Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft
File:                     Xtho2ocq-NaWpcGp-ngp9lJzynk.mft (raw, json)
Hash identifier:          kK0J9eAXZKKbW1A3EmiBK53eP7kcrtDMiis/wQdM0hk=
Subject key identifier:   E5:83:BC:F7:16:BD:E2:CA:E4:B8:2B:02:0E:68:99:BF:30:6E:51:AF
Authority key identifier: 5E:D8:68:DA:87:2A:F8:D6:96:A5:C1:A9:FA:78:29:F6:52:73:CA:79
Certificate issuer:       /CN=A9119B43/serialNumber=5ED868DA872AF8D696A5C1A9FA7829F65273CA79
Certificate serial:       053D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xtho2ocq-NaWpcGp-ngp9lJzynk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft
Manifest number:          0532
Signing time:             Fri 12 Jun 2026 23:34:04 +0000
Manifest this update:     Fri 12 Jun 2026 23:34:04 +0000
Manifest next update:     Fri 19 Jun 2026 23:34:04 +0000
Files and hashes:         1: Xtho2ocq-NaWpcGp-ngp9lJzynk.crl (hash: 2psxyY3CoBKeL9eYbx/7O/zX+iPgKWMPRHVGdzo/3S0=)
                          2: 6C27C19E4BFA11ECA6797F6DC4F9AE02.roa (hash: d542I90WWDGGQbicaXbMdjG+yHM90agVdnOM5BcvIy0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.crl
                          rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xtho2ocq-NaWpcGp-ngp9lJzynk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 23:34:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1341 (0x53d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119B43, serialNumber=5ED868DA872AF8D696A5C1A9FA7829F65273CA79
        Validity
            Not Before: Jun 12 23:34:04 2026 GMT
            Not After : Jun 19 23:34:04 2026 GMT
        Subject: CN=6a2c976c-2d70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:cb:24:05:8b:2f:65:64:18:f5:a7:3b:08:a4:
                    32:ea:c0:bb:fe:24:98:fc:87:05:b1:b8:57:9e:28:
                    84:33:42:87:90:25:d5:6e:93:e6:28:b5:05:34:02:
                    e1:5f:b8:3f:62:93:7f:ca:c2:ce:e1:4a:c4:f2:99:
                    32:a7:9b:5e:69:ad:5e:e2:4d:d9:65:f5:a1:95:4b:
                    ac:e8:c2:df:61:13:56:23:22:24:2a:9f:db:41:43:
                    cc:9d:67:31:b0:ad:1c:b3:45:cb:bb:4c:91:1f:86:
                    a3:eb:dc:e3:20:30:c2:1f:9f:2e:62:c4:94:92:53:
                    ef:cf:52:8d:01:e7:ed:3a:95:a0:e7:88:9d:8f:25:
                    eb:b3:30:f2:8d:3f:6a:a7:49:4f:76:46:80:c6:9e:
                    69:06:d5:f6:cb:e9:9c:af:ad:4f:1e:68:8a:a4:6a:
                    64:ec:f2:04:8b:30:dd:af:84:6c:d0:c4:42:7c:44:
                    af:68:b4:ac:87:bf:d5:d7:d4:32:c0:6f:2e:ca:88:
                    f7:90:1b:86:ef:c6:e1:13:58:cb:fb:b7:d9:aa:7c:
                    d8:22:cd:f0:91:ed:e0:4b:d7:0f:54:30:75:b3:e8:
                    97:31:60:89:0d:ec:a8:7f:45:f4:8c:9b:ac:31:2f:
                    f4:7f:90:93:a4:a0:9f:29:10:a7:65:65:92:0b:f4:
                    7f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:83:BC:F7:16:BD:E2:CA:E4:B8:2B:02:0E:68:99:BF:30:6E:51:AF
            X509v3 Authority Key Identifier:
                keyid:5E:D8:68:DA:87:2A:F8:D6:96:A5:C1:A9:FA:78:29:F6:52:73:CA:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xtho2ocq-NaWpcGp-ngp9lJzynk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:1f:7a:f5:ec:7d:d0:47:5a:81:1b:f7:44:68:85:69:78:eb:
         59:47:0e:3a:4c:e4:be:09:5f:c9:02:a9:25:4d:6b:b9:3c:f5:
         c3:39:d5:48:0b:2f:00:4d:e3:c5:52:10:2e:4c:75:c7:5a:77:
         5e:92:1d:8a:13:39:c1:39:a6:14:2f:36:9c:8c:f1:3e:a9:d8:
         54:0b:78:7b:e1:c9:1f:0b:67:85:79:77:6d:99:06:4b:bd:c8:
         d3:ec:b8:22:f3:ca:0e:fb:b3:26:f1:1b:e3:7c:65:8d:37:e1:
         fb:ab:79:2b:97:86:a0:61:00:9a:f6:a8:8d:4d:31:93:ac:e1:
         ec:39:13:1b:55:4e:96:3e:4c:13:d8:b2:a2:30:55:69:28:14:
         52:3f:f3:49:f1:ca:25:6b:8a:e7:8d:6c:c0:32:4e:da:ba:d5:
         c8:8b:c1:63:37:33:5d:15:ba:32:ed:d7:6b:10:71:16:c7:9b:
         ca:3e:7c:33:e2:86:74:11:77:1e:a2:a2:2a:85:93:22:4d:0b:
         f1:5d:23:6f:7e:1b:6f:e2:29:a8:48:98:49:5d:36:73:5d:fd:
         89:29:cb:95:78:08:2c:63:43:d0:3a:16:b5:f8:e4:41:6e:e0:
         75:ba:41:84:b9:42:25:50:5a:db:d3:22:8d:f7:3a:23:36:09:
         c8:47:04:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:41:48 2026 by rpki-client