Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft
File:                     Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft (raw, json)
Hash identifier:          V5k+oBBhVafCYJmS9IIxemJXIfJ86ib0Ex814TrsbPI=
Subject key identifier:   94:51:6B:D2:BD:41:8E:93:37:BB:99:C3:30:C7:10:FE:F2:31:99:DE
Authority key identifier: 5E:F7:2F:9B:E4:E3:A2:8D:E3:56:9E:76:DE:2D:22:25:DB:F3:FD:8A
Certificate issuer:       /CN=A91DB63B/serialNumber=5EF72F9BE4E3A28DE3569E76DE2D2225DBF3FD8A
Certificate serial:       0A16
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft
Manifest number:          0A0C
Signing time:             Tue 28 Jul 2026 20:06:53 +0000
Manifest this update:     Tue 28 Jul 2026 20:06:52 +0000
Manifest next update:     Tue 04 Aug 2026 20:06:52 +0000
Files and hashes:         1: Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl (hash: gRaPFi76oDKEZMg4PuUp8Li/RqYOyFUzHccx1nalm6U=)
                          2: FF57D3205A4611EF88B33287C4F9AE02.roa (hash: lDb01SzRr4flIC0mr35RR7fbVzd2VcHd4sFXDjKyy5s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl
                          rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:19:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2582 (0xa16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB63B, serialNumber=5EF72F9BE4E3A28DE3569E76DE2D2225DBF3FD8A
        Validity
            Not Before: Jul 28 20:06:52 2026 GMT
            Not After : Aug  4 20:06:52 2026 GMT
        Subject: CN=6a690bdc-b302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:5c:8f:19:a8:6b:e5:9e:bf:8f:fa:7e:3a:1a:
                    48:db:13:94:dd:6e:a1:7a:65:9d:cc:9e:6f:bd:cd:
                    10:33:ec:36:ca:98:60:47:1c:b4:50:1e:5d:0a:8a:
                    1e:f8:9a:66:e0:5a:90:27:f4:2f:00:97:14:3e:b0:
                    e6:cc:c6:ec:9f:c5:5e:99:e8:6a:b5:ae:cb:df:32:
                    4d:50:42:6f:60:d0:b5:36:92:00:36:9d:cc:1a:05:
                    52:94:95:aa:24:5f:c9:1a:97:70:fa:3c:bd:ce:db:
                    93:51:ef:23:e9:46:0f:ee:8c:ba:5c:a1:df:ab:53:
                    9d:65:f2:40:7b:05:32:b2:1f:00:4e:8c:2e:eb:cd:
                    b3:3e:32:33:7a:78:e8:8a:81:22:d8:54:5b:21:f9:
                    54:99:52:0b:e3:73:4c:e0:07:f5:5d:e2:07:1f:82:
                    65:47:db:95:e2:2e:9b:33:5e:50:ad:a8:a7:b5:c9:
                    f9:bb:9c:e7:19:6e:32:93:4c:b1:d1:bf:52:18:03:
                    44:4f:a8:8c:8e:71:32:49:23:64:e3:62:dd:a2:76:
                    35:d9:81:87:01:e4:e2:92:fa:c2:03:e2:97:72:04:
                    b7:0b:97:bb:82:a2:f9:10:17:6f:aa:35:da:78:5e:
                    e1:0a:18:6f:17:7c:43:13:e5:34:4f:17:25:1e:7e:
                    92:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:51:6B:D2:BD:41:8E:93:37:BB:99:C3:30:C7:10:FE:F2:31:99:DE
            X509v3 Authority Key Identifier:
                keyid:5E:F7:2F:9B:E4:E3:A2:8D:E3:56:9E:76:DE:2D:22:25:DB:F3:FD:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:60:17:9e:a0:8a:57:8d:e3:e5:c7:03:de:bd:b8:19:1c:a2:
         2f:5d:8d:d3:54:56:53:c1:c4:e3:bb:8e:2f:d5:f0:ff:77:47:
         cd:ea:72:ae:ea:a8:58:27:33:e4:11:9e:e8:67:a1:62:dc:71:
         bb:58:0f:ed:5f:e5:c8:b6:8d:37:22:fd:ef:ff:19:bc:3f:55:
         e5:35:fe:77:a3:55:1f:d6:78:6b:c9:d5:06:9e:15:e3:6c:93:
         c1:73:8e:88:f3:d4:26:a1:20:74:a2:27:51:a1:c7:d3:fc:6d:
         92:3c:62:0b:63:c8:84:52:90:73:51:f9:d6:b6:3e:fd:22:9d:
         9a:6c:eb:65:3b:a9:d7:84:52:b9:0a:8a:7d:80:6f:08:4a:ed:
         f2:0e:4b:e8:de:fe:2f:2f:8f:96:d9:ab:2d:92:86:54:a1:55:
         c4:4a:d1:78:1f:cf:52:6a:cf:cd:97:19:5e:b0:93:03:31:2e:
         5e:66:e6:50:87:54:07:6f:e3:bf:fa:dd:02:5e:8a:de:79:2f:
         39:39:bd:e5:bc:2c:70:0c:27:22:76:91:c9:1b:f2:32:c1:4d:
         bc:37:2e:80:27:69:87:68:86:bf:32:91:a7:5f:f5:84:f1:d4:
         cd:58:4f:3e:49:29:49:a2:bc:93:90:1b:3e:2c:c6:8a:9d:e7:
         67:47:94:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:58:23 2026 by rpki-client