Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft
File:                     XlEJvjS4HAy74OQ1mneBpGJLn80.mft (raw, json)
Hash identifier:          eesgTs2t91LWZR7vM8o97I95zBD+Tj32H5IHILAohNE=
Subject key identifier:   C3:5F:E9:BF:7D:67:D2:F3:AF:77:07:58:EA:C8:80:59:66:C8:72:B0
Authority key identifier: 5E:51:09:BE:34:B8:1C:0C:BB:E0:E4:35:9A:77:81:A4:62:4B:9F:CD
Certificate issuer:       /CN=A91E5D61/serialNumber=5E5109BE34B81C0CBBE0E4359A7781A4624B9FCD
Certificate serial:       13C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft
Manifest number:          495C
Signing time:             Fri 24 Jul 2026 14:21:28 +0000
Manifest this update:     Fri 24 Jul 2026 14:21:28 +0000
Manifest next update:     Fri 31 Jul 2026 14:21:28 +0000
Files and hashes:         1: XlEJvjS4HAy74OQ1mneBpGJLn80.crl (hash: j0XFQgIJTNmIDqE1sR1qTbwfKheBXykj72e2P17wJDM=)
                          2: 12300E80ECD911EEB21F7B7FC4F9AE02.roa (hash: r6K9sT4xz4xltrfN6WopOwvbBDeZ2oXDfmgdeeL8nwY=)
                          3: 792023A8E0DD11EE86DB926AC4F9AE02.roa (hash: 8j8UggU/cOGDsFTMUgNVbsmPDrBcfc9iBtV2U1i4LIQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.crl
                          rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 14:18:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5056 (0x13c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D61, serialNumber=5E5109BE34B81C0CBBE0E4359A7781A4624B9FCD
        Validity
            Not Before: Jul 24 14:21:28 2026 GMT
            Not After : Jul 31 14:21:28 2026 GMT
        Subject: CN=6a6374e8-3451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:25:52:d8:8d:7e:6c:85:6f:5e:2b:f7:9b:9d:
                    05:16:ff:08:b7:22:fb:79:e7:c9:18:56:2a:10:5b:
                    0e:88:7d:41:87:ba:a2:cb:9a:e6:82:3f:a6:80:6a:
                    ce:fe:3b:c8:db:81:c8:b3:7b:d3:68:6a:39:cb:1a:
                    69:76:ed:9a:35:24:05:44:6c:bb:c7:77:e9:d5:bf:
                    7a:03:c8:a4:c3:8a:1a:e5:13:eb:63:6e:bb:9b:03:
                    68:fe:c9:cb:77:44:bc:65:70:2c:4b:9b:5f:24:79:
                    71:13:b8:b5:36:ee:11:67:41:0a:c1:52:8f:80:e6:
                    55:11:6d:d0:df:9c:ef:c0:96:4f:ab:93:0e:e4:50:
                    ee:c8:97:f8:2a:84:6f:b0:8b:07:fe:d0:30:05:7f:
                    0c:65:47:69:0e:da:b9:52:ca:ca:d4:5d:90:c9:09:
                    db:8d:86:69:97:f4:a4:ee:5b:fa:55:90:c6:c9:ff:
                    aa:03:08:8d:d4:9f:0b:98:a2:05:18:39:2a:5a:9c:
                    e8:69:38:aa:6d:50:c6:7d:d2:5a:a6:9c:81:88:10:
                    2a:e0:82:8c:a3:2e:55:89:4b:40:b0:5b:8c:6f:bb:
                    94:16:9a:e8:56:d2:d2:f5:2e:95:ad:26:31:bf:36:
                    5f:9e:f0:84:3f:b8:e9:d9:50:5a:99:b0:2e:5f:37:
                    34:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:5F:E9:BF:7D:67:D2:F3:AF:77:07:58:EA:C8:80:59:66:C8:72:B0
            X509v3 Authority Key Identifier:
                keyid:5E:51:09:BE:34:B8:1C:0C:BB:E0:E4:35:9A:77:81:A4:62:4B:9F:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:e1:2e:b1:51:64:86:8c:fb:a9:e4:d5:66:75:27:2a:84:02:
         32:11:d8:ca:40:80:24:e7:23:da:d0:ef:73:f6:80:b6:27:b3:
         22:07:90:34:be:cf:7f:8c:df:7e:3a:86:c0:96:4e:2e:0a:c2:
         15:74:91:13:be:9a:74:b7:69:1a:52:96:77:be:e7:73:3b:be:
         f2:de:fe:1a:3e:e3:a0:f0:8c:1e:94:c3:72:39:47:4f:60:25:
         61:83:b8:f0:c7:2e:ba:c1:47:40:f6:94:c4:31:11:b6:59:3e:
         7e:71:1d:a5:2f:c1:2d:40:a9:99:17:aa:75:bb:57:9e:35:57:
         2b:f4:28:b3:42:c3:32:4a:ff:43:bb:c5:c0:34:fe:31:0c:2c:
         72:0e:32:19:21:38:a7:c7:6a:1f:05:ad:bb:e9:b3:49:ef:ed:
         dc:7d:ed:1d:8b:09:9a:84:8c:a2:4c:04:60:3b:be:ce:58:be:
         b2:de:21:59:bf:53:bb:2d:67:2f:79:a5:e1:8a:ce:fc:33:c4:
         3f:b3:3e:8b:a3:a0:fc:82:cf:ec:60:57:d1:6a:3d:85:39:b7:
         0a:79:ee:9a:9a:c8:bf:17:60:ab:6d:fe:49:5a:16:ae:c5:98:
         c9:e0:bf:d1:9c:02:6c:60:c1:18:0f:63:5e:5a:b6:2e:66:0a:
         95:31:c7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:55:34 2026 by rpki-client