Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.mft
File:                     XcAwMzGJiu_bheTZFABriTdr7-E.mft (raw, json)
Hash identifier:          tpluaE2efjineO599M4aM7N8a6FllAA1fIING/Q+WnM=
Subject key identifier:   5D:5A:25:D0:52:6A:28:DE:B3:86:E2:5D:06:80:11:69:8B:0F:95:ED
Authority key identifier: 5D:C0:30:33:31:89:8A:EF:DB:85:E4:D9:14:00:6B:89:37:6B:EF:E1
Certificate issuer:       /CN=A91E7BD4/serialNumber=5DC0303331898AEFDB85E4D914006B89376BEFE1
Certificate serial:       074E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcAwMzGJiu_bheTZFABriTdr7-E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.mft
Manifest number:          0742
Signing time:             Tue 18 Aug 2026 22:13:01 +0000
Manifest this update:     Tue 18 Aug 2026 22:13:00 +0000
Manifest next update:     Tue 25 Aug 2026 22:13:00 +0000
Files and hashes:         1: XcAwMzGJiu_bheTZFABriTdr7-E.crl (hash: 9aOBEfCCgU5FEtkCWTcAvYqCTMxK038qKV9Pixo0B0M=)
                          2: 81E3F4ACBBDA11ED8FDB4E45C4F9AE02.roa (hash: Pg8G/Pvu/vL6s07U9VvSZMPJr+p68tGkbJJnBYeyeQA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.crl
                          rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcAwMzGJiu_bheTZFABriTdr7-E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 22:12:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1870 (0x74e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7BD4, serialNumber=5DC0303331898AEFDB85E4D914006B89376BEFE1
        Validity
            Not Before: Aug 18 22:13:00 2026 GMT
            Not After : Aug 25 22:13:00 2026 GMT
        Subject: CN=6a84d8ed-90e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:50:1b:ab:c1:5a:91:ab:53:ea:2a:e6:2f:1b:
                    91:60:f5:57:4e:2d:29:f4:53:a4:0f:98:7b:92:24:
                    f0:f8:b5:33:ee:8d:0f:43:0c:12:c5:fc:ac:fe:6a:
                    fb:91:16:b5:9d:fb:75:a8:38:29:f3:01:2c:22:f2:
                    50:7d:ae:74:b4:c6:6a:d8:01:c7:20:bf:ee:6d:0a:
                    1c:76:bb:af:67:cf:1b:6d:8a:f4:a0:22:c4:8a:ea:
                    ec:b0:26:fd:ae:d1:09:49:c8:7d:f4:22:80:15:fb:
                    45:30:25:b6:3a:60:90:c8:60:15:74:a5:9c:92:bd:
                    51:7f:7b:82:ff:5c:51:54:a2:8e:ba:fb:68:2f:73:
                    8f:24:b4:54:b4:71:7b:09:2a:99:0e:64:74:bc:09:
                    90:b7:43:28:f6:1e:6e:f4:78:88:db:67:b4:e9:de:
                    03:c2:b3:6c:a6:85:bd:75:6d:35:35:b5:a2:54:88:
                    3a:76:f6:23:89:39:11:8a:10:4c:da:93:2e:52:77:
                    4b:b3:94:95:d9:ed:5b:e5:a1:9d:5e:51:12:34:c9:
                    62:c5:c2:60:ee:84:9c:0e:cc:c7:df:a5:cd:15:3c:
                    be:97:10:f7:11:5b:1a:3c:63:dd:34:eb:ab:2c:2c:
                    64:c7:62:f6:47:32:84:9c:8c:a6:4e:9c:7b:62:a9:
                    72:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:5A:25:D0:52:6A:28:DE:B3:86:E2:5D:06:80:11:69:8B:0F:95:ED
            X509v3 Authority Key Identifier:
                keyid:5D:C0:30:33:31:89:8A:EF:DB:85:E4:D9:14:00:6B:89:37:6B:EF:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcAwMzGJiu_bheTZFABriTdr7-E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:6e:47:9c:20:19:0f:35:3b:b4:6e:f3:72:81:fa:d8:f7:48:
         29:c6:25:3a:eb:23:2b:26:43:01:95:6c:04:a5:62:5d:26:c4:
         8f:8a:8b:8b:13:59:5b:9d:be:cd:fb:d9:a2:9f:93:d7:9f:e8:
         5e:71:a6:a4:a5:0b:7f:a8:37:33:c4:84:61:1a:26:e8:c8:2c:
         f3:be:5a:5e:9f:d9:1c:7a:fa:82:d3:ae:50:66:90:7c:ad:85:
         6f:b0:2e:7a:01:5e:ba:93:c8:b0:12:1a:36:c5:c7:b8:5f:03:
         21:85:2c:10:46:b2:b9:d4:56:0f:1d:6d:b7:e4:94:b0:82:c4:
         43:42:93:a6:e6:c0:63:f1:5b:0e:f0:84:eb:01:71:bc:92:72:
         19:16:c8:76:25:1e:7a:08:64:a4:68:51:2f:a8:ea:bc:94:ae:
         ac:c5:b3:c9:aa:f4:49:bc:95:6d:36:72:47:61:cb:23:f9:31:
         7b:26:bd:28:e8:96:a7:ef:4d:25:df:21:20:bc:d2:ab:01:6d:
         8f:6b:18:83:65:bf:bc:02:ce:ff:44:4c:96:37:b5:c6:d2:30:
         ce:96:03:ba:c4:4c:e6:39:03:77:da:1c:d5:6d:0b:51:5b:71:
         0f:1e:a5:54:0c:74:08:9b:87:6c:37:4b:e4:6b:cc:55:44:5d:
         88:bc:9d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:55 2026 by rpki-client