Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft
File:                     xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft (raw, json)
Hash identifier:          FpZ/J6pUNgRpZv0G7UjDBIFBEXsU6RH/tVlGplE2QCo=
Subject key identifier:   0E:9F:A8:E1:F9:47:DC:11:D5:C3:F1:94:92:5B:0F:52:79:41:F7:9A
Authority key identifier: C7:20:02:76:7A:10:EC:2F:F1:45:15:A2:AA:B8:6E:61:40:97:A7:5C
Certificate issuer:       /CN=A91BFE4E/serialNumber=C72002767A10EC2FF14515A2AAB86E614097A75C
Certificate serial:       0156
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft
Manifest number:          0152
Signing time:             Fri 17 Jul 2026 06:13:24 +0000
Manifest this update:     Fri 17 Jul 2026 06:13:23 +0000
Manifest next update:     Fri 24 Jul 2026 06:13:23 +0000
Files and hashes:         1: xyACdnoQ7C_xRRWiqrhuYUCXp1w.crl (hash: 9Hyx+kq6LSaF/gQ75hrzuRByiMvSv7kkVdZdb5VW9vU=)
                          2: CB31DFEA7BE411EFB6955155C4F9AE02.roa (hash: mfW/Qkg0MzRAXyBHrSlkZ0QHKIFcW/HURnHy5WY1eYo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.crl
                          rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 06:13:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 342 (0x156)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BFE4E, serialNumber=C72002767A10EC2FF14515A2AAB86E614097A75C
        Validity
            Not Before: Jul 17 06:13:23 2026 GMT
            Not After : Jul 24 06:13:23 2026 GMT
        Subject: CN=6a59c803-a362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:94:85:23:ab:4a:97:b8:e3:2d:02:02:1e:4f:
                    73:78:f6:65:56:55:93:db:c7:c2:be:a1:a2:53:db:
                    82:bf:33:29:f0:f8:ef:7e:16:95:1d:2c:32:7c:e9:
                    c0:bf:22:a5:bd:35:ca:12:6e:40:6b:b8:3b:5b:b0:
                    6a:7e:90:0f:0b:e5:28:a1:d2:2e:7e:33:00:a3:28:
                    ec:76:e9:f7:13:ab:6b:73:fc:ec:38:c2:10:d9:c7:
                    58:7c:eb:7c:fd:f0:96:4f:86:79:fa:64:21:23:be:
                    49:79:3c:20:d5:77:0b:34:bd:36:44:99:dd:ef:e3:
                    68:cc:6f:ff:39:ca:e0:f1:df:dc:bb:66:23:d9:6f:
                    e1:82:7b:38:05:96:71:1b:7b:c4:1f:55:78:d1:d8:
                    a2:bf:53:6b:d0:5f:f7:38:fa:a3:11:d2:65:4b:87:
                    1b:a0:32:03:12:4b:3e:b7:ef:3e:21:6b:62:c1:d9:
                    cc:22:b1:84:00:67:a9:dc:23:17:0b:06:6c:5f:08:
                    72:22:10:e9:5e:34:16:85:f0:4c:6e:a6:49:63:d5:
                    8b:8f:e3:78:41:99:fa:29:11:94:35:5d:a9:68:f8:
                    7b:3f:2b:05:ae:6b:be:90:42:4f:f7:27:fc:9a:01:
                    c2:5f:00:ec:12:f3:d6:ac:4d:79:05:58:92:ed:3d:
                    24:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:9F:A8:E1:F9:47:DC:11:D5:C3:F1:94:92:5B:0F:52:79:41:F7:9A
            X509v3 Authority Key Identifier:
                keyid:C7:20:02:76:7A:10:EC:2F:F1:45:15:A2:AA:B8:6E:61:40:97:A7:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:95:7b:4a:41:b6:3e:42:54:af:42:40:c6:a5:fd:bd:f0:9d:
         6b:1c:fc:31:cc:24:b3:d0:ec:71:81:97:af:af:a1:3f:d2:e0:
         d8:a6:46:c6:54:01:32:e5:9d:61:77:d4:8e:a1:b7:f9:72:35:
         f5:c6:c2:de:f0:88:5c:59:26:55:74:c5:e8:2e:d5:0d:22:b9:
         9a:c8:91:b9:6f:52:e0:7b:d4:e5:29:fc:e5:1d:5e:d0:20:08:
         46:6b:d7:74:60:23:eb:37:fb:3c:7b:e3:d6:6f:7d:e4:e6:f7:
         e0:23:13:41:9b:73:05:58:66:94:97:3a:6e:79:26:d8:d3:fa:
         60:cd:35:9e:0c:dc:2f:d9:c4:d8:de:50:9c:3b:8f:e6:11:b5:
         03:1e:bd:09:23:0b:b2:e3:08:cf:61:37:db:4a:c4:fb:95:d6:
         63:47:ae:17:52:bb:c5:b1:69:b3:e6:36:d0:20:e1:39:96:f7:
         6c:28:bb:53:cf:81:ad:78:9b:91:63:7f:50:fe:73:aa:f7:f7:
         35:ce:62:84:d4:e4:5d:71:76:24:44:0e:53:d1:b7:a5:55:09:
         f1:3a:d8:d9:5a:d4:27:13:43:31:48:59:44:31:e4:62:bc:c2:
         0d:17:a5:20:80:22:9f:d0:e0:da:71:23:ed:07:af:5e:3e:40:
         09:dd:65:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:30:13 2026 by rpki-client