Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft
File:                     Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft (raw, json)
Hash identifier:          S3Drm8d06V0dOJDD+4io3H78ZNWvjuFm47/3pT0LE+U=
Subject key identifier:   F4:FD:60:B5:C0:58:CD:2E:66:98:58:9B:5A:FA:1A:3A:A4:F1:29:23
Authority key identifier: 5F:26:F9:C5:D8:3C:2D:52:4F:5A:31:D4:70:2E:F2:14:03:3B:35:2D
Certificate issuer:       /CN=A918C538/serialNumber=5F26F9C5D83C2D524F5A31D4702EF214033B352D
Certificate serial:       02D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft
Manifest number:          02C3
Signing time:             Mon 27 Jul 2026 02:36:13 +0000
Manifest this update:     Mon 27 Jul 2026 02:36:13 +0000
Manifest next update:     Mon 03 Aug 2026 02:36:13 +0000
Files and hashes:         1: Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl (hash: Z5kJM4z1tzsPuEdtljWVOObZ6gqoRiB4Xtax3FwgtzE=)
                          2: 11DDFF8E54DF11EDB7409267C4F9AE02.roa (hash: oF8S7Pot7FDKo2GEEMdlADVMTbeltD2yj2mRKY200Ag=)
                          3: 114E5E6A54DF11EDB7409267C4F9AE02.roa (hash: uMB1cvVhprKp86XWev+HO3mpwPNrzk9do4ee899gfzY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl
                          rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 02:36:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 720 (0x2d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C538, serialNumber=5F26F9C5D83C2D524F5A31D4702EF214033B352D
        Validity
            Not Before: Jul 27 02:36:13 2026 GMT
            Not After : Aug  3 02:36:13 2026 GMT
        Subject: CN=6a66c41d-ed6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ff:94:a7:d5:e5:93:81:c9:9d:3d:e3:17:32:
                    47:bf:f7:31:bd:3c:31:6d:13:99:08:c8:fa:8b:03:
                    6a:a1:85:37:c1:ea:65:c3:55:b7:4b:71:3d:4e:a2:
                    7b:75:a3:be:50:de:be:b9:0b:82:3c:78:a2:ce:2f:
                    92:9c:47:db:0d:92:f9:c1:23:79:83:d7:83:3b:68:
                    c9:f3:11:b5:e7:f0:16:e5:96:71:14:1e:54:4c:a5:
                    9b:2e:d2:ca:95:10:60:29:99:aa:50:95:71:0e:d2:
                    c7:b1:54:48:42:ea:c1:32:62:a5:a4:72:99:fb:86:
                    ef:b9:81:e7:91:44:6f:5b:9f:f7:d3:fd:77:66:46:
                    20:43:24:d4:f0:f3:c5:1e:29:f9:88:97:b4:2a:44:
                    15:f4:41:72:ff:7c:ab:de:e6:00:7b:0f:9a:31:03:
                    b8:81:16:ca:ea:3e:4f:35:79:9c:a6:1d:5d:8e:84:
                    43:54:08:42:dd:5d:ea:3f:d4:ef:2b:79:c7:f2:b5:
                    bf:43:c2:18:30:cb:88:c7:cb:3f:b1:fa:03:15:27:
                    a9:08:c8:d9:d7:f8:fa:52:0a:54:59:4c:e3:ef:dd:
                    e8:2e:7f:68:b6:a1:19:06:f7:da:4d:be:44:64:aa:
                    ec:3b:05:70:db:e6:d6:7c:24:bb:14:52:fa:da:84:
                    90:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:FD:60:B5:C0:58:CD:2E:66:98:58:9B:5A:FA:1A:3A:A4:F1:29:23
            X509v3 Authority Key Identifier:
                keyid:5F:26:F9:C5:D8:3C:2D:52:4F:5A:31:D4:70:2E:F2:14:03:3B:35:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:8e:c9:e6:98:52:1c:92:99:1a:8e:59:3f:1f:e7:eb:7b:88:
         03:14:99:35:bb:7e:59:bb:d0:4e:36:33:b1:d6:35:fa:90:7c:
         c9:70:be:23:0d:d5:0c:2b:d3:8f:6d:2a:d2:8a:d4:38:ce:48:
         73:7a:b5:c6:00:12:de:40:d9:73:ec:f4:20:29:0c:88:cc:95:
         75:22:c6:5f:99:3f:c1:17:14:0d:cf:22:66:27:ab:75:45:bb:
         d7:80:6d:f5:aa:cf:67:41:43:72:6c:05:24:27:e3:b2:bf:4d:
         45:70:bf:fb:4d:f0:9a:77:53:32:45:5d:db:ea:30:d7:ec:26:
         86:18:bf:84:81:8b:55:95:e8:99:36:b5:0d:48:49:19:14:21:
         27:82:74:0a:de:3e:2e:f9:e0:1c:71:5e:aa:58:1e:b9:b4:18:
         cf:7d:14:87:26:d0:bb:4b:62:b5:5e:79:dd:9f:c2:ba:ae:57:
         08:5c:55:a1:89:ae:f5:b5:d3:d6:c7:7f:38:03:71:18:4e:c2:
         a1:e4:9e:73:fd:c2:98:94:f0:8a:d5:46:7e:1e:da:4d:24:5e:
         2e:0c:3f:ef:ec:f3:ec:b6:3e:f3:1f:52:4e:4a:01:34:3d:ff:
         15:49:3d:23:c4:0d:db:32:fc:e4:98:98:32:3e:40:47:a6:13:
         15:0a:88:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:19:25 2026 by rpki-client