Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
File:                     PXsVvXfZuXTjc1jadU3-qSkeaDo.mft (raw, json)
Hash identifier:          oPlrOK5ad8A6EZFUOnR0NMCilVJeUaHB+0SDmmLl4f0=
Subject key identifier:   5F:05:23:50:F5:16:07:61:99:D3:03:E5:F8:9C:91:5B:2D:36:98:B2
Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
Certificate issuer:       /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Certificate serial:       0163
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
Manifest number:          9F
Signing time:             Tue 28 Jul 2026 19:41:30 +0000
Manifest this update:     Tue 28 Jul 2026 19:41:30 +0000
Manifest next update:     Tue 04 Aug 2026 19:41:30 +0000
Files and hashes:         1: PXsVvXfZuXTjc1jadU3-qSkeaDo.crl (hash: mzcJb48iCgWQ1EVb+VmlAb0Xo2YSUYG7NaFGawkSS5A=)
                          2: 37885C3229D111F18571726A97833773.roa (hash: oFWQjdEfsXo2mf9hnvk1nF/iUbWRdh1WWZienEzp0Y0=)
                          3: 763CCE46479911F18B6CC3CFA0833773.roa (hash: erzss31JpeWgG+Gc0xJ5SMvdJuEjcJOATd56OecuB+o=)
                          4: 805DF10C29D011F19183AF4C97833773.roa (hash: MNeWms1frV+694tcT4cRmQYkSMhm22Q4MBfOcgbglm0=)
                          5: 9F6611D029D311F184F1669A97833773.roa (hash: 7XOGs2wyUjEZQbl9lb0Bk82uyJ3XVHINwK4ItrxDuVA=)
                          6: 11749BE62DA511F1AB5ACB70A2833773.roa (hash: XiFtfljCFKD2LKcSnLJ3irXOuLI/m6SajhgaUNMIkk4=)
                          7: 31EC6B8229D211F1942EF99297833773.roa (hash: 6GOkqgK6766kXZRb2zev1EPOhPc93N6Z7iHPDo/M9B4=)
                          8: 24DB124029D711F19B6521AE99833773.roa (hash: UqSBc8TxnJq1Jue1okvq1v9coaZmETb8TyDiU0CjCJ8=)
                          9: 23C5258A29D711F19B6521AE99833773.roa (hash: v++NZpvnb9ylmNbF62ghM6TfResLJGpsjAupWiltIf8=)
                          10: 666C21CA29C011F1A3F09FCF91833773.roa (hash: y9ci58U6NkZ5pJ9FGfvPElnka2mlIBg9URm+CwL1+6M=)
                          11: CD8FC3C82D1E11F191B042ACB6833773.roa (hash: NxkdL/XW0F+7NXwYBc0Km2tJxuYr4RVoLbvkjNZsOc8=)
                          12: 32A3B5E229E811F18CA8F3909F833773.roa (hash: bm+D908YeL/P1T00rFim9gtV6dNznmF0Z3qK05Yc0lM=)
                          13: 9FAF6F8A29DB11F1BFD4871E9B833773.roa (hash: zdZwScXVAMNHJf/1wI64pbUMCQPblQfek4+QW6DA8h4=)
                          14: A194680629DA11F1A7234B1B9B833773.roa (hash: KIqqySfqw8zszLlnQiMzev+Qz4Y53rJrYR9gJPmiP3I=)
                          15: c86-ZI5000Taq1LSwgfJGuowl9k.asa (hash: x+iawUox2dohOGNEHl1YEIZpE5feLtgqU4YHdRvwloQ=)
                          16: 9EDDEBC029D311F184F1669A97833773.roa (hash: wTPo2kv7xMowUUg+BeWVK7kCSv8ZL5DjmUbZP36DRQU=)
                          17: E67F9A6229F311F1A8F3E0E1A2833773.roa (hash: 6iDEJfborO4k4SN1+csGnEFXKfEtb5shDdu17cANAfE=)
                          18: 85750E9429B911F1A805AEF28F833773.roa (hash: G0wzSj51Qp6fnFjrr4WxujUgcZN4YNZIFcMjHPdUFz4=)
                          19: 2E2443CE29CF11F1ADED11F996833773.roa (hash: CUdsm2mFfeKj9DQNrRmyZB/PxWbcx2rZQKOcjvWuC0Q=)
                          20: 7843AE0229EA11F19F51207DA0833773.roa (hash: 6V2DjYIx8625kqe242doUOvVQbgf+Yq45HsMphmWFZY=)
                          21: B378944629EB11F1A56364AEA0833773.roa (hash: cAvnpeCwrI8U4iNdSNmGuh8RWfG4mN1P2I94y3MxP0E=)
                          22: 2447645A29D711F19B6521AE99833773.roa (hash: 9fh2MIgtJRRPoGpWqGsheDDuAAKoytopq3Qqh52Ib4A=)
                          23: 87758D3C2DAF11F1B56D9FADA5833773.roa (hash: bB7QmV7mgJV6zy0vXkgVW0mvcXAYiTfS8G40XLA5T0I=)
                          24: 5A0D98C829F211F18AB4C1A0A2833773.roa (hash: HFd9QgZh+NAMQFqbKs0U5sBBitb9/bP74JcV2UadE8k=)
                          25: 040DC78829EB11F18E7F1692A0833773.roa (hash: y16n6WemYHe3eFI0s7YEgjUsT6r8DekbQjKdUrOjeu4=)
                          26: A03EA96629DB11F1BFD4871E9B833773.roa (hash: CeVU5F+cE/p/gIJ6n4nuOgYXAjPlizKNWh6FzWAj2VQ=)
                          27: 848534FA2DDD11F1A9BF730FB5833773.roa (hash: bNsndLtWN8VMlvnxPdH+a1IWo5xT52ChFVeAYd0wX8Y=)
                          28: 484AAA6E29E711F18BEDC2D19E833773.roa (hash: kjxZZmUEVCRj7FRfyXjI30Z+Tgg0521nzEfajA5vqcI=)
                          29: 132BB03C29F411F1A9D9FDE9A2833773.roa (hash: zAHGRDXYndBzUXQxorw1NkRKqw4rmC3oXM3Dg7Io5P8=)
                          30: 3218652829E811F18CA8F3909F833773.roa (hash: eU5ZrLctFwDk24jAlM3+JYuAwt/fHYDYFfG92ftHrG4=)
                          31: 77B9A22029EA11F19F51207DA0833773.roa (hash: Xbsb6WA8kMxnLMb0002lKsDzIsPgJEDCspvcDzL/trA=)
                          32: 5CFC71B62C1411F181024EDD95833773.roa (hash: YRECKHoraOf2bWRQJUd3/Y6Ug/L3op3a4wNvo/BFtlE=)
                          33: 50DA994A29D411F1916B319D97833773.roa (hash: zD0ufAiml2itPOf8FjLNOlzmYyQ99ftWQuzKy+90VzM=)
                          34: 2D9AAA0629CF11F1ADED11F996833773.roa (hash: EYgOLSFFeoawzbZSo+omPv5lcZ4eiI6uUiQ5dR5O4Iw=)
                          35: 670FF7B429C011F1A3F09FCF91833773.roa (hash: OlVWz8nGryBxNYRtX9LuDsIW6s2g4bCFqY9G2NVU36E=)
                          36: B2EA4BAA29EB11F1A56364AEA0833773.roa (hash: XQNkvoydP9vTUe+C3PI0Tnr80hKhR4TEoYvN4cz8V1A=)
                          37: 769A6D0C29EA11F19F51207DA0833773.roa (hash: XcjhinNbZJy1c41oN0q9J25LNTzXS/kfkrE7fESwpr4=)
                          38: 771BED3C29EA11F19F51207DA0833773.roa (hash: UQ/rITnG4ZH85pwWdHiCCycwtLmroAeosHWFJlO6lD4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
                          rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:41:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 355 (0x163)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
        Validity
            Not Before: Jul 28 19:41:30 2026 GMT
            Not After : Aug  4 19:41:30 2026 GMT
        Subject: CN=6a6905ea-aa2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:dd:98:bb:a9:9c:5c:b7:13:42:c1:b8:8e:2d:
                    7f:ae:43:b5:f1:37:9b:94:40:ed:e3:4b:4c:a5:17:
                    7c:46:ce:c8:1d:80:26:dd:c2:09:f8:a0:c4:25:99:
                    f6:da:ec:7c:d8:13:99:8c:23:6e:47:f2:73:30:47:
                    5d:c5:00:1f:6c:ed:8d:1b:4d:bd:24:f8:b0:b6:58:
                    26:83:2a:bf:98:97:ac:0d:a1:89:b8:41:f5:4e:15:
                    85:49:cb:5a:44:b3:de:4e:bf:ba:78:4c:a2:0d:35:
                    ca:c8:49:7a:4e:0f:66:cd:4b:59:eb:e0:95:0e:b3:
                    e6:6e:a6:87:1c:68:40:35:42:fd:77:81:f8:28:00:
                    81:7e:95:6e:14:74:a5:12:19:2a:3b:74:67:ce:81:
                    4c:0d:5b:41:38:70:59:29:17:a3:4b:3e:bb:a2:23:
                    43:e1:52:5e:e6:1e:cf:b7:71:fb:2f:9d:69:ed:12:
                    d5:ea:43:ce:2a:3d:2c:f1:71:de:ca:d9:49:55:59:
                    4b:47:14:d3:1d:68:ab:26:0c:8e:54:04:22:8f:52:
                    87:41:66:b5:5b:66:94:7d:aa:04:3e:28:30:bf:20:
                    0a:5d:69:6b:46:62:43:2b:3b:2a:d0:8a:7e:77:e4:
                    e1:8d:96:37:79:93:b9:81:f9:c6:ab:45:40:7c:d3:
                    69:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:05:23:50:F5:16:07:61:99:D3:03:E5:F8:9C:91:5B:2D:36:98:B2
            X509v3 Authority Key Identifier:
                keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:80:8a:7b:46:38:9d:3d:e4:45:68:4b:9a:90:4c:33:cf:24:
         de:88:0a:ee:37:b7:86:14:f3:a0:cf:70:35:0b:8a:b1:ee:61:
         0e:f1:3e:b2:fa:24:64:dc:62:97:20:ef:58:ef:ef:0d:7e:74:
         95:74:0e:53:53:8e:04:11:84:0a:f1:fd:4d:a4:b1:e3:33:46:
         85:61:de:2d:7e:95:c3:ae:84:fb:f0:9c:8c:8f:2c:88:a5:b0:
         b6:f3:83:d2:b9:d6:56:96:7a:fb:33:ff:a1:5c:96:37:67:c6:
         9a:2f:28:2b:2a:ef:c8:05:6a:dc:99:e7:e5:e2:4e:6f:14:a0:
         94:ee:82:72:9f:bf:25:5c:fa:bf:4e:f8:94:24:cc:23:4d:d2:
         c8:64:b6:b1:11:3e:4c:ac:aa:4b:7e:13:60:be:b8:7e:f2:8c:
         9a:d2:b5:92:4a:d7:de:bc:ff:03:dd:fa:aa:77:53:ad:ae:e2:
         21:70:01:fc:a9:dc:ce:84:42:17:c9:20:11:a9:9c:e1:29:c6:
         73:3c:9b:c0:94:e3:32:b9:06:b3:95:db:0b:e8:94:01:7e:89:
         23:6b:16:5f:67:91:11:1b:0c:40:2c:f5:c9:8b:e1:9b:da:33:
         c6:ba:33:2c:be:92:2c:c3:16:1b:80:0f:c7:1d:8e:d9:4f:49:
         09:bd:1c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:01:19 2026 by rpki-client