Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/XAPGyccm_z0gJ0cKGKDIgiLsZvs.mft
File:                     XAPGyccm_z0gJ0cKGKDIgiLsZvs.mft (raw, json)
Hash identifier:          2DmQplErr6TTyJfDEmlVMq6tk/Y1xgccthqwGTMf7HA=
Subject key identifier:   25:81:4D:E9:09:E1:1A:BF:8C:89:01:CC:F1:A8:B0:CC:6C:87:54:DA
Authority key identifier: 5C:03:C6:C9:C7:26:FF:3D:20:27:47:0A:18:A0:C8:82:22:EC:66:FB
Certificate issuer:       /CN=A9162B98/serialNumber=5C03C6C9C726FF3D2027470A18A0C88222EC66FB
Certificate serial:       5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAPGyccm_z0gJ0cKGKDIgiLsZvs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/XAPGyccm_z0gJ0cKGKDIgiLsZvs.mft
Manifest number:          5C
Signing time:             Thu 11 Jun 2026 10:27:37 +0000
Manifest this update:     Thu 11 Jun 2026 10:27:37 +0000
Manifest next update:     Thu 18 Jun 2026 10:27:37 +0000
Files and hashes:         1: XAPGyccm_z0gJ0cKGKDIgiLsZvs.crl (hash: PGhL8S1zklmdM3R0TlRQFzf4n4RZUJhwRv8kaNcmOnM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/XAPGyccm_z0gJ0cKGKDIgiLsZvs.crl
                          rsync://rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/XAPGyccm_z0gJ0cKGKDIgiLsZvs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAPGyccm_z0gJ0cKGKDIgiLsZvs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 10:27:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162B98, serialNumber=5C03C6C9C726FF3D2027470A18A0C88222EC66FB
        Validity
            Not Before: Jun 11 10:27:37 2026 GMT
            Not After : Jun 18 10:27:37 2026 GMT
        Subject: CN=6a2a8d99-d21f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ee:08:80:ba:04:73:04:6f:d6:32:6d:54:a7:
                    55:20:ad:c1:23:a6:39:a4:87:c0:9a:b1:82:b3:21:
                    26:47:cc:38:74:c0:ee:87:6f:0d:48:11:f9:8c:d4:
                    e6:c1:01:24:62:71:35:99:39:4c:c0:99:aa:1b:2b:
                    a9:7d:0c:04:13:3c:66:98:0a:6e:69:a7:66:56:47:
                    24:21:cb:38:7f:59:78:bd:e4:5e:b1:06:94:6e:f4:
                    e8:da:11:e5:93:45:c1:a6:fe:53:65:64:a4:e8:e4:
                    c3:84:17:92:25:5a:55:c4:a2:07:54:4a:58:8d:8c:
                    83:e6:72:06:09:22:70:37:d8:cd:6b:07:6a:f4:db:
                    62:a3:26:e4:35:17:b6:45:1e:3d:79:ea:fc:00:d3:
                    06:ce:6d:2b:7f:3f:bc:86:de:fd:44:59:05:50:cb:
                    90:e5:60:ff:ec:9e:01:04:e8:60:bc:8e:89:b5:04:
                    25:65:7b:1c:1e:03:f6:09:5a:32:3f:58:41:d8:de:
                    25:f4:f8:30:78:7f:c6:67:4f:9f:9c:05:12:0a:72:
                    94:bf:bd:06:44:de:18:25:18:27:48:f9:67:ba:fd:
                    41:7c:54:43:50:98:82:d6:ee:27:01:94:3a:1c:5b:
                    74:2d:2c:47:35:26:3f:56:c1:fd:a9:51:a8:36:b7:
                    c4:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:81:4D:E9:09:E1:1A:BF:8C:89:01:CC:F1:A8:B0:CC:6C:87:54:DA
            X509v3 Authority Key Identifier:
                keyid:5C:03:C6:C9:C7:26:FF:3D:20:27:47:0A:18:A0:C8:82:22:EC:66:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/XAPGyccm_z0gJ0cKGKDIgiLsZvs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAPGyccm_z0gJ0cKGKDIgiLsZvs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/XAPGyccm_z0gJ0cKGKDIgiLsZvs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:cf:27:9e:c2:bd:7c:16:18:96:41:7a:ab:dc:34:2b:bb:ef:
         da:d4:5a:15:3e:8b:9e:fe:27:a3:65:17:ae:96:7f:f0:d5:c9:
         1b:27:cf:7b:68:bd:89:15:08:1b:0b:ff:23:36:de:b5:f5:c1:
         25:7f:a1:02:89:15:25:70:e0:7d:55:a7:6d:8f:11:03:0a:c3:
         bb:9a:4a:fc:08:1b:84:bd:2d:af:9c:00:29:8c:aa:2f:5e:b5:
         94:0a:af:25:06:cc:6e:4c:a2:42:e6:89:d1:17:43:4e:e7:00:
         d2:c8:72:60:63:57:a1:7a:9b:4b:ff:30:ed:a1:74:c6:3f:ef:
         5b:2c:13:6e:49:ba:a7:97:35:16:de:73:4c:f5:35:e9:e0:90:
         e5:09:17:17:b3:b0:9a:7f:c7:3a:2d:b7:cc:89:5b:18:82:fd:
         84:3f:6e:23:f7:59:99:a3:19:03:00:2b:f9:56:79:5f:46:cd:
         53:2c:a7:39:38:fd:c2:5a:02:c1:d0:83:f8:aa:47:d4:2e:99:
         e3:04:1f:f0:f9:71:51:6f:4f:88:b3:35:5f:29:b8:f2:3c:f8:
         17:ba:22:e6:0c:04:28:2b:1a:3e:89:b0:ac:77:73:c4:ce:9f:
         b9:31:23:2c:dd:87:01:34:53:ef:eb:77:2f:36:f7:88:92:44:
         ec:a1:e5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:10:57 2026 by rpki-client