Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D488/8D733ACAC11E11F08DDE8787C4F9AE02/xDyP7aRVEFkimLW5U-J5-6zkWmQ.mft
File:                     xDyP7aRVEFkimLW5U-J5-6zkWmQ.mft (raw, json)
Hash identifier:          8LjEd5RFeRgLCMJPipeWgmfCAygxrosznE3OKKUGu7c=
Subject key identifier:   E5:7B:86:B4:97:23:A2:E9:6A:EB:9C:9C:3A:5D:FF:F1:BE:7E:D5:27
Authority key identifier: C4:3C:8F:ED:A4:55:10:59:22:98:B5:B9:53:E2:79:FB:AC:E4:5A:64
Certificate issuer:       /CN=A917D488/serialNumber=C43C8FEDA45510592298B5B953E279FBACE45A64
Certificate serial:       79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDyP7aRVEFkimLW5U-J5-6zkWmQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D488/8D733ACAC11E11F08DDE8787C4F9AE02/xDyP7aRVEFkimLW5U-J5-6zkWmQ.mft
Manifest number:          77
Signing time:             Fri 03 Jul 2026 08:35:59 +0000
Manifest this update:     Fri 03 Jul 2026 08:35:58 +0000
Manifest next update:     Fri 10 Jul 2026 08:35:58 +0000
Files and hashes:         1: xDyP7aRVEFkimLW5U-J5-6zkWmQ.crl (hash: L7hm8cZxNlEcVOZF26Norb1psBVycmyxRfjX3iWo0y4=)
                          2: 038304DEC11F11F0A9F08209C4F9AE02.roa (hash: Y37EvjA3svHQwyGXd0a+TXPBLOFhRYmTcbPi/KdjSGw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D488/8D733ACAC11E11F08DDE8787C4F9AE02/xDyP7aRVEFkimLW5U-J5-6zkWmQ.crl
                          rsync://rpki.apnic.net/member_repository/A917D488/8D733ACAC11E11F08DDE8787C4F9AE02/xDyP7aRVEFkimLW5U-J5-6zkWmQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDyP7aRVEFkimLW5U-J5-6zkWmQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 Jul 2026 08:35:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121 (0x79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D488, serialNumber=C43C8FEDA45510592298B5B953E279FBACE45A64
        Validity
            Not Before: Jul  3 08:35:58 2026 GMT
            Not After : Jul 10 08:35:58 2026 GMT
        Subject: CN=6a47746f-ec88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:35:b7:f8:c4:fa:a4:19:51:46:64:79:b7:be:
                    cd:e0:5b:65:a7:51:ac:59:78:d0:c2:30:d7:89:91:
                    db:02:f4:68:b7:d7:3a:17:03:61:ec:f7:b6:9b:f5:
                    71:2e:c4:9e:62:14:a9:dc:c3:66:6a:0e:2f:58:e5:
                    a1:c2:b4:d2:19:50:bb:64:db:01:eb:cd:7c:7d:f9:
                    87:86:69:99:9b:9a:33:d9:23:e7:4d:dc:58:59:3d:
                    5d:4e:b0:d6:eb:e9:97:bf:a4:0d:a5:3c:7d:54:cb:
                    57:7f:cf:85:54:26:78:2b:cc:d5:85:e6:2c:3e:ee:
                    71:c0:68:ca:35:ff:4f:af:3c:e0:6e:6d:5d:b7:32:
                    67:e9:3a:50:69:9e:2d:72:ec:9c:49:82:34:ad:93:
                    30:5f:fd:b0:18:2e:be:e9:8b:cd:97:12:c8:77:14:
                    83:1a:97:86:fe:5a:a7:5a:88:6a:64:2a:5b:bc:95:
                    27:5d:b4:f6:6e:36:fa:56:88:fb:36:be:b8:0f:36:
                    c5:ae:33:c7:7e:05:00:fa:d4:a2:0a:b3:04:9d:55:
                    e0:be:ce:97:88:8f:76:e5:41:b3:11:92:09:3a:0d:
                    61:1e:38:ea:ac:fa:e0:58:81:b1:40:ac:97:a7:40:
                    8c:ce:6f:0a:1f:6a:5a:bf:42:da:d3:34:90:e7:2a:
                    57:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:7B:86:B4:97:23:A2:E9:6A:EB:9C:9C:3A:5D:FF:F1:BE:7E:D5:27
            X509v3 Authority Key Identifier:
                keyid:C4:3C:8F:ED:A4:55:10:59:22:98:B5:B9:53:E2:79:FB:AC:E4:5A:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D488/8D733ACAC11E11F08DDE8787C4F9AE02/xDyP7aRVEFkimLW5U-J5-6zkWmQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDyP7aRVEFkimLW5U-J5-6zkWmQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D488/8D733ACAC11E11F08DDE8787C4F9AE02/xDyP7aRVEFkimLW5U-J5-6zkWmQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:cc:2e:3b:1b:c9:5a:aa:a5:2b:34:ac:64:9e:07:1a:2e:2f:
         e0:fe:f9:a8:d3:fd:79:cc:54:e4:6f:e4:6f:ac:aa:53:d7:15:
         d9:67:98:d2:6e:ad:f8:6f:09:48:ad:fb:f7:51:60:63:13:e7:
         4d:6c:50:30:b3:2c:52:a5:e3:14:7f:07:70:d1:8f:3b:91:27:
         02:b5:c3:51:58:18:9c:1f:81:41:d3:69:ce:08:ff:93:78:0f:
         6a:5f:c7:fd:1c:5d:d6:c2:a8:61:b6:93:c2:21:fb:e8:ea:5c:
         64:a3:67:a3:65:cb:3b:77:37:63:ce:bf:a4:a2:93:6d:04:69:
         dd:54:2f:55:84:38:57:9c:40:a9:a3:37:b8:cc:48:bf:e0:a7:
         ff:99:52:96:40:6f:6e:b7:33:68:e7:09:56:13:b1:d5:5b:53:
         16:91:f7:0c:4c:f9:1a:6a:1a:5d:d3:46:50:74:5b:5c:6b:a1:
         59:a8:70:2b:15:02:3f:3d:ad:09:b8:fa:53:f3:4a:2b:03:92:
         b6:5f:2d:bd:69:05:dc:a7:4b:70:9b:08:28:ef:82:87:7f:5c:
         36:bb:a7:65:5e:95:1b:1b:30:8a:f0:a9:c8:b6:99:2c:5d:d8:
         35:67:f5:a4:82:2d:5e:9d:ff:cf:6a:1b:9a:23:41:0d:5a:4d:
         98:e6:bc:5f
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
RDQ4ODExMC8GA1UEBRMoQzQzQzhGRURBNDU1MTA1OTIyOThCNUI5NTNFMjc5RkJB
Q0U0NUE2NDAeFw0yNjA3MDMwODM1NThaFw0yNjA3MTAwODM1NThaMBgxFjAUBgNV
BAMTDTZhNDc3NDZmLWVjODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDANbf4xPqkGVFGZHm3vs3gW2WnUaxZeNDCMNeJkdsC9Gi31zoXA2Hs97ab9XEu
xJ5iFKncw2ZqDi9Y5aHCtNIZULtk2wHrzXx9+YeGaZmbmjPZI+dN3FhZPV1OsNbr
6Ze/pA2lPH1Uy1d/z4VUJngrzNWF5iw+7nHAaMo1/0+vPOBubV23MmfpOlBpni1y
7JxJgjStkzBf/bAYLr7pi82XEsh3FIMal4b+WqdaiGpkKlu8lSddtPZuNvpWiPs2
vrgPNsWuM8d+BQD61KIKswSdVeC+zpeIj3blQbMRkgk6DWEeOOqs+uBYgbFArJen
QIzObwofalq/QtrTNJDnKlehAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU5XuGtJcj
oulq65ycOl3/8b5+1ScwHwYDVR0jBBgwFoAUxDyP7aRVEFkimLW5U+J5+6zkWmQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdENDg4LzhENzMzQUNBQzEx
RTExRjA4RERFODc4N0M0RjlBRTAyL3hEeVA3YVJWRUZraW1MVzVVLUo1LTZ6a1dt
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIveER5UDdhUlZFRmtpbUxXNVUtSjUtNnprV21RLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdE
NDg4LzhENzMzQUNBQzExRTExRjA4RERFODc4N0M0RjlBRTAyL3hEeVA3YVJWRUZr
aW1MVzVVLUo1LTZ6a1dtUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCzzC47G8laqqUrNKxkngcaLi/g/vmo0/15zFTkb+RvrKpT1xXZZ5jSbq34bwlI
rfv3UWBjE+dNbFAwsyxSpeMUfwdw0Y87kScCtcNRWBicH4FB02nOCP+TeA9qX8f9
HF3WwqhhtpPCIfvo6lxko2ejZcs7dzdjzr+kopNtBGndVC9VhDhXnECpoze4zEi/
4Kf/mVKWQG9utzNo5wlWE7HVW1MWkfcMTPkaahpd00ZQdFtca6FZqHArFQI/Pa0J
uPpT80orA5K2Xy29aQXcp0twmwgo74KHf1w2u6dlXpUbGzCK8KnItpksXdg1Z/Wk
gi1enf/PahuaI0ENWk2Y5rxf
-----END CERTIFICATE-----
Generated at Sun Jul 5 08:40:19 2026 by rpki-client