Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft
File:                     cXLtDPRHBezrGWHROgV-z_MHyG8.mft (raw, json)
Hash identifier:          yawBi87qdLG2417kMcsgTb37FcD8s4lJ8sgjWf+xJ6c=
Subject key identifier:   68:12:39:1C:A0:90:8B:22:05:36:CC:F3:54:00:21:FA:5D:3C:F8:81
Authority key identifier: 71:72:ED:0C:F4:47:05:EC:EB:19:61:D1:3A:05:7E:CF:F3:07:C8:6F
Certificate issuer:       /CN=A913B7C7/serialNumber=7172ED0CF44705ECEB1961D13A057ECFF307C86F
Certificate serial:       014E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft
Manifest number:          013E
Signing time:             Fri 17 Jul 2026 06:32:58 +0000
Manifest this update:     Fri 17 Jul 2026 06:32:57 +0000
Manifest next update:     Fri 24 Jul 2026 06:32:57 +0000
Files and hashes:         1: cXLtDPRHBezrGWHROgV-z_MHyG8.crl (hash: E7avW7xyDZ4DsTHCy2K1LDGw/kwgPkzeS1+OcCW8ovc=)
                          2: 1A1C5AF89D9C11EFAAA9FA6AC4F9AE02.roa (hash: A90aJCYjIr3J34Qclm1ssR9ehYnkyd4nyWXLA2mBndw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.crl
                          rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 06:32:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 334 (0x14e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B7C7, serialNumber=7172ED0CF44705ECEB1961D13A057ECFF307C86F
        Validity
            Not Before: Jul 17 06:32:57 2026 GMT
            Not After : Jul 24 06:32:57 2026 GMT
        Subject: CN=6a59cc9a-6d2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2f:9d:a0:da:00:70:79:e6:71:5e:e8:cc:5a:
                    dc:be:96:84:f6:94:22:9e:a4:b5:c9:1c:a1:43:f6:
                    ec:fc:7e:96:f6:18:c6:f0:90:52:4d:73:95:ff:81:
                    4c:dd:32:a7:45:88:33:51:87:b0:44:1e:ef:e1:b8:
                    a1:7e:53:28:48:31:46:b5:ba:e5:23:e6:07:4b:4f:
                    74:f7:39:0b:d8:79:76:13:35:cd:d5:bb:49:f1:74:
                    41:f9:be:96:c6:4d:49:65:5f:a8:a5:17:61:8e:b5:
                    82:7f:14:3b:45:4f:cd:5c:f5:f6:a9:0e:04:7b:1f:
                    11:c9:88:15:8b:e6:51:0c:09:f1:b4:b9:73:33:fe:
                    49:43:34:e2:e4:27:ba:f7:8d:fa:13:1a:bb:69:5c:
                    7a:6e:e3:86:ef:da:17:87:29:fb:ca:33:20:fa:83:
                    5a:d9:c6:8a:52:39:e8:75:3c:7e:da:f9:20:be:2f:
                    fe:c3:88:4e:16:02:7a:ef:f4:80:19:0d:0b:2f:08:
                    41:09:49:9c:51:6f:f7:f7:4e:ea:04:ad:99:a0:cd:
                    de:e2:82:82:2e:2b:d8:05:db:e0:81:ca:ee:65:c0:
                    4f:b2:ac:c6:52:5e:4a:c9:88:32:d7:60:9d:e0:4f:
                    55:79:6a:65:ca:79:4a:c8:27:01:8c:9f:db:cc:e1:
                    5f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:12:39:1C:A0:90:8B:22:05:36:CC:F3:54:00:21:FA:5D:3C:F8:81
            X509v3 Authority Key Identifier:
                keyid:71:72:ED:0C:F4:47:05:EC:EB:19:61:D1:3A:05:7E:CF:F3:07:C8:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:aa:63:00:59:39:8c:c9:6a:f5:be:62:28:f2:14:60:40:8b:
         fe:02:0b:cf:cd:80:ab:0f:4c:79:2b:46:ab:ac:1a:52:c8:8f:
         1b:2f:5c:0f:07:23:d9:66:6a:39:c0:9f:b2:4f:7e:7b:6c:ba:
         d8:42:90:c3:8f:f2:17:40:31:c1:36:4a:9b:54:23:7b:20:64:
         43:84:4e:ce:6c:4b:7e:e5:6e:56:3f:71:7e:61:bb:80:9b:4b:
         94:a5:be:8c:85:72:d9:4e:77:cb:ef:5d:12:fc:d7:77:0f:5a:
         de:f6:73:3a:8c:ab:6f:b4:b5:ca:ab:eb:90:96:02:f2:2f:9c:
         5a:8d:70:ce:4b:e0:50:71:5b:76:08:08:2a:d2:66:2a:7f:fd:
         ce:05:f5:a1:52:cd:83:b6:30:a7:fa:90:c2:be:35:82:41:6c:
         8f:36:59:f7:b5:e1:30:4b:b4:63:5c:cf:5b:b9:46:28:8c:52:
         80:48:bc:24:e8:62:70:75:bc:81:83:98:67:e6:72:8f:73:ae:
         bb:3d:2e:5c:ea:c8:4b:ca:fa:eb:a4:f2:6e:ec:91:cf:61:1c:
         c6:7e:75:ea:4e:fb:22:1f:1f:8a:b9:7d:c5:6b:be:53:83:0a:
         d6:34:2a:0a:ac:c4:ea:33:64:e5:69:10:6b:df:f2:5c:83:bb:
         c3:31:de:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:13:38 2026 by rpki-client