Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAF73/D5FF1F405E7211EEBC2C4926C4F9AE02/xAXwYeM7BxfJBPwd8-ebzXlSD6Y.mft
File:                     xAXwYeM7BxfJBPwd8-ebzXlSD6Y.mft (raw, json)
Hash identifier:          rnYH0CbMi8/mxZ3Ak7RpmE3/lhEQQR/5FbcVgpCZ5Tw=
Subject key identifier:   E3:C6:59:78:E5:3D:32:89:EA:02:DD:42:68:7A:54:66:4A:15:3E:A4
Authority key identifier: C4:05:F0:61:E3:3B:07:17:C9:04:FC:1D:F3:E7:9B:CD:79:52:0F:A6
Certificate issuer:       /CN=A91AAF73/serialNumber=C405F061E33B0717C904FC1DF3E79BCD79520FA6
Certificate serial:       0215
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xAXwYeM7BxfJBPwd8-ebzXlSD6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AAF73/D5FF1F405E7211EEBC2C4926C4F9AE02/xAXwYeM7BxfJBPwd8-ebzXlSD6Y.mft
Manifest number:          0210
Signing time:             Mon 27 Jul 2026 04:30:58 +0000
Manifest this update:     Mon 27 Jul 2026 04:30:58 +0000
Manifest next update:     Mon 03 Aug 2026 04:30:58 +0000
Files and hashes:         1: xAXwYeM7BxfJBPwd8-ebzXlSD6Y.crl (hash: 04OzxVE+XWsShEFJoHAKiYf2wjUv/yuGa7Pv9Ebv9Y4=)
                          2: 4B2F1F725E7811EE9307D234C4F9AE02.roa (hash: EcFjmxSDjXYlszuf2oD+q8KIZL69XyX6Am534xbF5Os=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AAF73/D5FF1F405E7211EEBC2C4926C4F9AE02/xAXwYeM7BxfJBPwd8-ebzXlSD6Y.crl
                          rsync://rpki.apnic.net/member_repository/A91AAF73/D5FF1F405E7211EEBC2C4926C4F9AE02/xAXwYeM7BxfJBPwd8-ebzXlSD6Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xAXwYeM7BxfJBPwd8-ebzXlSD6Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:30:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 533 (0x215)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AAF73, serialNumber=C405F061E33B0717C904FC1DF3E79BCD79520FA6
        Validity
            Not Before: Jul 27 04:30:58 2026 GMT
            Not After : Aug  3 04:30:58 2026 GMT
        Subject: CN=6a66df02-d897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7d:a9:ac:45:f6:f3:cd:37:3d:20:56:a1:43:
                    b0:bb:3b:b3:d4:e1:0b:ea:6b:9d:aa:d4:52:5d:9a:
                    2f:3c:1c:f0:ad:dc:f7:5a:f7:c2:be:41:52:23:2f:
                    ed:c3:6a:2b:30:50:ba:04:4c:f0:d3:e8:88:97:18:
                    67:0e:9c:37:ce:45:6f:be:49:23:7b:76:e0:66:e3:
                    e0:49:90:3d:7c:8c:97:27:c1:dd:76:e5:f7:f8:54:
                    95:fc:d3:9f:c5:30:98:63:fe:ab:c8:d0:42:f2:cf:
                    83:61:67:e2:11:3e:b7:b1:a5:68:3f:d3:00:8e:b0:
                    78:49:34:8d:dc:d5:1b:6a:fb:02:f4:85:ca:69:f0:
                    dc:b8:e1:a9:a0:37:db:6a:22:8b:00:98:52:4c:10:
                    cc:79:4d:03:a2:ac:d3:88:d6:2d:29:c1:2e:a2:18:
                    c2:55:24:87:39:41:97:a4:16:9f:30:9f:d1:7c:69:
                    a6:9b:d1:cb:7c:96:e4:5d:70:cb:fb:9b:af:08:bf:
                    ad:a6:1e:aa:6d:9d:99:2d:0d:23:aa:90:c4:e8:22:
                    7f:cb:4f:af:1f:16:99:1b:68:24:ca:09:12:2d:26:
                    d5:1e:82:b2:5d:df:ea:88:20:66:48:55:94:32:a4:
                    9f:66:a1:d9:6d:77:e6:7e:fc:d0:3c:c1:fd:da:6f:
                    b0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C6:59:78:E5:3D:32:89:EA:02:DD:42:68:7A:54:66:4A:15:3E:A4
            X509v3 Authority Key Identifier:
                keyid:C4:05:F0:61:E3:3B:07:17:C9:04:FC:1D:F3:E7:9B:CD:79:52:0F:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AAF73/D5FF1F405E7211EEBC2C4926C4F9AE02/xAXwYeM7BxfJBPwd8-ebzXlSD6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xAXwYeM7BxfJBPwd8-ebzXlSD6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAF73/D5FF1F405E7211EEBC2C4926C4F9AE02/xAXwYeM7BxfJBPwd8-ebzXlSD6Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:91:45:0c:ec:86:da:08:bd:e4:b8:3c:11:0b:ff:ae:c2:b2:
         20:42:74:c1:4f:2a:93:d3:b3:6a:1d:68:b8:3c:dd:61:e3:90:
         88:ec:c5:44:5c:49:8d:c2:49:60:c3:1b:31:b2:e4:89:ce:e0:
         b4:1d:da:6b:93:ae:7e:a5:1a:8c:74:1f:11:78:7c:82:33:e2:
         7f:5c:1c:32:6f:56:9e:c6:3f:6c:9c:b6:53:aa:7b:4b:98:df:
         6b:4d:28:a9:23:9d:5c:9c:58:5a:90:d6:1d:5c:20:d3:e1:38:
         72:5f:da:33:c6:b4:3f:27:27:2f:74:0e:75:41:0a:ce:ed:90:
         2a:c6:6c:e6:61:84:e0:c8:2f:c1:23:68:4e:c3:83:04:99:86:
         ed:a6:34:34:1f:2a:55:84:f3:9f:48:c8:c0:d1:0f:8f:9f:76:
         f6:68:43:e3:a8:ba:6d:5f:9a:25:2a:52:3f:de:07:37:e6:b9:
         d7:9e:6d:fb:87:d3:08:07:e6:6f:c3:c2:8c:b3:2c:7d:0f:ed:
         b0:7f:7e:b5:96:e7:f0:c1:8e:ef:41:84:db:93:ee:52:59:49:
         fb:98:29:1f:68:89:8f:e1:ea:6c:4f:ed:0d:be:5d:7c:df:d5:
         f8:3b:53:01:82:7c:55:97:ef:6b:e6:db:00:eb:44:d9:4c:e3:
         bb:ea:86:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:16:18 2026 by rpki-client