Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/XmtaBob1a6DA93-zvzGzhWMiCCQ.mft
File:                     XmtaBob1a6DA93-zvzGzhWMiCCQ.mft (raw, json)
Hash identifier:          x2GOigg8lPwVFKuCKS6NcKRhf837/D0X1/nDkxXtULI=
Subject key identifier:   D8:36:34:2C:DF:4F:E7:B5:7B:A8:2A:81:D4:53:01:1C:0C:9D:96:9C
Authority key identifier: 5E:6B:5A:06:86:F5:6B:A0:C0:F7:7F:B3:BF:31:B3:85:63:22:08:24
Certificate issuer:       /CN=A91FE107/serialNumber=5E6B5A0686F56BA0C0F77FB3BF31B38563220824
Certificate serial:       23C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmtaBob1a6DA93-zvzGzhWMiCCQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/XmtaBob1a6DA93-zvzGzhWMiCCQ.mft
Manifest number:          23AB
Signing time:             Tue 28 Jul 2026 15:54:28 +0000
Manifest this update:     Tue 28 Jul 2026 15:54:28 +0000
Manifest next update:     Tue 04 Aug 2026 15:54:28 +0000
Files and hashes:         1: XmtaBob1a6DA93-zvzGzhWMiCCQ.crl (hash: 7bh0/ySBp48duX5sRIJiRSo/Srg7ZLFVWAuK8TVTrlM=)
                          2: 9A74033486EF11F19E006003A7EE528E.roa (hash: nM6DOGTCq1XiY4QFr/gSv6xfQY2Pps9Pkd6SvoqHBpY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/XmtaBob1a6DA93-zvzGzhWMiCCQ.crl
                          rsync://rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/XmtaBob1a6DA93-zvzGzhWMiCCQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmtaBob1a6DA93-zvzGzhWMiCCQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:54:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9160 (0x23c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE107, serialNumber=5E6B5A0686F56BA0C0F77FB3BF31B38563220824
        Validity
            Not Before: Jul 28 15:54:28 2026 GMT
            Not After : Aug  4 15:54:28 2026 GMT
        Subject: CN=6a68d0b4-dd51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cc:9f:f5:5d:da:44:b2:54:6c:44:3c:f6:40:
                    2d:6b:9b:69:ee:89:bf:46:ca:bb:37:48:61:d5:72:
                    ee:c2:37:22:27:2a:83:b7:a2:e0:01:d5:df:61:36:
                    92:55:99:bb:9a:a7:6d:d5:f3:8f:62:df:94:a1:95:
                    4e:c5:fa:84:bb:ab:34:52:f1:62:74:55:22:d5:74:
                    a6:71:b9:c9:bf:45:18:39:c8:57:e6:1c:28:c5:d8:
                    3a:21:4e:3a:81:b8:c0:6c:c7:27:76:77:95:26:db:
                    a7:dd:ff:ce:d1:18:e4:6b:c6:69:39:62:36:c7:1f:
                    5b:18:4e:6a:9e:60:97:0e:06:a7:38:19:43:48:a0:
                    8e:95:ec:e6:54:79:be:54:58:de:96:30:a4:b2:fe:
                    b2:fd:bc:dc:af:6d:5c:fb:64:88:da:3a:55:8b:e1:
                    ce:9d:83:da:fb:8a:3d:ff:90:73:cf:fa:fd:3d:68:
                    5d:45:27:e3:92:4e:74:c6:29:ec:d4:ab:3b:a9:32:
                    cf:0b:ae:15:bd:7a:e8:b1:ef:43:5b:a1:2e:df:d9:
                    3c:25:76:85:fe:d2:ec:59:87:bf:97:ae:b1:84:f1:
                    ad:df:4a:4e:97:31:fa:d5:3e:72:62:ef:bf:b6:e3:
                    21:07:c5:99:f4:31:a5:f9:b3:d6:f5:53:b7:75:32:
                    b8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:36:34:2C:DF:4F:E7:B5:7B:A8:2A:81:D4:53:01:1C:0C:9D:96:9C
            X509v3 Authority Key Identifier:
                keyid:5E:6B:5A:06:86:F5:6B:A0:C0:F7:7F:B3:BF:31:B3:85:63:22:08:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/XmtaBob1a6DA93-zvzGzhWMiCCQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmtaBob1a6DA93-zvzGzhWMiCCQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE107/EE35C4469E6411E59D48FB60C4F9AE02/XmtaBob1a6DA93-zvzGzhWMiCCQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:75:24:81:59:bd:7a:4f:06:0f:10:c8:9b:07:bc:59:75:53:
         fd:cb:55:01:ac:30:49:90:3f:00:5b:b7:55:a9:ee:0f:7d:0c:
         5b:75:5a:c8:8a:24:9f:84:d7:11:bf:a9:b1:92:52:05:67:7a:
         29:36:90:b6:09:d6:99:19:1d:a3:36:7b:19:53:18:02:92:e0:
         cd:58:c5:54:9f:b8:87:20:4d:62:84:04:38:15:39:3a:e6:28:
         41:30:11:85:94:02:01:3e:25:6b:a2:1a:5f:2f:9a:21:f7:0c:
         22:61:85:3e:bb:81:cd:ee:43:52:1f:d0:c4:34:cd:f1:b9:ae:
         00:a9:4c:5a:bd:f6:b3:cc:07:4f:b0:09:2d:c8:b4:b7:05:2b:
         1d:de:c1:0b:59:31:3e:cf:2b:59:09:81:d0:a7:00:19:8c:52:
         67:38:1d:fc:d5:82:24:d1:20:92:87:be:7e:35:9c:7c:97:7b:
         27:cd:38:73:65:b2:85:6b:70:88:ec:f8:58:5b:3e:2c:e6:8a:
         f2:84:b4:b4:c7:7f:8b:fc:3a:43:2f:b0:bb:94:16:d0:1e:19:
         5c:34:d0:0c:db:b0:b9:cc:00:ab:36:cd:4e:16:12:57:eb:ea:
         c8:d0:07:57:97:5a:66:90:7b:c7:0f:6a:55:4f:5b:4d:94:5b:
         e5:84:eb:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:56:28 2026 by rpki-client