Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft
File:                     XOe82cbkE4HMCvkJkN2gNpOF5lU.mft (raw, json)
Hash identifier:          A3ldjgCC2qA7Iw2at7bo4tVfpiG7sJKi2u57Unf5dus=
Subject key identifier:   45:5A:27:C0:E8:DA:DA:A9:11:51:DD:D0:B9:29:FA:51:C4:79:E0:F1
Authority key identifier: 5C:E7:BC:D9:C6:E4:13:81:CC:0A:F9:09:90:DD:A0:36:93:85:E6:55
Certificate issuer:       /CN=A91EC3A8/serialNumber=5CE7BCD9C6E41381CC0AF90990DDA0369385E655
Certificate serial:       0551
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft
Manifest number:          053C
Signing time:             Fri 17 Jul 2026 00:02:44 +0000
Manifest this update:     Fri 17 Jul 2026 00:02:43 +0000
Manifest next update:     Fri 24 Jul 2026 00:02:43 +0000
Files and hashes:         1: XOe82cbkE4HMCvkJkN2gNpOF5lU.crl (hash: /6eFtPii3X8F8pOhgwNpwk6JGprHkVuh4IIGfGLhYDc=)
                          2: C71919900BEE11EDBB84E711C4F9AE02.roa (hash: kY65kJ7Z3Mu7QEVILrGdTmAvqTkSFv9BjhpNLh4YUPY=)
                          3: 10A8D0E263F611ECB344F979C4F9AE02.roa (hash: SmcwGq0dD9iTZhV8jdPLgAp8Fs3hII4+H1WFKJpXd7c=)
                          4: 11330A4663F611ECB344F979C4F9AE02.roa (hash: 3M+74bn/sA2p4TiZmfBp8pwqRm0NY6QA2mPOgZx57gA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.crl
                          rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 00:02:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1361 (0x551)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC3A8, serialNumber=5CE7BCD9C6E41381CC0AF90990DDA0369385E655
        Validity
            Not Before: Jul 17 00:02:43 2026 GMT
            Not After : Jul 24 00:02:43 2026 GMT
        Subject: CN=6a597124-5d96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:66:b7:d8:08:af:7b:80:ca:b2:0e:d7:f7:d2:
                    2a:e0:48:5a:3c:7d:73:44:b1:03:6e:45:df:7b:ca:
                    7b:03:f5:68:9e:82:6c:6e:84:cf:67:99:21:58:50:
                    00:74:bf:f5:0d:2d:42:1e:d7:e8:26:78:07:e0:c9:
                    86:cc:64:00:a0:b0:a8:c7:71:60:89:7c:60:12:86:
                    40:b9:e3:84:9d:ee:35:23:55:36:4f:99:99:fa:22:
                    59:cd:83:95:ae:49:86:27:5a:02:5e:cd:48:66:8a:
                    00:31:d8:1e:cd:ec:a0:e1:c3:b4:e9:1e:52:99:50:
                    e0:d4:d9:a7:d9:39:8c:8b:53:c9:2e:fe:e3:44:1d:
                    4d:b3:79:d0:4c:41:fa:4d:46:f9:d4:63:08:73:5a:
                    3e:20:7e:2c:06:78:2a:e7:42:8a:15:65:7f:05:9b:
                    94:d4:b2:82:1b:21:44:cd:d4:32:9b:07:24:74:f7:
                    fe:14:77:7e:b9:74:cd:ad:06:76:27:aa:8c:61:c3:
                    3c:fc:44:42:de:90:6a:62:4e:b1:62:5b:ae:7f:19:
                    47:61:eb:f9:57:88:b7:67:61:62:e8:72:42:01:d9:
                    a4:67:33:79:39:d3:d7:e9:94:0c:e4:60:35:85:ee:
                    1c:8c:95:18:d6:1a:d9:f4:93:68:a2:af:cb:7b:f2:
                    1c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:5A:27:C0:E8:DA:DA:A9:11:51:DD:D0:B9:29:FA:51:C4:79:E0:F1
            X509v3 Authority Key Identifier:
                keyid:5C:E7:BC:D9:C6:E4:13:81:CC:0A:F9:09:90:DD:A0:36:93:85:E6:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:78:a7:64:f5:f4:7c:09:30:82:f4:99:d1:3a:be:92:72:91:
         7a:8c:76:b6:d7:ab:e6:e5:98:69:4e:51:53:38:f8:af:b0:ca:
         34:22:31:cd:39:6f:a6:a8:3e:d5:9f:03:b2:6e:32:a7:56:c4:
         ff:9a:cb:48:89:89:d0:0d:fa:9c:8a:49:c3:b1:0c:3e:c0:a4:
         5d:35:df:18:b0:75:f8:ed:db:03:f4:99:8f:36:09:2c:e7:3c:
         70:3b:b2:bc:aa:9a:82:22:fd:86:da:0e:8e:d0:65:f6:69:25:
         ae:33:da:be:9a:c1:a5:a0:af:00:b2:47:d2:96:a0:6d:9b:4b:
         8c:f7:b2:08:98:c8:a4:42:11:37:a2:8d:dc:b4:f5:ca:c2:51:
         04:58:68:04:23:7e:46:fe:ab:f3:b5:3a:05:56:18:e4:58:21:
         f8:34:b6:8f:e1:73:23:28:72:e8:22:c2:5d:49:ac:85:49:d2:
         7e:1f:6d:c8:97:b0:2b:38:d4:e9:4d:1f:31:aa:0f:f4:86:dd:
         0c:6f:ee:70:86:35:4f:df:03:e0:75:41:a3:a7:d0:71:74:d0:
         00:18:6c:83:9f:7f:39:2a:09:62:52:20:92:51:ab:01:42:bf:
         55:fd:b6:1b:4b:06:f4:e2:21:ff:e3:e7:32:c2:2e:08:62:f4:
         07:1e:94:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 09:26:27 2026 by rpki-client