Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft
File:                     xsPe6PYn19lovt8i_GEJRiUwF4M.mft (raw, json)
Hash identifier:          Jm+xbrfyluVXE/mDbF12lSPDIobfZ1/C8pP0LMwytmU=
Subject key identifier:   81:34:C2:ED:8F:21:A2:BE:89:B3:AF:03:65:44:1F:BF:59:D4:CC:79
Authority key identifier: C6:C3:DE:E8:F6:27:D7:D9:68:BE:DF:22:FC:61:09:46:25:30:17:83
Certificate issuer:       /CN=A9151258/serialNumber=C6C3DEE8F627D7D968BEDF22FC61094625301783
Certificate serial:       3588
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft
Manifest number:          3555
Signing time:             Fri 12 Jun 2026 15:10:27 +0000
Manifest this update:     Fri 12 Jun 2026 15:10:27 +0000
Manifest next update:     Fri 19 Jun 2026 15:10:27 +0000
Files and hashes:         1: xsPe6PYn19lovt8i_GEJRiUwF4M.crl (hash: EHCwT+cEIiRIBSFlnj3iS7WGqubkAGfkXUEEk56HhWU=)
                          2: AF01BDAE331211F1A2C10B79B1833773.roa (hash: +lp+LJ18Jwi0gflyPYkZccPDvT37HJQu97mBM2XRD3I=)
                          3: 504CB1588D3911F093856C71C4F9AE02.roa (hash: XbsPrmHsv3A3kJ0QH0nWqPm+aVwo38LG2afXIGK/eHk=)
                          4: 8CF6EB2A8D3C11F0A8123F21C4F9AE02.roa (hash: IHiT2JkC8madnsWfQDkJBYO++lG67IBJ1W4/S66TXLY=)
                          5: 8D769B548D3C11F0A8123F21C4F9AE02.roa (hash: 5cXLpNEPj2n6/HEGy8/26JkT8yzOfvZLJ/SaAIq5f84=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.crl
                          rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 15:10:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13704 (0x3588)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151258, serialNumber=C6C3DEE8F627D7D968BEDF22FC61094625301783
        Validity
            Not Before: Jun 12 15:10:27 2026 GMT
            Not After : Jun 19 15:10:27 2026 GMT
        Subject: CN=6a2c2163-8574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7f:4b:c9:c0:44:ca:ac:80:5e:2c:72:c9:b9:
                    07:61:70:39:09:8d:a0:50:0a:08:2f:49:78:85:3a:
                    88:76:bd:08:03:66:18:38:e4:74:b1:a4:ff:fe:b5:
                    81:3f:36:ba:e7:44:f9:91:e3:9c:82:c1:81:b6:ff:
                    de:d6:a3:d6:41:56:22:a8:5f:88:51:c4:ec:5f:ca:
                    d8:97:58:8e:95:7b:08:51:a2:39:e4:d7:2c:28:05:
                    04:14:94:8d:94:71:2c:84:07:ed:66:51:df:b3:63:
                    38:71:09:f1:11:86:70:e8:cb:7a:d2:63:0d:91:ad:
                    68:1f:61:29:e0:1b:dc:a5:29:b8:14:f8:c2:34:45:
                    1c:17:8f:ec:4e:2c:cf:3c:5e:1f:66:14:38:ae:ec:
                    ac:f4:20:46:e7:6c:3d:36:69:0f:b1:14:75:4a:d5:
                    1c:01:4e:f5:5b:d7:33:73:b6:66:d5:4e:dc:9d:2e:
                    ec:5a:b9:33:73:02:34:bc:75:66:9c:50:6d:68:38:
                    09:14:76:41:18:72:93:e6:c9:c0:43:76:80:97:8b:
                    7e:0d:35:f3:9d:61:f2:df:5a:38:c2:83:b7:e6:57:
                    ad:4c:69:ac:50:43:a5:ae:80:cd:fa:33:ee:5c:69:
                    01:e9:01:2f:dd:fc:58:9a:19:c2:28:09:4f:35:db:
                    e2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:34:C2:ED:8F:21:A2:BE:89:B3:AF:03:65:44:1F:BF:59:D4:CC:79
            X509v3 Authority Key Identifier:
                keyid:C6:C3:DE:E8:F6:27:D7:D9:68:BE:DF:22:FC:61:09:46:25:30:17:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:8e:24:5b:d8:47:57:1c:ff:71:41:1c:a6:ad:6e:34:5d:7c:
         de:17:ed:68:20:d9:b9:5f:84:4b:1e:48:3c:26:28:69:8b:94:
         04:bb:f7:2d:2a:1f:9e:6d:f2:76:18:d7:56:6e:7d:9e:a8:e3:
         2e:e7:97:24:5d:74:38:0f:09:1d:56:ab:b9:35:eb:e3:82:1f:
         42:57:63:01:e7:6e:d5:bc:c5:6f:dc:e7:4e:58:3e:0e:55:66:
         a5:5e:02:52:08:be:d6:ba:d5:e1:55:aa:a2:36:3b:58:94:6d:
         bb:8a:92:af:a8:9c:96:76:2f:02:a2:31:b9:a0:2a:c2:d4:8f:
         9d:0f:46:94:80:b6:3a:9c:2a:7a:51:1d:e0:01:45:4f:da:7f:
         67:8e:b7:52:b2:dc:e9:bc:45:ce:14:bc:7d:1a:eb:c5:be:13:
         64:66:41:c6:82:a2:61:c5:dd:1e:a4:b2:b2:ae:ec:b5:f0:c5:
         d0:46:b4:b5:57:25:aa:4b:38:6a:f4:d6:3f:aa:94:02:26:35:
         b1:ca:30:79:a2:c3:0b:d9:50:24:e2:7c:1d:f9:e9:fe:d7:43:
         52:06:15:35:0b:a3:d7:ba:16:b6:91:8b:58:81:e7:2b:c0:91:
         c6:df:0b:62:41:78:93:ab:a7:bf:68:b1:34:7f:61:09:41:f0:
         3c:4f:54:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:37:29 2026 by rpki-client