Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft
File:                     XnPt2W_yeohfYTVup3sfVDXIT8w.mft (raw, json)
Hash identifier:          St+3rf3vNRC5VQbIj0PXgweVdyp1jxJfdm7rRMJeoGk=
Subject key identifier:   FC:55:A1:92:DA:36:A3:4E:CD:B1:C4:1C:DF:3B:D3:6B:90:A7:1F:B5
Authority key identifier: 5E:73:ED:D9:6F:F2:7A:88:5F:61:35:6E:A7:7B:1F:54:35:C8:4F:CC
Certificate issuer:       /CN=A912759E/serialNumber=5E73EDD96FF27A885F61356EA77B1F5435C84FCC
Certificate serial:       035E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnPt2W_yeohfYTVup3sfVDXIT8w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft
Manifest number:          0356
Signing time:             Mon 27 Jul 2026 02:05:31 +0000
Manifest this update:     Mon 27 Jul 2026 02:05:30 +0000
Manifest next update:     Mon 03 Aug 2026 02:05:30 +0000
Files and hashes:         1: XnPt2W_yeohfYTVup3sfVDXIT8w.crl (hash: TZrkOPgnIwq/OeGPcDhFURmo+jC5/lQCTr5MPyaAQiQ=)
                          2: 7F0509300CCE11ED97C94316C4F9AE02.roa (hash: UXJt+xcfv/i8WG3b7wQH9Ws6PGkhvXG+Ll5zWVJ+tgI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.crl
                          rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnPt2W_yeohfYTVup3sfVDXIT8w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 02:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 862 (0x35e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912759E, serialNumber=5E73EDD96FF27A885F61356EA77B1F5435C84FCC
        Validity
            Not Before: Jul 27 02:05:30 2026 GMT
            Not After : Aug  3 02:05:30 2026 GMT
        Subject: CN=6a66bceb-46bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:76:bb:0e:d4:82:19:e6:f5:cb:0b:a7:b9:3c:
                    7d:a8:50:97:95:7a:94:d4:60:a3:62:5d:c5:c4:ba:
                    88:ad:5f:4e:ed:82:dd:86:4d:7f:b2:ca:cf:08:57:
                    29:f1:bf:86:09:6e:7e:c2:8b:9f:79:47:49:1c:6f:
                    59:5e:58:e2:3b:4f:50:e9:e9:44:56:8a:a2:93:61:
                    bd:6c:3d:d7:3f:06:41:9c:99:5f:2b:ea:c5:22:39:
                    e9:41:38:fc:cb:83:89:1f:f9:27:7f:9b:d1:5e:6c:
                    ff:44:20:8e:ae:fb:c4:ac:67:f6:05:b5:45:0b:66:
                    d0:de:7c:e8:ed:8a:da:b3:c5:3f:14:b7:02:21:ff:
                    4a:6b:55:fa:c1:c7:0b:30:03:1c:7e:9d:a0:90:96:
                    3f:97:e4:6c:1e:a7:11:d9:47:07:5b:16:65:c7:0d:
                    27:6b:2c:3e:bc:a3:ef:22:b1:12:0b:15:2d:f4:5f:
                    35:b8:37:d2:a0:8e:b0:d0:72:16:2c:16:87:76:4e:
                    ee:b1:cd:84:5b:05:37:6b:09:a1:84:b3:ba:38:d8:
                    66:4d:f8:e7:dc:5c:70:7d:ed:cc:3b:90:0e:a1:69:
                    2c:a7:40:6d:ed:fb:ac:af:2d:a5:ce:2a:da:90:8b:
                    ec:8e:aa:3e:ee:32:e5:40:0c:7a:ee:31:9c:d5:65:
                    6c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:55:A1:92:DA:36:A3:4E:CD:B1:C4:1C:DF:3B:D3:6B:90:A7:1F:B5
            X509v3 Authority Key Identifier:
                keyid:5E:73:ED:D9:6F:F2:7A:88:5F:61:35:6E:A7:7B:1F:54:35:C8:4F:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnPt2W_yeohfYTVup3sfVDXIT8w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:4a:10:81:d4:a6:cc:74:b8:4c:ce:68:f4:1b:c9:fb:16:5a:
         22:ff:33:df:57:d5:52:aa:03:45:4b:cb:bb:f0:06:95:04:fb:
         5a:5f:6c:a6:86:73:c5:f3:3f:92:f1:32:26:a2:fd:5b:c1:c8:
         b5:fb:12:9b:28:b5:10:f5:ed:2a:47:31:6c:23:11:82:a6:72:
         f5:4d:c8:ef:d2:11:fd:a5:7d:65:2c:e8:70:f2:e0:52:02:29:
         a9:70:fa:79:f5:20:ae:4b:7d:cb:c6:8e:8c:8c:30:93:35:53:
         dc:88:b9:f5:a6:89:52:2a:ae:d5:e7:ec:1a:4e:1f:8a:2f:03:
         37:9e:4c:39:96:66:8c:65:ab:d5:cd:99:e7:c4:e3:d8:cc:ea:
         67:28:7a:fd:c3:5d:aa:0d:cf:09:1f:75:c7:41:09:ca:4b:7d:
         03:99:af:0a:52:2a:1c:24:b9:cf:4e:6f:79:1c:b3:10:cd:17:
         9a:ea:14:60:87:70:e2:c2:01:0a:a5:31:12:27:da:8a:ea:9e:
         ee:8d:2d:38:9a:35:e7:df:0f:76:26:a5:bf:5e:7d:33:94:cb:
         e2:8c:83:54:ca:73:39:de:fa:38:f4:87:b3:0a:cb:e1:e0:dd:
         b3:21:e9:c3:1b:ce:a8:b8:e8:79:22:e1:44:8a:1a:ea:16:a0:
         d9:02:b2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:42:03 2026 by rpki-client