Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.mft
File:                     xeslRrtzrOaT4ZqxB9g_JmYyzug.mft (raw, json)
Hash identifier:          oGOeu+MWNXklV0+YHESxgiiQBxGCgM3VnZQL0XCV2q8=
Subject key identifier:   9B:8A:CE:34:5D:1C:41:A9:CA:B5:B5:E0:F3:64:4D:66:FA:9E:4D:98
Authority key identifier: C5:EB:25:46:BB:73:AC:E6:93:E1:9A:B1:07:D8:3F:26:66:32:CE:E8
Certificate issuer:       /CN=A9197A55/serialNumber=C5EB2546BB73ACE693E19AB107D83F266632CEE8
Certificate serial:       6F
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xeslRrtzrOaT4ZqxB9g_JmYyzug.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.mft
Manifest number:          67
Signing time:             Mon 27 Jul 2026 10:21:40 +0000
Manifest this update:     Mon 27 Jul 2026 10:21:40 +0000
Manifest next update:     Mon 03 Aug 2026 10:21:40 +0000
Files and hashes:         1: xeslRrtzrOaT4ZqxB9g_JmYyzug.crl (hash: LmgNAUL50H9arEEsnKDQtF8I18R7zTpt3sAhAwCZBfA=)
                          2: 21DB5BC4FAAA11F0A3B995435A6F56BC.roa (hash: LbeaZF1XRjLI75LU93fIN8JRsM753tbKTBrRQHfA4hk=)
                          3: 40E6AE74FAAA11F0BBD6BD435A6F56BC.roa (hash: rFUINwctLdCKpeYymZBC+HyAkWIaWkc+ZM7j+MzLgis=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.crl
                          rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xeslRrtzrOaT4ZqxB9g_JmYyzug.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:21:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111 (0x6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197A55, serialNumber=C5EB2546BB73ACE693E19AB107D83F266632CEE8
        Validity
            Not Before: Jul 27 10:21:40 2026 GMT
            Not After : Aug  3 10:21:40 2026 GMT
        Subject: CN=6a673134-3edb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0f:5c:e9:90:eb:82:2c:f2:24:1c:a4:41:e8:
                    ac:9a:da:82:54:15:f9:0c:70:30:75:52:8d:ff:34:
                    6b:1b:6c:36:ba:9f:94:ac:34:98:db:98:49:df:80:
                    0f:a6:4f:65:21:5e:ca:10:7a:a8:54:03:09:27:45:
                    b4:4a:61:18:c0:c9:37:1c:fb:4e:f2:69:47:1e:3d:
                    05:13:f3:8b:33:a9:27:17:0c:be:d5:97:89:c3:04:
                    ff:f1:53:3b:e9:3c:01:e0:a2:14:29:e0:aa:95:8b:
                    40:34:cd:99:8d:62:81:11:a9:27:ae:9e:10:52:26:
                    49:35:44:70:e5:88:bb:db:12:53:5e:d2:31:ab:32:
                    5d:32:c4:a3:88:d9:d8:9c:90:d3:18:f0:99:2b:84:
                    38:ec:57:3a:4c:39:24:bc:e2:e5:a2:7c:ee:d9:a4:
                    f0:55:fd:bf:ce:da:85:a4:15:04:7e:b1:24:10:92:
                    14:a4:be:64:e5:3d:4e:99:1b:b5:90:99:3c:7a:52:
                    0e:07:32:e1:82:b7:c2:77:a0:15:fa:05:37:85:ad:
                    9e:09:ce:8a:53:ed:e6:05:33:e4:28:79:55:e3:d9:
                    b6:9a:74:d3:98:92:c9:1f:65:d4:66:a5:95:2d:76:
                    5e:91:cc:0a:ad:74:2f:67:16:c9:cc:a7:85:0c:22:
                    e4:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:8A:CE:34:5D:1C:41:A9:CA:B5:B5:E0:F3:64:4D:66:FA:9E:4D:98
            X509v3 Authority Key Identifier:
                keyid:C5:EB:25:46:BB:73:AC:E6:93:E1:9A:B1:07:D8:3F:26:66:32:CE:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xeslRrtzrOaT4ZqxB9g_JmYyzug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:7b:80:86:be:18:38:7b:44:96:81:b1:cb:57:95:09:b2:f8:
         96:59:c4:b2:dc:18:53:57:c0:c8:fa:e0:cf:50:b7:f5:fc:22:
         16:a6:31:64:84:5a:4c:34:6e:84:43:4d:3f:b2:df:81:5e:37:
         2f:04:a6:94:2f:ab:58:e6:26:57:ea:96:85:fa:f6:2e:03:e4:
         3e:8a:11:88:50:ba:d5:36:13:a8:fd:10:27:e8:1f:3b:54:2b:
         8a:cc:fa:7c:14:a2:f0:f2:d9:2a:e4:03:88:7b:90:96:71:9f:
         1f:2a:6a:7b:68:ce:99:78:ed:6b:ca:47:f2:eb:be:0c:52:dc:
         67:5e:d2:27:0b:39:37:25:e2:35:52:5e:6e:09:11:63:2c:52:
         a0:39:48:a1:ff:71:f6:29:fc:5a:d9:3b:df:5f:fd:9f:8d:21:
         7a:54:d3:e0:1f:79:5f:2f:e0:d5:c6:95:25:ef:07:ec:d3:44:
         50:ae:c9:93:4e:eb:6d:42:cb:cf:2d:1d:8d:86:b0:c4:76:6e:
         8c:8d:3d:15:3b:61:10:69:ff:9e:22:61:43:58:2a:5e:95:0a:
         8c:f0:8a:69:b7:f8:bc:6b:4f:07:f7:11:59:ef:5c:3b:6c:35:
         49:be:e7:d8:f9:c2:56:83:0f:e5:64:b0:e1:34:70:08:76:38:
         98:02:9c:a5
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBbzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
N0E1NTExMC8GA1UEBRMoQzVFQjI1NDZCQjczQUNFNjkzRTE5QUIxMDdEODNGMjY2
NjMyQ0VFODAeFw0yNjA3MjcxMDIxNDBaFw0yNjA4MDMxMDIxNDBaMBgxFjAUBgNV
BAMTDTZhNjczMTM0LTNlZGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC+D1zpkOuCLPIkHKRB6Kya2oJUFfkMcDB1Uo3/NGsbbDa6n5SsNJjbmEnfgA+m
T2UhXsoQeqhUAwknRbRKYRjAyTcc+07yaUcePQUT84szqScXDL7Vl4nDBP/xUzvp
PAHgohQp4KqVi0A0zZmNYoERqSeunhBSJkk1RHDliLvbElNe0jGrMl0yxKOI2dic
kNMY8JkrhDjsVzpMOSS84uWifO7ZpPBV/b/O2oWkFQR+sSQQkhSkvmTlPU6ZG7WQ
mTx6Ug4HMuGCt8J3oBX6BTeFrZ4JzopT7eYFM+QoeVXj2baadNOYkskfZdRmpZUt
dl6RzAqtdC9nFsnMp4UMIuR7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUm4rONF0c
QanKtbXg82RNZvqeTZgwHwYDVR0jBBgwFoAUxeslRrtzrOaT4ZqxB9g/JmYyzugw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3QTU1L0IzMkI1MDI4RjdB
NTExRjA4N0U1MUYxNjU1NkY1NkJDL3hlc2xScnR6ck9hVDRacXhCOWdfSm1ZeXp1
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIveGVzbFJydHpyT2FUNFpxeEI5Z19KbVl5enVnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3
QTU1L0IzMkI1MDI4RjdBNTExRjA4N0U1MUYxNjU1NkY1NkJDL3hlc2xScnR6ck9h
VDRacXhCOWdfSm1ZeXp1Zy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBqe4CGvhg4e0SWgbHLV5UJsviWWcSy3BhTV8DI+uDPULf1/CIWpjFkhFpMNG6E
Q00/st+BXjcvBKaUL6tY5iZX6paF+vYuA+Q+ihGIULrVNhOo/RAn6B87VCuKzPp8
FKLw8tkq5AOIe5CWcZ8fKmp7aM6ZeO1rykfy674MUtxnXtInCzk3JeI1Ul5uCRFj
LFKgOUih/3H2Kfxa2TvfX/2fjSF6VNPgH3lfL+DVxpUl7wfs00RQrsmTTuttQsvP
LR2NhrDEdm6MjT0VO2EQaf+eImFDWCpelQqM8Ippt/i8a08H9xFZ71w7bDVJvufY
+cJWgw/lZLDhNHAIdjiYApyl
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:03:21 2026 by rpki-client