Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft
File:                     xgie68VWt39k5EJJpouV1b2UHkA.mft (raw, json)
Hash identifier:          5PtvU9jwrZW+b5Vo9/jEbblsjuGt9X7t0jcT4sqedgE=
Subject key identifier:   60:00:24:DF:13:4F:37:75:19:02:12:C9:4E:BC:7F:F8:27:2F:DB:27
Authority key identifier: C6:08:9E:EB:C5:56:B7:7F:64:E4:42:49:A6:8B:95:D5:BD:94:1E:40
Certificate issuer:       /CN=A91ADFD3/serialNumber=C6089EEBC556B77F64E44249A68B95D5BD941E40
Certificate serial:       23FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft
Manifest number:          23CB
Signing time:             Fri 12 Jun 2026 15:47:20 +0000
Manifest this update:     Fri 12 Jun 2026 15:47:20 +0000
Manifest next update:     Fri 19 Jun 2026 15:47:20 +0000
Files and hashes:         1: xgie68VWt39k5EJJpouV1b2UHkA.crl (hash: mkHp6YHhwFAyE6Bn6NCBAKGTp0yksdng/tFw2tL0HI8=)
                          2: 6880FA2C59D211EAB77C8C13C4F9AE02.roa (hash: hJzT/XLLbMceVkg1RnXkgd5dOl16o+CTb6P8jS+3k+A=)
                          3: 678DA8FE59D211EAB77C8C13C4F9AE02.roa (hash: uilr/VzadspQ9DLCCiVVicEIdw3R/zCYDu3WsWsjhCg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.crl
                          rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 15:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9215 (0x23ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADFD3, serialNumber=C6089EEBC556B77F64E44249A68B95D5BD941E40
        Validity
            Not Before: Jun 12 15:47:20 2026 GMT
            Not After : Jun 19 15:47:20 2026 GMT
        Subject: CN=6a2c2a08-905b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:49:a3:bf:f7:80:9a:ba:ad:09:3e:e2:a2:49:
                    15:cd:19:52:5a:56:18:15:48:21:c5:1c:a6:c3:b6:
                    47:a4:d8:84:39:6b:0d:d4:84:21:d0:e2:e0:c2:60:
                    3d:83:cb:51:b2:9e:04:e4:86:fb:3c:9e:26:8b:f8:
                    c4:a7:bf:ea:c6:4c:01:7d:ae:c0:94:61:f5:33:49:
                    13:22:71:f6:ea:6b:84:23:53:59:d7:49:79:af:21:
                    3f:54:af:ad:96:06:fe:38:e2:82:8a:13:8d:98:3e:
                    de:85:42:49:b3:50:92:a5:59:80:32:2f:2f:75:f7:
                    15:5e:84:2d:d1:97:db:bf:f3:97:a2:a0:8a:e5:74:
                    71:28:a9:b1:e2:b7:49:0e:a7:0b:d0:12:57:81:53:
                    ad:a4:69:ef:93:44:de:bf:a0:ad:39:4e:59:f1:93:
                    89:73:a2:09:4c:f2:6f:8c:42:f2:b2:9c:62:3b:20:
                    30:8f:05:da:ca:d6:dd:4a:77:7a:c1:b6:b2:3f:7e:
                    87:c2:36:54:ac:23:98:d1:9f:10:da:3d:8b:8b:ef:
                    f1:2d:c0:87:15:94:37:44:20:88:2b:47:ed:13:73:
                    a4:5c:31:73:3f:aa:65:a5:84:79:c0:cc:ef:f6:c5:
                    27:71:3b:c1:48:c8:b9:a7:f9:e9:32:11:0f:2e:1a:
                    b1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:00:24:DF:13:4F:37:75:19:02:12:C9:4E:BC:7F:F8:27:2F:DB:27
            X509v3 Authority Key Identifier:
                keyid:C6:08:9E:EB:C5:56:B7:7F:64:E4:42:49:A6:8B:95:D5:BD:94:1E:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:ef:d4:b3:e9:8a:85:93:c6:98:3f:9c:6e:1f:3e:6f:a1:b0:
         26:9d:1c:d6:04:a8:a2:61:36:5d:a9:01:69:4c:90:0f:b6:e4:
         c7:d6:a1:d8:f9:1f:a2:17:8f:52:86:80:54:29:80:ad:a6:53:
         57:40:71:6a:84:d6:bb:54:9b:05:ba:e6:8f:4f:27:99:44:24:
         8e:7a:a6:cb:a6:d1:ed:d7:ba:04:af:39:56:98:99:e4:61:73:
         06:84:7f:97:69:2b:bc:6b:ee:1a:28:ea:bd:11:03:fa:a7:f7:
         a5:7d:da:8d:73:b8:6b:17:f7:8d:b5:1f:e5:d9:a3:6c:d6:4a:
         d8:37:4a:46:43:00:7a:8e:9f:a2:bb:0c:d4:1c:75:d0:85:ff:
         a7:3e:20:a0:d2:3d:ba:92:e2:96:4a:84:0c:e0:21:ca:06:79:
         47:d5:b5:b9:d7:15:cd:04:42:a4:2b:df:10:3d:1d:ea:08:58:
         0f:f3:87:8f:b1:91:a2:39:d2:b7:a3:7c:2b:6d:4f:a1:5b:cd:
         e3:be:ff:db:b4:6a:61:c3:b9:e1:be:1c:3b:be:8b:e2:3e:2b:
         e2:d5:02:ec:cc:47:3f:4d:e8:63:66:5f:77:ed:bc:9d:75:8a:
         23:e0:26:50:d1:3a:39:ce:0a:9c:8b:6a:dc:33:cd:f6:f3:77:
         a3:c3:0f:4f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICI/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QURGRDMxMTAvBgNVBAUTKEM2MDg5RUVCQzU1NkI3N0Y2NEU0NDI0OUE2OEI5NUQ1
QkQ5NDFFNDAwHhcNMjYwNjEyMTU0NzIwWhcNMjYwNjE5MTU0NzIwWjAYMRYwFAYD
VQQDEw02YTJjMmEwOC05MDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuUmjv/eAmrqtCT7iokkVzRlSWlYYFUghxRymw7ZHpNiEOWsN1IQh0OLgwmA9
g8tRsp4E5Ib7PJ4mi/jEp7/qxkwBfa7AlGH1M0kTInH26muEI1NZ10l5ryE/VK+t
lgb+OOKCihONmD7ehUJJs1CSpVmAMi8vdfcVXoQt0Zfbv/OXoqCK5XRxKKmx4rdJ
DqcL0BJXgVOtpGnvk0Tev6CtOU5Z8ZOJc6IJTPJvjELyspxiOyAwjwXaytbdSnd6
wbayP36HwjZUrCOY0Z8Q2j2Li+/xLcCHFZQ3RCCIK0ftE3OkXDFzP6plpYR5wMzv
9sUncTvBSMi5p/npMhEPLhqxnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGAAJN8T
Tzd1GQISyU68f/gnL9snMB8GA1UdIwQYMBaAFMYInuvFVrd/ZORCSaaLldW9lB5A
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREZEMy8xRkQxQThCRTk0
ODYxMUU1QUUwQzhCNzJDNEY5QUUwMi94Z2llNjhWV3QzOWs1RUpKcG91VjFiMlVI
a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hnaWU2OFZXdDM5azVFSkpwb3VWMWIyVUhrQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
REZEMy8xRkQxQThCRTk0ODYxMUU1QUUwQzhCNzJDNEY5QUUwMi94Z2llNjhWV3Qz
OWs1RUpKcG91VjFiMlVIa0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAk+/Us+mKhZPGmD+cbh8+b6GwJp0c1gSoomE2XakBaUyQD7bkx9ah2PkfoheP
UoaAVCmAraZTV0BxaoTWu1SbBbrmj08nmUQkjnqmy6bR7de6BK85VpiZ5GFzBoR/
l2krvGvuGijqvRED+qf3pX3ajXO4axf3jbUf5dmjbNZK2DdKRkMAeo6forsM1Bx1
0IX/pz4goNI9upLilkqEDOAhygZ5R9W1udcVzQRCpCvfED0d6ghYD/OHj7GRojnS
t6N8K21PoVvN477/27RqYcO54b4cO76L4j4r4tUC7MxHP03oY2Zfd+28nXWKI+Am
UNE6Oc4KnItq3DPN9vN3o8MPTw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:45:26 2026 by rpki-client