Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E2D/ABDF409E3E9611F1A8CF45B59C833773/Xv5xuWEmz22-3_sOe0bmEYaEjDA.mft
File:                     Xv5xuWEmz22-3_sOe0bmEYaEjDA.mft (raw, json)
Hash identifier:          PFWTHldSFfIN+EG6nXHawhTKo8HY1VDpsVegn+WDvz4=
Subject key identifier:   4E:9C:64:65:F7:C8:D7:3B:EB:FF:54:28:0B:71:B8:C6:EB:B5:46:68
Authority key identifier: 5E:FE:71:B9:61:26:CF:6D:BE:DF:FB:0E:7B:46:E6:11:86:84:8C:30
Certificate issuer:       /CN=A91D1E2D/serialNumber=5EFE71B96126CF6DBEDFFB0E7B46E61186848C30
Certificate serial:       37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xv5xuWEmz22-3_sOe0bmEYaEjDA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1E2D/ABDF409E3E9611F1A8CF45B59C833773/Xv5xuWEmz22-3_sOe0bmEYaEjDA.mft
Manifest number:          33
Signing time:             Mon 27 Jul 2026 11:00:50 +0000
Manifest this update:     Mon 27 Jul 2026 11:00:49 +0000
Manifest next update:     Mon 03 Aug 2026 11:00:49 +0000
Files and hashes:         1: Xv5xuWEmz22-3_sOe0bmEYaEjDA.crl (hash: BIWoUZU48drzsF8Hz5/F3ekzSwbW6R/g/mzkyCj037A=)
                          2: 8533A604448D11F19D9C22A9A7833773.roa (hash: ud2XdvTOeMSMCgpchf7dcf0qY7ZIOdm72flkkkj9uWg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1E2D/ABDF409E3E9611F1A8CF45B59C833773/Xv5xuWEmz22-3_sOe0bmEYaEjDA.crl
                          rsync://rpki.apnic.net/member_repository/A91D1E2D/ABDF409E3E9611F1A8CF45B59C833773/Xv5xuWEmz22-3_sOe0bmEYaEjDA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xv5xuWEmz22-3_sOe0bmEYaEjDA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 11:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1E2D, serialNumber=5EFE71B96126CF6DBEDFFB0E7B46E61186848C30
        Validity
            Not Before: Jul 27 11:00:49 2026 GMT
            Not After : Aug  3 11:00:49 2026 GMT
        Subject: CN=6a673a61-bdd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2c:7f:c8:e2:4f:23:e8:e7:41:db:29:29:2c:
                    aa:ae:e4:62:66:5d:1a:10:e3:d6:51:aa:c3:2d:dc:
                    fc:91:0f:cc:f2:ed:3e:a0:50:10:6a:6a:98:46:b8:
                    19:97:a2:f5:cb:3d:74:31:75:01:38:c2:a0:6b:13:
                    11:c7:64:b7:e4:6f:a2:1d:a0:17:0c:0c:b1:87:75:
                    e9:dd:bf:3a:7b:a9:e3:55:1a:23:35:72:25:ae:c1:
                    ef:b2:47:9b:0c:16:35:be:5c:fe:f1:86:d6:e5:86:
                    bb:fe:0f:9c:9d:a8:c1:30:cc:38:5a:25:23:9c:40:
                    1f:43:ff:45:b0:5e:cb:bb:3e:2e:d2:86:a9:df:a6:
                    82:53:ce:96:dc:92:29:fb:36:ef:64:33:ed:f9:19:
                    b1:6a:2c:16:d1:da:43:f7:76:7b:08:01:f3:3d:28:
                    92:84:07:99:47:e3:f2:6d:f3:a1:41:ca:58:90:0a:
                    0a:50:10:41:e8:3b:17:ad:a0:9f:0d:96:11:e9:5c:
                    e1:81:9e:ff:db:cb:be:b5:15:8e:e6:7b:e7:8b:49:
                    56:74:de:59:51:93:db:c3:4b:b9:ba:a9:79:01:2a:
                    46:ac:d5:83:77:d9:ff:fd:7c:ee:40:f4:8f:0a:38:
                    73:b4:f2:16:5a:07:ab:82:65:3c:79:22:46:e5:84:
                    59:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:9C:64:65:F7:C8:D7:3B:EB:FF:54:28:0B:71:B8:C6:EB:B5:46:68
            X509v3 Authority Key Identifier:
                keyid:5E:FE:71:B9:61:26:CF:6D:BE:DF:FB:0E:7B:46:E6:11:86:84:8C:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1E2D/ABDF409E3E9611F1A8CF45B59C833773/Xv5xuWEmz22-3_sOe0bmEYaEjDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xv5xuWEmz22-3_sOe0bmEYaEjDA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E2D/ABDF409E3E9611F1A8CF45B59C833773/Xv5xuWEmz22-3_sOe0bmEYaEjDA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:67:e8:47:94:bc:bf:52:13:d1:f4:b9:28:b0:bb:69:48:00:
         6d:fa:d0:60:d6:38:25:0b:a3:8f:2b:40:92:65:7a:34:f2:a2:
         98:45:d1:2f:67:34:da:5a:4f:8a:8b:75:e8:e9:c2:57:55:c3:
         1d:1c:19:c2:c2:ad:fe:9f:eb:a1:02:35:79:38:4b:21:db:26:
         6c:0e:9b:51:71:57:65:e7:73:d9:11:91:24:96:59:e4:9f:55:
         96:c7:81:4d:3b:5b:ea:fc:d3:82:fb:3a:65:b1:ce:90:94:ea:
         1a:dd:bc:d8:6b:b6:d2:66:0d:a0:ea:9d:e5:e4:55:45:21:5e:
         eb:be:98:2a:ac:84:ee:d3:4d:35:0f:d4:ec:f9:9f:ca:68:84:
         cc:3d:18:04:6b:fe:9d:0f:03:96:96:92:8b:8f:8a:22:57:2b:
         62:22:da:8a:9d:54:84:df:52:06:a5:ac:46:80:71:b1:07:3b:
         37:e8:83:e3:33:c8:d0:0c:c8:e6:db:da:ce:99:3b:40:56:e7:
         21:7e:ce:10:83:2d:bf:6c:31:33:c0:78:06:ef:24:58:f0:c4:
         51:94:cc:a5:53:7d:61:86:d8:55:95:a1:76:6b:99:0e:90:34:
         7c:ce:c0:6b:a7:ea:ea:be:7f:71:04:13:27:fa:7d:79:7d:c7:
         0a:53:d1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:37:55 2026 by rpki-client