Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.mft
File:                     CXELW2Z0njOdEkzebWbONmrMq7A.mft (raw, json)
Hash identifier:          PtLNzZrj0mzwFzKgaZAaVROUzP8uzXv3hRdEp6dBsCc=
Subject key identifier:   94:7B:59:5D:6D:5F:A8:27:1B:95:F7:9B:37:64:40:CB:2B:AF:8D:55
Authority key identifier: 09:71:0B:5B:66:74:9E:33:9D:12:4C:DE:6D:66:CE:36:6A:CC:AB:B0
Certificate issuer:       /CN=A91E3F3C/serialNumber=09710B5B66749E339D124CDE6D66CE366ACCABB0
Certificate serial:       B5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CXELW2Z0njOdEkzebWbONmrMq7A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.mft
Manifest number:          A8
Signing time:             Thu 23 Jul 2026 04:14:29 +0000
Manifest this update:     Thu 23 Jul 2026 04:14:28 +0000
Manifest next update:     Thu 30 Jul 2026 04:14:28 +0000
Files and hashes:         1: CXELW2Z0njOdEkzebWbONmrMq7A.crl (hash: /MK5M/jmRRtg24bLEL0mTGPMq6WomVKi9jSLPO/L6f8=)
                          2: 29A5EF72783B11F18CDDD63D68A30FBC.roa (hash: ybtdLJt/2lB1NKc0oqy7/uP14/hx1uHMXiIUakfOVVo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.crl
                          rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CXELW2Z0njOdEkzebWbONmrMq7A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:14:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181 (0xb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3F3C, serialNumber=09710B5B66749E339D124CDE6D66CE366ACCABB0
        Validity
            Not Before: Jul 23 04:14:28 2026 GMT
            Not After : Jul 30 04:14:28 2026 GMT
        Subject: CN=6a619525-9501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f7:1d:95:0e:d9:ca:52:93:45:65:2e:8a:71:
                    6f:e4:b6:bf:4a:dd:89:6e:4d:0e:62:b2:c2:5e:cc:
                    90:12:5c:b0:67:d4:aa:ae:7c:7a:9a:35:e3:ea:2d:
                    bd:1c:66:04:d7:0f:a0:d0:a2:82:82:10:ba:a8:a8:
                    6f:cb:99:89:65:61:a4:9f:82:9a:5a:c6:5c:32:fa:
                    19:5d:02:f4:65:10:7e:de:f5:60:fa:f5:bb:d4:43:
                    c6:06:f3:57:ff:84:f1:6e:c7:b2:81:8f:33:bc:0c:
                    15:82:ea:0d:31:e9:85:cb:02:01:ab:da:e4:01:0f:
                    ac:d5:d6:7b:52:f4:39:f1:e6:37:65:49:98:03:f3:
                    d8:c0:67:c8:5f:b2:1f:00:b4:61:16:66:d6:21:0b:
                    92:35:b1:6e:23:37:4d:ae:d8:47:ea:88:a3:b5:1d:
                    f7:0e:a4:4a:39:6e:94:25:4b:c0:b0:13:87:6a:4f:
                    18:41:71:1d:31:9c:6c:34:ab:e6:5f:72:2d:09:08:
                    de:bc:cc:10:2b:c5:49:c1:3f:52:31:f2:84:8c:4a:
                    ab:59:b2:25:06:44:87:a9:89:09:96:64:f8:97:9e:
                    f5:d5:f7:d8:f9:bb:9a:19:8d:55:aa:10:0c:ad:87:
                    02:f3:0f:e3:bf:09:af:97:2c:51:e2:51:57:b5:00:
                    7c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:7B:59:5D:6D:5F:A8:27:1B:95:F7:9B:37:64:40:CB:2B:AF:8D:55
            X509v3 Authority Key Identifier:
                keyid:09:71:0B:5B:66:74:9E:33:9D:12:4C:DE:6D:66:CE:36:6A:CC:AB:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CXELW2Z0njOdEkzebWbONmrMq7A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:e7:db:c2:5c:92:a6:ad:1f:5e:ef:86:a2:3c:c4:f3:1f:d0:
         53:51:bf:a8:0f:b0:dc:a4:81:0d:e7:f1:09:6c:d5:ef:27:e8:
         2d:cc:1b:99:f4:cf:76:0d:91:1c:3b:42:6a:f6:c2:d6:77:42:
         5d:b0:6d:84:e0:f3:29:8d:53:01:07:1a:3c:68:79:2f:2b:71:
         27:7b:54:f2:71:df:63:3a:c1:5a:cc:af:4a:60:ac:9f:4c:bb:
         04:8f:a2:7e:5c:ec:3a:83:ff:ad:da:60:b7:41:37:13:25:37:
         38:e7:a0:55:59:a4:8d:00:d8:fb:b0:c1:a6:e6:39:93:68:4e:
         bf:14:61:8c:03:1e:ff:d6:14:73:9d:4c:3c:03:9e:9c:58:dc:
         8d:b9:7f:ec:0a:67:dd:c3:cb:40:11:eb:18:9b:cd:09:3e:e5:
         db:4d:2a:9a:c1:90:30:f3:89:8c:61:c4:b8:84:f6:b9:03:3a:
         ce:49:1b:de:62:4a:64:bf:68:dd:53:85:b6:39:d8:0c:37:d5:
         0b:69:13:39:43:03:47:b4:30:5e:5e:ff:68:d7:d8:f2:82:27:
         02:ed:e3:d7:18:bb:43:85:60:b4:8a:b8:b2:bb:a7:7e:78:85:
         f4:6a:ab:4d:a6:04:61:fe:83:1a:02:d2:09:64:a8:27:58:e6:
         c8:49:3f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:18:24 2026 by rpki-client