Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft
File:                     XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft (raw, json)
Hash identifier:          mV3qylEz46ZGer8S4ZH0MmF2LooJ3rVmOgIM3GNyS6Y=
Subject key identifier:   42:E2:68:13:D1:AC:17:35:49:FD:B1:58:26:AF:08:2A:DD:1E:64:DC
Authority key identifier: 5C:AF:E8:A8:3F:09:0A:E1:46:A4:03:AF:A5:57:C5:CF:AA:88:CD:84
Certificate issuer:       /CN=A912FCBB/serialNumber=5CAFE8A83F090AE146A403AFA557C5CFAA88CD84
Certificate serial:       0178
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft
Manifest number:          0174
Signing time:             Wed 29 Jul 2026 05:57:02 +0000
Manifest this update:     Wed 29 Jul 2026 05:57:02 +0000
Manifest next update:     Wed 05 Aug 2026 05:57:02 +0000
Files and hashes:         1: XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl (hash: u5urVWKPf1NImVmWv+Ybsyy0xiHsDpvpPmSw4etoeEY=)
                          2: E1A8E22A9E9611F0BCFAF76AC4F9AE02.roa (hash: ittpt4A7ySbEBupt94ZQJgIOH62PTtCbBsA64tVVFU4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl
                          rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 05:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 376 (0x178)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FCBB, serialNumber=5CAFE8A83F090AE146A403AFA557C5CFAA88CD84
        Validity
            Not Before: Jul 29 05:57:02 2026 GMT
            Not After : Aug  5 05:57:02 2026 GMT
        Subject: CN=6a69962e-33e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a7:1a:43:e8:b7:d7:30:fa:7b:39:5c:cf:72:
                    ba:8b:2d:7c:3b:9f:40:bd:08:7d:b7:12:5b:23:60:
                    2e:cd:76:02:00:93:4b:9b:e1:f1:4a:db:45:d3:d9:
                    be:6b:da:80:e7:4a:f1:ea:e4:cb:fe:bd:52:8f:1d:
                    02:f1:5d:66:1e:db:84:7f:89:44:f0:1e:2b:93:52:
                    77:0e:66:21:5e:a4:70:a1:3a:fb:77:9b:63:c1:a1:
                    29:8c:a0:64:50:41:16:33:f0:8f:6f:2e:67:3f:8f:
                    4b:e5:fb:31:45:82:ad:60:51:11:d6:96:ed:1b:12:
                    4c:48:56:d4:70:ca:07:f6:b5:33:18:a4:f3:f2:ba:
                    46:2e:52:73:5d:61:47:c5:ea:05:d0:4c:d9:db:06:
                    cd:9a:86:6d:c6:d5:04:7c:94:5b:67:af:0c:7a:1f:
                    92:40:9a:09:78:da:79:8c:55:83:3e:1b:90:b4:d3:
                    3a:9e:66:de:4e:53:e6:e2:4c:6d:63:7d:ff:8d:05:
                    8f:5d:26:40:2c:28:24:d4:2e:3b:0f:b7:9b:39:03:
                    2d:34:f5:4d:35:fc:56:23:54:81:92:67:be:62:0c:
                    04:e3:f2:a4:97:f6:ce:40:a7:3f:9b:54:e0:e2:2a:
                    05:3a:82:cd:ec:15:ad:f6:d9:bd:f3:4e:80:0b:3b:
                    1c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:E2:68:13:D1:AC:17:35:49:FD:B1:58:26:AF:08:2A:DD:1E:64:DC
            X509v3 Authority Key Identifier:
                keyid:5C:AF:E8:A8:3F:09:0A:E1:46:A4:03:AF:A5:57:C5:CF:AA:88:CD:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:21:73:6e:b6:66:82:8d:76:c1:4c:22:d5:a7:1b:5d:c6:fb:
         7e:67:22:16:74:7f:92:81:1c:72:09:e3:d2:b4:99:6a:1d:63:
         92:f4:92:9d:a2:10:bf:8b:e9:a0:bf:cc:20:c9:27:94:16:e4:
         50:7c:70:08:01:ac:e6:b0:43:99:98:0e:16:1a:cb:81:b1:6a:
         ce:24:04:0e:64:f0:88:2a:a7:87:aa:2f:1a:7a:6e:15:5e:87:
         a8:7e:3a:cb:40:e3:e4:5b:8a:28:0c:2b:ee:ac:c0:0b:58:7b:
         fb:f4:26:56:6d:96:af:b8:82:3a:a3:82:a6:98:f6:6e:d8:1f:
         33:32:27:40:45:1c:ae:5c:8b:5e:57:cd:cc:66:a8:c8:2a:4b:
         40:ae:ee:b0:91:c0:1b:0c:8a:ce:31:8f:80:95:bd:fa:c0:a2:
         90:7e:95:3e:d4:62:98:9b:ec:9e:e1:c7:06:6f:e2:86:f1:bf:
         e2:1f:05:fa:07:80:7a:0f:aa:ae:b9:e9:bc:e8:0f:65:3b:7d:
         fa:41:63:94:97:a1:a9:6f:b8:00:33:76:83:52:48:a8:e7:c3:
         ce:44:c5:5e:2c:30:ce:23:80:5f:65:52:b7:c3:76:22:03:5e:
         4d:50:2a:50:77:52:fc:34:b2:84:cb:fb:fe:07:26:b7:52:0c:
         44:42:9c:ab
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkZDQkIxMTAvBgNVBAUTKDVDQUZFOEE4M0YwOTBBRTE0NkE0MDNBRkE1NTdDNUNG
QUE4OENEODQwHhcNMjYwNzI5MDU1NzAyWhcNMjYwODA1MDU1NzAyWjAYMRYwFAYD
VQQDEw02YTY5OTYyZS0zM2U5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApKcaQ+i31zD6ezlcz3K6iy18O59AvQh9txJbI2AuzXYCAJNLm+HxSttF09m+
a9qA50rx6uTL/r1Sjx0C8V1mHtuEf4lE8B4rk1J3DmYhXqRwoTr7d5tjwaEpjKBk
UEEWM/CPby5nP49L5fsxRYKtYFER1pbtGxJMSFbUcMoH9rUzGKTz8rpGLlJzXWFH
xeoF0EzZ2wbNmoZtxtUEfJRbZ68Meh+SQJoJeNp5jFWDPhuQtNM6nmbeTlPm4kxt
Y33/jQWPXSZALCgk1C47D7ebOQMtNPVNNfxWI1SBkme+YgwE4/Kkl/bOQKc/m1Tg
4ioFOoLN7BWt9tm9806ACzsclwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFELiaBPR
rBc1Sf2xWCavCCrdHmTcMB8GA1UdIwQYMBaAFFyv6Kg/CQrhRqQDr6VXxc+qiM2E
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkNCQi81Q0FDNjA0ODUz
MEYxMUVGOTlDODhEMEZDNEY5QUUwMi9YS19vcUQ4SkN1RkdwQU92cFZmRno2cUl6
WVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hLX29xRDhKQ3VGR3BBT3ZwVmZGejZxSXpZUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RkNCQi81Q0FDNjA0ODUzMEYxMUVGOTlDODhEMEZDNEY5QUUwMi9YS19vcUQ4SkN1
RkdwQU92cFZmRno2cUl6WVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfyFzbrZmgo12wUwi1acbXcb7fmciFnR/koEccgnj0rSZah1jkvSSnaIQv4vp
oL/MIMknlBbkUHxwCAGs5rBDmZgOFhrLgbFqziQEDmTwiCqnh6ovGnpuFV6HqH46
y0Dj5FuKKAwr7qzAC1h7+/QmVm2Wr7iCOqOCppj2btgfMzInQEUcrlyLXlfNzGao
yCpLQK7usJHAGwyKzjGPgJW9+sCikH6VPtRimJvsnuHHBm/ihvG/4h8F+geAeg+q
rrnpvOgPZTt9+kFjlJehqW+4ADN2g1JIqOfDzkTFXiwwziOAX2VSt8N2IgNeTVAq
UHdS/DSyhMv7/gcmt1IMREKcqw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:29:14 2026 by rpki-client