Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/xbajYOSK75Kf3CcpbR1S9b9umRY.mft
File:                     xbajYOSK75Kf3CcpbR1S9b9umRY.mft (raw, json)
Hash identifier:          MXH5I7202H/PPc6eEKc6mmOcVyJkA+KvCxTgEPG9ufw=
Subject key identifier:   BE:8E:2A:9F:94:01:10:56:E5:4F:DE:BD:E0:4C:EA:C8:47:FA:00:25
Authority key identifier: C5:B6:A3:60:E4:8A:EF:92:9F:DC:27:29:6D:1D:52:F5:BF:6E:99:16
Certificate issuer:       /CN=A91FD088/serialNumber=C5B6A360E48AEF929FDC27296D1D52F5BF6E9916
Certificate serial:       089B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbajYOSK75Kf3CcpbR1S9b9umRY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/xbajYOSK75Kf3CcpbR1S9b9umRY.mft
Manifest number:          0890
Signing time:             Tue 28 Jul 2026 21:02:30 +0000
Manifest this update:     Tue 28 Jul 2026 21:02:29 +0000
Manifest next update:     Tue 04 Aug 2026 21:02:29 +0000
Files and hashes:         1: xbajYOSK75Kf3CcpbR1S9b9umRY.crl (hash: pJQccfnEzUX/H5LaSiGt+mEzVJSFVJn+fKor03hIm6s=)
                          2: 423EA4CC039B11EBB3C1465CC4F9AE02.roa (hash: 6Topyg8bWLl5O5LsyGLXYfvkh05TDjr30BTYJNqKf6s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/xbajYOSK75Kf3CcpbR1S9b9umRY.crl
                          rsync://rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/xbajYOSK75Kf3CcpbR1S9b9umRY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbajYOSK75Kf3CcpbR1S9b9umRY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 21:02:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2203 (0x89b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD088, serialNumber=C5B6A360E48AEF929FDC27296D1D52F5BF6E9916
        Validity
            Not Before: Jul 28 21:02:29 2026 GMT
            Not After : Aug  4 21:02:29 2026 GMT
        Subject: CN=6a6918e5-ba88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:9c:5a:fe:f1:ad:55:8b:5f:27:e4:70:85:b8:
                    5c:d6:fa:4e:14:57:10:8c:30:4c:e9:c8:d2:7e:db:
                    5d:06:cb:2e:38:12:92:60:51:5d:da:93:6c:a7:f7:
                    75:a1:64:9a:53:eb:48:0b:e4:f8:24:40:d6:f3:57:
                    d2:0e:78:3f:26:f2:c5:c8:a3:a8:44:a7:ac:b6:b1:
                    35:79:69:3f:b8:0a:c0:fe:09:4f:51:49:42:27:a9:
                    b1:1f:ad:22:d4:d0:b3:33:69:22:4c:dc:6c:f0:82:
                    07:1e:d3:e8:44:d5:99:f2:7c:40:80:53:6a:c1:22:
                    ba:14:0f:50:ef:ed:20:c1:ba:94:f1:9d:84:6a:66:
                    d2:9a:b6:8b:5f:33:74:8d:5c:08:ab:27:19:7d:48:
                    75:bd:c7:c7:d6:87:29:e7:35:5a:ea:58:42:49:5e:
                    d2:5e:63:1c:fb:2e:c2:10:13:8b:aa:a7:22:0c:0f:
                    ee:b2:a3:0a:4f:e2:16:cb:e5:25:ea:52:9c:eb:73:
                    4f:4a:72:ee:b7:5e:7c:27:fa:b8:15:9f:d5:51:be:
                    ff:8c:f4:67:fe:44:2e:3b:26:3c:bd:61:a4:f8:0d:
                    cc:f2:69:01:5b:e3:c3:73:a8:b3:1e:de:d2:60:49:
                    94:10:bc:a4:60:32:c8:76:4d:72:2d:20:cd:c9:55:
                    33:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:8E:2A:9F:94:01:10:56:E5:4F:DE:BD:E0:4C:EA:C8:47:FA:00:25
            X509v3 Authority Key Identifier:
                keyid:C5:B6:A3:60:E4:8A:EF:92:9F:DC:27:29:6D:1D:52:F5:BF:6E:99:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/xbajYOSK75Kf3CcpbR1S9b9umRY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbajYOSK75Kf3CcpbR1S9b9umRY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/xbajYOSK75Kf3CcpbR1S9b9umRY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:a8:7d:8e:19:40:05:e7:fb:0c:f8:4d:ef:fc:b6:4a:2d:7c:
         cd:58:d7:16:19:1b:a7:7b:82:07:fb:59:29:21:1e:d2:67:2d:
         e4:da:1c:3f:1e:96:35:f7:d9:8d:26:3c:5e:5a:6d:61:54:1d:
         68:1a:63:39:47:31:d6:47:bc:d4:ee:f6:2d:56:ef:23:75:09:
         43:3d:ef:1b:7a:3c:69:5e:04:6f:27:4e:57:ff:42:dd:4e:b4:
         17:10:ee:c8:2f:74:4d:75:e8:f3:9c:e1:96:16:59:b1:15:61:
         d5:6b:4b:d6:e7:ea:f3:2a:8c:17:43:b6:4f:1a:06:9b:af:38:
         38:10:87:26:b3:4b:aa:19:9d:c9:f3:a8:c0:82:42:fc:cb:9b:
         a7:e0:d6:73:ba:de:e6:3f:fd:31:bd:b9:90:62:d1:25:44:86:
         fc:47:a1:f6:a8:aa:30:63:62:58:a3:26:b1:e0:a1:0b:2f:b0:
         ae:9b:76:3c:52:32:17:37:64:32:c4:4e:14:db:1c:7c:a2:00:
         f2:a2:56:5d:91:2b:83:75:ae:1a:8d:65:cb:11:14:ba:3c:41:
         ac:a4:2b:8e:07:80:23:da:e6:87:d8:6e:70:21:ca:27:91:94:
         19:f3:c1:4f:7f:3b:fc:48:e1:19:b9:54:59:55:66:5d:14:8f:
         ee:fc:af:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:30:37 2026 by rpki-client