Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.mft
File:                     xkGJ9Yz3LB9zvrJAelIntqLOlmE.mft (raw, json)
Hash identifier:          3Zx8hgZVQ0Se4molDJty6/+ZRfKhYk4Xe+xIjLZWEKY=
Subject key identifier:   6F:70:7E:50:2B:78:A8:22:DF:27:47:DF:01:B7:AC:E1:CA:93:B6:C3
Authority key identifier: C6:41:89:F5:8C:F7:2C:1F:73:BE:B2:40:7A:52:27:B6:A2:CE:96:61
Certificate issuer:       /CN=A91D7E61/serialNumber=C64189F58CF72C1F73BEB2407A5227B6A2CE9661
Certificate serial:       0564
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkGJ9Yz3LB9zvrJAelIntqLOlmE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.mft
Manifest number:          055D
Signing time:             Mon 27 Jul 2026 00:19:57 +0000
Manifest this update:     Mon 27 Jul 2026 00:19:57 +0000
Manifest next update:     Mon 03 Aug 2026 00:19:57 +0000
Files and hashes:         1: xkGJ9Yz3LB9zvrJAelIntqLOlmE.crl (hash: iR2TVpSswwIUe5ygADsx6gKMWphPHwIsSiIb5Isrflc=)
                          2: 073DC606407F11EC87F77579C4F9AE02.roa (hash: 7nE2sjWaqJwApCwjBQjwmTVTdgonybAUx01R5hVKq1g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.crl
                          rsync://rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkGJ9Yz3LB9zvrJAelIntqLOlmE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 00:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1380 (0x564)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D7E61, serialNumber=C64189F58CF72C1F73BEB2407A5227B6A2CE9661
        Validity
            Not Before: Jul 27 00:19:57 2026 GMT
            Not After : Aug  3 00:19:57 2026 GMT
        Subject: CN=6a66a42d-e61a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b0:bd:ad:f7:99:8a:78:dc:2b:7e:c6:1b:e5:
                    a0:04:0c:b1:d4:6e:37:e9:e3:5c:10:9f:b6:82:fe:
                    46:e2:f8:69:79:b1:48:5f:1f:df:35:8b:95:51:ec:
                    09:dd:a1:39:53:fd:94:48:69:43:54:d4:b4:4d:73:
                    a3:82:82:30:90:75:87:10:cc:07:18:4b:ab:78:65:
                    8a:58:fa:93:6a:56:91:bc:22:23:55:d4:b8:c9:c7:
                    44:82:59:04:4b:6b:8a:af:63:ec:9f:22:12:2e:13:
                    6a:7f:43:84:10:2c:3d:8f:54:9c:a2:fb:9b:a1:04:
                    6b:d4:28:ce:e0:98:36:12:09:ff:e5:78:f0:14:b4:
                    fd:a2:f5:66:f0:fb:48:bf:fe:0b:c0:7e:c3:a2:32:
                    9f:08:ae:a7:a8:6b:a2:be:d3:b3:61:22:57:29:3e:
                    23:51:16:3a:6a:a9:b0:f8:7a:80:e6:22:18:a7:91:
                    0e:d8:bb:3d:47:2d:b6:e8:2b:d5:1f:8e:dd:a4:63:
                    5a:57:87:48:a4:4f:94:85:04:1e:59:64:b7:5f:99:
                    3d:b7:e6:27:49:bf:d7:a4:3d:d5:d9:89:d6:8d:e7:
                    ab:5f:8e:a4:73:d6:f9:6e:ae:99:ee:d0:1f:84:a0:
                    5f:58:e9:37:3b:83:e3:73:ee:05:c5:29:ad:6f:e9:
                    68:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:70:7E:50:2B:78:A8:22:DF:27:47:DF:01:B7:AC:E1:CA:93:B6:C3
            X509v3 Authority Key Identifier:
                keyid:C6:41:89:F5:8C:F7:2C:1F:73:BE:B2:40:7A:52:27:B6:A2:CE:96:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkGJ9Yz3LB9zvrJAelIntqLOlmE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:ea:7a:30:e7:0e:86:d3:1d:94:34:d1:9c:e6:23:ad:35:fc:
         68:2e:29:bc:20:ca:ec:29:16:6d:17:c7:cb:d6:22:c2:92:bb:
         4f:90:b1:3a:94:31:7a:f5:4f:b8:4c:e5:0c:99:5b:90:9a:0a:
         d8:4d:47:c6:b6:3f:28:e0:6e:49:ee:c3:52:af:78:5f:bb:6e:
         a5:b2:91:3f:15:15:1c:55:1c:fa:74:73:86:14:b5:f9:b0:d7:
         86:94:17:f5:67:91:b7:d7:96:b2:6f:f8:cf:a6:ea:38:f5:5b:
         c6:89:4d:3c:85:0d:40:3e:9d:40:d6:33:48:c0:29:04:88:bc:
         23:97:76:e7:0c:9e:c6:bd:f9:7b:18:68:62:77:4a:ca:58:0e:
         74:eb:ef:19:cc:e8:26:39:d0:17:4c:4e:71:0a:6e:0b:c8:68:
         6b:e9:0a:b4:d6:47:74:4b:d3:8c:ab:61:4b:dc:77:c3:3d:90:
         6c:9a:ee:ec:50:55:80:90:ba:af:bc:1b:cf:14:9d:63:53:bb:
         59:b5:be:81:40:c7:73:6c:dc:0c:2b:cf:d2:a6:6a:d0:db:7f:
         10:fa:0b:a0:d6:96:31:af:17:d4:11:00:cc:a7:60:c5:27:a1:
         10:0a:a7:eb:ac:67:73:b1:f9:56:a1:9c:c5:70:85:73:15:3f:
         9b:b0:b4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:11:29 2026 by rpki-client