Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAF73/D5FF1F405E7211EEBC2C4926C4F9AE02/xAXwYeM7BxfJBPwd8-ebzXlSD6Y.mft
File:                     xAXwYeM7BxfJBPwd8-ebzXlSD6Y.mft (raw, json)
Hash identifier:          3tljwKFVHgjJfNu0sOsv+f0+j91+bgp8eIiyKEakPJA=
Subject key identifier:   5B:87:9A:B0:C8:B4:86:33:01:20:CF:30:36:86:0F:AD:4D:06:E8:10
Authority key identifier: C4:05:F0:61:E3:3B:07:17:C9:04:FC:1D:F3:E7:9B:CD:79:52:0F:A6
Certificate issuer:       /CN=A91AAF73/serialNumber=C405F061E33B0717C904FC1DF3E79BCD79520FA6
Certificate serial:       01FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xAXwYeM7BxfJBPwd8-ebzXlSD6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AAF73/D5FF1F405E7211EEBC2C4926C4F9AE02/xAXwYeM7BxfJBPwd8-ebzXlSD6Y.mft
Manifest number:          01FA
Signing time:             Sat 13 Jun 2026 03:11:28 +0000
Manifest this update:     Sat 13 Jun 2026 03:11:27 +0000
Manifest next update:     Sat 20 Jun 2026 03:11:27 +0000
Files and hashes:         1: xAXwYeM7BxfJBPwd8-ebzXlSD6Y.crl (hash: t6pXvptwB1ByxUbUIiiCx98vjMu/Sj9/av2btk4vke8=)
                          2: 4B2F1F725E7811EE9307D234C4F9AE02.roa (hash: EcFjmxSDjXYlszuf2oD+q8KIZL69XyX6Am534xbF5Os=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AAF73/D5FF1F405E7211EEBC2C4926C4F9AE02/xAXwYeM7BxfJBPwd8-ebzXlSD6Y.crl
                          rsync://rpki.apnic.net/member_repository/A91AAF73/D5FF1F405E7211EEBC2C4926C4F9AE02/xAXwYeM7BxfJBPwd8-ebzXlSD6Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xAXwYeM7BxfJBPwd8-ebzXlSD6Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 03:11:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 511 (0x1ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AAF73, serialNumber=C405F061E33B0717C904FC1DF3E79BCD79520FA6
        Validity
            Not Before: Jun 13 03:11:27 2026 GMT
            Not After : Jun 20 03:11:27 2026 GMT
        Subject: CN=6a2cca5f-ec40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5c:62:5c:7e:8d:7e:c4:f6:d0:4a:75:75:18:
                    cc:d3:20:2a:26:5d:00:6c:09:7a:bb:9e:c4:b9:68:
                    72:b4:b5:eb:6e:e7:94:87:80:35:f5:1e:8c:e4:ae:
                    87:be:71:fb:53:a5:05:3d:37:c7:20:91:2f:2b:af:
                    05:47:bf:11:d4:db:52:4f:f4:45:3c:0a:0a:79:1f:
                    64:14:81:97:5d:a1:3c:62:74:a0:06:c5:fd:19:df:
                    ea:ba:bf:bd:27:ed:14:27:75:3a:c6:84:e1:36:ae:
                    7c:37:be:68:a1:a9:fd:d0:92:ca:7b:20:a8:df:67:
                    14:e7:ef:63:ed:bb:dd:d6:b3:c5:b1:8f:88:7d:37:
                    a4:c3:9f:f7:cc:38:dd:10:60:d7:1a:77:ff:b7:59:
                    7b:41:1b:a4:3d:b1:dc:06:b1:8f:aa:05:c9:dc:75:
                    82:c7:ab:d9:15:ec:60:e4:ef:77:7e:3e:b0:f3:d8:
                    b0:3b:b9:e9:86:38:e3:a0:96:35:87:0f:a8:ec:54:
                    11:69:54:dd:a3:08:10:97:32:87:ec:d2:9b:14:5b:
                    3a:a7:80:cd:c3:29:41:a8:27:a5:e9:0e:c9:02:08:
                    b7:45:37:da:8f:24:de:ab:91:81:09:2a:6c:ea:57:
                    f0:da:62:15:73:29:7f:79:58:20:5c:78:61:56:be:
                    3e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:87:9A:B0:C8:B4:86:33:01:20:CF:30:36:86:0F:AD:4D:06:E8:10
            X509v3 Authority Key Identifier:
                keyid:C4:05:F0:61:E3:3B:07:17:C9:04:FC:1D:F3:E7:9B:CD:79:52:0F:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AAF73/D5FF1F405E7211EEBC2C4926C4F9AE02/xAXwYeM7BxfJBPwd8-ebzXlSD6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xAXwYeM7BxfJBPwd8-ebzXlSD6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAF73/D5FF1F405E7211EEBC2C4926C4F9AE02/xAXwYeM7BxfJBPwd8-ebzXlSD6Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:26:71:07:43:20:92:f9:aa:9b:9d:56:a2:b3:fa:72:08:05:
         b4:9f:5f:f5:90:30:59:c1:b3:14:4a:d3:dc:06:5e:e8:b0:b3:
         dc:1b:f8:18:e0:21:43:0a:41:2b:16:5e:14:f9:4e:36:24:6d:
         79:42:91:0f:f1:1d:8a:cd:f2:ae:6f:34:bf:7e:b6:68:86:56:
         9c:fd:9c:1a:a3:b6:f5:a3:ce:39:00:a5:4a:90:1a:86:49:b9:
         9f:12:bb:26:b3:d4:2d:72:e9:d5:0d:a9:86:91:82:e8:a8:12:
         7f:28:5b:74:d6:57:6b:cd:9d:7e:06:33:07:86:d6:e1:da:ee:
         5b:10:41:62:1b:68:e4:42:9f:83:7a:d8:ae:ad:8a:57:b0:de:
         4d:68:d1:b2:52:38:a0:f0:52:22:aa:a2:d7:98:0d:fc:15:cc:
         20:78:17:bd:f1:ef:c3:ad:e6:2b:8a:ed:a3:a7:35:c2:37:19:
         48:ac:85:aa:12:84:10:13:2f:f8:c6:23:27:ff:0f:6f:bc:fd:
         22:fb:21:74:ad:41:3e:c9:69:2f:b0:53:cd:fc:96:7b:ce:08:
         7a:9d:f6:a6:38:17:1e:3a:e4:b2:ae:62:6b:5b:03:d4:11:c6:
         72:3e:c6:6c:df:71:cd:86:9a:34:ab:14:17:08:55:a6:9e:f0:
         40:3f:ef:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:22:05 2026 by rpki-client