Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
File:                     xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft (raw, json)
Hash identifier:          o5N5n1FlNNXhBiGCuWJ6IKr5CyghlQMzA63Tfuzs4uI=
Subject key identifier:   E6:BC:61:E0:AB:04:A1:C2:D9:1C:75:F8:32:5F:4D:66:94:56:D6:5A
Authority key identifier: C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B
Certificate issuer:       /CN=A91955C8/serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B
Certificate serial:       31B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
Manifest number:          3124
Signing time:             Tue 28 Jul 2026 15:31:44 +0000
Manifest this update:     Tue 28 Jul 2026 15:31:44 +0000
Manifest next update:     Tue 04 Aug 2026 15:31:44 +0000
Files and hashes:         1: xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl (hash: m2BK81VUMGtLXCMlMc2eJ882YQj4LWIGnmi4CwRUpys=)
                          2: 004E48CA008611EEA0F2B440C4F9AE02.roa (hash: JmBQKGLMvG7nf7IFULuzTixXWs552SXmenXllwOUSdI=)
                          3: 11BAFC08E09911EAB8D3B833C4F9AE02.roa (hash: /ot5DoHQF40alQvvcmtFXp57ebCwbLGHhRnrByVbsDA=)
                          4: 13065E72E09911EAB8D3B833C4F9AE02.roa (hash: Bh0KOlYAcUWAXt3WdoXHJOCw2Q1uBx39GJDLv8eD0T8=)
                          5: 3590603EEA9911EDA6A36E18C4F9AE02.roa (hash: KAOajreZKNs6OhlZEEuG6IUQi2eX+xK6ACMq1TNvAF4=)
                          6: 12483942E09911EAB8D3B833C4F9AE02.roa (hash: MZaVNf7iRFX1/H8g/r1VAgxVC7qDm+ZemPCzX1+//wM=)
                          7: A4A3FAEAEDE811EFA5767A5DC4F9AE02.roa (hash: NR3htRP9a6F2ckA37vX/zVJgydrhk/y6ALKCOIGQr/c=)
                          8: F1A29F32843111F18303D56C65A30FBC.roa (hash: 5a8O9Z1V3ja/5ztqSfJLuOOFIOZvUJHqD1otnk0gm90=)
                          9: 13A1C0BAE09911EAB8D3B833C4F9AE02.roa (hash: 7qL24XtJJGYddBNzZ1f8/6sYDORXFfhTRLN+KXoF1UE=)
                          10: 7DDA28EC8D9511EB9ECE6042C4F9AE02.roa (hash: U3Ln4yzn8NQ06p1eFYCEFA90g6K7BH94tZxVPn7SxXk=)
                          11: 5B58485AB9DC11EEA6B2DC1DC4F9AE02.roa (hash: Hl3h+xajA6uyUcgR+szgYx0GkKpSQx8UaQOMAFI5mWs=)
                          12: E6B6BC0AE02E11EAA16EAA59C4F9AE02.roa (hash: aSXWB68fSWHHDo5FqMadmbWywQoiETk4RCpEwtCS3cM=)
                          13: CECE54DE1BC611ECAE421168C4F9AE02.roa (hash: YJa/B3fmbY+Mqk52HoaoOUWCKj3EPvHiwST21gkBP+U=)
                          14: AF6D4D44B73311EC8392922AC4F9AE02.roa (hash: 4oLyl9NCifHRKBU2NyGCAhBn5eVA7LF6waY1+/Z8kf0=)
                          15: 3503A838EA9911EDA6A36E18C4F9AE02.roa (hash: 0AZBDmh8J9l8VOqehLNqWYnMqjkmPYEkpVJJP0YL/UM=)
                          16: B9286BC4F33711EEAAA34C78C4F9AE02.roa (hash: I9JABl6/gzx03qs1VThcdC1FmK2YJXn7jMmQPHfDYxU=)
                          17: FBFEBECA10B211EEA9B11345C4F9AE02.roa (hash: LToWIQ1COMbsBcEbH54cRu/d6HNi0lrBivKKu1OeKJk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl
                          rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:31:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12721 (0x31b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91955C8, serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B
        Validity
            Not Before: Jul 28 15:31:44 2026 GMT
            Not After : Aug  4 15:31:44 2026 GMT
        Subject: CN=6a68cb60-ad10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ad:8e:4c:a4:fd:14:ec:7f:c9:e8:8d:9d:82:
                    e8:45:67:7c:b4:4a:82:6a:65:4c:60:d1:2b:4d:d0:
                    c5:e1:4d:63:c6:19:d0:dc:6a:05:09:78:55:d9:da:
                    ec:d9:f5:32:ce:c7:8c:20:8b:a5:d9:89:12:8f:28:
                    3d:00:ba:37:f6:eb:eb:03:57:04:4f:7f:63:33:c6:
                    f0:73:4d:78:64:b7:bb:61:8a:84:5f:ef:43:ec:56:
                    27:26:89:0a:47:47:9e:00:a9:01:03:c7:9d:b7:64:
                    dc:7b:81:bf:a1:97:96:c8:4b:86:4a:d9:c6:a9:e2:
                    ed:0c:c0:11:80:9a:57:27:67:d3:d0:f3:db:69:96:
                    65:c9:ba:8c:a4:5e:d6:a8:7c:5d:12:2c:63:ea:21:
                    f7:3a:4d:fc:d5:07:2c:64:37:b8:76:0a:0d:87:6a:
                    4c:06:2e:ca:f4:48:77:54:c9:86:b2:78:0c:cf:52:
                    2f:ba:b9:6d:91:ad:bd:aa:05:b2:a2:64:52:c5:d9:
                    66:20:8f:74:6a:e0:93:8b:e9:e8:0e:98:ed:cd:47:
                    80:e5:40:de:97:96:c0:40:65:99:7f:34:b7:da:f9:
                    08:9b:e5:ef:9b:c1:0f:cc:e1:4a:2e:63:50:1e:b9:
                    69:86:1a:97:bc:6a:99:3b:1c:39:d4:eb:d4:83:b6:
                    84:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:BC:61:E0:AB:04:A1:C2:D9:1C:75:F8:32:5F:4D:66:94:56:D6:5A
            X509v3 Authority Key Identifier:
                keyid:C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:b9:f4:7f:fe:82:ad:63:2d:c7:1c:5b:94:20:1d:fe:e2:e7:
         ab:57:c9:1a:57:f6:b2:18:3e:2b:c9:53:4b:db:b4:f0:39:63:
         d4:43:cf:56:d0:34:dd:a6:39:c7:a3:de:f1:38:bd:b7:7d:82:
         36:b8:ca:9f:80:a6:68:b0:a1:26:d4:ed:67:0f:e7:79:88:55:
         62:6e:3e:2d:34:4e:7b:ed:2a:5c:65:61:70:76:0a:56:1c:67:
         b4:95:f2:13:81:75:f2:fd:c1:99:19:db:88:f2:54:41:7b:95:
         ac:52:c8:cf:7a:eb:08:f7:bb:ae:4c:cc:75:1b:94:4e:97:e5:
         05:bd:ac:d3:e5:0c:f5:3c:73:04:91:f4:2b:41:1e:d6:18:c0:
         6b:0e:48:14:c0:85:2e:f3:60:99:49:26:dc:93:7d:84:d5:ba:
         de:e9:7d:b9:93:9d:70:bd:fc:77:7e:45:5d:37:34:28:21:63:
         07:2b:33:96:c6:a1:c2:08:a4:c0:5b:7b:b2:1e:36:89:11:a6:
         65:f4:22:bd:bd:08:d0:19:98:04:00:c3:16:fd:b3:52:26:96:
         5e:b7:37:a2:5d:89:d1:be:f5:4f:75:d0:dc:73:60:00:d8:29:
         7d:5b:37:be:46:5f:61:38:b5:30:71:1c:17:1e:e0:31:bb:66:
         f0:45:7d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:43:18 2026 by rpki-client