Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.mft
File:                     XUofz1MBwCdZyE7qVZFeJcFxpz8.mft (raw, json)
Hash identifier:          eY6SrqExv9BUPX0/yx7afuEXIBE9BaYrMkRCblkTMUg=
Subject key identifier:   D6:0A:8E:A8:36:6A:43:C8:F9:7F:D1:5A:66:2C:72:7F:4F:34:85:29
Authority key identifier: 5D:4A:1F:CF:53:01:C0:27:59:C8:4E:EA:55:91:5E:25:C1:71:A7:3F
Certificate issuer:       /CN=A91194E9/serialNumber=5D4A1FCF5301C02759C84EEA55915E25C171A73F
Certificate serial:       0358
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUofz1MBwCdZyE7qVZFeJcFxpz8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.mft
Manifest number:          0350
Signing time:             Sat 13 Jun 2026 00:58:45 +0000
Manifest this update:     Sat 13 Jun 2026 00:58:44 +0000
Manifest next update:     Sat 20 Jun 2026 00:58:44 +0000
Files and hashes:         1: XUofz1MBwCdZyE7qVZFeJcFxpz8.crl (hash: SO3BABfFoFgVU6U0ejlCFSE/PrsO9Nnytyngn30JSg8=)
                          2: 388802BC067711EDA1DEB529C4F9AE02.roa (hash: ZLrpjaK1+7gnd1piN93H0vUz3/K0I8ARXc+tRTMhSrw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.crl
                          rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUofz1MBwCdZyE7qVZFeJcFxpz8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 00:58:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 856 (0x358)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91194E9, serialNumber=5D4A1FCF5301C02759C84EEA55915E25C171A73F
        Validity
            Not Before: Jun 13 00:58:44 2026 GMT
            Not After : Jun 20 00:58:44 2026 GMT
        Subject: CN=6a2cab44-bcdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:eb:aa:71:0a:bb:5c:97:6d:ce:a2:1a:6e:46:
                    8b:5c:92:be:17:c0:2a:ee:9f:09:64:93:89:b0:5c:
                    9b:17:fa:8c:67:5b:a9:52:0f:26:bd:1b:11:19:85:
                    fa:d0:17:8a:7c:15:2b:52:06:2c:56:07:9e:6e:be:
                    06:6e:54:59:0b:5c:78:1d:b9:ca:c9:27:61:f7:0f:
                    d8:01:64:50:49:74:5e:10:b1:d5:47:9a:cd:85:8f:
                    d5:89:f1:f9:e3:44:e4:a0:b9:6e:e4:fb:03:aa:d9:
                    7e:42:8f:e8:7a:24:e5:79:15:57:05:52:82:4c:7d:
                    3a:89:cf:0f:a4:05:4c:18:23:b4:ed:9b:0e:b9:d3:
                    9f:f6:af:50:20:c2:9c:81:d0:ac:35:83:f4:e1:02:
                    e0:ad:83:73:bd:8e:2c:ae:c5:21:a6:c9:64:9c:ec:
                    c6:a2:5b:d5:7e:b3:aa:32:ab:7d:54:be:ce:aa:dc:
                    11:5a:53:60:94:47:2d:44:9e:65:77:6a:e8:40:66:
                    7c:1e:fc:3f:d6:29:11:6b:b3:bc:f6:29:21:c9:b6:
                    bc:71:a8:26:46:37:7a:c1:a8:23:55:f2:63:f7:c4:
                    40:2a:26:60:4e:76:36:5c:4f:9b:c9:09:97:b9:2f:
                    65:e0:91:33:be:08:56:35:c0:58:de:32:18:b8:63:
                    b1:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:0A:8E:A8:36:6A:43:C8:F9:7F:D1:5A:66:2C:72:7F:4F:34:85:29
            X509v3 Authority Key Identifier:
                keyid:5D:4A:1F:CF:53:01:C0:27:59:C8:4E:EA:55:91:5E:25:C1:71:A7:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUofz1MBwCdZyE7qVZFeJcFxpz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:c4:fe:d2:93:09:91:04:6d:5d:99:7c:c3:e6:ff:cd:7b:75:
         97:1a:51:c6:63:76:40:18:97:1b:b4:e3:a4:5c:90:92:07:0c:
         c8:d1:1a:5a:c8:20:8a:fd:e0:aa:de:b0:ba:df:e8:6a:73:13:
         1c:7e:40:05:88:7d:65:92:69:ae:99:10:ff:38:9f:78:76:be:
         59:d1:09:9e:88:ad:28:52:4d:7b:7f:35:36:43:d6:de:56:f5:
         c8:43:29:b3:45:88:07:00:ae:ac:3c:80:82:18:d0:e2:b1:d2:
         56:f8:26:9a:c3:84:8a:6c:6f:f2:6e:e6:44:e5:23:1d:c0:49:
         e5:3e:e7:ed:19:6b:3f:72:4d:d1:58:32:fc:33:68:af:3b:62:
         19:c1:62:20:62:27:2f:0a:a6:98:af:d9:5c:7c:22:76:ad:bd:
         d5:0c:90:5e:4a:55:63:46:a0:c3:99:57:d0:44:a4:15:3b:2a:
         d1:da:02:9b:26:9e:53:d3:bd:64:ca:e8:0b:67:c8:5f:3c:b1:
         01:a2:b1:be:71:36:c0:65:8c:3d:05:9a:04:7d:2a:19:13:42:
         59:c0:91:8d:72:8b:bd:b1:95:88:77:06:32:41:27:94:4b:3a:
         b1:6d:20:ea:7e:89:5b:0c:d5:6c:b7:01:b7:8a:50:56:c5:45:
         01:01:e3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:05:54 2026 by rpki-client