Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft
File:                     x8206hgWXlmC0KkZ_0f3JnbgUHM.mft (raw, json)
Hash identifier:          XO2qXpKs+IYpFrTryODq35E6B5+hPI2l7/zA6hcsVoM=
Subject key identifier:   7A:C1:D6:50:FD:46:46:1A:A7:68:8B:EC:EA:E1:24:5C:AC:A7:32:53
Authority key identifier: C7:CD:B4:EA:18:16:5E:59:82:D0:A9:19:FF:47:F7:26:76:E0:50:73
Certificate issuer:       /CN=A91FBEFA/serialNumber=C7CDB4EA18165E5982D0A919FF47F72676E05073
Certificate serial:       FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8206hgWXlmC0KkZ_0f3JnbgUHM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft
Manifest number:          FB
Signing time:             Mon 27 Jul 2026 08:20:36 +0000
Manifest this update:     Mon 27 Jul 2026 08:20:36 +0000
Manifest next update:     Mon 03 Aug 2026 08:20:36 +0000
Files and hashes:         1: x8206hgWXlmC0KkZ_0f3JnbgUHM.crl (hash: SsGfl+Afcj1vuuTk+4b3dfIwDGUel6PYmOjUcf0UtLI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.crl
                          rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8206hgWXlmC0KkZ_0f3JnbgUHM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 08:20:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 251 (0xfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FBEFA, serialNumber=C7CDB4EA18165E5982D0A919FF47F72676E05073
        Validity
            Not Before: Jul 27 08:20:36 2026 GMT
            Not After : Aug  3 08:20:36 2026 GMT
        Subject: CN=6a6714d4-6302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:98:0e:a9:a3:1f:ae:42:a4:c5:fd:27:ad:25:
                    67:ef:b3:ba:c2:5a:3a:25:65:6b:ce:f4:a2:4c:64:
                    60:a2:97:8e:e9:6d:a6:c9:29:ee:2c:8c:46:3a:05:
                    3c:98:fa:2d:bb:df:51:b5:7f:ac:1b:89:95:8f:61:
                    94:0a:40:77:b1:d1:5f:26:46:cb:20:ca:2a:ae:61:
                    fe:2b:36:15:10:06:30:46:4d:90:db:3d:22:6e:e3:
                    b4:cd:2a:bc:d2:ef:bb:c0:c7:92:63:bc:4e:c5:f1:
                    a7:db:97:18:8e:4c:7d:43:36:73:55:df:1d:b1:e0:
                    c1:a3:e0:95:46:97:22:21:a0:c5:38:a0:c9:28:71:
                    9d:1f:76:32:a5:f5:c0:c9:6d:2d:f3:22:65:0d:ac:
                    c3:8f:de:d6:e8:38:a3:26:85:40:9e:91:02:32:a2:
                    cf:f9:32:51:96:b3:0d:05:7a:fe:cf:ce:2d:1b:cd:
                    a9:5c:ed:d0:fa:9b:70:5f:8c:ce:21:59:04:85:1f:
                    6f:4f:5f:0a:df:f3:42:5b:67:17:ba:38:71:a5:7d:
                    4c:de:97:da:a4:de:20:3b:61:cb:d2:00:cb:4f:38:
                    a7:07:24:a8:72:16:f8:52:71:b8:52:9a:29:ef:4a:
                    bd:15:c9:62:1d:c3:ca:bb:36:87:77:36:f0:73:42:
                    91:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C1:D6:50:FD:46:46:1A:A7:68:8B:EC:EA:E1:24:5C:AC:A7:32:53
            X509v3 Authority Key Identifier:
                keyid:C7:CD:B4:EA:18:16:5E:59:82:D0:A9:19:FF:47:F7:26:76:E0:50:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8206hgWXlmC0KkZ_0f3JnbgUHM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         f7:4c:0f:54:08:6a:9f:69:8f:e6:78:8b:a2:c7:ba:8b:27:c2:
         b7:09:2e:f0:d1:92:ab:c5:9d:c6:6d:d6:53:dc:fb:5f:d3:db:
         98:86:46:05:d0:8a:37:f3:c3:d3:81:3a:d4:f3:ca:6b:ef:43:
         6b:56:cd:a0:44:0a:f6:fa:7a:8c:55:e4:96:01:5c:ee:94:50:
         19:37:49:70:ea:79:78:49:bb:aa:a9:fc:b1:48:ae:d5:90:5d:
         23:74:0d:fb:a7:4b:eb:14:f5:49:70:ba:e5:f5:9b:79:f8:2f:
         9a:3a:f8:07:4e:92:3b:05:8b:b0:1c:e6:47:53:a1:15:9b:fb:
         07:df:c3:fa:7f:71:49:2e:fd:ac:01:cb:55:b7:d4:0c:b5:b9:
         6f:8a:fc:b0:f2:99:07:be:fa:fd:81:a7:3d:50:b9:57:d8:ae:
         cf:87:08:94:7e:09:59:df:6a:89:0e:de:e1:34:d6:c9:5a:c9:
         ef:b5:32:25:0e:05:5f:90:dc:5c:24:e9:17:79:e3:06:4f:94:
         16:85:a2:0c:6c:a8:ed:f6:81:15:0f:70:a7:4e:5a:d5:64:0c:
         ce:0a:6a:6d:2a:3e:c0:0b:94:f2:82:cf:30:3f:b3:56:9a:18:
         c5:df:9a:11:37:86:79:d1:70:4f:bc:ac:ab:45:50:e8:55:2f:
         64:07:38:f1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkJFRkExMTAvBgNVBAUTKEM3Q0RCNEVBMTgxNjVFNTk4MkQwQTkxOUZGNDdGNzI2
NzZFMDUwNzMwHhcNMjYwNzI3MDgyMDM2WhcNMjYwODAzMDgyMDM2WjAYMRYwFAYD
VQQDEw02YTY3MTRkNC02MzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA55gOqaMfrkKkxf0nrSVn77O6wlo6JWVrzvSiTGRgopeO6W2mySnuLIxGOgU8
mPotu99RtX+sG4mVj2GUCkB3sdFfJkbLIMoqrmH+KzYVEAYwRk2Q2z0ibuO0zSq8
0u+7wMeSY7xOxfGn25cYjkx9QzZzVd8dseDBo+CVRpciIaDFOKDJKHGdH3YypfXA
yW0t8yJlDazDj97W6DijJoVAnpECMqLP+TJRlrMNBXr+z84tG82pXO3Q+ptwX4zO
IVkEhR9vT18K3/NCW2cXujhxpX1M3pfapN4gO2HL0gDLTzinBySochb4UnG4Upop
70q9FcliHcPKuzaHdzbwc0KRhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHrB1lD9
RkYap2iL7OrhJFyspzJTMB8GA1UdIwQYMBaAFMfNtOoYFl5ZgtCpGf9H9yZ24FBz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkVGQS8xNzI1NDZCQzBC
MzcxMUYwOEMyMzk4NjNDNEY5QUUwMi94ODIwNmhnV1hsbUMwS2taXzBmM0puYmdV
SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3g4MjA2aGdXWGxtQzBLa1pfMGYzSm5iZ1VITS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QkVGQS8xNzI1NDZCQzBCMzcxMUYwOEMyMzk4NjNDNEY5QUUwMi94ODIwNmhnV1hs
bUMwS2taXzBmM0puYmdVSE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA90wPVAhqn2mP5niLose6iyfCtwku8NGSq8Wdxm3WU9z7X9PbmIZGBdCKN/PD
04E61PPKa+9Da1bNoEQK9vp6jFXklgFc7pRQGTdJcOp5eEm7qqn8sUiu1ZBdI3QN
+6dL6xT1SXC65fWbefgvmjr4B06SOwWLsBzmR1OhFZv7B9/D+n9xSS79rAHLVbfU
DLW5b4r8sPKZB776/YGnPVC5V9iuz4cIlH4JWd9qiQ7e4TTWyVrJ77UyJQ4FX5Dc
XCTpF3njBk+UFoWiDGyo7faBFQ9wp05a1WQMzgpqbSo+wAuU8oLPMD+zVpoYxd+a
ETeGedFwT7ysq0VQ6FUvZAc48Q==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:57:02 2026 by rpki-client