Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft
File:                     Xx7oK_cJomzAAJlbR0geVPbzgG4.mft (raw, json)
Hash identifier:          lN9MzfgJPFdHhHVRGovoqRo+WFP6IpcLhKZ/7qtwfRk=
Subject key identifier:   E7:E0:03:CB:03:6B:70:55:67:EB:B0:CF:13:B0:18:38:E2:E9:32:D2
Authority key identifier: 5F:1E:E8:2B:F7:09:A2:6C:C0:00:99:5B:47:48:1E:54:F6:F3:80:6E
Certificate issuer:       /CN=A91F9E0A/serialNumber=5F1EE82BF709A26CC000995B47481E54F6F3806E
Certificate serial:       0194
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xx7oK_cJomzAAJlbR0geVPbzgG4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft
Manifest number:          018C
Signing time:             Thu 23 Jul 2026 06:05:11 +0000
Manifest this update:     Thu 23 Jul 2026 06:05:11 +0000
Manifest next update:     Thu 30 Jul 2026 06:05:11 +0000
Files and hashes:         1: Xx7oK_cJomzAAJlbR0geVPbzgG4.crl (hash: yKr2SIEUAjhSyK8ZIJxS0FAz5t7U23SNgV415GbQf1o=)
                          2: 9F4A37143EA511EF882FE276C4F9AE02.roa (hash: bmVhAOvV7UXJ9islZHC9bY2mkqwPn0tjhiLeKB5QXHw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.crl
                          rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xx7oK_cJomzAAJlbR0geVPbzgG4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 404 (0x194)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9E0A, serialNumber=5F1EE82BF709A26CC000995B47481E54F6F3806E
        Validity
            Not Before: Jul 23 06:05:11 2026 GMT
            Not After : Jul 30 06:05:11 2026 GMT
        Subject: CN=6a61af17-d4d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b6:88:38:51:e0:d7:41:50:84:8c:9b:2e:6c:
                    28:0d:25:97:31:82:64:4a:09:65:e5:aa:15:2c:18:
                    71:1b:55:bb:d8:de:64:53:44:c1:ad:2b:ae:83:c8:
                    7c:b9:45:e6:23:28:63:a4:61:4a:60:a9:10:02:dd:
                    f6:66:12:3a:03:40:29:3b:48:ca:50:8e:69:87:70:
                    e1:14:e5:74:1c:a6:8d:2c:48:16:b2:5a:0e:c9:37:
                    a0:f0:9c:f2:0d:47:0e:a5:f4:14:00:51:e6:93:78:
                    8b:0d:16:36:c0:42:8d:60:80:e8:53:70:62:fc:fe:
                    06:12:2d:23:51:70:0c:88:e8:0e:32:75:9e:4d:29:
                    fb:a8:fc:4f:87:2f:f8:da:fb:2a:cf:99:15:fb:35:
                    ed:77:24:05:7a:94:86:69:00:c5:3f:f3:e6:a9:aa:
                    84:da:01:a1:27:3a:34:68:f1:2b:ad:cd:50:9a:b5:
                    3b:68:b0:e9:84:69:de:20:e7:36:aa:95:22:ae:74:
                    c4:a8:42:67:d4:c6:32:ad:ca:bd:09:9e:06:6b:ad:
                    85:1d:ca:66:f9:1f:85:80:22:be:95:8c:fd:f7:f5:
                    62:bf:44:f7:2e:24:b8:47:09:08:37:d2:cc:37:0c:
                    31:6e:ba:62:92:d2:b6:8e:1a:9f:9d:74:b1:e1:c9:
                    52:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E0:03:CB:03:6B:70:55:67:EB:B0:CF:13:B0:18:38:E2:E9:32:D2
            X509v3 Authority Key Identifier:
                keyid:5F:1E:E8:2B:F7:09:A2:6C:C0:00:99:5B:47:48:1E:54:F6:F3:80:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xx7oK_cJomzAAJlbR0geVPbzgG4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:7a:41:c2:8d:c1:91:fd:dc:2b:00:ae:7f:a6:c4:bf:67:9d:
         3b:af:84:e4:a9:14:5f:38:0f:6a:df:48:14:de:f4:84:11:88:
         14:c4:68:ba:b1:99:a3:65:37:2d:a2:9b:7b:e2:b0:b3:64:98:
         56:a1:44:60:91:b7:cb:9e:40:b1:89:7a:36:28:ba:3c:d4:98:
         ef:94:fc:33:fa:6c:55:04:87:3e:28:f6:da:2f:a9:df:b9:a4:
         a2:89:77:a4:0e:62:09:c3:cf:52:6a:bc:d6:cb:ef:50:c4:78:
         dc:2a:b7:e3:68:32:54:ae:af:1b:f8:68:e1:8d:f6:56:46:21:
         96:54:06:57:94:03:42:42:8e:34:60:52:85:a9:23:8f:91:d2:
         e1:1e:5d:ad:20:11:e3:d4:14:5c:47:36:fd:64:34:bc:b1:9b:
         51:0b:08:83:2c:00:55:16:8c:56:03:84:4d:03:e5:45:9c:c6:
         52:8c:b5:e3:b7:0d:92:27:76:b6:06:9f:4c:10:fb:ff:be:ff:
         bf:b7:1f:6b:0a:d0:d1:97:6a:74:86:d3:b2:52:58:35:d2:b1:
         0a:cd:65:5e:10:d8:cb:8a:2a:ab:be:75:02:a6:6b:25:be:51:
         50:05:ad:4b:f0:89:2d:10:f6:6d:2f:30:ec:d0:53:ee:40:c9:
         e2:54:7c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:52:32 2026 by rpki-client