Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A689/8E8C75567A9711F1BA4F8F545DA30FBC/xfPmCWA9MLk6tGt4klx63Q8s8hI.mft
File:                     xfPmCWA9MLk6tGt4klx63Q8s8hI.mft (raw, json)
Hash identifier:          qBZQvsyr2JxW3QFNv8e/8h+vAqlxybFj7cMM1QvazYs=
Subject key identifier:   63:1A:31:D6:8E:88:52:7C:AB:C2:9F:8B:CE:C5:73:CC:2F:74:8B:40
Authority key identifier: C5:F3:E6:09:60:3D:30:B9:3A:B4:6B:78:92:5C:7A:DD:0F:2C:F2:12
Certificate issuer:       /CN=A917A689/serialNumber=C5F3E609603D30B93AB46B78925C7ADD0F2CF212
Certificate serial:       06
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xfPmCWA9MLk6tGt4klx63Q8s8hI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A689/8E8C75567A9711F1BA4F8F545DA30FBC/xfPmCWA9MLk6tGt4klx63Q8s8hI.mft
Manifest number:          06
Signing time:             Fri 17 Jul 2026 10:33:13 +0000
Manifest this update:     Fri 17 Jul 2026 10:33:13 +0000
Manifest next update:     Fri 24 Jul 2026 10:33:13 +0000
Files and hashes:         1: xfPmCWA9MLk6tGt4klx63Q8s8hI.crl (hash: KRln0PfvAZ064wcjlo+ECN3zpRTd79FU2wPARqJ+pW0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A689/8E8C75567A9711F1BA4F8F545DA30FBC/xfPmCWA9MLk6tGt4klx63Q8s8hI.crl
                          rsync://rpki.apnic.net/member_repository/A917A689/8E8C75567A9711F1BA4F8F545DA30FBC/xfPmCWA9MLk6tGt4klx63Q8s8hI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xfPmCWA9MLk6tGt4klx63Q8s8hI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 10:33:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A689, serialNumber=C5F3E609603D30B93AB46B78925C7ADD0F2CF212
        Validity
            Not Before: Jul 17 10:33:13 2026 GMT
            Not After : Jul 24 10:33:13 2026 GMT
        Subject: CN=6a5a04e9-7bbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9f:c2:27:f4:6e:72:9b:01:9b:45:51:c4:4f:
                    b9:6b:88:93:00:3e:b3:22:b0:be:e7:bc:1f:fb:38:
                    9f:d0:29:3f:2b:16:50:d0:f9:7c:78:d6:6a:32:39:
                    c1:54:e8:a0:74:8d:cb:ac:ef:7b:93:12:46:81:b7:
                    90:89:00:cf:2b:ea:6c:eb:ef:ae:62:93:98:ac:51:
                    16:15:48:b4:d3:e3:bf:b4:61:1b:54:eb:61:1d:84:
                    0f:cc:30:48:22:13:f8:e8:9c:b7:4f:79:17:59:dc:
                    cd:c8:58:81:06:c8:a3:f1:a9:97:b4:d0:d1:b0:b3:
                    eb:92:69:af:14:6b:4b:62:1a:cb:05:51:6c:f1:95:
                    df:0e:02:31:7d:3b:4d:72:e0:2c:16:b5:d2:56:ba:
                    b5:cb:71:60:51:cb:b7:c5:82:1d:cc:c8:66:d6:ef:
                    86:ad:d0:97:fe:64:4c:17:c8:e8:b7:2b:ee:eb:de:
                    c5:cc:31:ad:75:c9:e9:03:5f:4b:6c:24:13:d5:73:
                    01:ef:08:8d:5d:e9:41:b1:c1:e3:d1:9e:ae:8d:db:
                    73:fa:3c:77:1c:f4:10:d9:ac:17:8b:32:e2:4a:05:
                    18:64:6f:a0:62:3a:a0:70:ca:07:8d:9b:17:ca:11:
                    6c:2e:13:1f:66:67:48:96:80:da:64:be:ce:32:e8:
                    11:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:1A:31:D6:8E:88:52:7C:AB:C2:9F:8B:CE:C5:73:CC:2F:74:8B:40
            X509v3 Authority Key Identifier:
                keyid:C5:F3:E6:09:60:3D:30:B9:3A:B4:6B:78:92:5C:7A:DD:0F:2C:F2:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A689/8E8C75567A9711F1BA4F8F545DA30FBC/xfPmCWA9MLk6tGt4klx63Q8s8hI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xfPmCWA9MLk6tGt4klx63Q8s8hI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A689/8E8C75567A9711F1BA4F8F545DA30FBC/xfPmCWA9MLk6tGt4klx63Q8s8hI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:84:47:36:1f:ae:72:69:dc:95:e7:f0:35:18:1b:69:0a:90:
         e4:6e:bb:3c:89:ae:c1:cb:bc:a9:e8:eb:36:8f:61:46:26:cc:
         1b:1a:39:7f:99:76:c5:04:1f:3a:e0:39:34:0e:13:a0:a8:5a:
         b0:14:2d:a8:04:7d:e8:51:01:c1:e7:82:4e:e2:85:1e:9f:9f:
         04:fb:e9:ae:3a:22:30:3c:56:7b:38:23:3a:e6:5e:72:a7:29:
         d3:6f:52:1e:1f:87:2b:16:01:53:f9:88:f8:a3:e8:eb:ca:e2:
         3f:7a:b8:d6:9a:f0:60:b2:ed:b5:ab:77:c7:2c:f2:4c:e3:ba:
         9e:fa:29:7c:6d:ea:74:8f:3e:f1:d1:c9:35:16:d5:b9:37:c8:
         27:13:08:6c:4a:d6:df:88:17:1c:7e:0e:a1:ae:cd:2c:fc:02:
         c5:b6:c7:8f:bb:65:e4:63:93:90:7b:5c:82:75:1b:15:31:86:
         26:1a:64:2f:4c:fa:81:36:f7:1c:55:17:11:9f:e4:7c:10:81:
         4d:24:52:ac:5e:ac:c1:3d:97:88:a8:73:f3:4a:39:37:29:f4:
         65:a4:a0:fa:79:a2:6f:b1:be:be:c8:f8:23:ac:25:f7:f9:69:
         40:46:c1:44:8b:ee:c7:07:b4:bc:5a:63:0a:33:e2:e8:cc:7c:
         d3:8c:4b:df
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
QTY4OTExMC8GA1UEBRMoQzVGM0U2MDk2MDNEMzBCOTNBQjQ2Qjc4OTI1QzdBREQw
RjJDRjIxMjAeFw0yNjA3MTcxMDMzMTNaFw0yNjA3MjQxMDMzMTNaMBgxFjAUBgNV
BAMTDTZhNWEwNGU5LTdiYmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCzn8In9G5ymwGbRVHET7lriJMAPrMisL7nvB/7OJ/QKT8rFlDQ+Xx41moyOcFU
6KB0jcus73uTEkaBt5CJAM8r6mzr765ik5isURYVSLTT47+0YRtU62EdhA/MMEgi
E/jonLdPeRdZ3M3IWIEGyKPxqZe00NGws+uSaa8Ua0tiGssFUWzxld8OAjF9O01y
4CwWtdJWurXLcWBRy7fFgh3MyGbW74at0Jf+ZEwXyOi3K+7r3sXMMa11yekDX0ts
JBPVcwHvCI1d6UGxwePRnq6N23P6PHcc9BDZrBeLMuJKBRhkb6BiOqBwygeNmxfK
EWwuEx9mZ0iWgNpkvs4y6BEPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUYxox1o6I
Unyrwp+LzsVzzC90i0AwHwYDVR0jBBgwFoAUxfPmCWA9MLk6tGt4klx63Q8s8hIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBNjg5LzhFOEM3NTU2N0E5
NzExRjFCQTRGOEY1NDVEQTMwRkJDL3hmUG1DV0E5TUxrNnRHdDRrbHg2M1E4czho
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIveGZQbUNXQTlNTGs2dEd0NGtseDYzUThzOGhJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdB
Njg5LzhFOEM3NTU2N0E5NzExRjFCQTRGOEY1NDVEQTMwRkJDL3hmUG1DV0E5TUxr
NnRHdDRrbHg2M1E4czhoSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA/hEc2H65yadyV5/A1GBtpCpDkbrs8ia7By7yp6Os2j2FGJswbGjl/mXbFBB86
4Dk0DhOgqFqwFC2oBH3oUQHB54JO4oUen58E++muOiIwPFZ7OCM65l5ypynTb1Ie
H4crFgFT+Yj4o+jryuI/erjWmvBgsu21q3fHLPJM47qe+il8bep0jz7x0ck1FtW5
N8gnEwhsStbfiBccfg6hrs0s/ALFtsePu2XkY5OQe1yCdRsVMYYmGmQvTPqBNvcc
VRcRn+R8EIFNJFKsXqzBPZeIqHPzSjk3KfRlpKD6eaJvsb6+yPgjrCX3+WlARsFE
i+7HB7S8WmMKM+LozHzTjEvf
-----END CERTIFICATE-----
Generated at Sat Jul 18 04:29:00 2026 by rpki-client