Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft
File:                     XBJjPm2nhhExvM_qH3t6vTUdIy8.mft (raw, json)
Hash identifier:          IypYQ5y0HF9McTvspd7oQYYgPvS15oR8cIuqy9WMwBk=
Subject key identifier:   2C:76:EE:40:BD:EB:62:57:C7:BB:4F:E7:C9:F3:58:DD:A1:01:BF:D9
Authority key identifier: 5C:12:63:3E:6D:A7:86:11:31:BC:CF:EA:1F:7B:7A:BD:35:1D:23:2F
Certificate issuer:       /CN=A91A5577/serialNumber=5C12633E6DA7861131BCCFEA1F7B7ABD351D232F
Certificate serial:       038D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft
Manifest number:          0374
Signing time:             Wed 29 Jul 2026 01:38:21 +0000
Manifest this update:     Wed 29 Jul 2026 01:38:20 +0000
Manifest next update:     Wed 05 Aug 2026 01:38:20 +0000
Files and hashes:         1: XBJjPm2nhhExvM_qH3t6vTUdIy8.crl (hash: WRD6I8b/mVxo1yj/zKHSfYyVlA9PI6SH3n6MlPD2WGE=)
                          2: 6B10211E032B11ED8B3C5B4EC4F9AE02.roa (hash: MTaNxaw7PtCNbXESI8RoAJTf60c11P2nE6sDF8sb2DQ=)
                          3: 418966DA032011ED84D6CA1EC4F9AE02.roa (hash: 2lKHlrM+cqHGlUvl56hkW387P065E+umXHXOgejxyiQ=)
                          4: 94584738031A11ED934E3D58C4F9AE02.roa (hash: OCvPEGQvB1CysAAIU7OkJHE4iNozCgl1veWjbuwvrhA=)
                          5: 92F62AF0032811ED8DFE1842C4F9AE02.roa (hash: Mcnw9cU8VxSTIzbCnuuHLM/p/44XqAFiwLx0phruJEk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.crl
                          rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 01:38:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 909 (0x38d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5577, serialNumber=5C12633E6DA7861131BCCFEA1F7B7ABD351D232F
        Validity
            Not Before: Jul 29 01:38:20 2026 GMT
            Not After : Aug  5 01:38:20 2026 GMT
        Subject: CN=6a69598d-a4ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ef:aa:e7:48:21:5d:34:1c:08:14:d3:c7:00:
                    62:d5:cd:ff:c9:35:84:8b:01:a0:10:39:df:0f:8f:
                    ec:6a:3a:37:09:a9:21:92:b3:0c:7e:7e:39:10:0a:
                    b9:2c:f6:4f:b5:27:0c:92:ef:9d:42:bd:36:57:8f:
                    20:41:14:80:c3:9e:9a:97:64:d4:87:9e:5c:c6:a1:
                    6b:7a:66:b8:0e:74:df:3f:e8:db:1e:53:e4:86:30:
                    fe:46:9a:28:2e:ff:92:71:af:96:65:c6:8e:2b:fd:
                    70:96:6f:34:51:29:fd:b9:98:fc:f8:57:50:18:e6:
                    44:3e:86:2e:f7:5c:5b:b1:27:e9:c6:ca:ae:af:d0:
                    93:5a:3c:49:c4:94:60:6f:68:34:6c:52:2d:52:c4:
                    3f:10:0d:2b:a3:b3:37:dd:bc:9c:e4:6e:fe:97:b7:
                    9d:4d:db:dc:8d:95:9e:c5:05:c1:0a:8b:0f:6e:9e:
                    c8:5a:67:56:00:02:f4:e0:89:d7:e9:8c:86:00:9a:
                    95:d3:7f:f0:31:b5:32:b1:63:0a:99:2e:13:08:ca:
                    c1:85:77:75:e1:1f:95:6b:ab:3f:e8:2a:52:94:09:
                    88:53:60:d0:1b:86:de:b7:62:4d:15:28:24:52:4d:
                    59:40:ec:05:b5:d2:b3:50:15:83:59:03:e0:27:0f:
                    86:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:76:EE:40:BD:EB:62:57:C7:BB:4F:E7:C9:F3:58:DD:A1:01:BF:D9
            X509v3 Authority Key Identifier:
                keyid:5C:12:63:3E:6D:A7:86:11:31:BC:CF:EA:1F:7B:7A:BD:35:1D:23:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:b9:4a:5b:43:ca:a3:9b:58:e6:7a:c2:43:ef:6d:f2:27:76:
         1b:01:91:f0:6f:88:3d:4f:40:45:93:77:ba:09:4f:8f:62:a0:
         6a:aa:ec:cf:23:ff:04:eb:ac:12:31:61:db:06:0f:8d:7d:dc:
         be:84:09:af:0a:ca:08:a4:69:f7:2e:56:4b:82:01:37:f1:5e:
         56:78:68:42:55:9b:7f:5e:ec:7f:87:a6:26:a1:4c:80:90:60:
         5c:f7:9d:ad:e3:b4:fc:f5:eb:13:06:18:a1:5d:cd:fa:21:45:
         18:60:7a:37:32:ee:96:88:c5:7b:32:3a:05:3b:f8:cb:0e:af:
         ba:ad:7e:fa:a0:de:cd:0b:7d:94:c6:78:10:11:b2:56:e0:ed:
         9a:0e:f6:d7:ae:b5:b6:ed:9e:c2:46:a5:cc:26:5e:72:2f:7b:
         8c:ec:79:96:8f:c8:6e:fc:c7:63:c6:23:77:b3:8e:c4:6c:1b:
         7a:20:86:e1:85:d8:a7:3e:e0:57:9f:38:76:d7:24:d2:60:0a:
         74:90:55:d4:69:5a:27:6f:05:d5:64:e6:af:a4:d7:e2:48:c5:
         b8:3d:93:56:fa:f9:1b:83:9e:bb:75:f9:c8:b6:2b:50:a6:07:
         2f:ec:a9:f0:a0:f0:6e:45:a7:a0:77:24:9d:3a:20:b6:75:27:
         0f:48:76:79
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA40wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU1NzcxMTAvBgNVBAUTKDVDMTI2MzNFNkRBNzg2MTEzMUJDQ0ZFQTFGN0I3QUJE
MzUxRDIzMkYwHhcNMjYwNzI5MDEzODIwWhcNMjYwODA1MDEzODIwWjAYMRYwFAYD
VQQDEw02YTY5NTk4ZC1hNGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4O+q50ghXTQcCBTTxwBi1c3/yTWEiwGgEDnfD4/sajo3CakhkrMMfn45EAq5
LPZPtScMku+dQr02V48gQRSAw56al2TUh55cxqFrema4DnTfP+jbHlPkhjD+Rpoo
Lv+Sca+WZcaOK/1wlm80USn9uZj8+FdQGOZEPoYu91xbsSfpxsqur9CTWjxJxJRg
b2g0bFItUsQ/EA0ro7M33byc5G7+l7edTdvcjZWexQXBCosPbp7IWmdWAAL04InX
6YyGAJqV03/wMbUysWMKmS4TCMrBhXd14R+Va6s/6CpSlAmIU2DQG4bet2JNFSgk
Uk1ZQOwFtdKzUBWDWQPgJw+GwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCx27kC9
62JXx7tP58nzWN2hAb/ZMB8GA1UdIwQYMBaAFFwSYz5tp4YRMbzP6h97er01HSMv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTU3Ny85MDNFNEM3ODAz
MTYxMUVEOTBGODg0NEZDNEY5QUUwMi9YQkpqUG0ybmhoRXh2TV9xSDN0NnZUVWRJ
eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hCSmpQbTJuaGhFeHZNX3FIM3Q2dlRVZEl5OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NTU3Ny85MDNFNEM3ODAzMTYxMUVEOTBGODg0NEZDNEY5QUUwMi9YQkpqUG0ybmho
RXh2TV9xSDN0NnZUVWRJeTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIblKW0PKo5tY5nrCQ+9t8id2GwGR8G+IPU9ARZN3uglPj2KgaqrszyP/BOus
EjFh2wYPjX3cvoQJrwrKCKRp9y5WS4IBN/FeVnhoQlWbf17sf4emJqFMgJBgXPed
reO0/PXrEwYYoV3N+iFFGGB6NzLulojFezI6BTv4yw6vuq1++qDezQt9lMZ4EBGy
VuDtmg721661tu2ewkalzCZeci97jOx5lo/IbvzHY8Yjd7OOxGwbeiCG4YXYpz7g
V584dtck0mAKdJBV1GlaJ28F1WTmr6TX4kjFuD2TVvr5G4Oeu3X5yLYrUKYHL+yp
8KDwbkWnoHcknTogtnUnD0h2eQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:00:04 2026 by rpki-client