Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft
File:                     xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft (raw, json)
Hash identifier:          71vUNYKpFR4GacM1jQPPQ/bnqFFtdRSK9YWPyRnq4Hw=
Subject key identifier:   13:5F:3B:14:E7:B2:34:05:B9:AC:B4:D7:14:C4:36:6B:5B:FB:B3:8B
Authority key identifier: C6:93:99:B1:32:E1:AE:6B:2E:A3:11:6E:14:B1:00:1C:08:19:DD:A9
Certificate issuer:       /CN=A914D05C/serialNumber=C69399B132E1AE6B2EA3116E14B1001C0819DDA9
Certificate serial:       075A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft
Manifest number:          0750
Signing time:             Sun 26 Jul 2026 22:28:42 +0000
Manifest this update:     Sun 26 Jul 2026 22:28:42 +0000
Manifest next update:     Sun 02 Aug 2026 22:28:42 +0000
Files and hashes:         1: xpOZsTLhrmsuoxFuFLEAHAgZ3ak.crl (hash: 8onDxpxZdxtdhv7XEwmlanvv3cvCkDZSutaT4NcZ63Q=)
                          2: 546C2E447BD711EB8DB97853C4F9AE02.roa (hash: iSnczGsziTl41TBbMUOtH8hkr9sUDG5sHqFFqxI2mBY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.crl
                          rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 22:28:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1882 (0x75a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D05C, serialNumber=C69399B132E1AE6B2EA3116E14B1001C0819DDA9
        Validity
            Not Before: Jul 26 22:28:42 2026 GMT
            Not After : Aug  2 22:28:42 2026 GMT
        Subject: CN=6a668a1a-b1b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f0:0e:59:92:b9:a8:5f:80:ea:8f:b8:20:a6:
                    d8:95:74:58:f7:fe:26:af:af:0a:8d:d1:63:e4:29:
                    98:46:69:6b:08:66:4b:5a:d6:a6:97:21:d1:29:85:
                    de:bf:e9:00:f5:15:3e:af:e1:bb:99:64:ed:8d:79:
                    d2:25:5c:38:82:0c:03:32:87:24:fb:5a:05:c1:6c:
                    7b:4d:30:6a:89:b0:64:5a:ef:fc:2d:21:a6:43:21:
                    8e:e8:ee:9f:13:26:b0:ae:1b:e7:84:31:b5:48:df:
                    6a:55:7e:fd:c4:bd:98:b9:34:fb:ac:e0:18:9a:b6:
                    d6:8e:9f:a4:68:16:e8:87:7a:c0:b7:1a:bb:6a:4c:
                    47:63:ab:c6:71:7b:7b:e0:55:26:f5:ec:fd:20:db:
                    d3:31:c9:e1:6e:1c:82:fe:79:5e:ae:8a:d6:f4:9f:
                    8e:9a:e4:0f:c5:5c:e4:bc:ee:ee:de:d4:0e:f4:c0:
                    33:06:69:e5:ad:40:d5:b1:01:55:b4:65:02:91:fd:
                    75:4c:5d:44:75:61:a8:26:d9:d5:6f:ff:59:61:ee:
                    d3:85:1f:9c:d6:d5:dc:56:f9:89:0e:34:9d:50:fb:
                    05:c1:67:95:bf:da:57:e8:8f:59:fe:29:3a:98:b1:
                    f6:a8:10:0b:01:9d:0c:91:5d:1b:4f:ba:20:9d:1c:
                    74:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:5F:3B:14:E7:B2:34:05:B9:AC:B4:D7:14:C4:36:6B:5B:FB:B3:8B
            X509v3 Authority Key Identifier:
                keyid:C6:93:99:B1:32:E1:AE:6B:2E:A3:11:6E:14:B1:00:1C:08:19:DD:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:61:db:f1:8f:a3:e3:ac:11:43:92:a6:a7:af:84:0e:2a:7b:
         58:43:46:21:d8:7e:28:c9:af:7d:49:20:c2:47:7f:1f:81:95:
         56:71:d9:db:66:e2:e4:50:b3:17:ba:44:67:b0:b3:1d:11:d5:
         74:ef:8e:bb:2e:30:18:66:c0:6c:ac:4a:ae:f7:83:77:c3:5e:
         a5:d5:09:5c:bb:ed:bc:52:a0:da:b9:a1:f4:88:04:74:81:08:
         66:ba:55:df:45:f4:4e:49:89:ca:be:47:7b:da:cb:b6:40:74:
         3b:bd:87:87:2d:34:87:e2:05:a5:d9:f9:0a:b0:1d:53:28:20:
         63:fd:8f:27:1b:8e:b2:b3:77:a0:4b:7f:e6:14:26:ac:29:f1:
         09:37:cc:76:c1:b1:37:ac:e0:5a:69:6f:39:e8:e8:80:aa:d3:
         cb:c7:7c:94:ed:b0:13:ba:4e:64:8c:88:12:cf:5c:7a:32:a0:
         cc:93:29:fb:0c:1e:ec:b5:50:b3:f8:a5:9e:98:96:ab:8f:a3:
         2f:2d:5f:3e:39:a9:b0:d4:57:c1:a0:8d:56:4e:16:f7:a7:b7:
         41:a7:92:f4:c1:25:ee:69:43:b8:89:05:72:73:bc:da:75:0e:
         ba:c6:ea:35:75:d2:46:cf:1f:0c:b8:a4:fd:65:1a:ff:f9:c1:
         44:7f:cf:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:05:58 2026 by rpki-client