Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft
File:                     xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft (raw, json)
Hash identifier:          UDw3a6P9DTvk8UBwARzBSNRYpu5/Mg5PnteVZ6cdIzg=
Subject key identifier:   11:89:17:41:6F:FB:1C:F6:05:DC:85:78:6C:59:08:0D:50:87:E3:BE
Authority key identifier: C4:23:B0:80:32:62:33:DA:C0:8C:C3:0D:74:A6:5F:F4:A5:29:D0:9A
Certificate issuer:       /CN=A91411C0/serialNumber=C423B080326233DAC08CC30D74A65FF4A529D09A
Certificate serial:       079E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft
Manifest number:          0796
Signing time:             Fri 12 Jun 2026 21:34:02 +0000
Manifest this update:     Fri 12 Jun 2026 21:34:01 +0000
Manifest next update:     Fri 19 Jun 2026 21:34:01 +0000
Files and hashes:         1: xCOwgDJiM9rAjMMNdKZf9KUp0Jo.crl (hash: alAn0cMNml0MZ9OTIL4xnkBrpr1Y+qckFtww7+Rgb8I=)
                          2: 0361CF86560211EB97A98D46C4F9AE02.roa (hash: IhW0qxbo8h3sFHYh2PU8II7oZ+tmgZjeNcwWwyZj0fU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.crl
                          rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 21:34:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1950 (0x79e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91411C0, serialNumber=C423B080326233DAC08CC30D74A65FF4A529D09A
        Validity
            Not Before: Jun 12 21:34:01 2026 GMT
            Not After : Jun 19 21:34:01 2026 GMT
        Subject: CN=6a2c7b4a-af88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0f:e7:d5:de:33:42:f9:d6:e7:f9:ba:eb:3f:
                    48:43:04:28:75:af:9b:16:14:fa:dd:8a:c1:e7:f4:
                    b1:e3:fb:d8:74:62:c3:24:07:88:c2:7e:b4:00:ee:
                    17:3c:e7:29:59:46:12:9b:47:df:74:6a:e1:0b:34:
                    da:c7:25:ff:db:66:1e:3c:ea:ef:f1:ea:7f:e2:c2:
                    36:48:0b:c0:c7:4d:94:22:0c:ae:dd:40:72:eb:59:
                    35:7b:2b:d6:5e:e6:d2:2c:35:e5:f5:80:81:a2:1d:
                    7d:ec:22:03:b8:1e:db:42:0f:40:ad:5d:e4:ae:d8:
                    b0:47:de:45:75:4f:1d:0c:24:ab:62:82:97:16:71:
                    a1:40:66:94:79:0b:da:c7:49:60:8e:5f:b4:9e:ca:
                    65:84:9b:24:76:98:0f:91:dc:17:40:14:e5:75:d5:
                    d7:5b:f1:57:1a:31:a9:33:6e:4b:b1:89:80:f4:36:
                    bf:bf:6b:1d:ba:5b:21:3d:2a:33:ed:ac:fc:dd:39:
                    5e:a2:8c:b1:0c:09:0f:41:79:9e:b8:a7:b1:ee:e1:
                    4d:93:7f:0d:07:85:4c:f4:11:af:59:c1:0b:b9:ee:
                    f7:f5:5d:a3:e5:db:c0:34:39:4b:ca:0c:b5:8f:ea:
                    4a:f4:a4:7c:8b:ad:5f:f0:98:b6:32:ac:5c:37:16:
                    1d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:89:17:41:6F:FB:1C:F6:05:DC:85:78:6C:59:08:0D:50:87:E3:BE
            X509v3 Authority Key Identifier:
                keyid:C4:23:B0:80:32:62:33:DA:C0:8C:C3:0D:74:A6:5F:F4:A5:29:D0:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:34:0e:ba:b0:fc:11:2c:bf:d6:88:71:78:11:a4:c8:77:fe:
         6e:53:65:f7:28:22:dd:2b:2d:75:9b:ba:a7:3e:02:25:f4:41:
         78:62:d5:09:9e:eb:1a:94:01:0e:b3:52:6c:05:48:8a:ed:5b:
         e9:7f:2f:9c:31:9f:e5:ef:c3:99:40:18:0e:c5:4e:bd:ac:d6:
         ed:2a:13:d6:75:e9:e8:a1:92:03:c8:03:f4:d0:37:2c:6e:28:
         05:13:66:86:dc:6d:40:12:2c:8d:a1:1d:71:85:d9:85:58:ba:
         3f:b9:30:a5:c6:b7:22:91:d6:94:17:e1:dc:07:36:76:44:92:
         77:1d:cf:85:a7:4e:d2:9d:e3:bf:37:fb:b9:e9:ef:87:52:a6:
         e8:32:64:cb:35:5b:5b:f4:df:47:03:e8:6f:be:c1:f0:df:42:
         fd:65:bd:c9:86:d8:96:80:2f:95:89:bc:37:42:c9:d6:04:e0:
         aa:df:c2:e9:18:38:22:71:21:b7:1e:f6:4e:2b:83:43:56:d3:
         2e:bc:33:5d:aa:04:3d:03:98:ac:93:6a:6e:f8:99:7a:b3:b2:
         6a:d6:c4:56:ac:07:85:fe:bc:a0:f2:6b:5c:62:dc:12:2c:42:
         39:f3:52:36:f3:65:f3:b8:b3:06:21:47:12:12:06:fd:17:7c:
         16:e5:8e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:21:19 2026 by rpki-client