Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.mft
File:                     xeslRrtzrOaT4ZqxB9g_JmYyzug.mft (raw, json)
Hash identifier:          4VoMZSsjbrvMmHsqyfGC6mIVjVx/2GdY20IaKPmaYw8=
Subject key identifier:   03:CF:8C:8F:AF:4D:F3:C0:68:34:72:A1:43:83:79:3B:3A:C4:EA:F7
Authority key identifier: C5:EB:25:46:BB:73:AC:E6:93:E1:9A:B1:07:D8:3F:26:66:32:CE:E8
Certificate issuer:       /CN=A9197A55/serialNumber=C5EB2546BB73ACE693E19AB107D83F266632CEE8
Certificate serial:       6C
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xeslRrtzrOaT4ZqxB9g_JmYyzug.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.mft
Manifest number:          64
Signing time:             Tue 21 Jul 2026 09:56:40 +0000
Manifest this update:     Tue 21 Jul 2026 09:56:39 +0000
Manifest next update:     Tue 28 Jul 2026 09:56:39 +0000
Files and hashes:         1: xeslRrtzrOaT4ZqxB9g_JmYyzug.crl (hash: A5eDIZ8QNR3kkRq53n7D5mRJTh2qAt8h3DOZg0Ezd24=)
                          2: 21DB5BC4FAAA11F0A3B995435A6F56BC.roa (hash: LbeaZF1XRjLI75LU93fIN8JRsM753tbKTBrRQHfA4hk=)
                          3: 40E6AE74FAAA11F0BBD6BD435A6F56BC.roa (hash: rFUINwctLdCKpeYymZBC+HyAkWIaWkc+ZM7j+MzLgis=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.crl
                          rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xeslRrtzrOaT4ZqxB9g_JmYyzug.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 09:56:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197A55, serialNumber=C5EB2546BB73ACE693E19AB107D83F266632CEE8
        Validity
            Not Before: Jul 21 09:56:39 2026 GMT
            Not After : Jul 28 09:56:39 2026 GMT
        Subject: CN=6a5f4258-1197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:09:fe:01:cb:7c:2a:ed:74:46:5f:36:f0:cd:
                    cd:ac:79:28:b5:12:27:49:21:e8:41:a4:04:8f:e2:
                    1f:0f:b4:bb:09:4a:df:55:63:45:34:ab:7e:1c:dc:
                    e7:a4:43:c0:08:89:65:3d:93:a4:37:60:60:34:6d:
                    a2:e1:db:02:a1:5d:8f:4a:43:a2:f5:6f:8f:9f:22:
                    3c:af:de:db:f2:bd:b4:a7:31:42:cf:38:73:91:82:
                    0e:5f:0d:d3:a2:8b:11:a5:85:1e:ec:e2:07:29:79:
                    23:95:1a:b8:2b:98:d7:18:6a:e4:6d:58:0c:c6:36:
                    59:46:45:bc:90:68:a3:c7:1a:93:c0:c5:5e:f1:19:
                    0f:62:3b:a2:69:4a:c2:23:33:13:b4:41:8d:5f:88:
                    f9:a2:ba:51:a5:a3:1e:7b:55:67:b2:7b:76:96:05:
                    b6:bf:16:ce:23:8e:4a:eb:d6:07:9c:5c:c0:2e:7b:
                    31:8d:9c:90:6f:20:40:0f:27:08:ea:0c:0a:4e:54:
                    0d:69:7c:24:36:70:41:67:d0:82:af:ea:c7:0c:3e:
                    5a:60:e8:b3:b0:7a:3c:07:7e:7d:48:f9:12:19:6d:
                    ac:da:30:f0:ca:fc:ea:b4:71:49:f4:ea:40:51:6f:
                    06:aa:2a:26:47:44:d1:92:be:d5:b6:a2:1a:ea:1f:
                    af:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:CF:8C:8F:AF:4D:F3:C0:68:34:72:A1:43:83:79:3B:3A:C4:EA:F7
            X509v3 Authority Key Identifier:
                keyid:C5:EB:25:46:BB:73:AC:E6:93:E1:9A:B1:07:D8:3F:26:66:32:CE:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xeslRrtzrOaT4ZqxB9g_JmYyzug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:90:a1:88:8e:7a:c3:66:58:c0:e4:dc:dc:5d:c0:cc:11:be:
         61:c0:67:34:da:46:3b:2d:bb:30:20:44:50:e0:1f:ca:3a:7e:
         ea:0c:a9:d0:80:7a:11:aa:6f:fb:34:9a:71:75:d1:57:58:c3:
         b4:38:00:7e:a9:81:86:66:ab:ed:59:e1:f1:ba:60:37:30:1e:
         49:2f:5e:fa:a3:66:02:a2:e7:2b:aa:b7:89:36:25:d3:df:db:
         b6:da:12:c1:60:68:c7:aa:26:14:53:5a:46:04:ec:04:95:d4:
         79:1a:85:9a:0e:03:fa:b1:2c:d3:10:6f:1f:b2:4e:f6:4e:33:
         58:c5:ab:a5:47:90:60:85:8b:4a:01:0d:95:ce:22:4f:77:13:
         53:b3:f7:1c:49:39:a9:33:2d:90:9d:c7:a1:d3:98:b6:60:ec:
         ed:22:54:46:3d:ab:d4:40:7b:86:67:24:ce:ae:b3:25:81:93:
         0a:88:f7:7a:ad:fc:96:c8:81:ad:19:4d:40:22:9a:2a:59:96:
         af:d8:be:40:ab:bb:30:18:25:ee:19:de:a2:6a:cd:19:d0:d5:
         9f:30:b8:e6:dd:c2:e7:30:57:34:a5:c0:ac:75:e0:31:c9:75:
         79:8d:77:ba:14:da:d9:dc:7c:03:b2:1b:13:27:64:94:b4:eb:
         3d:97:e0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:54:45 2026 by rpki-client