Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.mft
File:                     XiM50eqvU0mhOKR5fagtDrTfqew.mft (raw, json)
Hash identifier:          fOlv7yD7Vcq/FV3+HDeCX4zQmqqKWELBlqf6VlKfdXc=
Subject key identifier:   04:C6:51:1E:B9:A8:97:A4:87:27:80:3A:44:60:FC:9F:EF:4A:8D:0C
Authority key identifier: 5E:23:39:D1:EA:AF:53:49:A1:38:A4:79:7D:A8:2D:0E:B4:DF:A9:EC
Certificate issuer:       /CN=A918CFAD/serialNumber=5E2339D1EAAF5349A138A4797DA82D0EB4DFA9EC
Certificate serial:       01A8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XiM50eqvU0mhOKR5fagtDrTfqew.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.mft
Manifest number:          01A1
Signing time:             Sat 13 Jun 2026 04:13:00 +0000
Manifest this update:     Sat 13 Jun 2026 04:13:00 +0000
Manifest next update:     Sat 20 Jun 2026 04:13:00 +0000
Files and hashes:         1: XiM50eqvU0mhOKR5fagtDrTfqew.crl (hash: SmGE25fL8TeQCsPk/mcbVI9o9phR+ht0OhQ+tS7nSls=)
                          2: D161B1F0EA0411EE98A86A13C4F9AE02.roa (hash: BV9XfPuDyzg+pUATxcOqBJ05a9l83d0h3SXHTFR+g1Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.crl
                          rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XiM50eqvU0mhOKR5fagtDrTfqew.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 04:12:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 424 (0x1a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918CFAD, serialNumber=5E2339D1EAAF5349A138A4797DA82D0EB4DFA9EC
        Validity
            Not Before: Jun 13 04:13:00 2026 GMT
            Not After : Jun 20 04:13:00 2026 GMT
        Subject: CN=6a2cd8cc-7f5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:25:de:e2:a5:0e:b1:75:f3:59:de:b3:af:6a:
                    86:cd:38:8b:d2:37:ee:a5:70:54:99:06:bc:de:0a:
                    8e:5b:e0:44:0c:c2:f4:02:b2:c5:b5:73:7b:36:6d:
                    f3:d1:a2:8f:3d:e0:ef:52:ac:aa:d4:71:ce:be:82:
                    77:58:aa:cf:55:09:15:6d:5e:84:59:70:46:9b:e2:
                    73:90:52:60:5c:de:99:2a:98:11:53:93:6e:db:4d:
                    51:ec:de:3e:fc:57:1b:5d:aa:d2:23:21:22:61:5d:
                    e6:cb:54:ba:68:61:d7:29:1c:d3:4e:0c:18:8c:17:
                    e2:35:1d:23:68:23:43:35:37:da:3c:48:76:67:6e:
                    b1:20:c5:0a:68:53:3d:be:e3:70:ac:a4:21:c6:71:
                    60:b7:15:b3:75:7b:4d:c6:04:05:c7:49:94:ad:d1:
                    96:41:e3:fa:5f:3a:11:fb:cc:45:ed:3b:79:50:48:
                    15:50:11:23:37:27:8f:61:fa:7b:34:27:14:21:79:
                    b6:2d:7d:d0:b4:c7:54:c3:a4:d2:aa:24:99:f8:2c:
                    bd:77:32:aa:08:3e:2b:35:7e:33:eb:e0:c5:27:50:
                    5b:10:fb:0a:7e:63:e3:07:80:b8:87:d5:d8:c7:1a:
                    42:74:d3:b1:1c:23:65:1a:09:1f:8d:2a:ae:47:77:
                    86:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:C6:51:1E:B9:A8:97:A4:87:27:80:3A:44:60:FC:9F:EF:4A:8D:0C
            X509v3 Authority Key Identifier:
                keyid:5E:23:39:D1:EA:AF:53:49:A1:38:A4:79:7D:A8:2D:0E:B4:DF:A9:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XiM50eqvU0mhOKR5fagtDrTfqew.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:f1:48:cd:47:eb:e3:d9:73:45:3d:b0:7f:e0:80:18:10:1c:
         1d:b5:ec:32:af:6c:75:e3:94:23:3d:77:f7:02:62:a3:1b:e8:
         e9:d2:e2:cf:63:e3:b3:a1:4f:3a:08:34:94:91:80:bb:d3:b8:
         c4:9e:9b:a7:bb:f2:0c:79:68:9f:4d:99:50:70:d2:33:31:1e:
         04:40:19:cb:4a:ac:b9:98:e7:01:82:dd:86:d0:35:e6:db:1d:
         e6:6f:e0:cf:15:57:f0:26:d5:b3:af:84:1d:e9:75:d0:f4:db:
         e1:2d:22:b1:a2:c4:5e:30:8d:cc:d7:a9:ee:1c:4a:76:47:f1:
         40:42:13:a6:e5:64:02:b7:01:00:31:f0:de:9e:4f:0e:6a:4a:
         e7:ae:4b:9e:a2:c4:e8:40:d3:53:26:e5:a6:a4:28:a2:f6:6e:
         85:84:24:ed:1e:9e:79:36:c9:6f:bf:aa:0f:92:8d:4a:7d:10:
         a4:c5:39:66:33:ec:a7:9c:9a:61:5b:53:40:9e:cb:37:68:f4:
         bb:42:b7:71:33:9f:7e:2f:b0:37:fd:36:a2:91:61:a8:7a:60:
         18:f6:82:20:c8:f1:a4:4c:74:d4:4e:57:b6:4c:a2:76:5f:a2:
         c4:33:2f:4c:c7:33:48:98:dd:91:fb:f5:54:2c:ea:a6:33:78:
         2f:d2:57:42
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OENGQUQxMTAvBgNVBAUTKDVFMjMzOUQxRUFBRjUzNDlBMTM4QTQ3OTdEQTgyRDBF
QjRERkE5RUMwHhcNMjYwNjEzMDQxMzAwWhcNMjYwNjIwMDQxMzAwWjAYMRYwFAYD
VQQDEw02YTJjZDhjYy03ZjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwyXe4qUOsXXzWd6zr2qGzTiL0jfupXBUmQa83gqOW+BEDML0ArLFtXN7Nm3z
0aKPPeDvUqyq1HHOvoJ3WKrPVQkVbV6EWXBGm+JzkFJgXN6ZKpgRU5Nu201R7N4+
/FcbXarSIyEiYV3my1S6aGHXKRzTTgwYjBfiNR0jaCNDNTfaPEh2Z26xIMUKaFM9
vuNwrKQhxnFgtxWzdXtNxgQFx0mUrdGWQeP6XzoR+8xF7Tt5UEgVUBEjNyePYfp7
NCcUIXm2LX3QtMdUw6TSqiSZ+Cy9dzKqCD4rNX4z6+DFJ1BbEPsKfmPjB4C4h9XY
xxpCdNOxHCNlGgkfjSquR3eGtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFATGUR65
qJekhyeAOkRg/J/vSo0MMB8GA1UdIwQYMBaAFF4jOdHqr1NJoTikeX2oLQ6036ns
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0ZBRC80QzkwMEYxQ0VB
MDQxMUVFOTJEMTA2MTFDNEY5QUUwMi9YaU01MGVxdlUwbWhPS1I1ZmFndERyVGZx
ZXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1hpTTUwZXF2VTBtaE9LUjVmYWd0RHJUZnFldy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
Q0ZBRC80QzkwMEYxQ0VBMDQxMUVFOTJEMTA2MTFDNEY5QUUwMi9YaU01MGVxdlUw
bWhPS1I1ZmFndERyVGZxZXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA2vFIzUfr49lzRT2wf+CAGBAcHbXsMq9sdeOUIz139wJioxvo6dLiz2Pjs6FP
Ogg0lJGAu9O4xJ6bp7vyDHlon02ZUHDSMzEeBEAZy0qsuZjnAYLdhtA15tsd5m/g
zxVX8CbVs6+EHel10PTb4S0isaLEXjCNzNep7hxKdkfxQEITpuVkArcBADHw3p5P
DmpK565LnqLE6EDTUyblpqQoovZuhYQk7R6eeTbJb7+qD5KNSn0QpMU5ZjPsp5ya
YVtTQJ7LN2j0u0K3cTOffi+wN/02opFhqHpgGPaCIMjxpEx01E5Xtkyidl+ixDMv
TMczSJjdkfv1VCzqpjN4L9JXQg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:15:31 2026 by rpki-client