Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.mft
File:                     XfR-KSrUurlNOGn6L8YKoOauKlM.mft (raw, json)
Hash identifier:          anhNJ+jDboPAZMBAj/0wftZWOc57kCpzZLD+Tbfxj+k=
Subject key identifier:   24:74:59:BD:A3:E1:3A:25:B5:CA:13:2E:9F:CB:70:93:2B:19:6F:4E
Authority key identifier: 5D:F4:7E:29:2A:D4:BA:B9:4D:38:69:FA:2F:C6:0A:A0:E6:AE:2A:53
Certificate issuer:       /CN=A91B3F7E/serialNumber=5DF47E292AD4BAB94D3869FA2FC60AA0E6AE2A53
Certificate serial:       27
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XfR-KSrUurlNOGn6L8YKoOauKlM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.mft
Manifest number:          24
Signing time:             Sat 13 Jun 2026 08:54:59 +0000
Manifest this update:     Sat 13 Jun 2026 08:54:58 +0000
Manifest next update:     Sat 20 Jun 2026 08:54:58 +0000
Files and hashes:         1: XfR-KSrUurlNOGn6L8YKoOauKlM.crl (hash: +EnXSql3c6d4yyYkSegC8gDkEWYlG9yXp4MYLV83FRk=)
                          2: E4AEB564380411F18536626792833773.roa (hash: zitRbSJcod3PTnS9PbBAV9aJ63tkxcQRzV7LIm/6eKY=)
                          3: FFF84A263A6911F18AE46050B0833773.roa (hash: ssv7cVlED2mj0Y5ViP5sQGZ6qpip26ujoYvi6duDnsE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.crl
                          rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XfR-KSrUurlNOGn6L8YKoOauKlM.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:54:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3F7E, serialNumber=5DF47E292AD4BAB94D3869FA2FC60AA0E6AE2A53
        Validity
            Not Before: Jun 13 08:54:58 2026 GMT
            Not After : Jun 20 08:54:58 2026 GMT
        Subject: CN=6a2d1ae3-2b18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:dc:70:f4:f2:2e:a9:ef:ba:80:53:98:fb:a8:
                    96:4c:7a:bd:ec:e9:5b:87:39:c4:1c:ee:b1:f9:df:
                    7c:47:75:b0:c9:52:c6:58:3b:6d:5d:74:f1:e2:36:
                    a9:cd:fe:7f:9c:69:0a:91:54:61:c6:d5:6a:c9:c6:
                    fc:52:6c:99:e8:93:76:29:5c:a0:0a:db:7b:1d:30:
                    f5:31:f7:17:7e:14:bf:c2:f3:4b:a6:61:68:9f:37:
                    fa:28:e8:5b:50:be:46:4f:c6:c0:ec:6a:59:b5:4a:
                    aa:41:01:06:4f:2a:11:0c:2b:58:4b:0b:ea:a6:97:
                    ea:a5:33:78:09:d8:29:6c:7e:e8:a5:39:5b:a3:eb:
                    5c:a3:42:a4:92:b0:92:0c:cc:68:b3:24:74:98:9a:
                    c6:9f:45:76:9c:6c:7f:1f:2f:72:d5:29:ca:c3:bd:
                    40:36:1b:03:b6:f7:52:43:39:a3:a2:ca:3d:df:bb:
                    82:c7:78:69:03:9b:a8:ae:70:98:f2:68:1e:b6:0e:
                    92:80:78:7d:1b:e1:a7:16:93:f9:a0:e2:d0:8a:0f:
                    3b:e7:a5:3a:dd:e3:33:5f:08:4a:1d:08:d1:2e:3f:
                    ee:29:d7:2c:02:9f:cf:a2:3f:a6:d1:19:90:2d:1b:
                    8e:47:2e:c5:47:c3:b1:f0:43:1c:e8:14:74:0e:e6:
                    98:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:74:59:BD:A3:E1:3A:25:B5:CA:13:2E:9F:CB:70:93:2B:19:6F:4E
            X509v3 Authority Key Identifier:
                keyid:5D:F4:7E:29:2A:D4:BA:B9:4D:38:69:FA:2F:C6:0A:A0:E6:AE:2A:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/XfR-KSrUurlNOGn6L8YKoOauKlM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3F7E/5A124538366011F1B0D30A16CA833773/XfR-KSrUurlNOGn6L8YKoOauKlM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:7c:81:06:22:09:21:3a:d2:ef:6f:4c:c9:de:d4:dc:1c:ac:
         6c:b8:f7:60:1b:de:e2:e8:ae:7d:a1:fe:4a:e8:76:ac:b7:c4:
         34:cd:59:6b:68:73:ae:ac:d4:55:60:c3:84:8d:8c:2c:d9:fc:
         6d:06:74:76:7f:d3:60:08:1b:24:73:fb:21:b1:00:8a:69:55:
         30:96:9b:3d:b4:75:c6:a9:b3:0f:b2:b0:7f:cf:f6:9f:12:64:
         7f:f4:81:53:32:77:2a:6d:3d:99:a0:b2:36:0c:b5:3f:4c:59:
         74:9b:ee:ca:82:92:c6:67:43:f7:bf:2f:57:0d:13:e8:c4:c1:
         a8:ee:89:7b:35:1c:b1:d9:f5:b4:db:ba:80:9f:d2:f3:7c:a2:
         fa:85:b6:53:6c:1f:5f:aa:c6:e4:2d:83:22:ef:01:ea:ed:01:
         de:19:a2:9b:f3:61:cf:32:68:c8:cf:2d:a0:6b:92:66:f3:4c:
         b2:4f:e5:2f:dc:1c:79:7a:16:7e:65:0d:95:f1:69:15:7f:5c:
         8f:af:5f:cb:48:95:5b:3f:5d:b8:6e:c8:f5:32:e3:50:d4:d6:
         a0:b1:cc:a6:0d:96:e7:4f:3d:df:ba:d4:9a:b3:a3:a2:36:5b:
         7d:51:bc:5b:da:8b:66:33:39:44:7b:e7:8f:26:02:9b:8b:40:
         f5:42:4d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:47:12 2026 by rpki-client