Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft
File:                     XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft (raw, json)
Hash identifier:          4qp6EFo7wqoRR4OyqBJYFyaBmQ28AXnpWIyStqGiEls=
Subject key identifier:   F7:C7:13:4B:64:C5:BE:3F:C7:0D:3C:DD:43:23:F5:6C:C6:35:8B:C1
Authority key identifier: 5F:1C:53:4A:EE:FF:4E:38:0C:E5:A0:9A:10:84:BF:8F:57:09:ED:08
Certificate issuer:       /CN=A91A467D/serialNumber=5F1C534AEEFF4E380CE5A09A1084BF8F5709ED08
Certificate serial:       0BDB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft
Manifest number:          0BCC
Signing time:             Tue 18 Aug 2026 19:18:40 +0000
Manifest this update:     Tue 18 Aug 2026 19:18:39 +0000
Manifest next update:     Tue 25 Aug 2026 19:18:39 +0000
Files and hashes:         1: XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.crl (hash: bX35XwaTHG0jmZ2rDF4htbvX7CPtrFukaiekrutwzJ0=)
                          2: 43272DE249AA11EABABC8610C4F9AE02.roa (hash: apuF+CHb5V3hRVn20QwCD8T6GZ5V5YYEYw6cYSsjqgE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.crl
                          rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 19:18:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3035 (0xbdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A467D, serialNumber=5F1C534AEEFF4E380CE5A09A1084BF8F5709ED08
        Validity
            Not Before: Aug 18 19:18:39 2026 GMT
            Not After : Aug 25 19:18:39 2026 GMT
        Subject: CN=6a84b00f-e5bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f2:30:1c:92:d2:d7:3c:90:c6:27:36:78:1a:
                    ec:73:86:42:69:5b:ea:be:6a:45:80:23:c7:b9:f3:
                    e2:e6:35:eb:22:d9:1a:5f:7f:3b:56:db:02:5d:5f:
                    57:42:0f:71:18:34:0a:94:bc:dc:17:3a:b2:f2:3c:
                    06:60:1d:18:db:2e:8d:8d:b7:60:9f:61:e3:ee:15:
                    8b:88:50:68:79:5c:a3:6f:bf:e3:4c:cf:fa:c3:5c:
                    e6:50:eb:f3:55:cd:c6:d7:70:c7:bd:24:13:cf:8c:
                    c8:91:84:cc:51:9a:d0:18:09:47:5f:fb:77:02:c1:
                    09:8e:61:5c:97:f2:95:d3:cd:4b:ea:23:14:b4:09:
                    4f:1e:71:ff:4e:56:70:0c:ce:c3:69:4f:a8:40:4c:
                    b3:39:76:8a:32:78:b3:03:34:25:e7:b2:a7:ed:3a:
                    33:56:81:eb:7f:72:47:f5:b6:65:e6:50:96:68:b9:
                    cb:78:13:13:2e:58:e7:66:68:7b:7b:0f:50:b3:8d:
                    68:e4:3a:de:08:99:11:ca:40:1a:49:fc:5a:dd:5a:
                    66:4d:86:f9:da:f5:47:be:33:19:97:05:75:4e:03:
                    44:ea:e4:4e:85:9a:98:e3:6e:72:ce:1d:8f:dd:2c:
                    c3:90:bc:4f:1b:7d:ba:89:5f:0c:5a:91:8e:66:13:
                    63:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:C7:13:4B:64:C5:BE:3F:C7:0D:3C:DD:43:23:F5:6C:C6:35:8B:C1
            X509v3 Authority Key Identifier:
                keyid:5F:1C:53:4A:EE:FF:4E:38:0C:E5:A0:9A:10:84:BF:8F:57:09:ED:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e2:73:e8:6a:85:a0:c0:6e:d4:61:ab:92:03:b5:91:63:32:e0:
         0d:d8:f1:ee:3e:ba:14:28:43:1a:ee:42:f2:14:c1:ea:cf:9a:
         42:c1:bc:3e:29:95:ba:a1:c6:96:ae:8e:db:01:63:8d:64:22:
         e7:87:3c:f8:8d:15:0d:21:1d:b3:fb:5d:88:9e:ad:e9:24:9e:
         7c:62:57:c1:d1:c8:77:3c:b5:c0:92:81:68:6e:ca:5e:6c:1d:
         38:1c:34:fb:30:e8:19:09:2a:38:91:a0:01:3d:cc:0f:7c:99:
         1a:de:37:ec:eb:9c:dd:af:17:01:ba:6a:fe:43:53:69:80:67:
         ea:e4:7c:f2:82:43:0c:18:61:cb:da:d9:e8:3a:4a:62:4d:13:
         95:92:62:de:b0:b2:42:ca:f0:ac:eb:94:e6:be:f6:51:6b:d5:
         7e:0b:ff:b3:8c:1c:04:24:6c:a9:da:bd:6d:10:fb:b3:4b:8d:
         4b:ee:1c:b8:13:cd:81:76:ee:28:3f:d6:8f:99:5b:ad:05:c7:
         2e:be:61:55:5d:1c:29:ef:f3:a7:de:b1:e7:19:5d:e1:4e:ec:
         65:75:79:66:f8:c1:12:d7:73:82:a2:c4:d8:0d:e2:18:26:ea:
         86:88:e7:37:b7:c2:57:70:2a:21:ae:2b:c8:af:db:24:ae:43:
         2f:ac:3c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:46:02 2026 by rpki-client