Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.mft
File:                     Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.mft (raw, json)
Hash identifier:          tZk9mj1viFLNUwbmVjfVTskJ3R93sH98EfVs14+4nh0=
Subject key identifier:   51:6A:E1:10:86:96:11:4E:54:37:51:9C:E4:03:5F:33:29:F1:6D:10
Authority key identifier: 5D:EE:16:EF:85:A2:BF:84:DA:D8:87:66:67:59:B1:EC:15:D1:B9:4C
Certificate issuer:       /CN=A91569FB/serialNumber=5DEE16EF85A2BF84DAD887666759B1EC15D1B94C
Certificate serial:       0756
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.mft
Manifest number:          074D
Signing time:             Mon 22 Jun 2026 21:46:29 +0000
Manifest this update:     Mon 22 Jun 2026 21:46:29 +0000
Manifest next update:     Mon 29 Jun 2026 21:46:29 +0000
Files and hashes:         1: Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.crl (hash: SV6v8xpb/kFMiQu7tQUdXf6zqasZrgFil2170PLkmRA=)
                          2: 154E7E02762211EBA80A6D61C4F9AE02.roa (hash: DrcQ4+at25jETEyU0KX/ZT+jVx3qSzOclZqMeapZnwk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.crl
                          rsync://rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 21:46:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1878 (0x756)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91569FB, serialNumber=5DEE16EF85A2BF84DAD887666759B1EC15D1B94C
        Validity
            Not Before: Jun 22 21:46:29 2026 GMT
            Not After : Jun 29 21:46:29 2026 GMT
        Subject: CN=6a39ad35-f944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d8:84:be:47:ec:76:7b:38:29:d1:36:d5:d5:
                    0d:85:7e:c7:52:ab:80:fc:a9:ea:6f:df:6d:32:3c:
                    63:a9:b3:dd:8c:ef:13:e5:2c:42:b3:c9:bf:78:cd:
                    95:ee:fc:ac:71:ee:8a:d8:d7:47:51:3f:d7:71:36:
                    3e:ba:9a:e1:2b:b0:7b:80:11:24:fc:f9:25:2d:96:
                    0e:3d:06:dc:9e:2d:e6:9e:98:c2:71:4f:f4:e1:c4:
                    6a:90:ea:71:a0:a7:39:43:ee:22:b1:7a:7f:01:8a:
                    24:cb:8e:5e:2a:68:14:ab:73:0c:24:05:69:6d:e1:
                    98:ed:5b:1d:9e:dd:00:dc:d7:42:62:94:ca:d2:2e:
                    f5:d3:be:33:c9:bf:bc:df:c5:c2:1c:4d:20:b7:9a:
                    3b:e1:fe:98:2c:73:f0:2b:ac:7f:4b:a8:ad:45:ea:
                    df:b1:35:a9:61:33:b5:1f:77:d4:fc:4b:04:4d:4e:
                    8c:68:38:97:17:af:a2:71:f0:02:54:60:1b:a9:02:
                    bf:56:55:01:d4:e1:b5:49:17:de:5a:fa:d1:22:3f:
                    44:f8:59:73:80:49:b4:d6:39:a9:eb:d6:d1:d9:b3:
                    d5:1e:b3:57:00:fe:b5:3f:ce:5c:42:2d:66:3f:7c:
                    7d:17:be:e6:45:5a:83:3b:7e:5b:11:80:23:2b:0e:
                    71:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:6A:E1:10:86:96:11:4E:54:37:51:9C:E4:03:5F:33:29:F1:6D:10
            X509v3 Authority Key Identifier:
                keyid:5D:EE:16:EF:85:A2:BF:84:DA:D8:87:66:67:59:B1:EC:15:D1:B9:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:6f:23:e5:3d:73:af:32:84:c7:7c:be:da:58:5a:b6:a6:1e:
         33:09:fd:c7:40:46:62:da:51:50:ff:ff:82:af:48:ea:04:d5:
         c8:eb:4d:08:c6:5e:af:44:00:49:d8:f4:95:99:ec:41:6e:ce:
         67:03:24:f9:69:5b:49:d0:3b:0d:1f:15:0b:c9:69:61:4c:09:
         4b:a7:95:b0:89:cb:54:20:a0:b9:7c:02:6f:41:2a:5f:8f:c9:
         5a:90:ed:9d:4a:48:9a:f1:29:b4:ca:c2:1d:14:d1:8d:2b:92:
         29:2f:2f:dd:51:da:dc:6b:7b:9a:1c:56:7f:5b:de:f1:d8:48:
         17:aa:05:9d:f8:0d:54:26:c8:2b:54:c6:9a:c3:9a:38:be:31:
         d9:d4:28:db:f4:fd:6d:74:43:37:51:b4:db:f3:0b:f1:6e:0e:
         5c:91:0b:c9:46:3c:ed:3f:76:25:ea:be:84:57:ef:b2:bf:9d:
         b6:d2:07:b8:5a:76:7a:f3:ab:b9:45:ea:cf:4c:2b:44:c8:f1:
         e2:64:62:cb:8f:2c:b2:9f:7e:d8:e4:47:49:bc:59:c2:1a:1d:
         ad:d8:61:c5:b9:31:36:c5:cd:65:2a:3e:96:55:03:ed:bc:19:
         7c:dc:ab:4e:39:3f:84:b6:e4:cd:20:35:72:fe:84:ae:62:43:
         7d:d7:1d:d4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB1YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTY5RkIxMTAvBgNVBAUTKDVERUUxNkVGODVBMkJGODREQUQ4ODc2NjY3NTlCMUVD
MTVEMUI5NEMwHhcNMjYwNjIyMjE0NjI5WhcNMjYwNjI5MjE0NjI5WjAYMRYwFAYD
VQQDEw02YTM5YWQzNS1mOTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsdiEvkfsdns4KdE21dUNhX7HUquA/Knqb99tMjxjqbPdjO8T5SxCs8m/eM2V
7vysce6K2NdHUT/XcTY+uprhK7B7gBEk/PklLZYOPQbcni3mnpjCcU/04cRqkOpx
oKc5Q+4isXp/AYoky45eKmgUq3MMJAVpbeGY7Vsdnt0A3NdCYpTK0i71074zyb+8
38XCHE0gt5o74f6YLHPwK6x/S6itRerfsTWpYTO1H3fU/EsETU6MaDiXF6+icfAC
VGAbqQK/VlUB1OG1SRfeWvrRIj9E+FlzgEm01jmp69bR2bPVHrNXAP61P85cQi1m
P3x9F77mRVqDO35bEYAjKw5x6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFFq4RCG
lhFOVDdRnOQDXzMp8W0QMB8GA1UdIwQYMBaAFF3uFu+For+E2tiHZmdZsewV0blM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjlGQi84REUxRENEQTc2
MjAxMUVCQkM1NTNDNjBDNEY5QUUwMi9YZTRXNzRXaXY0VGEySWRtWjFteDdCWFJ1
VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hlNFc3NFdpdjRUYTJJZG1aMW14N0JYUnVVdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NjlGQi84REUxRENEQTc2MjAxMUVCQkM1NTNDNjBDNEY5QUUwMi9YZTRXNzRXaXY0
VGEySWRtWjFteDdCWFJ1VXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAwG8j5T1zrzKEx3y+2lhatqYeMwn9x0BGYtpRUP//gq9I6gTVyOtNCMZer0QA
Sdj0lZnsQW7OZwMk+WlbSdA7DR8VC8lpYUwJS6eVsInLVCCguXwCb0EqX4/JWpDt
nUpImvEptMrCHRTRjSuSKS8v3VHa3Gt7mhxWf1ve8dhIF6oFnfgNVCbIK1TGmsOa
OL4x2dQo2/T9bXRDN1G02/ML8W4OXJELyUY87T92Jeq+hFfvsr+dttIHuFp2evOr
uUXqz0wrRMjx4mRiy48ssp9+2ORHSbxZwhodrdhhxbkxNsXNZSo+llUD7bwZfNyr
Tjk/hLbkzSA1cv6ErmJDfdcd1A==
-----END CERTIFICATE-----
Generated at Wed Jun 24 15:29:55 2026 by rpki-client