Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft
File:                     x8kdlvp-jS2SIZUipkBEI3UR4FE.mft (raw, json)
Hash identifier:          CIrEGYxWNUAxjOD8CjEV1f981EuGv8JzwlMrlmOdaRA=
Subject key identifier:   94:93:EB:0D:EF:98:D0:CF:A5:80:0B:91:9C:30:B9:A9:AA:89:34:27
Authority key identifier: C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51
Certificate issuer:       /CN=A91F52E8/serialNumber=C7C91D96FA7E8D2D92219522A64044237511E051
Certificate serial:       0457
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft
Manifest number:          0449
Signing time:             Thu 23 Jul 2026 01:06:36 +0000
Manifest this update:     Thu 23 Jul 2026 01:06:35 +0000
Manifest next update:     Thu 30 Jul 2026 01:06:35 +0000
Files and hashes:         1: x8kdlvp-jS2SIZUipkBEI3UR4FE.crl (hash: k9MqibFM+TrESOTkN66439tis6TJaojZk9TW1HPqKOM=)
                          2: CB0F28626A3D11F18BEDC8237D47A888.roa (hash: 9aLbjRQRMYIzYencq0lATGqFcBhPNKrd9K7Wus4HUHU=)
                          3: C0BBFCC003A911EF9DE2F919C4F9AE02.roa (hash: uIe065ouSrK1ZyYaAyKs/pdPmvRv0EpPK089oDcTECA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.crl
                          rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:06:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1111 (0x457)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F52E8, serialNumber=C7C91D96FA7E8D2D92219522A64044237511E051
        Validity
            Not Before: Jul 23 01:06:35 2026 GMT
            Not After : Jul 30 01:06:35 2026 GMT
        Subject: CN=6a61691b-a2b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8d:7d:ab:66:19:8b:8c:af:ca:a4:47:2e:02:
                    69:72:0e:89:9a:d0:b4:22:e0:83:1c:73:37:33:d8:
                    47:24:57:ca:51:de:d0:cf:86:c2:0d:19:f2:e6:5f:
                    c1:45:b7:1d:48:a8:95:bf:45:36:9a:a0:8c:f7:c0:
                    a6:46:72:92:49:9d:68:1a:ad:9d:67:ca:2f:d6:f2:
                    9e:5f:7e:69:10:d6:71:a3:e6:28:13:2b:32:77:bf:
                    3a:15:ca:5d:31:ec:8e:45:64:78:86:d2:fa:94:0f:
                    e5:dd:9d:9e:22:00:6f:44:ae:86:70:b5:2a:7a:3f:
                    cf:df:d9:45:f7:91:8c:27:c9:07:ed:e7:f5:f7:3a:
                    3d:82:97:09:36:c9:ae:bb:eb:90:2e:79:1b:ff:0b:
                    f3:7b:ca:65:1b:f0:9e:df:97:5d:5e:9e:98:88:d6:
                    d0:0a:42:49:ed:8c:11:0b:cd:df:f5:ac:c8:52:58:
                    df:5c:96:10:ca:aa:2f:88:ac:27:6a:1e:a5:bb:74:
                    ff:b3:8b:2e:7b:05:72:be:95:b4:c8:24:de:f3:c9:
                    45:df:22:a0:93:2b:84:2d:23:50:fa:45:2a:27:4c:
                    79:69:fe:a2:5b:b9:bf:30:d3:f1:8f:64:34:aa:fd:
                    2e:b6:d2:37:bb:18:d8:d7:cf:86:ba:b5:bb:bc:c4:
                    75:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:93:EB:0D:EF:98:D0:CF:A5:80:0B:91:9C:30:B9:A9:AA:89:34:27
            X509v3 Authority Key Identifier:
                keyid:C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:99:50:c0:cf:ff:24:f9:da:e2:7d:60:8e:df:3a:64:f4:f0:
         24:83:ac:c4:ce:86:d4:ab:90:77:27:84:74:e2:ec:b2:1e:ba:
         66:5e:1e:73:c3:09:8d:f5:9c:a1:b3:19:8c:49:ac:f7:68:e2:
         c6:53:48:3b:2f:bc:a3:57:ae:50:01:bb:c0:fc:72:44:c5:b5:
         c3:b8:10:85:d4:a2:4d:02:d6:0f:a6:f7:00:99:e0:c7:37:00:
         f0:d3:8e:4f:47:11:04:34:f4:22:ea:43:c3:34:be:e6:f7:f0:
         2b:f0:ac:a0:eb:06:50:c8:ed:df:80:4b:ee:85:cd:4f:7d:73:
         8f:6d:b0:97:e8:59:ed:2d:34:89:17:42:3f:97:bb:52:37:d4:
         f0:05:22:b3:87:6b:31:a7:89:1d:56:d1:ef:04:89:82:16:58:
         1b:c3:ad:f7:b3:cd:55:7a:1d:68:5f:7b:ad:1e:62:d5:ee:66:
         58:6e:ec:da:2e:6d:02:f1:9d:47:61:89:68:df:e3:4a:cb:b4:
         92:02:77:76:fa:b2:79:75:0f:26:94:31:eb:c8:a1:3d:a8:19:
         8a:bd:2e:8d:0d:89:8e:89:cf:56:b7:23:83:69:b7:4f:26:16:
         20:7e:bf:93:72:cc:34:5f:d8:f3:e3:3f:2f:14:9f:1c:1c:0b:
         28:73:88:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:40:02 2026 by rpki-client