Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft
File:                     xA63gWRRh1SG2mQ_j5Nht337IaM.mft (raw, json)
Hash identifier:          JE4otKRssL6LpvKSGAqzUGTMF7+JMvV76fjzGnrMFNY=
Subject key identifier:   EB:6F:65:A9:97:6B:B4:29:DC:82:9D:6E:6E:06:DB:0D:21:6A:99:CB
Authority key identifier: C4:0E:B7:81:64:51:87:54:86:DA:64:3F:8F:93:61:B7:7D:FB:21:A3
Certificate issuer:       /CN=A9125590/serialNumber=C40EB7816451875486DA643F8F9361B77DFB21A3
Certificate serial:       359A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft
Manifest number:          357F
Signing time:             Tue 28 Jul 2026 14:19:45 +0000
Manifest this update:     Tue 28 Jul 2026 14:19:44 +0000
Manifest next update:     Tue 04 Aug 2026 14:19:44 +0000
Files and hashes:         1: xA63gWRRh1SG2mQ_j5Nht337IaM.crl (hash: S11Q6F6eHxmuOyA6lajSWfSE504Fi6moUXj4rNwVP2Y=)
                          2: 26E02598562F11EB94FD0463C4F9AE02.roa (hash: w327Pi+TEmh3026Kes4gzOM+DtAPkeVB2eFJdQaVwbI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.crl
                          rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 14:19:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13722 (0x359a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125590, serialNumber=C40EB7816451875486DA643F8F9361B77DFB21A3
        Validity
            Not Before: Jul 28 14:19:44 2026 GMT
            Not After : Aug  4 14:19:44 2026 GMT
        Subject: CN=6a68ba80-dab5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:96:2d:24:cd:95:f0:1c:d7:fb:d1:e6:75:f4:
                    97:15:0e:eb:68:ee:1a:3d:7b:21:f7:14:a8:73:e8:
                    cf:23:13:7d:05:2f:5a:73:bf:28:92:ca:d4:09:56:
                    fb:3d:cb:1f:66:a9:89:6f:d9:c3:c8:56:6b:07:ec:
                    a6:70:28:86:ba:45:c3:3a:ad:01:96:f6:91:b8:c7:
                    d8:5f:06:ce:b1:60:a3:4f:70:d4:b4:4c:14:0f:ed:
                    88:ba:7d:9a:d6:ae:ef:6d:f0:09:7f:85:60:07:1f:
                    85:0a:ae:c7:04:00:c0:96:44:bb:72:b9:37:93:46:
                    0b:54:3d:92:54:b4:46:a6:d5:55:95:a9:80:b4:af:
                    ed:3c:ca:e7:53:03:eb:c4:3e:c4:f3:3a:c3:5d:63:
                    c4:35:38:2f:0e:77:12:3e:32:76:41:9d:c5:d9:cc:
                    ce:ed:64:1d:34:f4:74:68:ec:ec:ef:b3:27:1a:88:
                    6a:7e:30:86:a6:76:a7:0e:92:7a:3f:ce:7b:31:25:
                    ef:44:05:82:34:08:96:34:8e:0f:44:b2:3b:c0:57:
                    ad:ee:4d:0b:aa:bb:b9:70:05:37:b1:e3:6c:0c:e8:
                    f5:ef:1e:36:0f:6d:38:0c:bf:c5:bc:c4:41:94:39:
                    a2:40:ee:19:b5:fd:de:90:00:d8:e6:20:ae:34:9e:
                    30:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:6F:65:A9:97:6B:B4:29:DC:82:9D:6E:6E:06:DB:0D:21:6A:99:CB
            X509v3 Authority Key Identifier:
                keyid:C4:0E:B7:81:64:51:87:54:86:DA:64:3F:8F:93:61:B7:7D:FB:21:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:9b:38:ef:d2:0e:14:e7:00:b8:50:8e:a2:28:9d:91:21:17:
         a9:b0:13:e3:6d:da:b7:ce:90:5b:6b:3c:a3:d9:77:c3:3b:14:
         24:ef:cd:0a:4c:bb:c6:11:aa:dd:20:85:44:e7:84:9c:e7:73:
         46:8a:9e:6a:1d:fd:88:d5:ff:bf:a8:69:77:b3:55:4f:c4:5e:
         5e:dd:d6:23:3c:6d:05:38:10:cc:71:12:fe:66:0c:90:1c:73:
         10:fe:24:b5:0d:b9:1d:00:25:24:ea:ec:3d:e8:5a:03:63:b9:
         23:46:f1:11:b2:60:59:26:6e:32:18:82:98:83:68:57:ee:b5:
         cb:3c:15:72:c4:38:8a:1c:d0:9b:a0:db:4a:a4:a0:11:a6:51:
         88:5d:35:49:0d:3c:78:cd:00:91:27:ad:9f:9d:f6:e5:73:6e:
         c1:cd:c1:90:0c:fe:83:23:e4:34:55:3f:b3:20:1d:99:a8:8c:
         d1:17:f0:2e:66:b4:f2:fe:4e:83:ff:3f:c9:91:0d:37:b1:31:
         61:bb:9e:de:4f:ba:ea:f1:3f:39:09:31:e4:d9:3c:ec:9d:4e:
         7a:7d:6f:79:8e:dc:f7:ee:61:75:3f:b4:69:aa:02:0c:b1:cd:
         03:51:a7:6a:cf:25:90:23:7f:3f:8d:f8:5e:0d:8f:09:1b:d1:
         e7:8d:8e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:06:26 2026 by rpki-client