Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/XDFdr8U6gv3WLHIAXHZEMzvAKXo.mft
File:                     XDFdr8U6gv3WLHIAXHZEMzvAKXo.mft (raw, json)
Hash identifier:          8u2rJupd62yg7Fx+gED6nO7DqlHRa94C0lA35u7U8kk=
Subject key identifier:   42:37:9C:F5:B0:04:52:F7:EB:E7:28:93:A3:CC:19:08:1C:69:DB:CD
Authority key identifier: 5C:31:5D:AF:C5:3A:82:FD:D6:2C:72:00:5C:76:44:33:3B:C0:29:7A
Certificate issuer:       /CN=A91524AF/serialNumber=5C315DAFC53A82FDD62C72005C7644333BC0297A
Certificate serial:       05A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDFdr8U6gv3WLHIAXHZEMzvAKXo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/XDFdr8U6gv3WLHIAXHZEMzvAKXo.mft
Manifest number:          0551
Signing time:             Mon 27 Jul 2026 00:28:50 +0000
Manifest this update:     Mon 27 Jul 2026 00:28:49 +0000
Manifest next update:     Mon 03 Aug 2026 00:28:49 +0000
Files and hashes:         1: XDFdr8U6gv3WLHIAXHZEMzvAKXo.crl (hash: 8K84wTsrKvrqLgoqCQkOZEWNU8I02v42Ht9M9f7EG/s=)
                          2: 87840F3AFBD111EFB4804F27C4F9AE02.roa (hash: vIEtRSxvBa0Xc/IiKtnrGRDGvVh6iD/nJgJJDv2I0S0=)
                          3: BEB34436FE3211EFAA1D9A4EC4F9AE02.roa (hash: rcOga+YGZldqreiF0WCdj8lf5Z59J1hOmyY6+goJTWY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/XDFdr8U6gv3WLHIAXHZEMzvAKXo.crl
                          rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/XDFdr8U6gv3WLHIAXHZEMzvAKXo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDFdr8U6gv3WLHIAXHZEMzvAKXo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 00:28:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1446 (0x5a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91524AF, serialNumber=5C315DAFC53A82FDD62C72005C7644333BC0297A
        Validity
            Not Before: Jul 27 00:28:49 2026 GMT
            Not After : Aug  3 00:28:49 2026 GMT
        Subject: CN=6a66a642-1ce2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:81:06:c1:31:6a:96:75:61:64:6e:db:e0:1f:
                    ec:dd:40:b3:5b:e5:0c:77:a6:a3:d1:76:e1:5d:de:
                    d3:9c:e8:39:d7:55:fb:4d:b3:52:53:8f:21:dc:98:
                    b4:8c:2b:f7:ad:29:e7:11:5a:bc:85:10:76:75:59:
                    01:0a:cf:40:6e:d1:32:2d:3a:bd:46:60:bf:ef:47:
                    04:54:ba:7c:a9:79:1a:84:89:4a:08:2f:7b:06:4d:
                    45:4c:b4:2b:52:9d:22:fd:28:01:9f:21:43:e6:4d:
                    1a:af:80:8b:5d:70:5e:71:45:99:3b:e8:84:ad:6e:
                    91:95:99:53:25:ff:35:12:30:de:95:e1:21:6d:d3:
                    27:dc:c1:da:70:66:f2:bb:4c:83:60:74:8d:e4:d3:
                    d5:92:dc:a8:5b:77:d5:8f:8a:ad:28:4c:e6:a9:a4:
                    ef:94:8b:04:ad:08:29:ae:b2:47:07:ad:da:9a:3d:
                    52:57:e4:d7:1b:ef:3d:92:3b:37:a3:46:26:f4:b0:
                    88:93:30:53:eb:01:d2:a1:79:a8:c2:a8:a2:bc:b8:
                    a9:dd:53:ad:11:fe:ae:e1:3b:b5:5b:e9:42:29:ed:
                    61:24:90:85:cc:51:b4:8e:55:67:a8:20:58:3e:f6:
                    37:40:23:fa:e1:e8:8a:62:b6:ab:d9:de:97:0e:ac:
                    f6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:37:9C:F5:B0:04:52:F7:EB:E7:28:93:A3:CC:19:08:1C:69:DB:CD
            X509v3 Authority Key Identifier:
                keyid:5C:31:5D:AF:C5:3A:82:FD:D6:2C:72:00:5C:76:44:33:3B:C0:29:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/XDFdr8U6gv3WLHIAXHZEMzvAKXo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDFdr8U6gv3WLHIAXHZEMzvAKXo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91524AF/76C7F0F451F611EC9E3C6C3AC4F9AE02/XDFdr8U6gv3WLHIAXHZEMzvAKXo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:54:39:50:02:ab:01:ec:ad:29:d5:2c:18:d7:67:7f:71:b5:
         88:1f:30:8d:25:05:ad:af:65:af:58:8a:b2:69:4c:40:6a:65:
         06:ae:dd:b5:f8:71:b9:bd:75:d4:02:2b:ab:b4:b3:93:17:3a:
         1f:bd:f9:3a:35:63:10:6e:08:0d:a0:15:75:ea:75:e0:37:30:
         9c:0b:49:e0:b2:c8:d6:44:5c:97:86:a3:44:d5:d7:b7:99:8e:
         74:30:28:87:59:07:9f:c7:13:5a:41:1e:50:71:39:f9:7b:93:
         7f:8b:99:55:69:01:be:a3:bb:ca:13:fa:ca:21:6b:6f:54:9c:
         65:5e:c6:df:9d:f2:d7:75:db:2f:5f:12:89:b0:f7:75:d7:63:
         d9:70:71:8d:b5:d9:8b:07:4c:67:b6:7a:d5:27:f2:03:f3:bd:
         25:01:61:f3:33:dd:de:fe:37:a3:80:b9:f6:d6:aa:66:2f:cb:
         2b:25:f1:7f:eb:33:52:6b:06:4c:79:dd:55:a6:3e:6c:6d:c4:
         25:a7:9f:38:ba:9d:8c:e3:36:28:3e:75:0b:62:93:8f:42:0f:
         bc:08:46:19:d9:5a:9f:08:d8:ae:3f:8d:51:db:9f:73:94:e2:
         bc:f8:68:2a:36:dd:7e:db:af:83:44:d5:10:42:ff:79:6f:da:
         3f:2c:54:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:17:26 2026 by rpki-client