Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.mft
File:                     XozcAfwJtFN0mgHuUjmzXt4kvmw.mft (raw, json)
Hash identifier:          tLJMLuT4HIKIL7syOMGsTSBjFCNr3uEy674fLprDavI=
Subject key identifier:   66:BA:3C:87:39:1B:09:69:DD:9D:DF:75:F9:53:83:BC:3B:EF:BD:EB
Authority key identifier: 5E:8C:DC:01:FC:09:B4:53:74:9A:01:EE:52:39:B3:5E:DE:24:BE:6C
Certificate issuer:       /CN=A91F4CFA/serialNumber=5E8CDC01FC09B453749A01EE5239B35EDE24BE6C
Certificate serial:       0817
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XozcAfwJtFN0mgHuUjmzXt4kvmw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.mft
Manifest number:          080F
Signing time:             Tue 28 Jul 2026 21:39:19 +0000
Manifest this update:     Tue 28 Jul 2026 21:39:18 +0000
Manifest next update:     Tue 04 Aug 2026 21:39:18 +0000
Files and hashes:         1: XozcAfwJtFN0mgHuUjmzXt4kvmw.crl (hash: Hkv29teEBusieRE86FeBNL9jPwcVq86Ym667qdlsjgQ=)
                          2: A5D573E4305A11EB921D6332C4F9AE02.roa (hash: EXIodqZO0EV9Q7D8N2AnvfLDO9Fid8uBbsf7/azJXeA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.crl
                          rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XozcAfwJtFN0mgHuUjmzXt4kvmw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 21:39:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2071 (0x817)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4CFA, serialNumber=5E8CDC01FC09B453749A01EE5239B35EDE24BE6C
        Validity
            Not Before: Jul 28 21:39:18 2026 GMT
            Not After : Aug  4 21:39:18 2026 GMT
        Subject: CN=6a692186-abac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d2:8d:ff:57:5c:c0:42:e6:98:41:c5:e3:8c:
                    04:db:f3:e9:a1:4d:cc:7e:cd:91:8c:01:94:12:de:
                    1d:38:3f:38:f4:92:d5:a3:71:62:d5:ca:e1:5c:5c:
                    c5:e4:77:bc:c6:2c:b1:eb:8c:97:40:a8:76:6e:61:
                    95:49:c1:5f:3e:58:5d:ec:24:4b:65:bd:98:be:f9:
                    77:d4:9c:92:42:04:ed:ba:48:ac:35:fe:ed:5d:5c:
                    84:cd:0d:b8:5f:e2:56:17:01:63:a0:73:80:d4:ba:
                    2f:f7:fd:24:6a:87:fd:19:50:01:5f:0d:eb:fd:ee:
                    01:b7:ae:f2:a8:af:9d:bf:8a:cd:f0:90:73:d9:4a:
                    dc:45:b8:c1:6c:f1:72:0d:69:66:64:7e:d5:c0:a1:
                    14:ea:8e:aa:69:1c:33:b1:7a:fa:f4:6b:c5:f2:75:
                    85:10:7d:fd:d0:4a:0c:d3:bd:f4:2d:d8:36:e8:a9:
                    3d:d3:51:e8:b4:af:58:e9:fc:b0:7c:4f:fb:8b:7f:
                    98:be:a6:b0:71:4b:32:1e:be:01:86:c3:c9:6b:9c:
                    ed:87:08:16:91:14:7f:58:c2:45:c8:07:f8:c6:db:
                    c8:41:95:d9:b7:17:a2:61:7c:43:51:29:e0:a8:22:
                    5f:07:5c:f0:02:b2:a5:8b:89:f5:91:0d:83:73:10:
                    d4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:BA:3C:87:39:1B:09:69:DD:9D:DF:75:F9:53:83:BC:3B:EF:BD:EB
            X509v3 Authority Key Identifier:
                keyid:5E:8C:DC:01:FC:09:B4:53:74:9A:01:EE:52:39:B3:5E:DE:24:BE:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XozcAfwJtFN0mgHuUjmzXt4kvmw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:7e:66:e5:ed:76:86:e4:b4:fa:21:84:de:94:b0:5d:6b:91:
         6f:20:4f:98:b7:41:48:30:a2:fb:fa:21:04:f4:41:b6:fc:30:
         69:de:ce:e2:33:19:94:a6:ff:e9:fb:f6:90:24:af:f4:78:b7:
         e1:35:47:60:ef:50:b0:32:ee:50:b6:96:c2:4b:09:19:ca:bd:
         54:fe:6e:0f:b5:3d:97:e3:aa:ba:26:d8:56:ac:94:ac:f1:2b:
         9d:28:62:f4:8a:77:3a:70:ef:10:08:36:aa:48:ac:a2:22:1d:
         2b:8c:92:8f:45:9d:dc:59:7c:1e:00:c1:02:ad:c6:11:9d:63:
         75:22:ff:70:d5:ee:1a:a6:45:9d:74:5e:a8:f0:be:d0:27:8b:
         37:7b:f5:44:a0:01:24:4e:37:24:e7:ee:d8:f4:ce:21:05:22:
         3e:7a:ad:a8:59:ae:c8:b0:84:10:72:a5:3e:97:98:42:ce:5a:
         5d:cf:75:a3:7f:78:f8:08:b7:c6:b8:10:96:90:90:b0:e7:2c:
         8a:1f:fc:64:8d:3f:b8:2a:28:a4:dc:f0:3b:8d:8b:94:c9:de:
         46:d1:bb:ed:bd:94:17:46:39:1b:ec:7e:50:33:b8:9c:ba:29:
         8a:ff:82:4b:19:bc:4b:08:3e:ba:72:d9:d1:eb:0e:53:93:8d:
         44:eb:81:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:44:25 2026 by rpki-client