Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.mft
File:                     XTDuvxHkF41iO-G95Nu0y1nMhDc.mft (raw, json)
Hash identifier:          75k9HpxQDxLE0VFNkBbjbIQZXsU06v9ExXNFhhupMiI=
Subject key identifier:   32:B2:46:B1:39:51:71:AE:2B:60:38:B7:D4:4E:62:6A:A6:B6:AD:69
Authority key identifier: 5D:30:EE:BF:11:E4:17:8D:62:3B:E1:BD:E4:DB:B4:CB:59:CC:84:37
Certificate issuer:       /CN=A91AB1C2/serialNumber=5D30EEBF11E4178D623BE1BDE4DBB4CB59CC8437
Certificate serial:       67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTDuvxHkF41iO-G95Nu0y1nMhDc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.mft
Manifest number:          61
Signing time:             Sat 13 Jun 2026 08:12:17 +0000
Manifest this update:     Sat 13 Jun 2026 08:12:16 +0000
Manifest next update:     Sat 20 Jun 2026 08:12:16 +0000
Files and hashes:         1: XTDuvxHkF41iO-G95Nu0y1nMhDc.crl (hash: ifyqckWhaXbGpkguGdgzBF8w2oLZ/d8b9eDafkxH0PQ=)
                          2: 253978EAE0FC11F0B50D6A7D5F6F56BC.roa (hash: 6RxldyO2/Y3wToEhzB/mHNRPtNgIGcUmqFl9NgQBrdA=)
                          3: 24992E62E0FC11F0B50D6A7D5F6F56BC.roa (hash: eAx7dd7W8IzFugozPftJzHrtY4Ej4f42CnK31HLLaRE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.crl
                          rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTDuvxHkF41iO-G95Nu0y1nMhDc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB1C2, serialNumber=5D30EEBF11E4178D623BE1BDE4DBB4CB59CC8437
        Validity
            Not Before: Jun 13 08:12:16 2026 GMT
            Not After : Jun 20 08:12:16 2026 GMT
        Subject: CN=6a2d10e0-82c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:33:41:9c:ba:7f:1b:15:98:67:f2:a2:94:d5:
                    8d:50:b9:cc:63:89:ea:17:98:c3:ee:b4:41:ee:9a:
                    62:72:47:f1:76:cc:aa:82:7f:90:3d:24:d3:ec:54:
                    2d:60:7c:61:0b:4d:e3:ca:05:f1:65:24:cd:3f:bf:
                    3b:04:e7:11:e1:7e:5e:8e:6c:9d:52:ea:53:eb:0d:
                    72:9a:6d:35:23:30:87:45:a6:ee:1f:e1:93:05:75:
                    99:f6:8f:4f:ec:07:84:77:7c:dc:61:31:5b:6c:07:
                    d0:cb:b6:11:19:49:e6:b6:c3:bd:30:37:cd:2a:68:
                    3d:19:2a:55:cb:48:50:9f:e5:dc:79:79:bf:e5:16:
                    76:cd:5e:d6:b3:5b:40:ce:5c:ba:e6:58:d9:4a:5f:
                    32:75:bc:e3:c3:1b:78:81:43:18:f9:86:8f:8f:a6:
                    18:52:9c:4e:9b:2c:1d:56:9f:ff:81:bd:a9:f1:f3:
                    a5:0d:d9:02:4b:00:20:58:b5:34:52:eb:4a:ad:8e:
                    85:14:3c:5e:fd:91:b9:1d:b1:5f:26:00:1b:79:9c:
                    55:c5:18:e9:7e:69:81:8e:ee:15:8f:75:3d:ee:ad:
                    74:6c:0c:ff:5c:5f:bc:0b:60:ba:be:5a:11:6d:14:
                    1b:bc:14:4b:f7:5a:b0:dc:a1:9a:07:6b:2b:29:9e:
                    57:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B2:46:B1:39:51:71:AE:2B:60:38:B7:D4:4E:62:6A:A6:B6:AD:69
            X509v3 Authority Key Identifier:
                keyid:5D:30:EE:BF:11:E4:17:8D:62:3B:E1:BD:E4:DB:B4:CB:59:CC:84:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTDuvxHkF41iO-G95Nu0y1nMhDc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:d8:54:be:8a:45:ea:c1:63:e9:d3:83:f4:ae:25:0f:06:88:
         cf:ca:b4:ee:9b:38:d5:bc:64:ad:6d:7e:8a:61:25:3a:e8:f6:
         94:6f:b2:a8:e8:61:97:05:f2:6d:f8:de:9b:42:6c:94:bc:c9:
         58:98:15:39:c1:0f:bf:f7:36:9f:da:5a:09:b1:44:c3:b5:78:
         db:14:06:ca:b9:94:69:2d:f1:c0:8a:5d:56:24:56:ca:b0:69:
         a4:ec:a2:2e:9e:8b:35:8e:41:2f:d4:7a:81:57:8b:c7:1a:90:
         6c:24:29:b2:41:8f:5d:42:d4:20:d6:a9:cb:87:79:b4:81:32:
         4f:6e:0a:75:7d:d5:51:f8:bf:91:9c:4e:b2:05:00:55:c3:01:
         49:b8:7f:b1:3a:70:2f:ef:25:f2:f4:dc:ed:41:f2:50:87:d4:
         b9:50:1c:99:9e:f5:06:45:a1:d1:d5:af:ab:70:14:5f:5f:21:
         7e:cb:4b:ec:08:ed:65:ac:e8:6c:27:c2:a3:8c:65:d2:04:a8:
         48:6f:7c:dc:ee:b6:86:eb:15:0a:48:34:ca:65:2b:76:fd:f9:
         d0:f1:99:89:bf:d9:87:cc:17:e0:f3:c0:be:4c:75:6f:07:6b:
         b6:8d:76:10:e2:20:14:20:c1:16:b0:ac:ce:62:f7:d7:51:13:
         1a:3d:33:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:30:06 2026 by rpki-client