Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft
File:                     xGIlbhG2PuqR1z02Q867tRojUK8.mft (raw, json)
Hash identifier:          Xd+uOxSU+XSoBTEU4YVk6kyuhpqidNfoq1H284FIzDY=
Subject key identifier:   0F:A4:C2:13:9C:49:B8:AF:1F:B3:3C:9D:97:95:54:3F:42:E4:E2:AB
Authority key identifier: C4:62:25:6E:11:B6:3E:EA:91:D7:3D:36:43:CE:BB:B5:1A:23:50:AF
Certificate issuer:       /CN=A91A210A/serialNumber=C462256E11B63EEA91D73D3643CEBBB51A2350AF
Certificate serial:       1135
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGIlbhG2PuqR1z02Q867tRojUK8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft
Manifest number:          1125
Signing time:             Mon 20 Jul 2026 17:25:39 +0000
Manifest this update:     Mon 20 Jul 2026 17:25:38 +0000
Manifest next update:     Mon 27 Jul 2026 17:25:38 +0000
Files and hashes:         1: xGIlbhG2PuqR1z02Q867tRojUK8.crl (hash: VYsaRunG6RhZd1vEy3n2KBe+WkEipWtGqauCu8RA40U=)
                          2: 797BF786FB2C11EFA405F334C4F9AE02.roa (hash: yaNkgji9jGH4TTyhCOL2/K5RHSqEhk35tfGLeGGK6L0=)
                          3: 691023063A8311E99AF5572DC4F9AE02.roa (hash: 3XIdOKZPD+XETwFVUGrUUljIP0PedqBSSrgTHEH2oF8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.crl
                          rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGIlbhG2PuqR1z02Q867tRojUK8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 17:25:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4405 (0x1135)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A210A, serialNumber=C462256E11B63EEA91D73D3643CEBBB51A2350AF
        Validity
            Not Before: Jul 20 17:25:38 2026 GMT
            Not After : Jul 27 17:25:38 2026 GMT
        Subject: CN=6a5e5a13-88b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:11:63:2b:44:02:9a:c4:94:a3:52:9b:14:59:
                    f1:33:57:d5:27:4b:db:aa:cd:78:be:a1:0a:2e:5b:
                    9e:8a:b2:ab:d5:04:05:de:67:6d:8a:ee:92:17:0d:
                    f9:96:75:02:44:af:04:44:97:32:af:8f:6a:17:aa:
                    9b:a1:1a:31:30:ee:af:a6:41:8f:ae:6d:8f:6f:0c:
                    d7:c0:36:fd:7d:6d:15:a4:f6:eb:66:f0:40:a1:1a:
                    61:ac:f6:f2:c5:aa:4f:90:6c:fa:e5:02:2b:4a:aa:
                    6a:d5:19:63:49:4e:d5:09:29:ee:6c:4b:e7:69:3b:
                    82:48:0c:64:28:1c:76:4e:71:f3:53:8a:bf:d1:1c:
                    c7:85:c5:d9:68:36:45:65:c3:93:c4:90:4a:21:eb:
                    53:d1:af:2d:60:1b:ab:72:b9:0b:d9:a6:6d:ed:06:
                    21:22:e9:48:7e:e4:87:01:06:0f:b9:c7:ac:2f:76:
                    4b:11:59:7d:08:10:3b:33:f7:12:2a:30:cb:0e:12:
                    38:e4:48:35:00:b5:97:fc:13:b6:33:cc:bc:f0:e4:
                    fb:4d:f6:b0:43:f4:eb:d5:87:99:42:e5:e5:c1:5a:
                    d5:01:9c:9f:fd:9a:1c:c4:88:ff:ad:c6:70:90:ca:
                    76:08:f3:c8:a3:07:f0:c8:99:36:f1:13:78:0b:49:
                    cf:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:A4:C2:13:9C:49:B8:AF:1F:B3:3C:9D:97:95:54:3F:42:E4:E2:AB
            X509v3 Authority Key Identifier:
                keyid:C4:62:25:6E:11:B6:3E:EA:91:D7:3D:36:43:CE:BB:B5:1A:23:50:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGIlbhG2PuqR1z02Q867tRojUK8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:c0:f3:bb:d8:86:d9:c9:8c:c1:3a:7f:f0:2c:56:dd:ec:6d:
         e3:b9:43:d0:83:92:95:ea:64:92:0f:02:1d:9a:55:53:93:18:
         60:95:b0:93:00:64:be:4e:44:91:9e:38:6d:82:8a:0f:94:29:
         19:e6:9c:7e:b6:dc:8c:70:bb:00:1d:bb:9f:27:c2:89:79:28:
         94:20:96:28:82:08:2b:4a:60:93:f1:32:af:60:8b:4c:c1:8d:
         eb:b2:15:d1:f3:f6:c6:88:97:3f:39:5e:bd:c2:60:bf:3a:5d:
         3e:22:4d:41:36:49:e7:1f:07:29:d4:f5:25:9e:db:44:55:88:
         91:ef:0f:9c:e3:4d:38:d1:b9:f3:17:cc:0c:aa:19:bb:8f:f9:
         09:de:18:0b:04:39:59:8a:58:ac:69:ca:30:56:74:60:0c:8f:
         8b:26:9c:ec:6c:c8:e8:ed:44:b5:22:ee:94:84:98:18:cb:31:
         09:5a:55:0f:fe:10:51:be:8b:42:f3:08:91:2c:ee:20:2a:b3:
         67:36:c1:b0:5b:eb:84:a6:b0:97:cf:f8:97:c5:ba:f0:6d:5b:
         f0:4b:1e:3b:0e:61:1a:a1:c8:2c:0e:35:8f:25:fc:33:c5:cc:
         6b:80:1b:2e:0a:f1:1b:d3:11:92:f4:8a:0f:dc:a6:77:31:c7:
         1a:6f:68:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:57:21 2026 by rpki-client