Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft
File:                     xCkJXLK5d7BnGRGTtDubL14Zyug.mft (raw, json)
Hash identifier:          Lt0n+RK30z8iSO908jFXYeGbBv4TpSLA1P8IZJMQuus=
Subject key identifier:   7B:FC:82:6D:99:20:7F:3A:3D:00:A1:CC:88:AE:6F:62:27:17:59:4F
Authority key identifier: C4:29:09:5C:B2:B9:77:B0:67:19:11:93:B4:3B:9B:2F:5E:19:CA:E8
Certificate issuer:       /CN=A91CDBF5/serialNumber=C429095CB2B977B067191193B43B9B2F5E19CAE8
Certificate serial:       0133
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft
Manifest number:          0132
Signing time:             Wed 19 Aug 2026 06:14:43 +0000
Manifest this update:     Wed 19 Aug 2026 06:14:42 +0000
Manifest next update:     Wed 26 Aug 2026 06:14:42 +0000
Files and hashes:         1: xCkJXLK5d7BnGRGTtDubL14Zyug.crl (hash: ThLCRFx5gn68MiGI091zaokXgHQ958Wxysf6lbm1udQ=)
                          2: 51AEB7D2836811F1A730906667A30FBC.roa (hash: OqhaAJ3ECSKv9M44757UyMlEksc22ddZ45TQ4k8QygY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.crl
                          rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 06:14:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 307 (0x133)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDBF5, serialNumber=C429095CB2B977B067191193B43B9B2F5E19CAE8
        Validity
            Not Before: Aug 19 06:14:42 2026 GMT
            Not After : Aug 26 06:14:42 2026 GMT
        Subject: CN=6a8549d3-3b17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e5:d6:e8:28:55:6b:2e:46:43:77:9e:fa:c2:
                    f3:8e:2c:e3:52:3f:ac:c9:7f:11:eb:c2:7f:71:19:
                    36:d7:e0:51:05:ab:8e:9a:e7:1c:ba:87:07:04:f1:
                    38:c5:b9:ce:ed:0d:f3:50:b4:94:5c:0c:f4:60:03:
                    73:34:ee:a4:b0:1c:f4:bc:43:9b:07:2e:d1:b3:0c:
                    7e:83:92:14:55:1e:a7:5a:b1:7e:cc:4c:11:f8:60:
                    ba:be:89:fb:d4:91:6f:86:e7:52:69:15:94:ee:3e:
                    95:a0:88:21:df:79:f6:55:b9:d8:3b:3b:89:b4:45:
                    f2:84:c1:53:e9:81:b8:7b:68:f6:f8:9e:01:20:4c:
                    86:63:ba:a2:71:89:f3:db:d1:61:8d:52:54:f1:8e:
                    3a:a0:95:8b:43:34:79:22:d1:e9:ac:f4:bf:14:c7:
                    e8:32:64:2c:dd:00:61:f6:4e:87:ea:0e:94:f3:a9:
                    57:c6:6e:05:be:f0:d3:64:90:d3:bb:25:a5:a1:c1:
                    d1:55:9d:47:11:8f:44:cd:d3:60:40:8e:ec:f7:56:
                    dd:05:44:83:07:b7:4b:38:0c:d3:6c:04:ce:7c:01:
                    ba:28:b4:ac:4b:82:46:7e:55:17:8f:27:68:fd:30:
                    a8:88:2b:6e:b7:21:f0:e5:1b:64:86:94:dc:a0:08:
                    ec:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:FC:82:6D:99:20:7F:3A:3D:00:A1:CC:88:AE:6F:62:27:17:59:4F
            X509v3 Authority Key Identifier:
                keyid:C4:29:09:5C:B2:B9:77:B0:67:19:11:93:B4:3B:9B:2F:5E:19:CA:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:f4:5e:88:d3:9a:a1:0b:f6:36:ca:9b:a0:aa:1b:97:de:10:
         4f:0d:db:ee:f0:3b:cc:29:93:d8:09:1a:a1:83:30:c6:99:69:
         05:1e:7e:0d:b4:b4:92:a4:78:ad:b1:77:8c:79:08:14:7e:13:
         15:e9:85:e3:51:9c:7d:af:e0:4b:ee:a0:6d:d9:95:1f:54:19:
         f7:56:c4:b3:dc:72:ce:9b:f2:09:02:f0:60:6c:f2:b4:a7:d6:
         b1:6a:25:60:65:d9:ab:1c:28:c3:9a:a7:42:ab:cf:93:a9:92:
         60:70:8c:94:20:66:87:75:38:57:05:a5:2e:d4:7c:27:b0:1c:
         df:c6:1b:de:f4:8b:b7:59:48:81:cf:a2:9d:c3:ff:20:83:06:
         9e:c6:c9:67:70:33:ce:6f:f7:4c:ee:f7:64:31:96:02:c5:9e:
         80:9a:ac:d4:20:50:fa:00:c4:eb:22:f2:f4:86:d9:d2:9d:fa:
         79:9c:b5:01:d8:b8:60:96:3c:81:be:90:81:f4:06:02:d4:42:
         11:df:75:75:9f:a0:ad:48:92:bc:43:0a:ca:e7:20:6a:83:97:
         3b:6c:ae:8b:f9:d0:66:79:b7:2f:91:6a:3d:09:f7:fa:ef:72:
         13:28:91:95:50:68:3a:35:25:70:a5:14:83:ed:3e:94:a5:46:
         3f:9d:7b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:55:01 2026 by rpki-client