Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft
File:                     cXLtDPRHBezrGWHROgV-z_MHyG8.mft (raw, json)
Hash identifier:          lhIlXIWPDDMIpR7hwU4iD6JIb6iM/h7cdYJl2vUT8UI=
Subject key identifier:   7F:0B:F3:64:49:25:CD:10:F6:E2:50:68:E6:83:84:5D:FB:C4:B6:94
Authority key identifier: 71:72:ED:0C:F4:47:05:EC:EB:19:61:D1:3A:05:7E:CF:F3:07:C8:6F
Certificate issuer:       /CN=A913B7C7/serialNumber=7172ED0CF44705ECEB1961D13A057ECFF307C86F
Certificate serial:       013D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft
Manifest number:          012D
Signing time:             Sat 13 Jun 2026 05:36:41 +0000
Manifest this update:     Sat 13 Jun 2026 05:36:40 +0000
Manifest next update:     Sat 20 Jun 2026 05:36:40 +0000
Files and hashes:         1: cXLtDPRHBezrGWHROgV-z_MHyG8.crl (hash: qA3UpVryGsAqZuMGHA9m7bgWMIJ19U2l1s+sMjbH/dQ=)
                          2: 1A1C5AF89D9C11EFAAA9FA6AC4F9AE02.roa (hash: A90aJCYjIr3J34Qclm1ssR9ehYnkyd4nyWXLA2mBndw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.crl
                          rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 05:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 317 (0x13d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B7C7, serialNumber=7172ED0CF44705ECEB1961D13A057ECFF307C86F
        Validity
            Not Before: Jun 13 05:36:40 2026 GMT
            Not After : Jun 20 05:36:40 2026 GMT
        Subject: CN=6a2cec69-e21f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e5:08:c3:ea:34:f5:11:10:f4:d1:bd:3b:bd:
                    b8:7b:a2:14:24:89:f9:b3:6b:f3:52:40:fc:f3:4b:
                    47:1c:e5:a8:1b:ad:e4:4c:f0:8d:83:81:a1:52:7d:
                    88:9a:82:de:c5:8f:bc:a2:6a:31:d7:0e:2d:c7:22:
                    52:a9:b3:57:20:fc:d9:00:91:8b:c5:34:b9:ec:a5:
                    d8:c7:d9:ec:00:bf:45:56:db:07:86:6e:c2:ad:e3:
                    1c:fe:45:91:47:78:16:66:6c:44:a7:e3:04:35:94:
                    40:05:38:40:29:b2:79:e5:3f:7c:45:be:35:c1:76:
                    0d:12:97:4e:ea:86:2b:ee:26:ef:07:a3:38:f4:15:
                    29:2f:2b:23:3c:b6:9c:05:13:f6:8f:2f:6d:40:2b:
                    c9:06:a0:9b:56:82:a7:b0:16:33:8f:a0:51:ac:e9:
                    e1:46:f6:aa:e4:37:8e:1b:83:78:da:fe:ea:90:4f:
                    67:28:f6:f9:05:99:7f:5b:93:99:ba:49:c6:2a:1f:
                    e2:b9:a9:c9:21:ce:2d:33:d6:fd:2c:ed:17:db:1f:
                    c7:a5:98:a3:c3:cb:3d:a3:05:ff:9b:3f:9d:ba:6d:
                    a3:3f:3d:f1:04:9c:c9:69:9b:a7:00:ad:e9:8b:3d:
                    a0:77:7e:3d:7a:07:1b:d4:98:df:95:79:b5:9a:0c:
                    83:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:0B:F3:64:49:25:CD:10:F6:E2:50:68:E6:83:84:5D:FB:C4:B6:94
            X509v3 Authority Key Identifier:
                keyid:71:72:ED:0C:F4:47:05:EC:EB:19:61:D1:3A:05:7E:CF:F3:07:C8:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:48:79:ae:a0:2b:db:83:a6:66:c2:5a:6d:97:20:a2:4c:cb:
         31:a3:1d:a3:c9:11:d6:c6:8b:c9:17:ec:2b:de:9e:a6:69:68:
         dc:5f:f2:3a:7d:ed:dc:44:6a:24:fb:4d:64:a7:28:d4:b4:12:
         00:53:04:63:95:40:69:41:b3:d3:92:ab:9c:21:8c:07:4b:70:
         a5:1c:69:2e:55:b6:96:45:6b:95:7b:8c:89:95:b3:aa:8f:41:
         05:60:23:26:80:22:30:ae:16:65:af:ff:5b:86:f8:29:5e:07:
         71:9d:48:22:fd:30:22:9a:5a:64:5a:8a:91:1b:f8:7c:0d:78:
         4e:68:db:73:bb:8b:05:ad:e1:42:98:b6:ee:b8:b3:b2:2c:ca:
         26:dd:f2:f8:c8:33:12:d9:59:10:be:77:82:fc:b5:86:30:7c:
         c3:0d:2b:d2:b4:27:06:be:45:5d:ce:5f:81:88:ce:d8:9b:dc:
         b7:10:ac:19:1c:c3:6b:fa:c1:2e:5a:48:78:de:c4:18:f4:a1:
         fb:3a:99:90:0c:48:44:9d:c0:6d:be:30:41:d8:b6:b5:4d:a0:
         15:ad:8a:0d:38:d5:fc:15:62:1c:30:d5:f1:e6:09:56:5d:42:
         11:4d:14:a2:2e:ea:72:e1:47:f2:f4:bf:98:d7:31:32:63:90:
         cf:cb:30:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:55:55 2026 by rpki-client