Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.mft
File:                     XAo1I_02RadjWvJRmtzQAuEy-84.mft (raw, json)
Hash identifier:          3XjkyIIS01L3Aq869k5g2MIyu6oBkYs6DSa1qsOEosI=
Subject key identifier:   D9:00:23:3B:24:88:04:7C:26:4F:AF:19:5F:DE:FF:32:D4:44:FC:76
Authority key identifier: 5C:0A:35:23:FD:36:45:A7:63:5A:F2:51:9A:DC:D0:02:E1:32:FB:CE
Certificate issuer:       /CN=A91B0F90/serialNumber=5C0A3523FD3645A7635AF2519ADCD002E132FBCE
Certificate serial:       0112
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAo1I_02RadjWvJRmtzQAuEy-84.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.mft
Manifest number:          0104
Signing time:             Sat 13 Jun 2026 06:22:43 +0000
Manifest this update:     Sat 13 Jun 2026 06:22:42 +0000
Manifest next update:     Sat 20 Jun 2026 06:22:42 +0000
Files and hashes:         1: XAo1I_02RadjWvJRmtzQAuEy-84.crl (hash: mUmEkjWcl3aD6WlzNl/jcZv07cFBuYfps3ZU1zX5Lds=)
                          2: 304DD002EFAB11EF97C9610FC4F9AE02.roa (hash: 72tND6FYfSKJu0sQNqpeEtwTYhVCnqpq4nZnR1IjkYo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.crl
                          rsync://rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAo1I_02RadjWvJRmtzQAuEy-84.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 06:22:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 274 (0x112)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0F90, serialNumber=5C0A3523FD3645A7635AF2519ADCD002E132FBCE
        Validity
            Not Before: Jun 13 06:22:42 2026 GMT
            Not After : Jun 20 06:22:42 2026 GMT
        Subject: CN=6a2cf732-5d67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b4:0a:80:06:42:2c:b3:98:3a:8c:06:75:5f:
                    0f:bc:fd:55:3f:f8:c1:f2:c4:cc:73:47:21:69:83:
                    19:8b:fc:55:d1:2d:64:90:65:23:c9:ca:48:1d:0a:
                    2e:1b:95:b3:34:38:12:1a:4c:5a:f6:ae:78:e4:11:
                    b9:bb:6a:8f:cd:63:4b:53:97:1a:ca:e7:a6:8f:17:
                    6f:17:23:51:0f:03:ba:45:c0:44:ac:c2:b0:e6:eb:
                    d4:46:51:69:cc:c4:14:04:fd:19:83:49:f2:0d:c0:
                    b3:c2:fc:3a:8b:35:b6:b9:41:52:cc:6d:16:e5:59:
                    f9:88:26:82:5d:4b:3e:a4:57:f9:82:ae:5a:78:28:
                    88:58:e5:c0:ea:0c:1a:56:23:21:1f:03:3b:16:3a:
                    de:40:57:57:70:5f:87:c4:81:75:da:70:76:25:d0:
                    92:e4:4f:75:3c:cc:90:5c:44:91:4b:7c:f3:e9:82:
                    91:31:2d:55:23:ad:20:59:74:72:3f:e2:b0:ec:18:
                    a3:ac:d3:72:6b:7a:de:5c:fc:8e:46:4a:0f:2f:1d:
                    e2:c9:fa:ba:56:70:b9:6f:d3:a7:5e:46:73:52:a2:
                    b5:fc:ad:7d:c4:3d:12:35:33:8f:d7:c3:e0:69:21:
                    c5:38:1d:6b:35:0e:c9:9d:78:c0:df:cb:47:95:02:
                    50:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:00:23:3B:24:88:04:7C:26:4F:AF:19:5F:DE:FF:32:D4:44:FC:76
            X509v3 Authority Key Identifier:
                keyid:5C:0A:35:23:FD:36:45:A7:63:5A:F2:51:9A:DC:D0:02:E1:32:FB:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAo1I_02RadjWvJRmtzQAuEy-84.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:e7:7f:1c:b4:2f:b4:a3:5c:3f:4b:4c:94:35:c9:a8:40:5f:
         3d:ed:99:21:63:8a:50:09:be:30:de:84:d3:d8:ce:77:3c:f8:
         82:b7:87:76:19:20:b8:22:d7:84:d8:23:2d:6b:47:8f:89:a3:
         71:37:17:5b:25:02:e4:6b:f5:50:90:96:87:1d:7f:7f:2f:a8:
         99:99:f9:ce:a2:b8:46:1a:36:c9:c8:44:35:90:e4:2d:48:a9:
         4a:32:b3:e3:9a:70:4e:7f:96:27:7c:6b:06:7f:43:2c:e2:85:
         e5:f4:49:6d:04:23:64:34:d5:49:7b:42:80:df:85:bb:59:a7:
         94:f1:a6:ed:f8:40:d7:da:e6:38:2f:36:da:54:70:68:a7:36:
         83:d5:55:1c:5e:51:e1:5c:c8:b4:8f:66:47:2c:ce:09:84:f7:
         88:d8:dc:09:49:5e:78:c3:b8:8a:93:c9:d5:55:ed:ce:d9:b2:
         7a:6b:a8:34:8b:5f:21:cb:96:02:77:49:0f:91:1f:f3:37:3b:
         b5:6c:f0:db:e0:0d:27:32:c3:b9:c7:bb:54:cd:10:41:7d:84:
         5e:40:38:0e:54:13:24:df:c9:d1:c1:a5:d4:91:c9:08:14:a1:
         c8:29:62:c0:de:a6:ba:44:1e:37:41:f0:8f:94:35:bf:a2:95:
         84:32:24:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:08:52 2026 by rpki-client