Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft
File:                     xGIlbhG2PuqR1z02Q867tRojUK8.mft (raw, json)
Hash identifier:          0XeS1VPwq2I3JHC0qbRyyJK8pr5s3xEAltaLZBh6KZA=
Subject key identifier:   80:60:23:69:8B:21:B5:6D:98:C3:A7:BE:FC:2B:C2:F2:83:54:8C:DD
Authority key identifier: C4:62:25:6E:11:B6:3E:EA:91:D7:3D:36:43:CE:BB:B5:1A:23:50:AF
Certificate issuer:       /CN=A91A210A/serialNumber=C462256E11B63EEA91D73D3643CEBBB51A2350AF
Certificate serial:       1139
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGIlbhG2PuqR1z02Q867tRojUK8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft
Manifest number:          1129
Signing time:             Tue 28 Jul 2026 17:21:47 +0000
Manifest this update:     Tue 28 Jul 2026 17:21:46 +0000
Manifest next update:     Tue 04 Aug 2026 17:21:46 +0000
Files and hashes:         1: xGIlbhG2PuqR1z02Q867tRojUK8.crl (hash: 4nhoJpnJh4SgHeSoeWEdYNSmppn24UejXpYBkG6bx48=)
                          2: 691023063A8311E99AF5572DC4F9AE02.roa (hash: 3XIdOKZPD+XETwFVUGrUUljIP0PedqBSSrgTHEH2oF8=)
                          3: 797BF786FB2C11EFA405F334C4F9AE02.roa (hash: yaNkgji9jGH4TTyhCOL2/K5RHSqEhk35tfGLeGGK6L0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.crl
                          rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGIlbhG2PuqR1z02Q867tRojUK8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 17:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4409 (0x1139)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A210A, serialNumber=C462256E11B63EEA91D73D3643CEBBB51A2350AF
        Validity
            Not Before: Jul 28 17:21:46 2026 GMT
            Not After : Aug  4 17:21:46 2026 GMT
        Subject: CN=6a68e52b-4406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:40:f9:9e:b2:b2:45:58:18:09:b4:d9:31:09:
                    5b:87:1b:c2:fa:12:14:39:cb:c4:4c:63:b0:ed:7c:
                    47:30:4f:80:c5:54:4c:f8:4e:fa:50:2b:6f:6c:af:
                    c8:52:83:44:87:59:e5:51:4e:e3:1b:62:c9:14:7e:
                    58:7b:f4:a9:43:69:9c:16:7f:96:c8:d2:51:09:00:
                    bd:cb:57:db:a0:b9:f4:80:61:80:5a:94:8e:5c:1e:
                    3a:ee:d8:ac:3c:5e:db:de:32:2e:a8:57:b0:3f:fb:
                    44:f4:32:69:db:33:0f:b0:5a:ef:37:0b:9e:39:07:
                    90:b8:59:16:16:28:94:38:52:27:68:e5:d9:dd:f7:
                    ec:1a:08:a5:2d:bb:27:1d:bc:c9:aa:65:86:e3:90:
                    b0:e1:98:cc:11:aa:68:ed:81:bd:e9:ef:88:b4:18:
                    16:df:10:fb:81:55:f6:e4:7d:a3:29:d5:4f:b0:6f:
                    b2:07:f2:77:66:9d:71:31:fc:54:e3:e0:bb:e5:41:
                    ad:15:70:63:ca:49:0c:9e:ef:44:b4:fc:da:81:86:
                    50:be:9c:c5:ab:c9:9b:2b:87:95:ef:1d:61:03:e6:
                    7e:43:ed:c2:7f:31:73:90:a3:53:f7:98:58:8b:ad:
                    e9:5c:96:24:d1:59:23:bd:b4:9c:9d:9a:4a:b3:7b:
                    3e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:60:23:69:8B:21:B5:6D:98:C3:A7:BE:FC:2B:C2:F2:83:54:8C:DD
            X509v3 Authority Key Identifier:
                keyid:C4:62:25:6E:11:B6:3E:EA:91:D7:3D:36:43:CE:BB:B5:1A:23:50:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGIlbhG2PuqR1z02Q867tRojUK8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:df:9b:a5:36:b5:45:1a:7d:00:4d:66:1a:ec:21:b4:ff:72:
         92:59:96:2b:3f:ed:70:96:e4:64:cc:d4:4f:5c:0c:ce:17:6f:
         8c:64:1a:98:3d:c8:06:a2:48:55:01:0a:26:b8:d2:bf:37:f1:
         cb:e2:dd:82:5a:bd:fd:c4:62:e0:91:31:9e:44:cb:86:bb:53:
         60:a2:b4:81:ea:cf:5a:bd:8e:31:70:ac:53:07:d3:42:e4:08:
         75:66:f5:1c:f8:b1:6c:8b:20:42:47:3a:d1:0a:5d:48:14:95:
         13:66:bd:16:92:df:ac:93:9a:6e:f2:3d:bb:78:7a:5e:64:2e:
         23:f9:3c:1e:bc:a6:3b:b5:0b:0a:d3:ff:1b:fe:e7:38:c9:b5:
         9f:a2:9b:3b:9c:de:37:4f:ce:49:af:eb:15:12:e4:6d:37:4d:
         b8:d6:ae:83:9d:7a:29:ba:9f:3f:05:43:ac:af:47:70:77:5d:
         59:31:c9:90:ee:7a:b6:97:8d:e0:50:43:63:12:59:eb:d3:8a:
         49:aa:4d:8a:d2:ac:ba:55:23:94:f3:37:04:d6:d3:2e:63:6f:
         5e:73:95:d4:21:87:bf:f7:95:5a:a1:f0:32:06:06:04:2f:4d:
         cb:43:c2:67:4a:37:d9:3a:38:47:88:3b:43:b3:72:3b:4b:43:
         67:9d:ca:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:19:11 2026 by rpki-client