Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft
File:                     Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft (raw, json)
Hash identifier:          DlgG8qfH4Cya+YO3N6h4DiqZMs7M7xBTJag1QGFB2ww=
Subject key identifier:   FD:C0:FA:15:67:30:0C:4A:F5:06:12:45:2F:DF:E3:43:7F:F2:0E:BD
Authority key identifier: 5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A
Certificate issuer:       /CN=A91D63EA/serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A
Certificate serial:       01F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft
Manifest number:          01E5
Signing time:             Sat 13 Jun 2026 03:36:39 +0000
Manifest this update:     Sat 13 Jun 2026 03:36:39 +0000
Manifest next update:     Sat 20 Jun 2026 03:36:39 +0000
Files and hashes:         1: Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl (hash: lTjxJxIcsYS7HeIlNibGDkD9Rxw5aLM11Ohwu7oxCyc=)
                          2: 21047C70672211EF998AEF2BC4F9AE02.roa (hash: cwZ4eVKobt7zlcwyDlS8wp8YfQlmfCEiAZE09BVtpC4=)
                          3: 2B6413D4670811EF9D46FA4FC4F9AE02.roa (hash: sqpOzCSyWagdZtLDNG0fEoo6eV6DhP/ql0m0DJxSXx0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl
                          rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 03:36:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503 (0x1f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D63EA, serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A
        Validity
            Not Before: Jun 13 03:36:39 2026 GMT
            Not After : Jun 20 03:36:39 2026 GMT
        Subject: CN=6a2cd047-06e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c6:97:8c:ac:c6:f8:10:40:7f:3d:99:47:7d:
                    ef:69:ba:14:b3:0a:7d:99:1e:d7:e3:7f:3d:43:1b:
                    e1:96:34:3b:35:97:65:a8:68:3e:e6:ea:f7:42:12:
                    92:a9:3d:23:4c:ef:12:12:0c:ca:d8:70:6f:2b:63:
                    a6:ec:75:c4:1d:4d:fa:e6:11:e0:51:35:59:f8:f1:
                    06:01:ce:a0:ef:cf:fd:7c:9e:b0:0d:f4:3a:38:2b:
                    2f:2f:09:a0:07:88:8f:dc:25:bd:a6:8a:01:04:0b:
                    45:3d:47:9c:fb:28:a9:7d:c8:5b:68:fc:8d:10:08:
                    09:c8:be:6a:9b:f4:11:34:a6:c9:9b:ff:cb:cb:10:
                    0f:02:a8:45:e4:61:c7:d6:1b:0b:c2:b3:bf:fb:58:
                    41:cb:22:db:9f:17:55:68:ef:02:dd:05:68:47:57:
                    a9:9a:64:fb:80:f3:47:72:e9:0b:59:67:6c:70:c9:
                    47:92:21:a3:75:fb:92:87:f3:2e:77:e0:64:9b:bd:
                    26:e5:ea:b9:4b:7a:0a:e5:af:a6:47:84:5d:21:96:
                    b1:74:9c:34:a5:b6:c9:57:9e:1b:07:ba:37:23:b9:
                    92:1f:5e:a7:ce:4a:fa:a3:88:c1:5b:e8:90:43:04:
                    1d:8b:80:fe:e7:27:53:27:ff:57:75:dd:33:cb:a6:
                    02:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C0:FA:15:67:30:0C:4A:F5:06:12:45:2F:DF:E3:43:7F:F2:0E:BD
            X509v3 Authority Key Identifier:
                keyid:5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:ee:32:7d:d3:83:f0:db:d6:42:92:85:7c:d1:bf:37:f5:71:
         b8:1c:2b:c1:08:03:c2:af:f5:3e:ca:67:9f:3d:84:0e:45:76:
         cf:19:9c:4d:4a:0a:55:cd:de:41:73:19:a8:c4:f9:c8:b7:7f:
         b4:e9:cd:99:99:6f:d0:5c:81:82:36:cd:09:79:e8:2f:08:49:
         7c:22:02:8e:04:d3:b9:44:2e:68:df:e6:e4:44:70:b1:f7:20:
         8a:51:3e:c6:03:b4:67:f7:a4:e2:e2:e2:e0:b4:42:db:24:cf:
         b5:dc:23:17:77:e1:09:fc:bc:6c:36:71:aa:4d:d7:d9:7a:0e:
         f9:47:87:cf:8e:7c:30:e5:b2:86:ed:2a:54:c5:83:cd:a8:d1:
         99:0d:de:67:44:9f:eb:c3:93:1b:98:89:19:4b:93:ea:89:9d:
         87:00:9f:bc:81:5a:89:4b:7d:89:55:9c:8b:16:e0:de:88:19:
         7c:57:71:3a:98:76:60:ee:e3:41:78:9b:08:b8:3a:84:9e:37:
         de:c6:bb:b2:e9:28:f3:90:b0:90:66:38:02:59:40:00:e6:4e:
         a1:10:60:e9:9c:cc:f4:29:86:af:95:aa:9a:17:32:8b:a1:5c:
         88:fe:cc:19:ce:67:7d:93:6d:c8:c7:08:1d:f9:eb:90:c3:b1:
         6e:88:fc:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:47:16 2026 by rpki-client