Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/xbajYOSK75Kf3CcpbR1S9b9umRY.mft
File:                     xbajYOSK75Kf3CcpbR1S9b9umRY.mft (raw, json)
Hash identifier:          GS+XbpF16fu0El6A0Ie7n28RFG2v+LX04Qtml0CNIgc=
Subject key identifier:   EA:B9:34:51:D4:AF:8D:DF:D0:F4:2E:CF:6E:5F:2E:F1:37:05:71:0D
Authority key identifier: C5:B6:A3:60:E4:8A:EF:92:9F:DC:27:29:6D:1D:52:F5:BF:6E:99:16
Certificate issuer:       /CN=A91FD088/serialNumber=C5B6A360E48AEF929FDC27296D1D52F5BF6E9916
Certificate serial:       08A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbajYOSK75Kf3CcpbR1S9b9umRY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/xbajYOSK75Kf3CcpbR1S9b9umRY.mft
Manifest number:          089B
Signing time:             Tue 18 Aug 2026 20:57:02 +0000
Manifest this update:     Tue 18 Aug 2026 20:57:01 +0000
Manifest next update:     Tue 25 Aug 2026 20:57:01 +0000
Files and hashes:         1: xbajYOSK75Kf3CcpbR1S9b9umRY.crl (hash: egfV/IwqhaNR11BYNsuakFZOGrMts5SrynxWvOIP//Y=)
                          2: 423EA4CC039B11EBB3C1465CC4F9AE02.roa (hash: 6Topyg8bWLl5O5LsyGLXYfvkh05TDjr30BTYJNqKf6s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/xbajYOSK75Kf3CcpbR1S9b9umRY.crl
                          rsync://rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/xbajYOSK75Kf3CcpbR1S9b9umRY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbajYOSK75Kf3CcpbR1S9b9umRY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 20:57:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2214 (0x8a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD088, serialNumber=C5B6A360E48AEF929FDC27296D1D52F5BF6E9916
        Validity
            Not Before: Aug 18 20:57:01 2026 GMT
            Not After : Aug 25 20:57:01 2026 GMT
        Subject: CN=6a84c71e-c678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:48:67:3f:4b:b2:2e:71:f7:b3:27:5e:c1:ff:
                    bf:44:a2:61:c0:bb:d4:32:01:47:d5:18:71:8d:dc:
                    37:12:28:c7:f4:76:90:47:7d:a9:55:96:7d:4b:24:
                    7d:fd:c3:13:53:fa:2a:0b:d0:46:ae:10:a9:b2:df:
                    e2:e1:f2:4a:3f:05:52:48:4b:60:44:44:a7:cc:ba:
                    08:68:51:c9:1f:9f:1d:1e:6b:96:22:4f:fe:b2:93:
                    cc:7a:47:36:f9:f9:54:ed:fe:ae:39:78:a7:7c:1d:
                    89:fd:01:bb:94:f2:85:e4:24:f6:04:f8:6e:9c:7c:
                    30:74:d8:73:f8:15:f1:14:a5:da:65:d0:a1:0f:37:
                    21:64:26:b2:ff:8f:af:06:24:17:38:0d:69:fc:4d:
                    0a:ab:cb:95:29:e1:6e:a9:32:82:37:72:e0:81:dc:
                    48:c8:2d:66:2a:3d:8f:ef:68:38:5b:52:74:03:28:
                    99:eb:e3:b5:8c:cb:b7:ca:8e:84:2e:c9:23:3e:b6:
                    a3:03:1f:c4:bd:21:6d:bf:dd:9d:ab:0a:3e:cf:99:
                    63:8c:ef:be:a4:b1:fa:36:08:4a:26:9d:1e:6d:aa:
                    3f:86:f0:bf:ea:2e:9b:c9:b1:4e:c0:2a:48:fc:f4:
                    1f:69:31:6f:16:91:97:09:35:91:6c:c2:e0:93:6e:
                    a6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B9:34:51:D4:AF:8D:DF:D0:F4:2E:CF:6E:5F:2E:F1:37:05:71:0D
            X509v3 Authority Key Identifier:
                keyid:C5:B6:A3:60:E4:8A:EF:92:9F:DC:27:29:6D:1D:52:F5:BF:6E:99:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/xbajYOSK75Kf3CcpbR1S9b9umRY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbajYOSK75Kf3CcpbR1S9b9umRY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/xbajYOSK75Kf3CcpbR1S9b9umRY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:9d:17:60:dc:00:6d:17:1a:0a:af:a3:74:5e:30:e7:5c:ca:
         c8:f9:7b:4d:50:35:f2:e3:47:19:1f:0a:22:e5:a9:9e:f9:8d:
         9c:ff:5f:ca:73:ec:eb:31:31:fe:38:de:4c:8c:58:6b:85:fb:
         59:81:5b:48:56:4b:ea:34:5c:ad:f6:55:a8:7b:ef:3c:fb:46:
         f6:0d:78:04:ca:c1:72:72:9d:a7:03:84:1d:1a:05:a8:8c:4c:
         0f:08:a7:a4:69:21:c8:ca:d6:0c:c3:66:cb:b1:c6:6f:53:1c:
         88:22:43:92:59:da:24:1c:8a:22:17:e1:5d:48:33:af:9d:3c:
         09:8b:67:cd:72:6f:6d:08:a7:9e:26:64:40:c3:14:9e:83:6d:
         0f:75:a4:dd:44:d0:ba:73:7f:1c:c3:ed:5f:31:8b:49:e0:73:
         7b:ed:b7:6b:c8:52:89:d3:13:29:24:4e:dd:31:6b:a7:d7:21:
         08:62:29:03:ea:10:e0:31:90:3f:fc:70:07:3d:f4:e8:e9:3b:
         10:cc:8b:6c:0c:14:bb:5d:a1:0a:a7:66:98:09:0c:fa:64:0d:
         2e:08:b4:b8:06:c5:8e:f1:d0:17:42:98:41:b9:9e:30:87:6c:
         31:11:90:48:fb:d2:fd:7b:34:40:ba:c8:58:82:8a:16:c5:81:
         1d:27:c2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:52:46 2026 by rpki-client