Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.mft
File:                     XSeFtU0WPtAepUGLz6NPG3RWtxM.mft (raw, json)
Hash identifier:          vOkA9nQ4Jd/J3u0AzqFszKaD5V8goa5HXLydkOGRpzk=
Subject key identifier:   AC:B5:15:30:3E:5C:80:2A:C8:F7:83:4C:25:AB:0E:1B:9C:46:8D:6F
Authority key identifier: 5D:27:85:B5:4D:16:3E:D0:1E:A5:41:8B:CF:A3:4F:1B:74:56:B7:13
Certificate issuer:       /CN=A9167CC5/serialNumber=5D2785B54D163ED01EA5418BCFA34F1B7456B713
Certificate serial:       0578
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XSeFtU0WPtAepUGLz6NPG3RWtxM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.mft
Manifest number:          0557
Signing time:             Mon 27 Jul 2026 00:23:36 +0000
Manifest this update:     Mon 27 Jul 2026 00:23:36 +0000
Manifest next update:     Mon 03 Aug 2026 00:23:36 +0000
Files and hashes:         1: XSeFtU0WPtAepUGLz6NPG3RWtxM.crl (hash: CbDaF/4dS7VABW2ooTF5olA349WKCqREYV5qc6vjFnE=)
                          2: 1F77EFA44C4011EC952D5A23C4F9AE02.roa (hash: TtIgh6p3MeT87i0AxcRjiCaJmw5Zn2R/2iZkAkCBffQ=)
                          3: ACE844F047AA11ECA0F05026C4F9AE02.roa (hash: xF2IvoVXmAincHuvdv8xT2emt6/vG3hUCriU6a0X2F4=)
                          4: 6337963E4C3D11ECB5FF844FC4F9AE02.roa (hash: YlLnh1haCAguuDMWLHxz+klHykWczeyMGFHRpbzDxJg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.crl
                          rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XSeFtU0WPtAepUGLz6NPG3RWtxM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 00:23:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1400 (0x578)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167CC5, serialNumber=5D2785B54D163ED01EA5418BCFA34F1B7456B713
        Validity
            Not Before: Jul 27 00:23:36 2026 GMT
            Not After : Aug  3 00:23:36 2026 GMT
        Subject: CN=6a66a508-9c9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:14:83:fd:d8:8c:32:64:f3:0c:eb:cc:e5:7a:
                    b1:09:e6:9c:58:af:87:26:3b:2e:d4:43:c9:3b:3b:
                    c6:62:40:e5:bb:be:24:f2:8c:f5:a0:91:84:65:14:
                    da:b2:d9:b1:e2:30:47:39:88:9d:b3:aa:f1:5c:05:
                    9b:31:e1:87:5f:11:ce:3c:9b:f3:fc:31:2c:42:b9:
                    31:08:c4:1a:d1:e6:0b:98:c4:0a:04:b0:b6:de:30:
                    91:6f:02:81:74:75:08:37:da:0f:54:38:57:4b:15:
                    5b:67:d3:2c:fb:52:25:ca:28:ef:90:24:58:d2:4c:
                    12:b0:83:5a:4d:d3:8c:bd:47:24:73:f1:db:ff:c0:
                    da:4a:e3:4f:84:89:97:b8:78:8b:e0:c6:d3:20:46:
                    77:d4:58:36:59:48:66:95:0b:76:24:ff:48:67:1b:
                    8e:94:7c:0f:1f:ed:ef:d3:e7:6d:a8:d4:21:d8:2e:
                    e2:e9:cc:bf:c1:9e:8b:83:c9:c4:8f:8b:be:8e:6e:
                    f8:9b:46:ea:ab:08:4e:4d:4e:4f:13:0b:66:92:c0:
                    ab:c6:30:0a:eb:f4:00:d0:ae:11:fe:19:6a:3d:42:
                    ad:9d:53:ed:75:de:b0:c7:0a:6a:79:f3:e5:c1:42:
                    5c:9f:87:ce:3c:25:61:fc:07:55:e9:40:36:5d:43:
                    20:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:B5:15:30:3E:5C:80:2A:C8:F7:83:4C:25:AB:0E:1B:9C:46:8D:6F
            X509v3 Authority Key Identifier:
                keyid:5D:27:85:B5:4D:16:3E:D0:1E:A5:41:8B:CF:A3:4F:1B:74:56:B7:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XSeFtU0WPtAepUGLz6NPG3RWtxM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167CC5/2AC4D33E46B111EC945B4F57C4F9AE02/XSeFtU0WPtAepUGLz6NPG3RWtxM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:94:ed:b9:3a:84:52:7d:02:01:a1:66:b4:68:58:51:3d:b9:
         b2:8b:30:d9:8d:90:8a:83:68:e4:7b:ea:b8:48:54:4a:88:47:
         2f:92:3e:d8:9c:97:a1:c7:a3:9b:4d:df:4d:9b:51:ac:64:3d:
         bf:d3:34:51:86:ae:34:b0:df:07:05:83:78:60:49:2f:61:af:
         7a:f4:18:36:46:0b:ca:86:d4:28:e6:0e:13:71:4e:a1:01:eb:
         0a:19:2c:c7:a8:a2:59:6c:80:87:b5:b1:e9:70:8d:18:99:d8:
         df:04:83:b0:fa:bd:70:cf:8d:46:7d:20:bd:f2:23:e4:f4:66:
         5e:4d:b1:3a:c4:4f:05:ce:af:86:b9:54:8f:f5:59:53:c4:da:
         bd:f1:bb:f9:5f:99:b6:c1:45:55:f8:58:d0:4e:0b:5f:11:5d:
         3f:a0:73:d6:08:57:7e:6e:80:6e:63:68:7f:11:c2:ac:8f:be:
         42:e4:19:af:88:7d:24:e5:e9:33:99:e3:cc:fb:09:da:c1:ac:
         2c:73:74:66:21:09:46:27:95:9a:11:5f:ca:98:ab:ec:cb:19:
         19:68:59:f8:25:34:10:a7:99:53:04:3d:5a:37:bd:7e:ca:33:
         ae:01:28:6b:51:fb:41:90:96:bb:21:7b:58:95:3e:ef:2e:a6:
         6f:09:92:0f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjdDQzUxMTAvBgNVBAUTKDVEMjc4NUI1NEQxNjNFRDAxRUE1NDE4QkNGQTM0RjFC
NzQ1NkI3MTMwHhcNMjYwNzI3MDAyMzM2WhcNMjYwODAzMDAyMzM2WjAYMRYwFAYD
VQQDEw02YTY2YTUwOC05YzliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAphSD/diMMmTzDOvM5XqxCeacWK+HJjsu1EPJOzvGYkDlu74k8oz1oJGEZRTa
stmx4jBHOYids6rxXAWbMeGHXxHOPJvz/DEsQrkxCMQa0eYLmMQKBLC23jCRbwKB
dHUIN9oPVDhXSxVbZ9Ms+1IlyijvkCRY0kwSsINaTdOMvUckc/Hb/8DaSuNPhImX
uHiL4MbTIEZ31Fg2WUhmlQt2JP9IZxuOlHwPH+3v0+dtqNQh2C7i6cy/wZ6Lg8nE
j4u+jm74m0bqqwhOTU5PEwtmksCrxjAK6/QA0K4R/hlqPUKtnVPtdd6wxwpqefPl
wUJcn4fOPCVh/AdV6UA2XUMgZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKy1FTA+
XIAqyPeDTCWrDhucRo1vMB8GA1UdIwQYMBaAFF0nhbVNFj7QHqVBi8+jTxt0VrcT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0NDNS8yQUM0RDMzRTQ2
QjExMUVDOTQ1QjRGNTdDNEY5QUUwMi9YU2VGdFUwV1B0QWVwVUdMejZOUEczUld0
eE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hTZUZ0VTBXUHRBZXBVR0x6Nk5QRzNSV3R4TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
N0NDNS8yQUM0RDMzRTQ2QjExMUVDOTQ1QjRGNTdDNEY5QUUwMi9YU2VGdFUwV1B0
QWVwVUdMejZOUEczUld0eE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAT5TtuTqEUn0CAaFmtGhYUT25sosw2Y2QioNo5HvquEhUSohHL5I+2JyXocej
m03fTZtRrGQ9v9M0UYauNLDfBwWDeGBJL2GvevQYNkYLyobUKOYOE3FOoQHrChks
x6iiWWyAh7Wx6XCNGJnY3wSDsPq9cM+NRn0gvfIj5PRmXk2xOsRPBc6vhrlUj/VZ
U8TavfG7+V+ZtsFFVfhY0E4LXxFdP6Bz1ghXfm6AbmNofxHCrI++QuQZr4h9JOXp
M5njzPsJ2sGsLHN0ZiEJRieVmhFfypir7MsZGWhZ+CU0EKeZUwQ9Wje9fsozrgEo
a1H7QZCWuyF7WJU+7y6mbwmSDw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:09:50 2026 by rpki-client