Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft
File:                     XS3RVLXc4h-3hsUm297xsEWSirg.mft (raw, json)
Hash identifier:          qHAvh99exebkh16akyKTou11cJe29S1RoRN2Ge8lCHY=
Subject key identifier:   91:34:7E:8E:5B:A8:80:5B:2A:20:97:07:D9:BC:6E:3C:8A:15:26:FE
Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8
Certificate issuer:       /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
Certificate serial:       28F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft
Manifest number:          2617
Signing time:             Mon 20 Jul 2026 15:52:22 +0000
Manifest this update:     Mon 20 Jul 2026 15:52:22 +0000
Manifest next update:     Mon 27 Jul 2026 15:52:22 +0000
Files and hashes:         1: XS3RVLXc4h-3hsUm297xsEWSirg.crl (hash: 4y2D5Il345T5JHkHkLIj5tnGhsYBfpzzGOZ+ovlX/5Q=)
                          2: 5366509AC63511EAAC843455C4F9AE02.roa (hash: 2dGdHKeMcuIvSTX7iFjfVdensV8pnXlc8bJBe8kDDVc=)
                          3: F1C092BC8C5611E792848B4AC4F9AE02.roa (hash: qRXk9dzH9yzccBqYsDfVw2E8u5nyXXCoXpdl1ASSh24=)
                          4: EDA1B0D8A1CE11EDA692F359C4F9AE02.roa (hash: f0nSJ61GA5QPVsLKjddcC0wfT/tT/FK1nC1PrxX8MeQ=)
                          5: 743ABB72997011EAB50D6934C4F9AE02.roa (hash: TgloTHCWPURsO/1k0p40DWKdaGHNBtdJOfoMLcQC4gA=)
                          6: 82C395EE774811F1801EADB45DA30FBC.roa (hash: BQd8XglJvUSBxzaCM0mJw6hZt6pmwUg9idBpdBZ3C/E=)
                          7: 8A8C093A42E311F1B93532028F833773.roa (hash: 9m8Dvq8GVyNZk2cbyrBZleTZzmMEk1mdl6ftuO3mqFA=)
                          8: F47B5B188C5611E792848B4AC4F9AE02.roa (hash: 9rwvDynWMk6qsy3E/KYOqtc0csn9No217jDY1XnUZzc=)
                          9: E0CC1C58235911ECAB7C7661C4F9AE02.roa (hash: tYH203EuDB6n9E6nUVPwIVfHVAXXBv2Io3OA+Ey8sS8=)
                          10: 7BFDDDB8D42E11EB8E13801EC4F9AE02.roa (hash: VtV1xShyMh9sjenS152zbiOl5v/xr19d8+vqjj03D0M=)
                          11: DB3E929E199611EF9EBFBF4AC4F9AE02.roa (hash: yniPMcdgFbwNhplTc+rydNjzQLU8O29V8C25W4mTbeU=)
                          12: 6DBD2412C9EB11EC886A6D51C4F9AE02.roa (hash: X4W8KPzkD6jrY8LiA2LHjxX8s0fpYowcQUXXGe2/Dfo=)
                          13: F3DC1FD08C5611E792848B4AC4F9AE02.roa (hash: j51cLfGITBXR/xee14Rv6rfJpCWZzT3Rfl0VvL2R5/I=)
                          14: F5F86ADA8C5611E792848B4AC4F9AE02.roa (hash: wnYTp3fsOW2HQITJ5FlOwfrkiKlWT5LLwinFPfnjQu0=)
                          15: BE5DA1A0E3BE11EEAEC5E061C4F9AE02.roa (hash: VJCnaf5Klg6jmYuqx2mGsqpPv1Kkhc3IprBxsydE49k=)
                          16: F55175EA8C5611E792848B4AC4F9AE02.roa (hash: kFQioVNwia+/qizEhlyCPhiOpzPpIkRHCfZvLOC7QmI=)
                          17: F688FE388C5611E792848B4AC4F9AE02.roa (hash: t6f1Kosop/CbP7AwXXw0yAnoWx86X0b95L/+s+Yi+WE=)
                          18: 586845003D5B11F1BC7D03E3A9833773.roa (hash: bksTinMhSZQ6iaAs+xQLVJBbYxr1WgrHFBPOHrnAF48=)
                          19: F721F6B08C5611E792848B4AC4F9AE02.roa (hash: 9gIlVUVnVNmYm0bLzGl5b38yoqx/v/vATXeAALoSuAs=)
                          20: 19A3CD9E4B7011EC8E9FCB48C4F9AE02.roa (hash: +ezEBpxkY8f4PY2reVhjPmzVyzhmj21Jd5Qr+MbJDt0=)
                          21: CAC3390AD30E11EB98AEFF45C4F9AE02.roa (hash: sgw4Va5xBAbvxEnA80g+uDGNNw3JilHTbxgmChJswfI=)
                          22: A293EE844BFB11EAADB0780AC4F9AE02.roa (hash: Bf1VexJZ8ePZKh8sXCKZqIgTsDNhulqFPVDnqdnEaj0=)
                          23: 7271CAB217D711EA90BA7F4EC4F9AE02.roa (hash: yO9FNu/9OHp6I+wCsbe7slCX+CdTGzP0ftlr5EH77RY=)
                          24: 62F6493EE3BE11EE933A0461C4F9AE02.roa (hash: 5ldMM2cJXLvn3rFlQhmNWhHj8IBemlnHR9gxFxzEiLw=)
                          25: 543386248C5811E782F42951C4F9AE02.roa (hash: n3uqup7GQBgv1FQz4tcE6zqiYYLPHwkPhVC8sJy/BDw=)
                          26: EEBDFBB88C5611E792848B4AC4F9AE02.roa (hash: 38VxGKNTIqjI7WmYVTAs2Vk4XEsvNHdC+sfnVA/u1Zk=)
                          27: F15AD0CE544E11ED9C5E2F3AC4F9AE02.roa (hash: V0Bxe9pvCdmpHFNAup44+kDyfw/tamlGcA2MYQmUsO0=)
                          28: B4C0B17CC94E11EDB5018458C4F9AE02.roa (hash: v18fC46MYs+2IjS6va5v9tqHDD2ALPl/gY1gvz9Tbm0=)
                          29: B1E3B88C81B511F19B8C01DE60A30FBC.roa (hash: dx7DvWfirCJZBr5eZJEHjm/706Q8/9o4UK2W9LgRjMo=)
                          30: F1475E928C5611E792848B4AC4F9AE02.roa (hash: 31VZpJVWKNF5mab4XZ5JTLuEycfyZELw3YTbEtHVoIE=)
                          31: EF3B21E28C5611E792848B4AC4F9AE02.roa (hash: sL6rlhwT2LpkTZEnGwa+sTT6+sRP4qeJqtLHhVBZMAA=)
                          32: B61774A4D9DF11EFB722C742C4F9AE02.roa (hash: UrzW/ghTReXDIIXXuUNwm0r5S8hfMJ1iOmM4g5cXqO0=)
                          33: C82D6ACC969A11EB9BC1FA1BC4F9AE02.roa (hash: 8hJseycbUR3zK2+zXkoIB6I2ViNeMkJgkdW6VsK7qO0=)
                          34: EFBF37208C5611E792848B4AC4F9AE02.roa (hash: QMEMNFl/Jl1WfdjUzvj9WgadU2H5AGalIKmrTUa6R+g=)
                          35: F04860C28C5611E792848B4AC4F9AE02.roa (hash: t1OURYtTlAtfNdWLrnHxkvZF4FFX+C17Jb19CIwfihg=)
                          36: B6D7E1547EEE11EF8B38A43BC4F9AE02.roa (hash: aRK8QB1JQ1E7tEOryxg9vqmCGo1+++BBG/tSU9uGFOQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl
                          rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10487 (0x28f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFB70, serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
        Validity
            Not Before: Jul 20 15:52:22 2026 GMT
            Not After : Jul 27 15:52:22 2026 GMT
        Subject: CN=6a5e4436-44f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:00:a1:8d:93:7d:47:5b:c6:43:3b:a2:df:4e:
                    80:53:f7:80:d6:3f:81:cf:42:40:5f:1c:98:38:b7:
                    b8:ad:e0:bd:3b:26:c7:6a:e1:59:9b:ae:3d:e4:f7:
                    90:db:28:3f:b4:01:93:8c:2c:6d:b6:3b:af:bc:1e:
                    90:71:db:fa:13:6c:17:8a:6d:d7:51:62:f0:87:97:
                    82:50:3a:f6:bc:9c:63:5b:f2:a1:f4:7d:72:ef:ac:
                    a1:6b:54:c9:d6:50:f5:82:3a:3e:43:12:be:f1:58:
                    85:5a:94:bf:f2:05:f3:32:d8:28:5a:f1:81:59:3c:
                    5b:78:22:32:96:eb:08:6e:d5:94:69:c3:a3:22:3b:
                    28:81:f6:48:ff:8a:1b:a2:26:67:38:c6:47:fe:ef:
                    90:ef:10:68:64:7b:aa:f3:f6:be:5b:66:70:30:e4:
                    0e:ec:37:99:fa:6d:f7:70:50:c1:d1:c1:67:c3:d0:
                    5a:fc:77:4a:6c:c1:2c:3b:fc:cb:8a:e8:ba:84:11:
                    58:03:17:fe:83:fc:75:ed:90:08:6d:19:66:f7:3e:
                    fb:bc:48:66:93:b4:93:e5:a8:e5:e1:4e:f6:04:98:
                    47:27:82:46:a2:51:7a:af:50:1a:22:97:dc:77:d1:
                    eb:72:e6:ba:1d:19:55:70:4f:75:11:9c:26:11:b3:
                    80:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:34:7E:8E:5B:A8:80:5B:2A:20:97:07:D9:BC:6E:3C:8A:15:26:FE
            X509v3 Authority Key Identifier:
                keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:fc:47:f6:5a:f3:ab:4b:66:1a:56:1a:29:67:24:ab:f6:1f:
         76:06:02:7a:1d:b1:8b:c0:a7:fd:33:ba:b3:35:06:ff:46:72:
         6d:b0:a4:32:91:f3:f3:6d:26:7c:a5:4c:bc:fc:57:cf:a8:f5:
         89:2d:25:d3:a7:a5:76:11:12:d6:a9:03:8c:b3:eb:54:8e:5f:
         c5:c3:89:29:03:51:6a:ab:38:f9:90:ef:48:84:84:98:b4:0a:
         4b:89:71:bf:e0:a5:ed:9b:3e:30:b7:1b:e3:5a:1d:ea:a6:e1:
         b3:8b:56:74:66:13:ec:ca:d1:f6:7c:3d:ba:1e:37:50:b4:59:
         2e:ce:23:2e:e8:22:e0:bb:e1:9b:d2:27:f7:d6:7d:f4:8b:b6:
         1e:c6:e5:9f:91:4b:dd:27:84:5b:77:ef:ed:06:e7:94:05:fc:
         3e:4d:83:5f:1a:bb:1f:18:ff:23:f6:5b:3d:13:d3:a2:68:41:
         7b:fb:be:96:d6:df:a7:59:ac:a1:44:34:07:68:59:1c:42:61:
         eb:5c:0b:d4:20:71:40:56:52:41:e0:bd:8f:7e:c4:ba:5f:be:
         b6:07:26:2f:53:0d:b1:51:22:5b:ad:5c:86:4d:56:63:47:ed:
         d8:83:26:d7:8f:9e:9b:a1:eb:09:f2:5f:4c:97:37:da:2a:a7:
         1a:f7:00:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:19:13 2026 by rpki-client