Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft
File:                     XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft (raw, json)
Hash identifier:          fSugnfXOopQQSv4Shcs64HG+IIj6pVqgk6/GbjCqaB8=
Subject key identifier:   32:1C:1C:EE:06:B8:04:C8:E2:07:DC:59:FA:90:88:A9:D5:AE:6F:A4
Authority key identifier: 5E:C5:FB:33:4E:E5:2B:90:09:CB:92:3C:69:3B:D2:0F:04:78:A1:44
Certificate issuer:       /CN=A918EF87/serialNumber=5EC5FB334EE52B9009CB923C693BD20F0478A144
Certificate serial:       C6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft
Manifest number:          C4
Signing time:             Sat 13 Jun 2026 06:56:51 +0000
Manifest this update:     Sat 13 Jun 2026 06:56:50 +0000
Manifest next update:     Sat 20 Jun 2026 06:56:50 +0000
Files and hashes:         1: XsX7M07lK5AJy5I8aTvSDwR4oUQ.crl (hash: b92WpCBTw8w9Z7IS+u5XzMEyeyiKAUux/OQX2uunGEo=)
                          2: C053613E38B311F08DB63209C4F9AE02.roa (hash: XGziVhW7bV6WTpnAO5hHSMS6E/tbFN56AbeKUPYhFNI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.crl
                          rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 06:56:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198 (0xc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EF87, serialNumber=5EC5FB334EE52B9009CB923C693BD20F0478A144
        Validity
            Not Before: Jun 13 06:56:50 2026 GMT
            Not After : Jun 20 06:56:50 2026 GMT
        Subject: CN=6a2cff32-8cb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5e:e8:48:88:6a:9f:b5:20:a6:d4:54:3b:5b:
                    20:e5:f4:38:5d:41:48:ff:32:04:a4:29:32:26:e9:
                    e9:e9:6c:01:81:90:e7:40:95:69:c8:90:7d:b2:14:
                    5b:67:3a:32:cf:18:05:29:9d:e8:97:92:e8:c3:3a:
                    1d:48:86:6e:29:88:7b:fc:83:0a:14:96:c1:a3:45:
                    b0:e7:3a:c6:91:8f:df:2e:5f:b8:02:3e:90:97:f2:
                    2c:0b:4c:fc:27:5a:e9:60:60:4e:3e:29:3d:db:a3:
                    4b:ae:05:74:e4:c4:01:da:a3:f4:17:e8:db:9c:94:
                    36:37:58:7c:29:cb:dd:0d:81:85:60:c1:a6:c2:71:
                    50:39:33:4e:c8:3e:b3:12:17:8a:14:54:b9:f6:b0:
                    31:c0:b0:dd:ff:b3:b4:ba:aa:25:7c:34:c4:2e:fa:
                    10:a3:7e:22:c5:03:bc:ab:11:e2:8f:df:fc:3b:47:
                    7b:87:83:9f:8f:c6:4e:ed:d1:92:a6:72:d0:b5:3c:
                    4b:ec:81:53:d4:42:10:62:8d:71:ef:56:db:f9:14:
                    b8:6c:19:05:8b:3d:a3:88:d3:67:05:4a:0a:a8:e8:
                    d2:48:52:28:eb:39:76:52:d7:da:44:bf:89:67:46:
                    ed:92:e2:49:b4:40:15:9f:a2:28:c0:d3:74:b7:9b:
                    92:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:1C:1C:EE:06:B8:04:C8:E2:07:DC:59:FA:90:88:A9:D5:AE:6F:A4
            X509v3 Authority Key Identifier:
                keyid:5E:C5:FB:33:4E:E5:2B:90:09:CB:92:3C:69:3B:D2:0F:04:78:A1:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:2c:59:ae:d2:48:2d:77:67:fc:ba:c2:f8:24:83:54:52:ee:
         3e:34:b0:ae:26:4f:43:4b:26:34:57:2e:91:6c:b8:66:5b:49:
         1a:1e:66:b0:42:38:4d:43:91:b5:1e:ed:f0:68:06:ae:93:d2:
         8b:6a:04:95:70:bc:9a:87:6c:bc:62:77:9c:b8:4d:f8:1e:a8:
         d0:bc:ae:d2:4b:a0:fd:a1:19:63:08:bc:c3:21:4d:ac:db:11:
         09:ab:1f:10:11:db:4e:b1:29:54:fb:ad:04:7d:e6:e3:fb:19:
         d0:0c:08:8e:c5:e1:e1:7f:2c:f8:c1:e9:76:ad:89:f1:b8:85:
         dc:38:ba:14:01:3d:ad:d1:bf:84:c9:a7:a1:a5:99:6e:8e:56:
         84:d9:dc:3d:a1:f1:2b:c7:7e:fc:67:f6:48:16:30:c3:81:49:
         1e:eb:1e:01:c8:fb:23:e8:31:73:83:5a:2d:03:09:4e:40:77:
         5c:43:1e:83:bb:86:51:a5:47:c7:ac:31:7c:88:63:2e:f4:c1:
         f8:a7:da:35:cc:df:23:dd:a7:bb:43:ca:89:d4:e8:90:3f:e9:
         c4:a8:c2:96:9a:02:4a:6d:af:c6:78:39:30:a2:4c:7e:3d:cf:
         5a:5e:9e:23:39:8b:4c:84:a7:00:ff:3d:4e:8c:80:c3:4b:f7:
         0d:0e:46:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:55:34 2026 by rpki-client