Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft
File:                     Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft (raw, json)
Hash identifier:          0dXc5vOWR3GnwTnGfMszXMjSyIp6KSMDDi/xU4Y3gdg=
Subject key identifier:   97:31:7C:CF:A1:FF:6E:FE:C4:B3:8D:B3:0F:7D:D2:FB:DC:DA:92:0F
Authority key identifier: 5E:BD:D4:D5:F3:6C:6A:A5:9B:01:2C:9E:89:9A:AD:3C:27:EA:D8:ED
Certificate issuer:       /CN=A91275FD/serialNumber=5EBDD4D5F36C6AA59B012C9E899AAD3C27EAD8ED
Certificate serial:       2613
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft
Manifest number:          25FF
Signing time:             Tue 28 Jul 2026 15:45:00 +0000
Manifest this update:     Tue 28 Jul 2026 15:44:59 +0000
Manifest next update:     Tue 04 Aug 2026 15:44:59 +0000
Files and hashes:         1: Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl (hash: cH8gvdFuKpJHpla+DQETs9mKL4SPzyf9FPilGrG88YA=)
                          2: C5218598F91711EDBB78FE3CC4F9AE02.roa (hash: H9FBin+3iFpCvFQYKLKBdVVFwBLL9x/T3GklTxzrl8g=)
                          3: 9461B15C144611EBA5418244C4F9AE02.roa (hash: 2QSZtWOqDrHks96zM5GIiao6cA8Lcs0F/CmHj2Ncbeg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl
                          rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:41:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9747 (0x2613)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91275FD, serialNumber=5EBDD4D5F36C6AA59B012C9E899AAD3C27EAD8ED
        Validity
            Not Before: Jul 28 15:44:59 2026 GMT
            Not After : Aug  4 15:44:59 2026 GMT
        Subject: CN=6a68ce7b-d884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a0:b2:51:2a:16:24:e7:1c:66:67:98:a9:ee:
                    43:0c:d1:01:fc:fe:fa:4d:42:88:9d:c1:ed:6d:5b:
                    fe:24:64:9e:82:13:50:0f:bf:c4:4e:b3:2c:03:b4:
                    67:2b:3c:0f:26:13:53:0f:7d:fb:5c:47:4e:2f:c0:
                    30:ed:94:38:31:bb:b0:c0:a0:df:09:c0:7a:df:5b:
                    e0:98:7d:b7:3d:09:a5:6f:7e:e2:aa:62:97:42:2a:
                    f4:50:aa:20:b7:1b:7f:18:55:75:ed:39:5d:fe:dd:
                    6e:d1:9a:3f:f3:ca:1f:5f:52:47:2d:8e:65:82:37:
                    bd:de:7b:3d:45:cd:33:60:28:22:55:7f:14:5a:a6:
                    63:6e:aa:c8:88:29:b7:51:8c:ba:84:ee:3b:e8:d8:
                    ba:f2:27:70:56:df:00:23:5c:2d:dd:e9:ac:dc:73:
                    26:ef:8e:30:28:65:93:20:1a:3e:d5:74:65:c2:13:
                    30:41:74:9e:83:02:9e:de:08:d5:19:21:03:b0:6f:
                    26:f5:5d:49:e7:fa:de:90:6f:d1:8b:14:d1:35:b8:
                    7d:f4:92:b6:fc:36:75:9b:28:a0:bd:6f:3c:2f:17:
                    2e:db:74:59:4a:7b:62:80:3d:18:ed:ef:b1:ab:10:
                    cf:6e:50:97:b6:03:81:ee:e1:70:b5:d9:4a:d2:ef:
                    38:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:31:7C:CF:A1:FF:6E:FE:C4:B3:8D:B3:0F:7D:D2:FB:DC:DA:92:0F
            X509v3 Authority Key Identifier:
                keyid:5E:BD:D4:D5:F3:6C:6A:A5:9B:01:2C:9E:89:9A:AD:3C:27:EA:D8:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:c8:59:1e:89:3c:49:ff:7d:ec:d2:a9:00:23:66:19:02:9b:
         66:32:0f:c9:be:f4:c2:07:3a:4e:39:80:cf:b8:1b:81:3c:2b:
         44:b0:06:b3:a4:c2:6b:c4:35:92:23:b9:c2:d5:de:1e:e7:27:
         f4:ca:62:ff:5f:53:d4:e5:b4:b3:5e:f9:78:8e:18:a5:91:dd:
         d0:08:5a:00:95:6e:de:a5:3c:b0:0b:af:65:76:52:58:b5:65:
         4f:79:71:25:95:aa:56:2a:4f:93:74:ba:64:36:6a:6e:9b:09:
         13:b6:33:d8:de:6e:21:b9:3e:9b:ff:e1:97:d5:b7:2c:1d:c9:
         7f:2a:7e:af:c1:11:2e:49:62:2b:0a:b8:0e:18:57:4f:a5:5a:
         f5:97:28:8b:e0:2a:83:a2:4f:d9:74:62:7c:50:46:02:48:f7:
         48:92:a1:12:7e:bf:e6:93:51:01:64:0c:ae:1b:d4:5f:7b:b2:
         01:6c:0f:1a:87:e7:4b:81:a5:95:9e:70:97:16:d4:79:5f:b8:
         e5:46:d1:ac:4b:9c:ef:fb:ca:87:36:9b:8f:bc:53:ab:92:de:
         39:a9:a1:a0:6a:30:4b:29:62:48:3e:9a:62:a7:58:e0:98:f2:
         f6:fa:06:85:14:08:13:63:d0:ce:ee:e5:bd:f8:d4:f8:fe:ed:
         30:50:ca:09
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc1RkQxMTAvBgNVBAUTKDVFQkRENEQ1RjM2QzZBQTU5QjAxMkM5RTg5OUFBRDND
MjdFQUQ4RUQwHhcNMjYwNzI4MTU0NDU5WhcNMjYwODA0MTU0NDU5WjAYMRYwFAYD
VQQDEw02YTY4Y2U3Yi1kODg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjKCyUSoWJOccZmeYqe5DDNEB/P76TUKIncHtbVv+JGSeghNQD7/ETrMsA7Rn
KzwPJhNTD337XEdOL8Aw7ZQ4MbuwwKDfCcB631vgmH23PQmlb37iqmKXQir0UKog
txt/GFV17Tld/t1u0Zo/88ofX1JHLY5lgje93ns9Rc0zYCgiVX8UWqZjbqrIiCm3
UYy6hO476Ni68idwVt8AI1wt3ems3HMm744wKGWTIBo+1XRlwhMwQXSegwKe3gjV
GSEDsG8m9V1J5/rekG/RixTRNbh99JK2/DZ1myigvW88Lxcu23RZSntigD0Y7e+x
qxDPblCXtgOB7uFwtdlK0u84MwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJcxfM+h
/27+xLONsw990vvc2pIPMB8GA1UdIwQYMBaAFF691NXzbGqlmwEsnomarTwn6tjt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVGRC9GNDhBRDEyMjI2
RDkxMUU1QjI0REE2MzNDNEY5QUUwMi9YcjNVMWZOc2FxV2JBU3llaVpxdFBDZnEy
TzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1hyM1UxZk5zYXFXYkFTeWVpWnF0UENmcTJPMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NzVGRC9GNDhBRDEyMjI2RDkxMUU1QjI0REE2MzNDNEY5QUUwMi9YcjNVMWZOc2Fx
V2JBU3llaVpxdFBDZnEyTzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAyshZHok8Sf997NKpACNmGQKbZjIPyb70wgc6TjmAz7gbgTwrRLAGs6TCa8Q1
kiO5wtXeHucn9Mpi/19T1OW0s175eI4YpZHd0AhaAJVu3qU8sAuvZXZSWLVlT3lx
JZWqVipPk3S6ZDZqbpsJE7Yz2N5uIbk+m//hl9W3LB3Jfyp+r8ERLkliKwq4DhhX
T6Va9Zcoi+Aqg6JP2XRifFBGAkj3SJKhEn6/5pNRAWQMrhvUX3uyAWwPGofnS4Gl
lZ5wlxbUeV+45UbRrEuc7/vKhzabj7xTq5LeOamhoGowSyliSD6aYqdY4Jjy9voG
hRQIE2PQzu7lvfjU+P7tMFDKCQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:27:16 2026 by rpki-client