Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft
File:                     XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft (raw, json)
Hash identifier:          clr4hpiQrB0loSx+PFaI0HUfGhPkskBLOMwkNhLOLGk=
Subject key identifier:   39:94:9F:81:9D:09:FA:55:4F:7C:CE:67:85:D5:54:4C:8B:3D:BF:CB
Authority key identifier: 5C:AF:E8:A8:3F:09:0A:E1:46:A4:03:AF:A5:57:C5:CF:AA:88:CD:84
Certificate issuer:       /CN=A912FCBB/serialNumber=5CAFE8A83F090AE146A403AFA557C5CFAA88CD84
Certificate serial:       0172
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft
Manifest number:          016E
Signing time:             Fri 17 Jul 2026 05:49:53 +0000
Manifest this update:     Fri 17 Jul 2026 05:49:52 +0000
Manifest next update:     Fri 24 Jul 2026 05:49:52 +0000
Files and hashes:         1: XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl (hash: 2DqSOkBc0+RRYH0ZKWnUPDe0ZrSqB+vxYCl4sMEEPAQ=)
                          2: E1A8E22A9E9611F0BCFAF76AC4F9AE02.roa (hash: ittpt4A7ySbEBupt94ZQJgIOH62PTtCbBsA64tVVFU4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl
                          rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 05:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 370 (0x172)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FCBB, serialNumber=5CAFE8A83F090AE146A403AFA557C5CFAA88CD84
        Validity
            Not Before: Jul 17 05:49:52 2026 GMT
            Not After : Jul 24 05:49:52 2026 GMT
        Subject: CN=6a59c281-951f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:20:6a:97:03:43:a6:b4:73:13:0a:19:15:8f:
                    6b:fc:b0:43:07:8d:0b:d4:98:a1:25:e5:83:11:92:
                    ab:b6:ab:8c:0b:c8:b3:be:73:00:71:05:fb:76:98:
                    de:f1:52:f8:36:da:64:5b:89:7a:94:a4:2a:5b:4e:
                    57:af:1c:65:1f:ab:86:82:94:c0:18:42:e0:1b:fe:
                    83:1d:92:cc:e9:31:ba:1f:39:89:32:23:14:99:40:
                    74:6f:d5:16:32:ad:34:3f:a2:d5:d8:e8:ed:78:fb:
                    85:ec:1c:62:bf:1a:cb:a4:da:64:8b:0a:8c:f8:d4:
                    9f:9f:ed:1d:cd:8c:21:13:4c:d5:0f:4a:90:96:5c:
                    ac:a2:88:e1:51:88:fb:30:53:c4:0a:c4:90:a1:dd:
                    8f:c2:59:11:e0:90:7e:7f:c5:86:e1:7c:23:0f:16:
                    d3:c0:01:6b:6c:b3:73:71:9e:3b:53:6c:3b:51:69:
                    e2:6c:0f:d1:4b:61:ff:53:d8:54:04:d2:fc:2c:b1:
                    ff:e2:85:c8:85:1a:63:71:07:08:7b:4d:8b:c0:de:
                    cd:34:88:b6:6e:dd:b4:99:33:15:6a:fd:e9:18:db:
                    25:ee:9a:fa:b3:f9:ee:fb:82:96:9a:25:b2:bc:2d:
                    4b:5b:bf:1b:d7:f2:f1:6d:b5:03:1f:e8:f4:2e:fa:
                    52:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:94:9F:81:9D:09:FA:55:4F:7C:CE:67:85:D5:54:4C:8B:3D:BF:CB
            X509v3 Authority Key Identifier:
                keyid:5C:AF:E8:A8:3F:09:0A:E1:46:A4:03:AF:A5:57:C5:CF:AA:88:CD:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:25:08:9a:9f:0c:4c:7f:51:87:1e:36:08:9a:f4:25:47:92:
         7e:33:c9:60:95:62:b0:37:89:c3:f3:34:9b:65:80:08:11:43:
         c8:9d:c0:8d:70:04:ac:aa:f4:e1:60:62:cf:d6:2e:25:42:48:
         6e:56:c7:f2:ed:c6:6d:73:b2:3f:26:f8:c2:03:95:32:46:3f:
         fb:04:05:59:c6:3f:28:18:2f:fb:4d:01:7a:b5:47:e6:a4:cd:
         6f:35:ef:65:33:f4:16:4e:2c:77:cb:bc:91:f7:f7:7c:e6:ef:
         ed:dc:20:c0:5c:20:8a:71:75:d1:f6:1d:3f:1d:c6:49:85:c7:
         2c:5d:55:3a:a3:c2:0f:b0:3c:c1:79:c9:bf:e0:41:f8:19:9b:
         22:4d:7d:b8:4c:1a:04:c4:3e:f2:9c:d5:5b:c3:40:b4:01:45:
         90:ed:c3:63:27:4b:fb:6e:29:f7:92:92:e3:34:4e:a1:67:d0:
         77:31:62:24:c8:8c:de:d0:0d:bb:59:e9:1a:69:49:1b:14:2b:
         84:d1:a0:b3:46:72:0c:8a:12:5b:3b:0f:9f:3b:65:05:76:d5:
         e0:a8:df:ba:87:19:1b:23:92:f3:2d:25:87:e2:b9:7f:cf:37:
         c4:b1:4c:28:28:b8:67:f1:3f:06:65:d2:0a:f0:46:a9:8e:3d:
         eb:8a:1c:fa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkZDQkIxMTAvBgNVBAUTKDVDQUZFOEE4M0YwOTBBRTE0NkE0MDNBRkE1NTdDNUNG
QUE4OENEODQwHhcNMjYwNzE3MDU0OTUyWhcNMjYwNzI0MDU0OTUyWjAYMRYwFAYD
VQQDEw02YTU5YzI4MS05NTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtyBqlwNDprRzEwoZFY9r/LBDB40L1JihJeWDEZKrtquMC8izvnMAcQX7dpje
8VL4NtpkW4l6lKQqW05XrxxlH6uGgpTAGELgG/6DHZLM6TG6HzmJMiMUmUB0b9UW
Mq00P6LV2OjtePuF7BxivxrLpNpkiwqM+NSfn+0dzYwhE0zVD0qQllysoojhUYj7
MFPECsSQod2PwlkR4JB+f8WG4XwjDxbTwAFrbLNzcZ47U2w7UWnibA/RS2H/U9hU
BNL8LLH/4oXIhRpjcQcIe02LwN7NNIi2bt20mTMVav3pGNsl7pr6s/nu+4KWmiWy
vC1LW78b1/LxbbUDH+j0LvpS/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDmUn4Gd
CfpVT3zOZ4XVVEyLPb/LMB8GA1UdIwQYMBaAFFyv6Kg/CQrhRqQDr6VXxc+qiM2E
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkNCQi81Q0FDNjA0ODUz
MEYxMUVGOTlDODhEMEZDNEY5QUUwMi9YS19vcUQ4SkN1RkdwQU92cFZmRno2cUl6
WVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hLX29xRDhKQ3VGR3BBT3ZwVmZGejZxSXpZUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RkNCQi81Q0FDNjA0ODUzMEYxMUVGOTlDODhEMEZDNEY5QUUwMi9YS19vcUQ4SkN1
RkdwQU92cFZmRno2cUl6WVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIyUImp8MTH9Rhx42CJr0JUeSfjPJYJVisDeJw/M0m2WACBFDyJ3AjXAErKr0
4WBiz9YuJUJIblbH8u3GbXOyPyb4wgOVMkY/+wQFWcY/KBgv+00BerVH5qTNbzXv
ZTP0Fk4sd8u8kff3fObv7dwgwFwginF10fYdPx3GSYXHLF1VOqPCD7A8wXnJv+BB
+BmbIk19uEwaBMQ+8pzVW8NAtAFFkO3DYydL+24p95KS4zROoWfQdzFiJMiM3tAN
u1npGmlJGxQrhNGgs0ZyDIoSWzsPnztlBXbV4KjfuocZGyOS8y0lh+K5f883xLFM
KCi4Z/E/BmXSCvBGqY4964oc+g==
-----END CERTIFICATE-----
Generated at Sat Jul 18 07:21:57 2026 by rpki-client