Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft
File:                     XS3RVLXc4h-3hsUm297xsEWSirg.mft (raw, json)
Hash identifier:          6Yyd6Ws5B7Mv7BtmfXwYwEo+vbBjnCNrvZcv2iqryWs=
Subject key identifier:   D6:82:2C:6B:B4:40:42:E5:8B:88:E8:34:85:35:23:5A:33:E9:9F:F6
Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8
Certificate issuer:       /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
Certificate serial:       28FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft
Manifest number:          261B
Signing time:             Tue 28 Jul 2026 15:53:04 +0000
Manifest this update:     Tue 28 Jul 2026 15:53:03 +0000
Manifest next update:     Tue 04 Aug 2026 15:53:03 +0000
Files and hashes:         1: XS3RVLXc4h-3hsUm297xsEWSirg.crl (hash: D5m4smVY5lgd19sqtfUXXgW/zhWyOin3DPBvxl6211c=)
                          2: BE5DA1A0E3BE11EEAEC5E061C4F9AE02.roa (hash: VJCnaf5Klg6jmYuqx2mGsqpPv1Kkhc3IprBxsydE49k=)
                          3: 19A3CD9E4B7011EC8E9FCB48C4F9AE02.roa (hash: +ezEBpxkY8f4PY2reVhjPmzVyzhmj21Jd5Qr+MbJDt0=)
                          4: 543386248C5811E782F42951C4F9AE02.roa (hash: n3uqup7GQBgv1FQz4tcE6zqiYYLPHwkPhVC8sJy/BDw=)
                          5: F04860C28C5611E792848B4AC4F9AE02.roa (hash: t1OURYtTlAtfNdWLrnHxkvZF4FFX+C17Jb19CIwfihg=)
                          6: 743ABB72997011EAB50D6934C4F9AE02.roa (hash: TgloTHCWPURsO/1k0p40DWKdaGHNBtdJOfoMLcQC4gA=)
                          7: EF3B21E28C5611E792848B4AC4F9AE02.roa (hash: sL6rlhwT2LpkTZEnGwa+sTT6+sRP4qeJqtLHhVBZMAA=)
                          8: 62F6493EE3BE11EE933A0461C4F9AE02.roa (hash: 5ldMM2cJXLvn3rFlQhmNWhHj8IBemlnHR9gxFxzEiLw=)
                          9: B1E3B88C81B511F19B8C01DE60A30FBC.roa (hash: dx7DvWfirCJZBr5eZJEHjm/706Q8/9o4UK2W9LgRjMo=)
                          10: F47B5B188C5611E792848B4AC4F9AE02.roa (hash: 9rwvDynWMk6qsy3E/KYOqtc0csn9No217jDY1XnUZzc=)
                          11: 6DBD2412C9EB11EC886A6D51C4F9AE02.roa (hash: X4W8KPzkD6jrY8LiA2LHjxX8s0fpYowcQUXXGe2/Dfo=)
                          12: B6D7E1547EEE11EF8B38A43BC4F9AE02.roa (hash: aRK8QB1JQ1E7tEOryxg9vqmCGo1+++BBG/tSU9uGFOQ=)
                          13: F5F86ADA8C5611E792848B4AC4F9AE02.roa (hash: wnYTp3fsOW2HQITJ5FlOwfrkiKlWT5LLwinFPfnjQu0=)
                          14: 586845003D5B11F1BC7D03E3A9833773.roa (hash: bksTinMhSZQ6iaAs+xQLVJBbYxr1WgrHFBPOHrnAF48=)
                          15: DB3E929E199611EF9EBFBF4AC4F9AE02.roa (hash: yniPMcdgFbwNhplTc+rydNjzQLU8O29V8C25W4mTbeU=)
                          16: F55175EA8C5611E792848B4AC4F9AE02.roa (hash: kFQioVNwia+/qizEhlyCPhiOpzPpIkRHCfZvLOC7QmI=)
                          17: F688FE388C5611E792848B4AC4F9AE02.roa (hash: t6f1Kosop/CbP7AwXXw0yAnoWx86X0b95L/+s+Yi+WE=)
                          18: 7BFDDDB8D42E11EB8E13801EC4F9AE02.roa (hash: VtV1xShyMh9sjenS152zbiOl5v/xr19d8+vqjj03D0M=)
                          19: CAC3390AD30E11EB98AEFF45C4F9AE02.roa (hash: sgw4Va5xBAbvxEnA80g+uDGNNw3JilHTbxgmChJswfI=)
                          20: 8A8C093A42E311F1B93532028F833773.roa (hash: 9m8Dvq8GVyNZk2cbyrBZleTZzmMEk1mdl6ftuO3mqFA=)
                          21: F15AD0CE544E11ED9C5E2F3AC4F9AE02.roa (hash: V0Bxe9pvCdmpHFNAup44+kDyfw/tamlGcA2MYQmUsO0=)
                          22: F1475E928C5611E792848B4AC4F9AE02.roa (hash: 31VZpJVWKNF5mab4XZ5JTLuEycfyZELw3YTbEtHVoIE=)
                          23: EFBF37208C5611E792848B4AC4F9AE02.roa (hash: QMEMNFl/Jl1WfdjUzvj9WgadU2H5AGalIKmrTUa6R+g=)
                          24: F1C092BC8C5611E792848B4AC4F9AE02.roa (hash: qRXk9dzH9yzccBqYsDfVw2E8u5nyXXCoXpdl1ASSh24=)
                          25: F721F6B08C5611E792848B4AC4F9AE02.roa (hash: 9gIlVUVnVNmYm0bLzGl5b38yoqx/v/vATXeAALoSuAs=)
                          26: F3DC1FD08C5611E792848B4AC4F9AE02.roa (hash: j51cLfGITBXR/xee14Rv6rfJpCWZzT3Rfl0VvL2R5/I=)
                          27: B4C0B17CC94E11EDB5018458C4F9AE02.roa (hash: v18fC46MYs+2IjS6va5v9tqHDD2ALPl/gY1gvz9Tbm0=)
                          28: 5366509AC63511EAAC843455C4F9AE02.roa (hash: 2dGdHKeMcuIvSTX7iFjfVdensV8pnXlc8bJBe8kDDVc=)
                          29: E0CC1C58235911ECAB7C7661C4F9AE02.roa (hash: tYH203EuDB6n9E6nUVPwIVfHVAXXBv2Io3OA+Ey8sS8=)
                          30: EEBDFBB88C5611E792848B4AC4F9AE02.roa (hash: 38VxGKNTIqjI7WmYVTAs2Vk4XEsvNHdC+sfnVA/u1Zk=)
                          31: A293EE844BFB11EAADB0780AC4F9AE02.roa (hash: Bf1VexJZ8ePZKh8sXCKZqIgTsDNhulqFPVDnqdnEaj0=)
                          32: B61774A4D9DF11EFB722C742C4F9AE02.roa (hash: UrzW/ghTReXDIIXXuUNwm0r5S8hfMJ1iOmM4g5cXqO0=)
                          33: 82C395EE774811F1801EADB45DA30FBC.roa (hash: BQd8XglJvUSBxzaCM0mJw6hZt6pmwUg9idBpdBZ3C/E=)
                          34: C82D6ACC969A11EB9BC1FA1BC4F9AE02.roa (hash: 8hJseycbUR3zK2+zXkoIB6I2ViNeMkJgkdW6VsK7qO0=)
                          35: EDA1B0D8A1CE11EDA692F359C4F9AE02.roa (hash: f0nSJ61GA5QPVsLKjddcC0wfT/tT/FK1nC1PrxX8MeQ=)
                          36: 7271CAB217D711EA90BA7F4EC4F9AE02.roa (hash: yO9FNu/9OHp6I+wCsbe7slCX+CdTGzP0ftlr5EH77RY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl
                          rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10491 (0x28fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFB70, serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
        Validity
            Not Before: Jul 28 15:53:03 2026 GMT
            Not After : Aug  4 15:53:03 2026 GMT
        Subject: CN=6a68d05f-c040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5c:ac:4b:e0:63:ab:fc:62:17:4b:28:45:3f:
                    14:80:36:25:00:36:9a:da:3b:d1:29:a3:ef:ee:4a:
                    04:5a:e3:52:e4:df:5e:79:ab:d4:78:04:ca:68:11:
                    04:6a:eb:03:bc:c7:37:6a:a2:c3:ef:b8:e4:26:b8:
                    c9:e1:d0:13:57:54:de:d7:b5:a3:85:74:99:cd:e7:
                    a3:b2:40:85:07:c5:08:5e:c9:26:6c:ba:ed:b2:1b:
                    32:31:52:f4:94:c4:fc:db:ca:b9:8b:17:3b:ea:ba:
                    a1:d7:bc:47:0b:f4:db:3f:0d:08:13:9e:a7:2e:26:
                    2a:57:03:06:21:d1:b9:67:5d:25:76:45:ca:17:7a:
                    2b:d3:01:ed:cf:58:6b:2a:c6:65:d4:9b:63:48:78:
                    7f:07:32:1a:ec:a6:9c:2e:c9:3a:64:f3:6d:d3:b4:
                    e4:54:08:db:43:87:3f:af:61:73:06:7a:71:94:f2:
                    16:aa:bb:7f:bb:cf:a8:6b:3f:3f:c6:da:78:6f:dc:
                    fb:aa:5e:77:d3:57:3d:1d:65:b2:ae:7d:cb:e4:db:
                    26:e9:75:c0:7a:1e:6b:4d:3a:18:65:cd:ae:48:b6:
                    d5:25:6e:11:b6:77:1c:05:f2:d1:be:e7:96:d5:06:
                    72:4f:9c:bd:23:b0:1e:b6:23:cf:e4:0b:a7:a4:4c:
                    98:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:82:2C:6B:B4:40:42:E5:8B:88:E8:34:85:35:23:5A:33:E9:9F:F6
            X509v3 Authority Key Identifier:
                keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:a1:9a:e9:45:e8:b2:94:70:ef:2d:b2:20:9b:e2:0f:2a:9c:
         ce:d2:c6:09:cc:5e:a0:e2:9b:fd:8d:59:e1:bb:61:67:0d:08:
         a6:ae:2e:78:ba:87:10:bf:6c:a5:82:02:a8:9a:42:4d:c9:c0:
         4f:b7:c9:9c:ac:24:0c:07:8e:da:3c:de:f2:33:c8:11:a2:3e:
         d7:0e:be:69:bc:8d:06:7e:dd:e3:14:ee:1f:05:57:72:05:cb:
         3d:a1:4d:9e:dc:ff:a8:44:12:59:52:ad:cd:47:c3:f6:49:55:
         6f:7c:1f:a8:4f:30:76:f3:91:00:fc:3d:68:5f:ae:cd:4c:84:
         b1:07:a2:35:ee:78:bc:46:79:f0:8c:56:5c:99:2c:6f:4c:b3:
         69:b4:06:5b:79:ea:ed:d5:69:04:de:9b:ca:dc:b8:73:7c:c0:
         68:bc:0a:bb:d9:9c:f1:27:f6:5d:bd:96:0a:18:0b:f6:fa:49:
         ae:b8:3c:02:bd:d4:98:47:d2:22:58:86:2b:e6:7c:ef:8b:d4:
         9c:b3:5e:e7:61:79:fb:8b:e8:47:8b:40:0d:0e:df:92:09:69:
         ca:53:4b:47:35:e3:8a:54:26:a8:b3:de:d3:6f:b7:f5:1c:67:
         e6:a5:10:2b:26:ae:d3:49:13:b8:d9:09:4d:cb:af:de:47:e8:
         11:d7:7e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:18:34 2026 by rpki-client