Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft
File:                     XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft (raw, json)
Hash identifier:          Ek37AXQRqzvnGTTaJSttqendBGctCIBBDxRe51r4kzI=
Subject key identifier:   1A:76:C9:26:A4:4F:54:C6:23:11:EE:06:B5:AF:55:A4:CC:81:98:69
Authority key identifier: 5E:70:99:49:BA:A4:0A:7D:47:D4:4D:21:16:90:B3:77:E0:51:C4:5F
Certificate issuer:       /CN=A91F0C73/serialNumber=5E709949BAA40A7D47D44D211690B377E051C45F
Certificate serial:       03A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnCZSbqkCn1H1E0hFpCzd-BRxF8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft
Manifest number:          03A0
Signing time:             Mon 27 Jul 2026 01:48:50 +0000
Manifest this update:     Mon 27 Jul 2026 01:48:49 +0000
Manifest next update:     Mon 03 Aug 2026 01:48:49 +0000
Files and hashes:         1: XnCZSbqkCn1H1E0hFpCzd-BRxF8.crl (hash: b/QiqN8BQD1UlmD3CyxNMKJO+qtDv6nuo5c6IMZQLJo=)
                          2: FA3FF1D4F13D11EC9B673A2AC4F9AE02.roa (hash: 8YdQLsUZCKBzraMiXXqY3e6CtfbysTpmjgszsI0exrg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.crl
                          rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnCZSbqkCn1H1E0hFpCzd-BRxF8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 01:48:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 937 (0x3a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0C73, serialNumber=5E709949BAA40A7D47D44D211690B377E051C45F
        Validity
            Not Before: Jul 27 01:48:49 2026 GMT
            Not After : Aug  3 01:48:49 2026 GMT
        Subject: CN=6a66b902-b35f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d1:6f:05:15:46:19:98:95:f8:89:28:c3:08:
                    e5:1e:3a:8a:d9:7d:ae:3e:cd:d8:4b:36:8e:d7:f6:
                    69:00:9f:ee:06:14:1d:d1:4e:f4:8b:09:c9:12:73:
                    58:01:34:22:6a:6b:30:d6:fd:be:d6:61:bf:ea:38:
                    c5:04:6b:bb:91:1d:c3:fd:01:ac:3b:5c:cc:aa:94:
                    02:56:bb:7d:8d:99:4b:29:3b:8c:96:b4:8f:2d:5d:
                    00:52:b4:31:48:28:65:3d:0f:15:dc:2c:3b:d2:dc:
                    75:fb:59:26:db:61:48:17:e8:76:f8:fa:04:93:07:
                    5d:0a:18:91:21:ad:19:d6:e9:aa:57:d1:f6:29:2d:
                    df:9d:4a:8f:a9:40:d6:4a:b7:bc:6f:40:ed:92:b9:
                    74:9e:2f:96:47:9d:ec:bb:1b:ae:b6:d5:0d:a2:0f:
                    cb:84:dc:86:e8:cf:75:37:4b:19:15:62:9d:a0:bb:
                    83:f8:86:18:c0:15:bf:99:b5:52:ad:92:00:90:b6:
                    c4:f5:4b:a7:db:c5:1d:33:74:1e:64:85:6b:42:f9:
                    47:8f:98:47:e9:42:c4:b0:dd:41:f7:c3:40:2e:6e:
                    c0:c4:81:7f:c6:78:19:3d:4a:c4:55:f2:a2:a0:bd:
                    27:89:e4:ee:9f:b7:e5:a5:39:4c:70:4d:75:b7:f7:
                    81:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:76:C9:26:A4:4F:54:C6:23:11:EE:06:B5:AF:55:A4:CC:81:98:69
            X509v3 Authority Key Identifier:
                keyid:5E:70:99:49:BA:A4:0A:7D:47:D4:4D:21:16:90:B3:77:E0:51:C4:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnCZSbqkCn1H1E0hFpCzd-BRxF8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:85:e0:dd:a4:bc:89:d3:d5:5c:10:cd:b5:e5:92:5b:1a:d8:
         6c:11:8c:16:e4:5e:e1:d9:8b:94:26:30:cc:47:84:2e:91:3e:
         af:03:1f:d9:11:d2:bf:90:bf:57:fa:1e:19:f1:8e:74:c4:2e:
         05:de:05:d6:68:f0:bf:f9:23:4b:40:8d:91:1f:d2:22:ef:3d:
         2b:79:c8:18:46:44:3b:c1:4b:5a:d2:ea:cf:97:46:c5:6b:a0:
         44:6e:01:80:71:29:af:1f:c0:dc:9c:fc:6e:0f:d8:32:2a:bb:
         27:cb:b9:36:22:f9:62:93:ab:3d:b7:a4:19:fc:87:ac:f8:c0:
         67:f8:9b:ea:8f:de:43:7c:60:5e:9d:b2:86:75:92:51:c3:69:
         48:a7:1d:85:5b:9f:ca:f8:55:86:0d:c9:6c:27:af:d2:98:85:
         3b:13:d5:9b:a4:b3:2a:47:ff:dd:c3:47:d3:19:06:80:7d:46:
         7f:52:a1:95:e7:8c:77:10:4b:d4:38:d8:a2:8d:51:17:0b:b6:
         2e:95:c9:a5:99:e2:ff:10:82:f7:92:ae:03:9a:85:27:94:40:
         6d:1b:01:15:0a:46:41:2a:db:a6:65:e2:d8:29:a6:30:d6:8a:
         e4:46:e0:4c:be:32:2a:4e:c9:ae:fd:2b:b2:6b:18:fd:42:3c:
         e8:99:20:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:55:20 2026 by rpki-client