Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft
File:                     X5Yo0rAcllh6gccdLsi0HnJdDXM.mft (raw, json)
Hash identifier:          +8Hnt9sJLiKlfNXL8di2GAjFlRaob3XyoK8ZS4HCseA=
Subject key identifier:   BC:12:44:30:90:E5:60:A7:9D:F2:6C:2D:38:78:6D:C0:02:52:91:E7
Authority key identifier: 5F:96:28:D2:B0:1C:96:58:7A:81:C7:1D:2E:C8:B4:1E:72:5D:0D:73
Certificate issuer:       /CN=A91EEA4D/serialNumber=5F9628D2B01C96587A81C71D2EC8B41E725D0D73
Certificate serial:       0BD2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5Yo0rAcllh6gccdLsi0HnJdDXM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft
Manifest number:          15A4
Signing time:             Tue 28 Jul 2026 19:15:31 +0000
Manifest this update:     Tue 28 Jul 2026 19:15:30 +0000
Manifest next update:     Tue 04 Aug 2026 19:15:30 +0000
Files and hashes:         1: X5Yo0rAcllh6gccdLsi0HnJdDXM.crl (hash: yeoiMcgepIt4Z4nJ9qG1fbO0mKJy54paeB4C+X29PHA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.crl
                          rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5Yo0rAcllh6gccdLsi0HnJdDXM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:15:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3026 (0xbd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEA4D, serialNumber=5F9628D2B01C96587A81C71D2EC8B41E725D0D73
        Validity
            Not Before: Jul 28 19:15:30 2026 GMT
            Not After : Aug  4 19:15:30 2026 GMT
        Subject: CN=6a68ffd2-87bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:66:4d:4b:df:4d:d5:31:a4:ca:25:7f:36:74:
                    4f:2b:4e:2a:5a:1f:fb:98:3b:b1:44:af:ba:8d:1d:
                    43:8b:36:3e:00:d0:c2:6d:ff:6e:7f:99:6e:1f:70:
                    54:2a:b3:ba:e3:47:42:64:fe:47:4f:70:39:35:f1:
                    08:9b:6d:a5:37:0d:d1:ff:be:0a:28:e7:ff:02:ed:
                    cf:8e:6b:c3:b8:28:16:85:b0:2c:3f:06:f8:cf:1e:
                    c0:8e:c4:68:58:10:f1:06:85:13:8b:89:e2:ef:29:
                    c8:20:b7:ff:a9:0c:23:c7:8d:fc:3c:e0:df:b4:0b:
                    80:99:64:94:4c:a7:84:87:68:fd:eb:df:45:57:9f:
                    ea:3a:3d:89:20:60:d7:53:69:b6:c5:73:50:fd:a6:
                    fe:ec:f1:4b:88:01:c4:c0:ba:39:a5:08:83:2c:f2:
                    5d:10:51:5b:1c:60:8f:1a:54:60:bb:26:b7:e9:8a:
                    41:bf:24:ac:e9:17:98:77:c6:09:2f:81:93:e8:b1:
                    47:a7:9d:33:e8:02:50:35:6a:66:92:7b:1c:3d:91:
                    a5:cd:35:82:82:0e:11:0d:3d:44:04:94:8e:df:84:
                    fc:ee:41:c1:a8:ec:74:c6:0e:3e:65:4d:56:09:a5:
                    7b:9d:9d:df:a1:7e:38:5d:2f:8b:5e:cb:d2:b2:24:
                    62:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:12:44:30:90:E5:60:A7:9D:F2:6C:2D:38:78:6D:C0:02:52:91:E7
            X509v3 Authority Key Identifier:
                keyid:5F:96:28:D2:B0:1C:96:58:7A:81:C7:1D:2E:C8:B4:1E:72:5D:0D:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5Yo0rAcllh6gccdLsi0HnJdDXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:4f:6a:fd:ff:42:fe:c7:20:40:e3:1c:46:4d:18:db:ec:a9:
         97:fd:e7:4a:2e:5f:85:c2:21:46:d3:25:be:e6:c8:da:64:23:
         6b:ec:8e:d4:a2:1c:f7:01:3b:3f:44:08:f0:94:f2:93:67:53:
         d8:03:87:2d:6e:6a:bb:c5:36:e8:21:ac:f8:09:cd:a9:92:90:
         50:98:d5:61:c2:42:16:64:9d:4c:64:ad:7b:d4:dd:d3:43:81:
         d1:d7:d9:cf:01:8d:ef:d4:f1:14:e3:e7:f6:d2:87:4c:d7:66:
         7a:59:a3:bb:e8:7e:cb:67:6f:c7:14:b6:2b:1c:f8:a1:38:b9:
         50:fe:04:1f:a9:2c:2a:ba:62:13:e2:76:41:89:29:90:df:14:
         74:4c:40:72:f4:cd:3c:c2:09:f6:b3:0e:55:19:f2:1d:36:20:
         9b:f6:49:78:26:79:a1:f3:a2:84:80:bd:55:32:74:17:ac:91:
         eb:6f:90:94:d5:69:99:62:d7:06:46:e8:ca:9d:99:a0:a7:96:
         9a:8e:21:be:ae:bc:b6:30:16:98:6c:98:27:7a:e8:de:a2:de:
         4f:b6:47:5c:22:22:14:bb:27:d3:18:6d:d8:c7:cb:67:3c:58:
         f8:45:3b:a9:ca:b7:c3:f7:48:63:ff:30:d2:73:8e:05:47:ff:
         f3:7a:da:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:11:50 2026 by rpki-client