Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.mft
File:                     5xqfIU6Aybw7LSOf-LmqtxP27bc.mft (raw, json)
Hash identifier:          kBANscRJje1CaBjBu1mgwg3egouXvf9iPcz89eKh7Mw=
Subject key identifier:   D8:57:26:25:4A:9F:CF:B9:D6:ED:1E:77:2D:10:50:80:40:04:32:3D
Authority key identifier: E7:1A:9F:21:4E:80:C9:BC:3B:2D:23:9F:F8:B9:AA:B7:13:F6:ED:B7
Certificate issuer:       /CN=A91E8525/serialNumber=E71A9F214E80C9BC3B2D239FF8B9AAB713F6EDB7
Certificate serial:       1AB4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xqfIU6Aybw7LSOf-LmqtxP27bc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.mft
Manifest number:          1A9D
Signing time:             Wed 22 Jul 2026 16:24:52 +0000
Manifest this update:     Wed 22 Jul 2026 16:24:51 +0000
Manifest next update:     Wed 29 Jul 2026 16:24:51 +0000
Files and hashes:         1: 5xqfIU6Aybw7LSOf-LmqtxP27bc.crl (hash: GBv/syoybUpfkNcveLI/LjcsXHvIoI+Z/RhTi2uoclc=)
                          2: 3A21C144E51211EBB1225278C4F9AE02.roa (hash: AsfjPiAFFmeSKGw8hoPthB94TPU/136PKCHDcZQINKo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.crl
                          rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xqfIU6Aybw7LSOf-LmqtxP27bc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:24:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6836 (0x1ab4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8525, serialNumber=E71A9F214E80C9BC3B2D239FF8B9AAB713F6EDB7
        Validity
            Not Before: Jul 22 16:24:51 2026 GMT
            Not After : Jul 29 16:24:51 2026 GMT
        Subject: CN=6a60eed4-089c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:29:55:e4:a3:fd:36:de:2f:71:ee:c0:b4:f0:
                    c7:fd:45:43:6c:a3:36:5d:eb:8b:13:fe:2d:ea:0e:
                    44:cf:42:4f:25:93:ec:76:f4:c8:90:6c:a5:48:f7:
                    dd:db:97:7c:8a:17:f0:a6:57:06:39:00:63:e8:f6:
                    e7:22:70:c7:d6:23:a9:f1:d9:e8:6f:dd:64:f0:55:
                    0c:44:25:c3:ec:45:8d:39:f5:df:e0:fa:77:40:9d:
                    4e:89:bf:eb:cf:6a:53:8a:f0:b4:24:ed:73:7b:63:
                    3c:54:09:e1:bd:83:7d:9d:6b:fe:6c:44:03:2f:ed:
                    a3:08:b2:93:bf:8d:56:93:d4:24:84:ba:22:8c:b1:
                    f1:98:8b:17:36:19:48:a0:da:58:f9:ad:e4:24:e9:
                    dd:12:50:a3:db:b0:60:7b:d3:e8:0e:47:23:9e:81:
                    2a:29:e7:c5:f8:b7:81:7b:b2:02:79:7d:b2:2b:8b:
                    81:9f:e0:0e:e7:6f:1b:e4:7c:7c:db:fd:f5:ef:f5:
                    aa:44:2b:c3:33:0d:c3:72:16:ca:5f:23:86:9b:91:
                    e9:fe:e0:c0:1d:4b:b8:2f:ca:9a:a5:ba:3b:55:00:
                    cd:71:82:17:f3:cf:6b:9b:c8:34:ab:a3:f5:1e:c5:
                    e0:eb:0d:7a:84:9e:d0:69:b1:14:6d:16:5a:03:8c:
                    7c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:57:26:25:4A:9F:CF:B9:D6:ED:1E:77:2D:10:50:80:40:04:32:3D
            X509v3 Authority Key Identifier:
                keyid:E7:1A:9F:21:4E:80:C9:BC:3B:2D:23:9F:F8:B9:AA:B7:13:F6:ED:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xqfIU6Aybw7LSOf-LmqtxP27bc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:0d:c7:6f:64:a8:75:22:4a:e2:d2:f9:e7:5d:ed:68:68:8f:
         04:b7:80:3a:17:8d:9c:c6:22:a8:0c:00:0b:a3:ef:21:b0:29:
         b6:44:b7:a8:2e:9c:60:12:61:d2:79:16:c3:7b:5a:18:e0:2e:
         d4:8e:ef:21:da:1f:b9:42:b9:e2:28:39:8c:1d:a6:15:75:ce:
         2e:04:3e:05:02:ea:2c:b5:5a:35:b5:37:43:ff:49:38:0e:df:
         06:70:c1:9a:1f:e4:16:0a:e7:27:08:3b:2d:ea:a7:f4:de:61:
         68:ac:5c:2a:1f:b6:a7:18:f4:00:41:25:c2:ff:7e:9b:89:5b:
         e1:d6:89:ac:d6:bd:0d:98:3c:72:16:8d:b1:95:13:4e:8a:69:
         10:7a:e5:8a:1d:04:38:80:d4:45:77:0e:13:ea:63:4e:60:83:
         e4:e6:d9:cd:20:88:5b:57:a4:23:46:30:96:67:3e:9d:87:b9:
         3c:16:c5:8b:2d:eb:dc:6d:44:6b:4a:2b:93:86:fe:9b:7f:d7:
         8e:ce:2d:e0:c4:20:cc:c7:0c:d0:29:e2:9a:9e:8a:d7:77:86:
         66:26:9a:79:bd:85:07:ab:cf:89:61:30:91:d9:8d:3e:5e:9e:
         e5:28:b9:31:49:06:7a:48:ff:00:2c:8c:b0:c3:32:7c:4b:cd:
         94:fa:43:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:31:52 2026 by rpki-client