Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft
File:                     xvdY7N3EybD3LwZcNa1UaXQycRs.mft (raw, json)
Hash identifier:          Tin/KKU9jwayAWVnjZgaeIvUMDcFyEZlzBqX0mfqDCA=
Subject key identifier:   6B:40:DD:4C:3E:30:DD:CA:38:E7:85:89:1C:3F:E5:AB:E0:F2:A8:16
Authority key identifier: C6:F7:58:EC:DD:C4:C9:B0:F7:2F:06:5C:35:AD:54:69:74:32:71:1B
Certificate issuer:       /CN=A91E8DF5/serialNumber=C6F758ECDDC4C9B0F72F065C35AD54697432711B
Certificate serial:       0134
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft
Manifest number:          0119
Signing time:             Wed 05 Aug 2026 07:31:37 +0000
Manifest this update:     Wed 05 Aug 2026 07:31:37 +0000
Manifest next update:     Wed 12 Aug 2026 07:31:37 +0000
Files and hashes:         1: xvdY7N3EybD3LwZcNa1UaXQycRs.crl (hash: 1F69IyaW7ELBPbhBAzB8gcvHP8Q5NQlUyk1XERIwEac=)
                          2: 2C0E544C6EB511F094E66857C4F9AE02.roa (hash: GaPvcpyW3ZEm9wVpzfxkRaCgBptrfJgEkU41liSb2xo=)
                          3: D2E899F86EB511F0A3A63A59C4F9AE02.roa (hash: xEXvfKX+aG3p5VbMMgXsIKibCHC0+2nun/Vfmh+Twl8=)
                          4: 917D3A184BED11F0A2F7CC21C4F9AE02.roa (hash: APYBzbciz7l8SWgHU+00bf2NNknyoQ64kXNxQ6wKS1I=)
                          5: CCFC18C271E211F1BD2C2BF66AA30FBC.roa (hash: lK7/pu0OCI+h3zcwLpfEuVoFF+otwvw1LpftmhWb8NI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.crl
                          rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Aug 2026 07:31:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 308 (0x134)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8DF5, serialNumber=C6F758ECDDC4C9B0F72F065C35AD54697432711B
        Validity
            Not Before: Aug  5 07:31:37 2026 GMT
            Not After : Aug 12 07:31:37 2026 GMT
        Subject: CN=6a72e6d9-cb0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:38:54:78:d9:e6:2d:fb:76:25:48:a8:6c:cc:
                    30:83:41:33:4a:c2:0b:df:d8:84:af:56:4b:4b:13:
                    86:2e:1a:bc:86:2e:09:38:e8:26:69:8b:37:eb:74:
                    be:60:7c:1f:c5:b3:b3:80:c6:9d:7b:03:5a:40:e4:
                    45:ed:19:df:54:b1:ba:80:91:64:68:10:57:bb:0b:
                    1b:97:f9:82:52:60:16:79:8f:9a:9f:2e:de:6c:e9:
                    d1:c6:a6:57:cd:ed:3f:1f:64:fc:05:75:65:0f:6f:
                    fe:c5:21:40:8d:b6:c7:42:20:29:50:24:0e:3e:1b:
                    8d:fa:f3:03:03:3f:19:0d:e6:09:80:c1:93:87:b7:
                    a1:4f:97:c9:0f:ba:3f:66:3b:96:0a:ea:2f:af:62:
                    47:36:57:93:7e:57:9a:90:02:97:23:45:82:ca:71:
                    9b:57:23:83:80:a7:ba:26:fc:77:85:4c:e3:88:b4:
                    09:5d:35:ed:14:d2:7e:07:6d:02:eb:2d:e4:b9:e9:
                    7c:0d:a4:a1:37:c9:95:18:4f:0b:70:2e:75:8d:61:
                    96:9b:90:93:ee:09:35:97:40:d6:44:f4:1d:b4:85:
                    5c:33:70:c7:d8:58:49:f3:44:e1:03:4f:4d:03:f8:
                    3d:78:90:09:62:76:87:6a:cc:05:a6:22:a2:ea:e7:
                    cb:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:40:DD:4C:3E:30:DD:CA:38:E7:85:89:1C:3F:E5:AB:E0:F2:A8:16
            X509v3 Authority Key Identifier:
                keyid:C6:F7:58:EC:DD:C4:C9:B0:F7:2F:06:5C:35:AD:54:69:74:32:71:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:f9:74:03:8f:1d:f7:77:60:b8:98:0f:77:88:93:19:fb:f6:
         8b:8a:7c:52:9d:1c:9f:b6:84:d9:68:8b:1e:00:52:84:c3:d0:
         99:17:ae:ff:50:e7:0d:c6:49:8b:bf:96:fe:20:3e:fa:78:23:
         73:a6:c3:5a:c5:0d:86:19:fc:57:04:7d:2e:ed:72:48:c7:0b:
         87:b7:00:07:eb:3c:e5:cc:fa:5c:a2:ab:18:28:1f:e8:94:8f:
         e3:9a:01:79:1a:ee:8c:4a:a6:ed:ce:ca:d2:51:4f:87:e9:8c:
         15:1b:af:8d:cb:69:b6:99:79:4b:a0:e3:dc:b3:2c:4b:ce:4c:
         c0:da:10:07:69:2b:2a:fd:9e:ba:1c:c3:e7:9a:44:15:51:4b:
         77:d5:43:95:07:68:55:65:0d:f3:68:fc:71:45:49:b7:c6:2b:
         8e:c6:c1:d4:89:ef:99:9d:54:4a:d8:b8:2e:81:97:7f:85:b9:
         6e:05:21:1e:19:72:8f:00:c4:98:06:34:77:67:b4:c2:3b:d8:
         37:b6:ae:7b:4b:80:52:04:e6:23:45:88:37:69:2f:ff:db:64:
         b3:cb:94:05:f6:f9:df:a3:fd:07:23:14:f9:14:e6:f4:c5:e7:
         46:40:00:bc:3f:bb:99:34:7a:47:de:09:58:70:6a:f9:95:7f:
         d9:b3:a6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 13:43:19 2026 by rpki-client