Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.mft
File:                     XiiKKIBK_-76DkRDEJedfO6Y5DI.mft (raw, json)
Hash identifier:          KdQbAQ4fFcvO7LwwIqY8P9VpJ9kTus6sV3APBQmFkW0=
Subject key identifier:   71:D0:38:F3:29:08:A1:29:45:78:C8:29:1D:F8:34:82:7D:7F:2E:DC
Authority key identifier: 5E:28:8A:28:80:4A:FF:EE:FA:0E:44:43:10:97:9D:7C:EE:98:E4:32
Certificate issuer:       /CN=A91B5F8A/serialNumber=5E288A28804AFFEEFA0E444310979D7CEE98E432
Certificate serial:       63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XiiKKIBK_-76DkRDEJedfO6Y5DI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.mft
Manifest number:          63
Signing time:             Thu 11 Jun 2026 10:22:47 +0000
Manifest this update:     Thu 11 Jun 2026 10:22:46 +0000
Manifest next update:     Thu 18 Jun 2026 10:22:46 +0000
Files and hashes:         1: XiiKKIBK_-76DkRDEJedfO6Y5DI.crl (hash: TyUgRpKtvHGzTNxPJsx8jEjhOZuIQEmal0ZyP1yVkOY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.crl
                          rsync://rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XiiKKIBK_-76DkRDEJedfO6Y5DI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 10:22:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5F8A, serialNumber=5E288A28804AFFEEFA0E444310979D7CEE98E432
        Validity
            Not Before: Jun 11 10:22:46 2026 GMT
            Not After : Jun 18 10:22:46 2026 GMT
        Subject: CN=6a2a8c77-691f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:31:e1:70:b5:4e:74:1d:80:2e:fd:da:b1:cc:
                    d7:b3:63:5f:27:88:2e:37:6e:ad:ed:3f:73:85:f3:
                    60:f6:e1:c2:0e:29:0b:bd:74:27:23:63:97:1c:b1:
                    3e:27:be:36:f0:6a:6b:2d:31:c4:b1:4d:6a:c4:a1:
                    62:a5:73:36:49:f6:eb:3e:bf:d1:a1:57:04:8d:93:
                    f1:2d:6c:66:9d:df:c1:7a:e3:90:30:41:2d:84:95:
                    6e:4c:55:96:c3:9b:ea:57:e3:03:da:be:fa:21:df:
                    e8:58:e6:b0:b6:15:1b:a5:96:64:05:da:93:cc:5a:
                    b5:ad:d4:10:bb:23:45:a1:5e:91:8d:d9:ce:c2:8b:
                    ca:d5:0f:93:71:86:64:75:16:2a:78:69:84:1f:b9:
                    bf:be:b2:63:d5:eb:5d:fd:18:fd:12:8e:bd:10:3b:
                    6e:54:ae:b3:c7:88:31:c9:8e:ae:e7:16:ce:b0:23:
                    4a:21:c1:7b:a6:3a:93:84:48:ee:5f:f4:96:27:80:
                    f0:7c:7f:c6:3a:76:56:3d:a8:fa:03:d9:fb:ec:8f:
                    11:23:9c:e0:62:78:74:de:36:32:9d:c9:fc:b8:df:
                    90:72:4b:32:39:54:4c:2b:a5:d9:f1:ea:04:dd:0f:
                    c6:3a:3a:ca:a3:ab:9e:b6:a3:4b:22:f8:67:be:00:
                    5e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:D0:38:F3:29:08:A1:29:45:78:C8:29:1D:F8:34:82:7D:7F:2E:DC
            X509v3 Authority Key Identifier:
                keyid:5E:28:8A:28:80:4A:FF:EE:FA:0E:44:43:10:97:9D:7C:EE:98:E4:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XiiKKIBK_-76DkRDEJedfO6Y5DI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:9c:79:32:25:eb:65:ad:46:c2:94:8c:47:7e:4b:44:e7:0f:
         ce:f6:12:12:c0:20:bb:c5:83:7c:a0:38:b7:fc:95:5b:a9:58:
         db:ab:2e:aa:54:69:67:0e:83:5e:70:b4:e4:a4:c9:17:c1:96:
         84:05:e6:3d:51:8b:df:0f:f0:f7:dc:9e:ca:93:f2:36:4b:48:
         2e:01:6d:23:6a:13:f0:f7:04:78:c5:d3:c9:d5:f1:9b:01:85:
         5c:db:9d:2d:1d:46:29:04:24:73:90:eb:91:51:24:4e:8f:e0:
         c3:f5:97:a2:58:09:a3:bd:e2:aa:9b:99:55:9e:67:f2:38:f9:
         bf:d8:d5:79:96:fc:a3:65:21:46:9d:f5:57:b9:a8:9f:ce:b0:
         d3:41:f8:01:ac:db:67:58:47:52:eb:7d:e6:4f:16:90:5f:aa:
         0f:70:fe:dc:63:21:7c:33:80:43:a7:a2:bc:a5:cb:c5:b3:cf:
         e3:f3:a4:0c:e0:90:0e:76:ab:27:aa:a3:c1:7b:cc:5c:42:a6:
         a2:94:a8:28:67:9e:34:9f:b4:3b:1a:20:3d:f8:0d:b8:d9:32:
         db:83:76:8e:b2:bf:ce:57:28:6f:a2:24:e9:f1:a3:bf:5b:30:
         02:33:1c:e8:3c:55:2e:f0:55:b1:67:d9:d4:a8:3d:75:ee:2d:
         71:8d:2d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:51:14 2026 by rpki-client