Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.mft
File:                     8XiofFRzBDe6WfqpzhhP-HkP5PE.mft (raw, json)
Hash identifier:          s5fKSotlNI4nYNZA1CwfTffyVIKM6t67HmMBUZxBfhM=
Subject key identifier:   6D:F1:34:20:E1:4C:2C:DB:53:A3:78:4A:93:7F:DC:F4:B8:5C:B4:80
Authority key identifier: F1:78:A8:7C:54:73:04:37:BA:59:FA:A9:CE:18:4F:F8:79:0F:E4:F1
Certificate issuer:       /CN=A91D6792/serialNumber=F178A87C54730437BA59FAA9CE184FF8790FE4F1
Certificate serial:       05B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XiofFRzBDe6WfqpzhhP-HkP5PE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.mft
Manifest number:          05AD
Signing time:             Mon 27 Jul 2026 00:03:19 +0000
Manifest this update:     Mon 27 Jul 2026 00:03:18 +0000
Manifest next update:     Mon 03 Aug 2026 00:03:18 +0000
Files and hashes:         1: 8XiofFRzBDe6WfqpzhhP-HkP5PE.crl (hash: TgDmyNmWHSFsfwBks1rAvqxRUyd6LjY/koIFO0nNemE=)
                          2: CB89040A73EA11EC8A823312C4F9AE02.roa (hash: JC7lbeFnRnICzkSYuKq2WaMSqXlPZ3bBUzx31GKWCuw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.crl
                          rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XiofFRzBDe6WfqpzhhP-HkP5PE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 00:03:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1465 (0x5b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6792, serialNumber=F178A87C54730437BA59FAA9CE184FF8790FE4F1
        Validity
            Not Before: Jul 27 00:03:18 2026 GMT
            Not After : Aug  3 00:03:18 2026 GMT
        Subject: CN=6a66a047-56fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a7:54:4d:57:73:92:b8:14:5a:fb:d7:30:cc:
                    f5:69:5c:41:fb:ce:cf:01:9b:38:39:99:ee:55:ef:
                    8d:59:75:79:6f:a6:e8:de:3c:5b:8c:31:b6:94:5e:
                    3b:26:ba:bc:b9:8f:e6:8e:a4:05:98:e8:6c:78:58:
                    e0:d6:b2:67:e7:c5:31:d0:9d:43:39:bc:bc:55:bd:
                    e4:85:80:2f:01:13:d4:4e:73:ba:9f:21:cd:36:3f:
                    c2:98:ae:2f:55:51:7b:91:2a:bd:ad:ca:2f:3f:48:
                    4d:e6:65:7c:0b:05:f6:90:4a:8d:32:42:92:57:01:
                    37:4e:b2:30:d7:18:ea:28:2f:02:ea:82:35:c9:9c:
                    38:52:27:3a:fb:9a:ed:5a:03:6c:85:d2:fb:8c:9e:
                    50:90:79:b1:70:5e:5b:02:f0:3f:9c:f5:a9:d5:00:
                    71:b4:89:eb:0b:6b:60:06:52:59:6b:b7:fc:93:6f:
                    d9:5c:83:93:4f:64:7f:61:d2:6a:13:bd:61:d9:58:
                    44:83:50:6f:25:d1:aa:c3:90:22:29:f1:64:49:10:
                    fc:26:bf:4d:cb:0c:7b:08:f1:c5:f2:1d:36:de:9f:
                    fa:fe:d1:ce:97:97:6c:64:1b:f3:de:b3:6f:82:51:
                    04:89:40:b2:5c:f1:40:8f:f8:70:d8:85:f9:f7:fe:
                    46:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F1:34:20:E1:4C:2C:DB:53:A3:78:4A:93:7F:DC:F4:B8:5C:B4:80
            X509v3 Authority Key Identifier:
                keyid:F1:78:A8:7C:54:73:04:37:BA:59:FA:A9:CE:18:4F:F8:79:0F:E4:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XiofFRzBDe6WfqpzhhP-HkP5PE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:55:62:fa:8f:ab:45:bc:54:00:ef:15:ac:c1:0b:b6:41:6b:
         b8:87:a8:6b:31:45:5c:ee:fd:68:71:53:db:26:b4:20:fb:c0:
         f9:3b:82:2f:1c:81:62:89:c3:7c:ed:d2:37:8f:b2:a9:ad:a7:
         99:74:75:9c:e4:ed:34:c3:ae:94:50:db:03:e2:a8:af:24:44:
         42:83:52:dd:52:5e:0f:f3:29:ba:20:ec:3a:b2:9b:ab:51:f0:
         43:04:17:4c:99:8e:26:47:2e:45:e6:7c:4a:2e:72:25:75:bf:
         b6:73:47:d5:2b:dd:60:e5:1b:ed:5f:03:f6:cc:7e:8c:b1:50:
         d7:8c:35:9d:8c:97:96:85:53:06:ad:e3:d5:40:25:d2:29:9e:
         9d:43:09:6c:ef:18:23:ce:b1:db:79:dc:f0:6d:af:27:be:28:
         95:a6:02:4c:c6:04:da:5a:00:ca:ac:ff:ad:90:61:a3:6d:1c:
         54:54:b4:c4:18:8d:ca:76:f2:50:ca:d8:89:75:46:71:de:f8:
         17:b6:f1:96:e3:b0:5d:fb:dc:22:b0:f3:a1:a9:bd:b9:e8:5b:
         e8:32:dd:3c:80:68:e8:0d:ad:05:38:d7:1b:ec:9a:fc:d9:2e:
         27:25:ac:a8:e3:0d:8a:87:84:a1:e7:87:a7:94:5c:d2:d7:5e:
         d8:91:72:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:17:23 2026 by rpki-client