Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F81D3/0A8459F4523511EA9A0CB273C4F9AE02/XpnXCH3VTqLn519cgIcHE4Posp4.mft
File:                     XpnXCH3VTqLn519cgIcHE4Posp4.mft (raw, json)
Hash identifier:          0LrXizIJf3mpAODXPjNKjav/2EbqYIemg/vjFoAwRy4=
Subject key identifier:   57:AC:62:34:5B:D9:AF:7E:63:74:E7:81:24:F5:A0:C6:F3:49:DD:D7
Authority key identifier: 5E:99:D7:08:7D:D5:4E:A2:E7:E7:5F:5C:80:87:07:13:83:E8:B2:9E
Certificate issuer:       /CN=A91F81D3/serialNumber=5E99D7087DD54EA2E7E75F5C8087071383E8B29E
Certificate serial:       0BCA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpnXCH3VTqLn519cgIcHE4Posp4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F81D3/0A8459F4523511EA9A0CB273C4F9AE02/XpnXCH3VTqLn519cgIcHE4Posp4.mft
Manifest number:          0BA6
Signing time:             Wed 22 Jul 2026 19:26:48 +0000
Manifest this update:     Wed 22 Jul 2026 19:26:48 +0000
Manifest next update:     Wed 29 Jul 2026 19:26:48 +0000
Files and hashes:         1: XpnXCH3VTqLn519cgIcHE4Posp4.crl (hash: Qh6wADif53bUaBAuIqnNIhkZ+SQBOhfXPmMt7frsGN0=)
                          2: 1ECAB88C1AD811F193E57F8A3E3D8C67.roa (hash: fuUoAX7qold+hBso2xjm+AtCXw9QMD6MxM+hCTTXcPw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F81D3/0A8459F4523511EA9A0CB273C4F9AE02/XpnXCH3VTqLn519cgIcHE4Posp4.crl
                          rsync://rpki.apnic.net/member_repository/A91F81D3/0A8459F4523511EA9A0CB273C4F9AE02/XpnXCH3VTqLn519cgIcHE4Posp4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpnXCH3VTqLn519cgIcHE4Posp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3018 (0xbca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F81D3, serialNumber=5E99D7087DD54EA2E7E75F5C8087071383E8B29E
        Validity
            Not Before: Jul 22 19:26:48 2026 GMT
            Not After : Jul 29 19:26:48 2026 GMT
        Subject: CN=6a611978-5134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7f:ce:fa:65:08:bf:5c:c6:e6:a8:91:b5:db:
                    05:c6:6d:e9:04:75:47:a2:15:90:a2:23:d1:27:30:
                    77:50:85:f2:d4:56:61:1b:07:6f:52:6e:a1:b1:73:
                    02:d5:0e:54:ff:6c:45:e7:e1:8a:93:55:53:3e:8a:
                    86:cf:da:77:46:71:40:a6:64:82:6e:d0:ba:91:82:
                    58:28:48:82:6e:03:19:f9:96:50:f6:ab:06:2b:97:
                    3c:3e:5c:e3:12:df:05:39:ec:a8:e7:fd:03:2c:4e:
                    eb:52:80:4b:1a:a5:01:cc:3e:ea:8a:da:15:7e:54:
                    e0:85:96:9b:83:dc:01:0d:92:02:a9:f9:6f:80:88:
                    ff:35:55:19:bb:e8:af:0e:f8:05:45:88:da:8e:3a:
                    41:a4:ba:7e:41:da:e1:9c:69:c5:e2:76:ce:e0:3c:
                    11:a2:06:23:1b:e3:e9:62:d3:e2:53:8a:40:8a:c5:
                    f2:66:91:15:e8:dc:91:17:92:36:30:34:2c:62:6f:
                    a2:be:f3:40:e1:9c:be:f0:de:20:03:6e:a6:f2:0a:
                    f8:79:05:b0:e3:2a:43:1b:b8:98:71:e8:59:d6:a4:
                    8a:de:bc:18:1d:67:3c:8e:87:a4:1e:6c:b6:01:21:
                    d7:f0:a7:91:e6:29:e5:ba:b6:20:9f:8e:94:dc:91:
                    70:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:AC:62:34:5B:D9:AF:7E:63:74:E7:81:24:F5:A0:C6:F3:49:DD:D7
            X509v3 Authority Key Identifier:
                keyid:5E:99:D7:08:7D:D5:4E:A2:E7:E7:5F:5C:80:87:07:13:83:E8:B2:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F81D3/0A8459F4523511EA9A0CB273C4F9AE02/XpnXCH3VTqLn519cgIcHE4Posp4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpnXCH3VTqLn519cgIcHE4Posp4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F81D3/0A8459F4523511EA9A0CB273C4F9AE02/XpnXCH3VTqLn519cgIcHE4Posp4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:06:d3:a8:59:6b:a5:10:b3:ac:0d:2a:9d:b7:df:8f:28:40:
         b5:83:85:38:11:61:ab:ee:a1:11:b8:58:ad:99:b0:e7:3c:ce:
         c9:c7:74:34:0c:8b:7f:5d:9a:46:a2:97:59:88:ca:69:53:83:
         0a:7e:4a:06:7c:e9:d9:4c:1d:6d:39:2b:76:e2:a1:e7:b7:1d:
         45:88:29:d5:09:a9:37:4f:81:9a:ee:f8:f5:cf:cc:24:31:e4:
         2a:6e:e1:31:30:fa:13:f1:6b:f9:20:e1:22:27:89:e8:6e:7d:
         17:e9:ed:34:8f:dd:49:ac:e2:e2:e6:b9:2e:d6:80:7b:0e:b7:
         b7:25:72:d3:53:0a:bd:5a:8e:36:e8:c3:7d:2d:52:9f:39:b5:
         ea:38:70:df:ae:cf:3c:7a:1d:d7:44:df:b7:ad:98:e4:50:c6:
         db:b0:02:ef:50:b8:b0:86:89:3a:34:db:32:1f:28:e0:be:52:
         50:f2:84:95:9e:43:51:54:19:72:36:50:2a:c3:f3:a1:87:fb:
         c6:fe:c6:62:91:ea:23:5f:ee:79:8c:dc:d1:ab:96:06:8b:9d:
         8e:9e:cb:9c:61:33:99:24:ef:5c:74:34:cd:a3:58:cc:f3:2b:
         87:1b:c8:38:b1:ca:64:15:60:ff:3b:94:90:e3:6f:4d:ab:8f:
         8d:a4:12:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:57:34 2026 by rpki-client