Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft
File:                     v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft (raw, json)
Hash identifier:          oRXtlcKuvH3v1J5hMH2bVLODVWriJhOwsWXq0S61P9s=
Subject key identifier:   DA:0B:1A:4B:44:09:4C:AE:4E:D3:2F:75:30:35:7F:97:93:B0:23:34
Authority key identifier: BF:45:D4:7E:7F:8F:D1:77:D4:59:2C:43:4B:CF:96:2B:C0:A8:C6:69
Certificate issuer:       /CN=A91168B5/serialNumber=BF45D47E7F8FD177D4592C434BCF962BC0A8C669
Certificate serial:       1CB3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft
Manifest number:          1CAC
Signing time:             Tue 28 Jul 2026 16:15:26 +0000
Manifest this update:     Tue 28 Jul 2026 16:15:26 +0000
Manifest next update:     Tue 04 Aug 2026 16:15:26 +0000
Files and hashes:         1: v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl (hash: VUbvj+XDRYh2swci7E3lv7N1aUbuRBwMsjH8fwl6mwA=)
                          2: 11600CECBA8E11F09FE88B46C4F9AE02.roa (hash: NzPA3vTx/A3a5wnPCMTUeeGHZAhzPwo4b+b76jAubug=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl
                          rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:41:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7347 (0x1cb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91168B5, serialNumber=BF45D47E7F8FD177D4592C434BCF962BC0A8C669
        Validity
            Not Before: Jul 28 16:15:26 2026 GMT
            Not After : Aug  4 16:15:26 2026 GMT
        Subject: CN=6a68d59e-6e27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a0:cd:45:0d:3a:a4:9f:cc:61:bf:5b:cd:57:
                    d5:fe:d5:06:4e:01:90:c5:1b:da:e3:7f:61:7b:84:
                    80:21:bb:2d:e0:43:cd:b3:55:27:e0:8d:df:7b:d8:
                    66:1e:82:dc:5a:68:1c:d3:52:b6:2b:76:8e:2c:c5:
                    14:2c:18:17:d8:6c:62:a3:14:0f:d7:ec:0c:fb:0f:
                    cb:35:a0:9a:f1:91:57:71:d8:25:46:e4:bc:e4:5c:
                    6b:b3:00:e4:ba:f9:f0:93:c3:03:3a:ae:f6:3e:5f:
                    2d:bd:b0:dc:47:f1:48:98:26:06:cb:ae:26:86:b8:
                    16:44:3c:57:60:dd:0a:01:81:8c:57:c2:7f:c4:98:
                    43:8f:0f:4f:36:de:bc:4e:bc:e3:ae:86:0f:45:bd:
                    49:87:fa:fc:c9:06:5e:45:80:85:35:21:50:fc:ec:
                    24:58:eb:74:65:e8:dc:bc:06:64:ac:7b:97:55:18:
                    a4:2d:83:87:25:f0:72:8f:6a:c5:e0:7a:ec:1b:97:
                    1c:23:b2:32:09:04:67:88:c1:a9:5e:5d:8d:a1:58:
                    8e:3d:2e:1a:10:72:bb:19:92:ad:10:8f:bf:8f:bb:
                    14:f4:a5:bb:cb:b3:3c:07:8a:7b:a3:49:61:3c:19:
                    93:c5:87:52:15:5d:58:81:14:6a:56:47:1f:f6:b2:
                    d8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:0B:1A:4B:44:09:4C:AE:4E:D3:2F:75:30:35:7F:97:93:B0:23:34
            X509v3 Authority Key Identifier:
                keyid:BF:45:D4:7E:7F:8F:D1:77:D4:59:2C:43:4B:CF:96:2B:C0:A8:C6:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:7c:65:05:5c:76:d7:37:6e:87:90:66:05:ae:5c:0c:54:f0:
         3c:24:18:a9:af:22:4b:68:4b:9c:8c:30:ee:e2:b7:b2:2f:62:
         17:2b:b3:e0:4c:0c:57:54:9a:a3:8b:37:f5:dd:a3:bb:b3:c7:
         31:c0:8b:5e:8d:b6:80:cb:51:a7:80:68:3f:0e:4a:fd:89:bf:
         fe:f6:e0:b2:0e:07:f4:35:c2:b5:43:c1:0b:d6:e0:78:f2:c7:
         f0:64:48:54:2d:74:cf:b2:ed:67:31:a6:c3:6a:a4:69:76:78:
         33:6c:21:c6:55:7d:95:19:51:4c:65:8f:27:9b:cb:4e:08:d6:
         b5:98:05:ec:75:24:d6:2c:6f:3c:82:5d:d8:b3:9c:1a:dc:ac:
         77:d5:97:63:18:d4:47:03:45:8d:cf:03:d3:82:5c:1d:be:e8:
         17:80:d9:28:b5:52:a4:c3:97:e3:00:3f:34:ce:d9:51:8e:50:
         12:51:c2:b7:d3:5d:d5:5c:f9:0e:8e:fc:50:76:08:b3:1a:73:
         33:05:8f:10:62:cc:bd:aa:74:29:88:37:6a:14:aa:b1:28:68:
         84:1c:d3:18:4d:28:42:10:c6:68:cc:f5:f9:33:a8:88:97:a3:
         d4:f4:85:9b:c4:4c:7c:10:ee:f2:89:79:2e:2b:3b:89:b5:d9:
         99:28:75:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:50:28 2026 by rpki-client