Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft
File:                     -XyNrMJ-n8zTOuuFNQsmpIFfELc.mft (raw, json)
Hash identifier:          cMi7DbSY3Sez2f2B784PZ8PdcnLbnqlSjXArlc/GxVE=
Subject key identifier:   1C:C8:57:C8:FC:28:69:E0:FA:4D:F3:8F:2C:3C:20:05:48:48:7E:56
Authority key identifier: F9:7C:8D:AC:C2:7E:9F:CC:D3:3A:EB:85:35:0B:26:A4:81:5F:10:B7
Certificate issuer:       /CN=A9196BD8/serialNumber=F97C8DACC27E9FCCD33AEB85350B26A4815F10B7
Certificate serial:       2439
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft
Manifest number:          2419
Signing time:             Tue 28 Jul 2026 15:53:39 +0000
Manifest this update:     Tue 28 Jul 2026 15:53:38 +0000
Manifest next update:     Tue 04 Aug 2026 15:53:38 +0000
Files and hashes:         1: -XyNrMJ-n8zTOuuFNQsmpIFfELc.crl (hash: +A7ZPJ1xODnI8Knas40EY9ySUfvCHSae5ERF+ErICU8=)
                          2: C73BE8A654F311E7AC64ED3AC4F9AE02.roa (hash: X4uS0rI/nqhGkS7n3+3yxAC8v3e2kcE3Z3BQmxfknoQ=)
                          3: A768E6B6FB0811ED860A5143C4F9AE02.roa (hash: aqWngdjtRLqUSkhygiAXUU1YJGxW+DXL13gbX9vTVWo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.crl
                          rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:53:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9273 (0x2439)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196BD8, serialNumber=F97C8DACC27E9FCCD33AEB85350B26A4815F10B7
        Validity
            Not Before: Jul 28 15:53:38 2026 GMT
            Not After : Aug  4 15:53:38 2026 GMT
        Subject: CN=6a68d083-2e41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:af:83:36:49:e5:34:3c:00:71:fb:54:48:b7:
                    d4:05:d9:46:79:51:d2:64:ed:0a:76:69:26:ac:31:
                    f6:97:37:31:1f:f4:a8:15:6f:da:1c:fa:4a:11:83:
                    82:f2:35:d6:da:60:ef:de:51:77:20:28:15:61:6c:
                    cd:33:f5:1b:c0:7c:52:c8:38:09:39:4c:6a:af:82:
                    b7:9a:0a:d6:7d:b9:e6:87:69:ab:f2:7d:b2:21:28:
                    71:39:e1:3d:8c:a2:d5:17:1a:07:e7:6c:19:3e:47:
                    00:1d:e1:6d:c8:8f:a0:47:4c:96:ad:ff:cd:a3:0c:
                    78:b2:1e:f1:37:56:02:19:4e:5b:97:30:d3:05:45:
                    cb:8d:53:fd:f2:7a:c4:c9:a5:48:37:61:ef:96:ab:
                    4a:60:28:74:51:28:2f:84:c9:01:da:f9:5f:73:27:
                    f1:cc:cd:be:dc:63:8f:59:6d:f3:55:5c:37:af:f2:
                    aa:29:1b:1d:c0:cf:c9:9c:78:72:a1:54:a1:c8:34:
                    58:7d:28:f9:1d:a6:3f:96:98:00:6a:3d:6e:13:e5:
                    4d:bf:79:04:5a:be:f4:a7:7d:16:10:18:ca:dc:49:
                    5a:01:5d:6a:ee:e0:7a:f8:92:b8:c4:94:73:87:ff:
                    ca:fd:63:6d:46:a1:2f:d3:51:ec:73:5b:4c:2a:62:
                    2e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C8:57:C8:FC:28:69:E0:FA:4D:F3:8F:2C:3C:20:05:48:48:7E:56
            X509v3 Authority Key Identifier:
                keyid:F9:7C:8D:AC:C2:7E:9F:CC:D3:3A:EB:85:35:0B:26:A4:81:5F:10:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e1:f4:04:14:a4:57:2f:40:3f:d3:6f:6b:2a:4b:01:01:a9:d0:
         d2:95:11:42:81:a2:7d:7a:3c:3c:3c:95:c0:10:2b:3c:a8:de:
         c4:a8:08:4c:32:08:30:7d:5e:3c:eb:63:a4:53:f3:04:f5:2c:
         11:63:cd:2d:72:34:aa:70:39:42:d5:ba:43:84:57:f6:70:04:
         50:ec:ac:fc:13:96:88:00:bf:07:f1:0b:40:f0:29:58:97:cc:
         5d:b6:fe:89:ca:ea:72:b0:45:cd:97:77:7e:04:c5:d3:1d:43:
         a5:01:ee:11:ce:6c:b5:0c:90:c1:23:52:be:c4:42:8a:ba:2d:
         b6:10:02:b1:d0:69:db:cc:79:4b:09:4d:d4:b0:29:11:5c:61:
         fe:05:84:ea:d3:4b:24:4b:62:91:41:c3:72:33:b1:a8:a8:e7:
         df:e4:e3:aa:e0:ca:79:69:fc:67:34:d3:21:93:42:32:22:e0:
         a8:8b:8d:8f:be:16:f3:07:bf:14:c5:06:6f:76:d5:95:86:fa:
         c9:16:d1:59:30:1c:91:6a:c4:f1:81:cd:cb:2f:3d:19:ac:3b:
         4a:bb:74:05:27:b4:02:6e:80:38:4c:12:54:98:a6:dd:ac:2c:
         94:cc:71:e6:31:21:11:ec:c4:da:47:83:81:f8:94:c5:53:ca:
         50:f2:25:da
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTZCRDgxMTAvBgNVBAUTKEY5N0M4REFDQzI3RTlGQ0NEMzNBRUI4NTM1MEIyNkE0
ODE1RjEwQjcwHhcNMjYwNzI4MTU1MzM4WhcNMjYwODA0MTU1MzM4WjAYMRYwFAYD
VQQDEw02YTY4ZDA4My0yZTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmK+DNknlNDwAcftUSLfUBdlGeVHSZO0KdmkmrDH2lzcxH/SoFW/aHPpKEYOC
8jXW2mDv3lF3ICgVYWzNM/UbwHxSyDgJOUxqr4K3mgrWfbnmh2mr8n2yIShxOeE9
jKLVFxoH52wZPkcAHeFtyI+gR0yWrf/Nowx4sh7xN1YCGU5blzDTBUXLjVP98nrE
yaVIN2HvlqtKYCh0USgvhMkB2vlfcyfxzM2+3GOPWW3zVVw3r/KqKRsdwM/JnHhy
oVShyDRYfSj5HaY/lpgAaj1uE+VNv3kEWr70p30WEBjK3ElaAV1q7uB6+JK4xJRz
h//K/WNtRqEv01Hsc1tMKmIuoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBzIV8j8
KGng+k3zjyw8IAVISH5WMB8GA1UdIwQYMBaAFPl8jazCfp/M0zrrhTULJqSBXxC3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkJEOC9DNTgzRDIzMjg3
QTIxMUU1OUU1MUYyNTFDNEY5QUUwMi8tWHlOck1KLW44elRPdXVGTlFzbXBJRmZF
TGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1YeU5yTUotbjh6VE91dUZOUXNtcElGZkVMYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NkJEOC9DNTgzRDIzMjg3QTIxMUU1OUU1MUYyNTFDNEY5QUUwMi8tWHlOck1KLW44
elRPdXVGTlFzbXBJRmZFTGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA4fQEFKRXL0A/029rKksBAanQ0pURQoGifXo8PDyVwBArPKjexKgITDIIMH1e
POtjpFPzBPUsEWPNLXI0qnA5QtW6Q4RX9nAEUOys/BOWiAC/B/ELQPApWJfMXbb+
icrqcrBFzZd3fgTF0x1DpQHuEc5stQyQwSNSvsRCirotthACsdBp28x5SwlN1LAp
EVxh/gWE6tNLJEtikUHDcjOxqKjn3+TjquDKeWn8ZzTTIZNCMiLgqIuNj74W8we/
FMUGb3bVlYb6yRbRWTAckWrE8YHNyy89Gaw7Srt0BSe0Am6AOEwSVJim3awslMxx
5jEhEezE2keDgfiUxVPKUPIl2g==
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:02:21 2026 by rpki-client