Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft
File:                     Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft (raw, json)
Hash identifier:          WAqO7m8b65NIN5Qyagu0TG0ki8i0VvUsqCHx6dKNDHk=
Subject key identifier:   F9:A1:BC:E5:86:55:9D:55:C4:BA:F5:DC:2D:C9:1F:BA:B6:BA:A1:81
Authority key identifier: 5E:F7:2F:9B:E4:E3:A2:8D:E3:56:9E:76:DE:2D:22:25:DB:F3:FD:8A
Certificate issuer:       /CN=A91DB63B/serialNumber=5EF72F9BE4E3A28DE3569E76DE2D2225DBF3FD8A
Certificate serial:       0A13
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft
Manifest number:          0A09
Signing time:             Wed 22 Jul 2026 20:12:28 +0000
Manifest this update:     Wed 22 Jul 2026 20:12:28 +0000
Manifest next update:     Wed 29 Jul 2026 20:12:28 +0000
Files and hashes:         1: Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl (hash: kPQbMFhI4VxJgXLUOuvWu2n4s2k7XOnLurI6wvH199c=)
                          2: FF57D3205A4611EF88B33287C4F9AE02.roa (hash: lDb01SzRr4flIC0mr35RR7fbVzd2VcHd4sFXDjKyy5s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl
                          rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2579 (0xa13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB63B, serialNumber=5EF72F9BE4E3A28DE3569E76DE2D2225DBF3FD8A
        Validity
            Not Before: Jul 22 20:12:28 2026 GMT
            Not After : Jul 29 20:12:28 2026 GMT
        Subject: CN=6a61242c-20bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a7:74:10:31:8f:9d:7a:10:a9:ad:34:c5:39:
                    6a:4e:92:54:ee:56:21:97:5e:5a:43:5b:28:08:6f:
                    15:ff:c8:db:e7:74:ed:f2:66:65:e3:f0:9d:03:36:
                    da:a3:9b:f7:9a:ce:ff:d3:87:08:51:d6:f1:49:1b:
                    ce:ae:61:de:d4:10:33:65:84:06:46:89:cc:e0:e7:
                    a0:e3:b2:62:d8:ff:73:c7:4b:87:d2:ef:86:9f:3c:
                    5f:86:9b:c5:f1:dc:25:c2:28:cc:1b:32:3a:33:14:
                    e2:d6:7f:40:9b:c4:5b:96:04:d9:db:5c:04:cd:62:
                    04:c4:98:b8:75:3a:21:c8:66:35:7a:29:17:45:62:
                    94:91:46:c2:dc:a5:33:14:ce:10:f9:a2:3b:c8:2a:
                    97:77:b2:d1:f8:6f:e7:e5:e5:29:c6:14:13:48:2b:
                    15:33:1a:75:ec:59:53:b9:ed:3d:97:41:3e:0b:a4:
                    55:60:d0:48:b2:d4:c0:bb:7c:29:d3:5b:a4:36:b8:
                    fc:88:00:13:c9:18:85:b4:7e:f3:fb:de:08:91:b2:
                    9e:19:34:f2:1c:6c:5a:26:58:90:24:61:86:56:e2:
                    78:35:43:54:37:ca:9f:04:6f:65:f7:e4:ab:ca:65:
                    03:d8:3e:5a:55:30:ba:96:a3:21:3b:c1:29:f2:d3:
                    93:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A1:BC:E5:86:55:9D:55:C4:BA:F5:DC:2D:C9:1F:BA:B6:BA:A1:81
            X509v3 Authority Key Identifier:
                keyid:5E:F7:2F:9B:E4:E3:A2:8D:E3:56:9E:76:DE:2D:22:25:DB:F3:FD:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:df:50:15:2c:d4:79:40:67:40:32:29:21:c2:2f:2c:d2:b2:
         87:19:49:31:45:3c:5f:15:90:e0:53:c0:26:ee:4d:57:49:f4:
         b5:8c:89:52:9f:2f:d5:fc:3b:9a:e6:d0:6f:6f:23:15:36:bc:
         f6:83:09:ba:df:db:fd:81:31:ed:81:f9:51:6b:15:e9:20:97:
         fd:fb:e3:c5:e7:3f:35:e3:81:b1:79:7d:7b:7b:2b:8b:c7:53:
         e1:c8:15:66:2b:ae:70:ba:a2:59:97:7d:59:55:2d:52:aa:ea:
         91:25:f5:02:19:e8:a0:d5:a7:40:60:4c:5f:8a:c0:e8:ca:ff:
         29:94:83:34:9f:71:31:d5:80:76:8b:23:c7:5d:3d:10:97:e9:
         f0:4e:15:21:7a:4b:68:8f:ef:a5:85:52:27:ac:de:8f:f3:f8:
         4d:39:c5:66:29:94:20:77:92:8b:b2:ce:19:dd:46:97:6f:28:
         27:a2:d4:6d:3b:a3:85:2f:bf:ce:c6:f0:7b:3b:42:f0:61:38:
         9c:d0:f3:7d:cf:f4:92:da:7c:8e:75:f0:1b:4f:22:c1:64:62:
         23:89:32:54:11:a1:de:f4:14:9f:5c:cb:80:08:cd:1f:43:b4:
         a2:4a:6d:02:2e:74:84:14:f4:80:76:51:6a:9e:f3:f5:3d:70:
         c8:dd:cd:40
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICChMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REI2M0IxMTAvBgNVBAUTKDVFRjcyRjlCRTRFM0EyOERFMzU2OUU3NkRFMkQyMjI1
REJGM0ZEOEEwHhcNMjYwNzIyMjAxMjI4WhcNMjYwNzI5MjAxMjI4WjAYMRYwFAYD
VQQDEw02YTYxMjQyYy0yMGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv6d0EDGPnXoQqa00xTlqTpJU7lYhl15aQ1soCG8V/8jb53Tt8mZl4/CdAzba
o5v3ms7/04cIUdbxSRvOrmHe1BAzZYQGRonM4Oeg47Ji2P9zx0uH0u+GnzxfhpvF
8dwlwijMGzI6MxTi1n9Am8RblgTZ21wEzWIExJi4dTohyGY1eikXRWKUkUbC3KUz
FM4Q+aI7yCqXd7LR+G/n5eUpxhQTSCsVMxp17FlTue09l0E+C6RVYNBIstTAu3wp
01ukNrj8iAATyRiFtH7z+94IkbKeGTTyHGxaJliQJGGGVuJ4NUNUN8qfBG9l9+Sr
ymUD2D5aVTC6lqMhO8Ep8tOTHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPmhvOWG
VZ1VxLr13C3JH7q2uqGBMB8GA1UdIwQYMBaAFF73L5vk46KN41aedt4tIiXb8/2K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjYzQi8yRTJDRUExNjlG
NDYxMUVBOTg4RDBCNjVDNEY5QUUwMi9YdmN2bS1Uam9vM2pWcDUyM2kwaUpkdnpf
WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1h2Y3ZtLVRqb28zalZwNTIzaTBpSmR2el9Zby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QjYzQi8yRTJDRUExNjlGNDYxMUVBOTg4RDBCNjVDNEY5QUUwMi9YdmN2bS1Uam9v
M2pWcDUyM2kwaUpkdnpfWW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmd9QFSzUeUBnQDIpIcIvLNKyhxlJMUU8XxWQ4FPAJu5NV0n0tYyJUp8v1fw7
mubQb28jFTa89oMJut/b/YEx7YH5UWsV6SCX/fvjxec/NeOBsXl9e3sri8dT4cgV
ZiuucLqiWZd9WVUtUqrqkSX1AhnooNWnQGBMX4rA6Mr/KZSDNJ9xMdWAdosjx109
EJfp8E4VIXpLaI/vpYVSJ6zej/P4TTnFZimUIHeSi7LOGd1Gl28oJ6LUbTujhS+/
zsbweztC8GE4nNDzfc/0ktp8jnXwG08iwWRiI4kyVBGh3vQUn1zLgAjNH0O0okpt
Ai50hBT0gHZRap7z9T1wyN3NQA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:09:49 2026 by rpki-client