Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft
File:                     XUKGguien-2WK-nEQys0xF4uCck.mft (raw, json)
Hash identifier:          I1RKHAqamo0H5tknjOQpRpwza+740nTAPRvMpW7XlVs=
Subject key identifier:   7E:46:CD:31:15:1B:9B:D0:C2:BA:76:B1:16:7A:E4:9F:DA:FE:1A:CF
Authority key identifier: 5D:42:86:82:E8:9E:9F:ED:96:2B:E9:C4:43:2B:34:C4:5E:2E:09:C9
Certificate issuer:       /CN=A913F6DE/serialNumber=5D428682E89E9FED962BE9C4432B34C45E2E09C9
Certificate serial:       0CA7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft
Manifest number:          0C86
Signing time:             Mon 02 Mar 2026 01:26:01 +0000
Manifest this update:     Mon 02 Mar 2026 01:26:00 +0000
Manifest next update:     Mon 09 Mar 2026 01:26:00 +0000
Files and hashes:         1: XUKGguien-2WK-nEQys0xF4uCck.crl (hash: qAb1Ft7IZ4RAcQtsj/cL00ottY96uuYiIYlrihO24rA=)
                          2: 8C1F014E911411EF84279055C4F9AE02.roa (hash: ASP0s1dpJzxVuLP1cpiiY7Opvm/0WE0WvTsAQN/soC4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.crl
                          rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:25:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3239 (0xca7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F6DE, serialNumber=5D428682E89E9FED962BE9C4432B34C45E2E09C9
        Validity
            Not Before: Mar  2 01:26:00 2026 GMT
            Not After : Mar  9 01:26:00 2026 GMT
        Subject: CN=69a4e729-c3a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e6:ef:0d:da:b1:79:b9:c1:ca:12:5c:eb:ee:
                    39:7e:80:96:ea:64:f4:24:73:c1:9e:ea:ff:f7:96:
                    6d:7f:19:bf:5e:3e:d8:c8:74:48:4c:dd:5b:02:0c:
                    09:71:32:20:60:94:d2:81:af:c6:2a:dc:83:f8:12:
                    36:d1:cc:53:62:93:05:bd:40:d6:ec:fe:45:b0:c9:
                    28:9e:3d:92:ab:81:98:c0:cf:2e:2b:a4:c3:15:d0:
                    b3:54:25:86:f9:13:c4:95:98:e9:18:54:7c:e6:69:
                    99:fe:1c:f7:7b:0a:2d:95:e2:20:22:f4:bf:8f:37:
                    52:07:c2:de:f4:50:75:b6:f5:10:0e:ca:de:d9:48:
                    60:08:7e:3e:63:ce:0e:c3:d4:b0:d4:2b:be:d3:83:
                    2c:b6:a0:bf:09:ab:13:83:78:7a:da:aa:df:c3:46:
                    02:f3:41:ee:41:d4:4c:0b:f0:83:d9:a5:0e:5a:c1:
                    f4:06:2b:8b:47:15:b9:2e:6c:70:3a:9c:87:c0:cd:
                    11:68:a8:5a:06:f8:30:e7:74:67:da:6f:26:a9:fe:
                    52:a9:d4:50:b1:e6:7e:71:ea:66:ed:bc:e2:7a:b9:
                    b5:0e:3c:f0:4c:82:29:52:05:09:be:0f:48:be:b1:
                    c5:9c:0a:6b:5b:72:50:5b:37:3a:54:de:f7:b7:ad:
                    ce:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:46:CD:31:15:1B:9B:D0:C2:BA:76:B1:16:7A:E4:9F:DA:FE:1A:CF
            X509v3 Authority Key Identifier:
                keyid:5D:42:86:82:E8:9E:9F:ED:96:2B:E9:C4:43:2B:34:C4:5E:2E:09:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:02:db:53:55:fe:c8:34:9c:11:22:12:9e:3a:cc:0e:6a:bd:
         23:ee:d4:3a:c9:05:17:a3:09:cb:4c:7e:40:b2:4e:b5:f1:a6:
         ff:42:a5:23:04:44:10:e7:ae:0c:17:65:3c:04:54:91:f3:90:
         48:f5:84:7f:dc:0a:d9:fa:25:70:6a:ed:72:84:7f:bd:fd:9f:
         41:53:54:a6:04:f5:2d:96:e6:4c:7e:8c:64:76:c4:30:21:6f:
         91:14:5f:07:0e:70:cc:1a:ed:ba:23:a7:04:7e:fe:10:c6:69:
         a1:35:e3:4a:83:bf:ea:02:82:48:64:ce:c1:c7:fd:e6:6c:b7:
         3d:9f:fe:2d:29:40:6a:d1:5c:f1:05:8f:6f:55:a0:e6:a7:87:
         25:77:60:81:a2:7c:bb:fc:a9:82:a2:01:24:94:5b:97:96:bd:
         2e:45:94:53:e6:9d:d0:99:97:bd:2d:c2:6e:de:6a:cd:cf:d1:
         e6:7d:41:7e:d0:e6:93:cc:1d:fc:ae:1f:9d:96:3e:15:55:f2:
         9f:8f:d5:98:8f:2c:57:2f:22:9b:f5:5f:1d:1e:bb:69:52:5a:
         cf:46:a7:95:02:ee:79:59:76:58:bb:af:f7:3f:f4:dc:e5:f0:
         03:74:69:75:96:3b:68:a7:6f:bc:23:06:a3:52:3a:58:a8:b3:
         8d:6c:dd:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:16:44 2026 by rpki-client