Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft
File:                     -xEsrVYxm_qsoasoznvX9MsmjOk.mft (raw, json)
Hash identifier:          3Fx/6Teaz5E0PbWLObKPvcol72tU9e9YYkwPvNWn9HU=
Subject key identifier:   83:31:75:51:2B:6C:A6:8E:34:F3:38:C9:47:FB:29:07:FA:F5:49:7A
Authority key identifier: FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9
Certificate issuer:       /CN=A91ADDD5/serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9
Certificate serial:       0663
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft
Manifest number:          064F
Signing time:             Sun 26 Jul 2026 23:32:57 +0000
Manifest this update:     Sun 26 Jul 2026 23:32:57 +0000
Manifest next update:     Sun 02 Aug 2026 23:32:57 +0000
Files and hashes:         1: -xEsrVYxm_qsoasoznvX9MsmjOk.crl (hash: JLvaq8ETxmi6JNbysLyRDLQNyo4gpWBB943BSCqFS9c=)
                          2: F50A884C5DDF11F197B40288B8833773.roa (hash: 9rUDU6NmwXNmelpt6cYq2BCwimYK9ztmiUJ8y08WBM4=)
                          3: 128DFF02E14611EE80D6C425C4F9AE02.roa (hash: uYxDc2s73H33RAjSESYgkRg+fhVzlnP0WIWOn/2ko/g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.crl
                          rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 23:32:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1635 (0x663)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADDD5, serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9
        Validity
            Not Before: Jul 26 23:32:57 2026 GMT
            Not After : Aug  2 23:32:57 2026 GMT
        Subject: CN=6a669929-cd9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4c:10:92:5c:c0:e9:b3:17:cf:61:7e:3d:1a:
                    05:14:cf:91:ff:4a:3b:88:29:a0:d5:0d:55:e4:63:
                    32:a3:0c:f7:05:c5:ef:cf:3c:b0:c0:22:4f:09:bc:
                    95:bf:df:a8:aa:f7:cd:55:c3:3d:e2:54:95:58:5f:
                    05:14:50:3c:0c:b2:52:84:13:f3:f0:ae:c7:1f:d0:
                    12:e3:1c:44:5d:cc:ce:42:50:20:69:3e:63:1e:6c:
                    2c:c4:91:55:f3:09:58:2c:c9:46:57:aa:8b:fa:b2:
                    b2:31:35:0e:85:7c:b2:99:dd:0f:78:f5:c7:11:c6:
                    95:5e:66:0a:3b:8c:07:16:28:f0:ec:f5:18:bd:3e:
                    b6:90:ad:bc:89:38:ce:1d:34:11:fd:57:e3:8c:64:
                    62:fb:13:36:e4:fc:78:b4:7b:c1:a8:ab:84:6b:b0:
                    bd:33:3d:b1:4b:a5:d2:fd:31:7c:49:46:37:f4:9e:
                    07:60:67:e5:4c:d9:8b:e8:06:83:5b:4c:0e:35:36:
                    93:2a:79:d7:03:65:15:e7:5d:f3:57:08:7f:00:fd:
                    87:2d:35:bb:ea:93:8f:bc:0c:ad:b5:94:0d:62:b5:
                    3f:32:d2:29:21:2f:e3:9c:56:e2:27:1a:91:ff:1f:
                    83:ee:0b:5c:72:32:80:c7:b1:96:05:d4:c2:32:5d:
                    4c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:31:75:51:2B:6C:A6:8E:34:F3:38:C9:47:FB:29:07:FA:F5:49:7A
            X509v3 Authority Key Identifier:
                keyid:FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:12:8d:58:b1:da:29:e5:67:ec:e5:b2:39:48:72:c3:e8:54:
         f2:df:a8:a2:c0:3e:12:96:c6:a1:14:10:c2:85:dc:82:ca:30:
         85:4e:65:6b:76:96:e1:c4:bb:fd:82:71:e8:04:72:5b:42:f0:
         21:99:26:93:05:3d:8d:55:cd:36:d2:58:e7:ac:7b:f6:72:46:
         d8:9b:e9:47:05:6a:8f:7a:b4:82:d0:da:9e:f8:c6:2e:ae:15:
         0c:16:78:05:d8:15:12:2e:55:59:d9:8f:11:fe:60:0d:6a:80:
         12:40:38:04:37:68:ed:ee:7f:6d:a2:f3:9e:b2:1d:89:e8:37:
         49:fe:2f:da:8f:9e:a1:58:08:9c:7e:c6:dc:df:3d:ac:ae:b8:
         ba:a8:6a:97:36:c5:eb:bf:fa:93:21:1f:09:31:13:75:53:1b:
         ae:64:cf:c6:6a:1e:c1:8f:6b:93:c7:55:1e:14:91:61:bd:6a:
         08:ff:a2:70:b6:e0:f7:76:79:86:b7:4b:55:da:77:46:c5:6b:
         85:6a:82:d2:9f:3f:34:2c:a3:6a:e1:e0:05:8e:a9:16:52:03:
         3a:ab:5b:3c:64:af:77:6d:74:c2:ee:30:f6:8d:4a:11:55:dc:
         32:68:c0:84:5f:9a:ce:8d:cb:7f:87:0c:e0:57:12:b5:7d:65:
         df:72:ae:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:41:05 2026 by rpki-client