Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft
File:                     XUKGguien-2WK-nEQys0xF4uCck.mft (raw, json)
Hash identifier:          avcoZWMQ00UK+j+EzbD9Bxc1r2s7HZv8DA7AEo07+DU=
Subject key identifier:   46:15:22:DC:DD:1A:58:8B:3F:F0:D4:34:B7:56:9F:F8:11:47:89:1C
Authority key identifier: 5D:42:86:82:E8:9E:9F:ED:96:2B:E9:C4:43:2B:34:C4:5E:2E:09:C9
Certificate issuer:       /CN=A913F6DE/serialNumber=5D428682E89E9FED962BE9C4432B34C45E2E09C9
Certificate serial:       0CDC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft
Manifest number:          0CBB
Signing time:             Fri 12 Jun 2026 18:34:26 +0000
Manifest this update:     Fri 12 Jun 2026 18:34:26 +0000
Manifest next update:     Fri 19 Jun 2026 18:34:26 +0000
Files and hashes:         1: XUKGguien-2WK-nEQys0xF4uCck.crl (hash: otmxChdhcHUmtaMAwSo2cBFW/p8EYhwluIGGJyND2Sc=)
                          2: 8C1F014E911411EF84279055C4F9AE02.roa (hash: ASP0s1dpJzxVuLP1cpiiY7Opvm/0WE0WvTsAQN/soC4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.crl
                          rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 18:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3292 (0xcdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F6DE, serialNumber=5D428682E89E9FED962BE9C4432B34C45E2E09C9
        Validity
            Not Before: Jun 12 18:34:26 2026 GMT
            Not After : Jun 19 18:34:26 2026 GMT
        Subject: CN=6a2c5132-77a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:30:13:82:4e:12:7d:ba:1f:15:48:86:84:cc:
                    29:4b:26:92:5f:00:56:d6:9d:a5:b1:ad:d8:7b:60:
                    15:3c:69:4d:b7:73:88:a4:73:b7:e6:dd:37:90:71:
                    03:28:e9:f4:50:3e:b7:27:36:ea:a9:6f:9a:c9:69:
                    36:c3:dd:80:08:00:52:58:fe:77:4e:3e:2a:36:28:
                    39:94:d2:49:0f:88:a8:12:8b:ca:87:10:d8:64:9e:
                    e8:27:43:6f:d9:84:6b:dd:e4:2f:a2:95:a2:9d:7a:
                    2e:3e:f6:ad:30:87:c7:70:31:b0:d9:08:d2:80:f6:
                    0e:a0:de:9c:fc:b4:cd:c5:3e:22:16:ca:d5:97:a6:
                    3b:90:8e:c0:4a:a2:01:ef:8c:ce:4b:f2:ab:4f:fb:
                    1d:b9:44:7c:0e:63:a2:e3:57:69:f6:cf:01:06:da:
                    99:7e:69:6e:77:34:ff:b9:76:fa:92:7e:a8:09:e7:
                    04:3e:91:9b:8c:f2:e9:67:13:56:cf:f0:e5:c8:8c:
                    71:f9:e9:7b:06:87:07:79:9d:e2:4a:6e:86:2d:4f:
                    f9:a5:e8:8a:f4:bf:06:47:a8:30:3e:12:ed:3c:9e:
                    6d:41:35:da:a8:bb:8c:a2:e9:79:c1:27:d0:9d:6f:
                    d6:99:60:31:e4:aa:1d:fe:7e:db:3c:7d:69:2a:b1:
                    04:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:15:22:DC:DD:1A:58:8B:3F:F0:D4:34:B7:56:9F:F8:11:47:89:1C
            X509v3 Authority Key Identifier:
                keyid:5D:42:86:82:E8:9E:9F:ED:96:2B:E9:C4:43:2B:34:C4:5E:2E:09:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:8c:83:f6:b8:89:f6:98:31:44:7d:85:4c:81:a3:14:ea:6a:
         ac:d4:00:e0:54:ec:2b:2d:87:46:51:06:cf:25:cc:d9:cb:bc:
         12:bb:86:fa:2d:c6:78:56:87:43:4f:5e:86:01:e0:7c:2c:f6:
         45:e8:3f:d1:d7:a7:77:52:97:85:dc:4c:69:76:fd:f2:3a:f5:
         8c:02:56:6a:75:5a:ad:d7:ba:f5:b0:7b:b3:6f:91:59:33:c2:
         be:8a:d8:a1:f1:6f:6a:2e:0f:dd:61:3a:6b:70:a3:0e:41:5f:
         f0:b8:83:f8:45:ca:32:b3:bb:43:91:ee:18:df:e0:c2:6d:75:
         27:88:73:2a:0d:ff:21:14:86:cf:68:cc:c8:93:d4:60:cc:8a:
         f9:9c:47:63:90:e5:8c:2b:65:a7:f9:a8:6b:dd:80:4b:68:a0:
         46:c4:92:b2:82:0d:07:f0:09:f0:2d:15:3e:31:41:60:f9:2c:
         e0:db:f2:89:33:34:3f:2a:4e:97:ed:37:b0:7c:89:7c:2d:0f:
         5e:2d:6f:97:95:f6:7a:3a:9f:b8:1c:a8:20:e5:a6:d6:6e:f7:
         c7:a2:84:16:31:c2:a2:f8:e6:a4:b2:65:b9:c7:2d:fc:96:a7:
         e4:50:be:b1:4d:0e:ae:0c:7e:c2:0f:66:9c:b1:12:99:fe:a5:
         b4:99:5b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:46:07 2026 by rpki-client