a2:3b:
         10:4a:42:f9:0e:5a:52:12:5c:c3:35:e7:ac:8e:24:1e:3e:98:
         04:35:94:5e:01:10:ca:34:e0:a6:70:2e:62:20:33:4b:48:98:
         a9:17:d7:44:33:9d:ed:a8:c4:54:68:3a:b2:95:d1:b4:76:10:
         c6:79:97:c1:17:50:50:57:b5:f7:7d:74:86:62:50:cb:06:eb:
         db:6f:80:fc:17:d1:dd:f2:f0:42:a3:2a:6b:72:eb:1f:74:5f:
         63:e7:94:9f:5f:6f:ee:ad:f6:5a:20:7a:fc:db:a3:74:18:d2:
         65:d3:79:86:1c:74:8a:cd:0f:a9:98:1c:b0:25:52:eb:a9:53:
         ee:05:2c:f3:2a:01:db:7b:e2:92:71:0c:9b:f8:aa:67:ba:d1:
         2c:be:d6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:37:39 2026 by rpki-client