Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912418E/E5676BECB08011F08A950351C4F9AE02/XFIDfgLgI3qkpHhukIwUJuu5qUc.mft
File:                     XFIDfgLgI3qkpHhukIwUJuu5qUc.mft (raw, json)
Hash identifier:          2P9T5HsTx39gVBERKx9+BeIMaTlE0ngZEP+hfq2S8n8=
Subject key identifier:   BD:84:E6:A4:57:C4:FA:D8:1D:47:74:6C:27:BD:75:98:50:FB:15:F8
Authority key identifier: 5C:52:03:7E:02:E0:23:7A:A4:A4:78:6E:90:8C:14:26:EB:B9:A9:47
Certificate issuer:       /CN=A912418E/serialNumber=5C52037E02E0237AA4A4786E908C1426EBB9A947
Certificate serial:       94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFIDfgLgI3qkpHhukIwUJuu5qUc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912418E/E5676BECB08011F08A950351C4F9AE02/XFIDfgLgI3qkpHhukIwUJuu5qUc.mft
Manifest number:          91
Signing time:             Mon 27 Jul 2026 09:38:41 +0000
Manifest this update:     Mon 27 Jul 2026 09:38:40 +0000
Manifest next update:     Mon 03 Aug 2026 09:38:40 +0000
Files and hashes:         1: XFIDfgLgI3qkpHhukIwUJuu5qUc.crl (hash: t+WydI6nJpLJXLuBxMTbQkwJ7O0Z5uTy8hQ6oZF53eM=)
                          2: E7126E0AB08111F0B4456572C4F9AE02.roa (hash: YUwbARYRWDhqr8AQ9nX5yVmrs68Yn8MG6mbRb/tU6iY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912418E/E5676BECB08011F08A950351C4F9AE02/XFIDfgLgI3qkpHhukIwUJuu5qUc.crl
                          rsync://rpki.apnic.net/member_repository/A912418E/E5676BECB08011F08A950351C4F9AE02/XFIDfgLgI3qkpHhukIwUJuu5qUc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFIDfgLgI3qkpHhukIwUJuu5qUc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:38:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148 (0x94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912418E, serialNumber=5C52037E02E0237AA4A4786E908C1426EBB9A947
        Validity
            Not Before: Jul 27 09:38:40 2026 GMT
            Not After : Aug  3 09:38:40 2026 GMT
        Subject: CN=6a672721-4e47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:34:39:a4:db:fa:d8:6c:4a:60:b9:b9:23:67:
                    a9:c5:6e:76:c6:14:72:c3:f8:a1:73:c8:e1:bf:80:
                    85:f1:a3:f6:24:dc:fa:b8:a3:20:ae:a6:b0:8c:d9:
                    a9:55:60:30:f2:29:25:e5:00:dd:8b:71:4e:8f:b5:
                    f2:c9:99:c7:a7:9a:7a:6d:51:16:1b:70:5b:ff:d7:
                    ff:0f:d3:fb:be:ee:1d:87:ab:8d:38:c2:77:f4:ec:
                    c9:03:00:bc:4e:b3:a2:fb:90:b8:d4:9c:88:03:95:
                    40:74:af:91:b0:fa:2f:b2:0c:07:99:29:40:65:83:
                    0d:d7:b7:2d:b3:ad:1a:c3:40:2c:d8:8c:7e:e9:4f:
                    c0:ca:5a:ab:83:c8:75:86:7b:c8:f4:f2:7b:bc:ad:
                    67:1d:cb:43:2f:3e:48:d3:74:e9:cb:dc:85:5a:ac:
                    fe:2b:b6:47:78:41:63:7a:77:bb:f7:0a:ff:60:91:
                    ee:fd:fb:c4:64:1b:96:81:7b:5d:ce:c5:56:d3:3e:
                    8b:1c:68:bb:8b:36:83:69:a8:a8:51:f6:53:ae:aa:
                    5c:51:cb:86:bb:9c:05:44:8b:e7:1c:83:26:c5:b8:
                    f1:dd:56:cd:b1:0c:c0:4b:f6:66:14:37:8b:89:32:
                    b6:b3:85:d4:19:49:c1:4e:3d:37:fc:98:1f:01:1c:
                    d3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:84:E6:A4:57:C4:FA:D8:1D:47:74:6C:27:BD:75:98:50:FB:15:F8
            X509v3 Authority Key Identifier:
                keyid:5C:52:03:7E:02:E0:23:7A:A4:A4:78:6E:90:8C:14:26:EB:B9:A9:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912418E/E5676BECB08011F08A950351C4F9AE02/XFIDfgLgI3qkpHhukIwUJuu5qUc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFIDfgLgI3qkpHhukIwUJuu5qUc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912418E/E5676BECB08011F08A950351C4F9AE02/XFIDfgLgI3qkpHhukIwUJuu5qUc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:94:c7:1a:db:ad:50:70:81:cb:d8:9f:9d:c7:36:79:f3:ba:
         41:4b:b5:b8:a8:49:0e:75:bf:ff:52:22:cc:ec:20:0e:0f:4c:
         cd:3a:0c:d8:38:0f:f9:55:13:41:48:bd:cc:30:0a:01:dd:de:
         fd:df:34:2d:e8:69:0e:11:53:a1:7d:72:b8:bd:3e:6d:05:d7:
         b9:bf:41:45:95:82:1a:33:db:cd:44:b6:7d:30:aa:52:8d:6c:
         c9:8a:0d:8a:c6:4c:1b:bd:11:3a:f5:8f:dd:e6:12:78:69:83:
         91:76:60:80:b7:0f:a1:26:f5:02:e3:ff:99:65:92:eb:f8:d1:
         c1:01:1f:fe:c7:1f:df:b6:26:8d:6a:f4:34:a1:32:a5:d1:1b:
         27:be:1c:87:1a:89:d4:ca:06:12:2f:38:74:38:23:a0:69:44:
         16:41:7a:00:b6:5f:1b:f1:29:32:6c:c5:a0:5b:61:97:0b:8d:
         16:cf:7e:cc:d9:39:cb:45:2b:cf:8b:b4:a2:be:2d:a5:48:90:
         42:5a:ff:11:64:32:7e:8e:ae:02:08:92:7f:8f:90:b6:15:ee:
         2d:0d:eb:a4:d5:b6:3b:af:86:ab:8e:52:1e:e6:8a:a9:66:19:
         b0:d3:76:f5:74:c4:ad:bd:58:03:68:a0:95:5f:89:a7:ab:97:
         54:fd:9d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:02:55 2026 by rpki-client