Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft
File:                     xGxDuid9LBDufR7_PfDi78iFGh0.mft (raw, json)
Hash identifier:          M7+n1v7ljKNBgqzQ/G+jqIyzLpsQE/DhTTxbpE+lQwM=
Subject key identifier:   D0:B3:2C:E7:57:98:21:56:4D:F8:BD:0A:75:DA:36:2C:C5:C7:D2:77
Authority key identifier: C4:6C:43:BA:27:7D:2C:10:EE:7D:1E:FF:3D:F0:E2:EF:C8:85:1A:1D
Certificate issuer:       /CN=A913638A/serialNumber=C46C43BA277D2C10EE7D1EFF3DF0E2EFC8851A1D
Certificate serial:       013C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft
Manifest number:          0133
Signing time:             Sat 13 Jun 2026 05:32:49 +0000
Manifest this update:     Sat 13 Jun 2026 05:32:49 +0000
Manifest next update:     Sat 20 Jun 2026 05:32:49 +0000
Files and hashes:         1: xGxDuid9LBDufR7_PfDi78iFGh0.crl (hash: tAZEYHbfSaxJHnmclG8Pxkbg08VyYPd/l2M3O8CFnCs=)
                          2: 9D7ED59A954711EF9830412DC4F9AE02.roa (hash: ekvUghltwWP4FQ66hV4j9tf5nEe4NKO+RhKkAq+FQXQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.crl
                          rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 316 (0x13c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913638A, serialNumber=C46C43BA277D2C10EE7D1EFF3DF0E2EFC8851A1D
        Validity
            Not Before: Jun 13 05:32:49 2026 GMT
            Not After : Jun 20 05:32:49 2026 GMT
        Subject: CN=6a2ceb81-e827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:14:b3:ea:7d:5b:11:33:91:3f:35:68:6f:67:
                    bf:7b:dc:62:11:17:87:da:07:6d:57:be:65:7c:9c:
                    11:4e:c7:72:85:d3:37:83:26:4d:fe:5d:de:32:05:
                    8c:95:e7:dd:52:6d:1d:12:ca:79:48:5c:c5:7d:cd:
                    fa:c1:f7:b3:db:b6:c3:56:c2:90:9c:56:f3:73:67:
                    26:56:1b:4e:4b:ba:68:49:7f:2f:62:dd:83:95:48:
                    3f:55:63:d7:c9:6d:69:08:00:e0:a1:b8:d0:8f:4e:
                    00:4a:de:1b:55:e0:e2:6d:9d:cf:fe:50:9a:1c:b0:
                    ec:a8:ad:a1:ef:2f:bd:45:a9:3c:e3:cf:52:10:18:
                    93:19:e3:ed:98:86:e2:ae:bf:ab:48:ed:c8:5b:be:
                    f5:1b:d4:2b:29:f6:1d:fd:56:68:14:fd:5c:80:ff:
                    58:0e:29:b2:e8:5f:b8:49:45:1a:39:da:59:d2:a4:
                    ad:dc:04:dd:5d:84:be:09:5d:b2:df:e0:fb:20:70:
                    df:89:96:bf:45:e0:fc:d9:37:b6:99:c1:56:db:40:
                    49:e5:64:62:e0:a9:b7:47:df:2a:91:a3:b1:b3:9e:
                    ce:bd:76:b7:eb:4b:0b:cb:6c:82:bf:ae:16:a6:58:
                    88:92:d3:65:85:1b:7f:13:ce:9f:ae:b3:d0:65:e9:
                    f8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B3:2C:E7:57:98:21:56:4D:F8:BD:0A:75:DA:36:2C:C5:C7:D2:77
            X509v3 Authority Key Identifier:
                keyid:C4:6C:43:BA:27:7D:2C:10:EE:7D:1E:FF:3D:F0:E2:EF:C8:85:1A:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:26:32:fe:0c:da:1b:22:02:ce:c7:6b:e9:41:79:bd:60:9d:
         19:cb:7d:10:25:d5:61:65:84:b4:1f:c8:75:2e:9d:c9:b4:53:
         1e:27:57:4e:80:fb:49:fa:cc:8a:89:5a:04:51:d6:49:36:64:
         03:65:9e:bf:5a:d9:02:9a:0e:1b:da:37:1f:47:73:76:33:f8:
         af:38:d8:cc:7e:3e:01:db:1d:4b:09:fa:a9:a2:93:fd:3f:fc:
         e5:8b:71:ae:6c:41:66:df:b7:71:46:2c:d5:f7:85:8c:a4:b3:
         8f:7e:00:d3:26:ee:c8:ae:da:66:0d:e8:1f:aa:a6:ab:4c:54:
         a5:6e:fb:9c:f2:56:45:a0:fd:e0:15:16:63:ec:14:6a:3e:40:
         fb:53:2c:a1:67:2f:f6:00:4c:86:90:b4:30:b0:64:31:23:78:
         f4:35:ad:6b:8a:19:d9:67:5f:fb:b9:aa:a5:be:d7:f8:c2:80:
         67:b2:c3:df:91:75:6d:90:ae:29:0d:1d:c6:7d:7b:78:6d:49:
         db:60:6a:1a:ed:14:ba:9b:ee:94:f4:91:31:94:a6:fd:93:04:
         f3:20:ee:9c:91:17:1b:df:1f:4b:4a:56:de:69:3d:cf:cf:12:
         ec:35:64:bc:2a:09:3c:f6:f0:18:20:51:c4:96:9d:30:94:6f:
         8d:ff:e1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:46:56 2026 by rpki-client