Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.mft
File:                     8XiofFRzBDe6WfqpzhhP-HkP5PE.mft (raw, json)
Hash identifier:          BBS0szAevNra9AHY+hazWX9ylnqRIGeLh69i8PUvghE=
Subject key identifier:   6A:FE:27:6C:61:DB:12:7F:F1:D0:CC:80:67:60:FE:78:0E:3F:87:07
Authority key identifier: F1:78:A8:7C:54:73:04:37:BA:59:FA:A9:CE:18:4F:F8:79:0F:E4:F1
Certificate issuer:       /CN=A91D6792/serialNumber=F178A87C54730437BA59FAA9CE184FF8790FE4F1
Certificate serial:       05A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XiofFRzBDe6WfqpzhhP-HkP5PE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.mft
Manifest number:          0597
Signing time:             Fri 12 Jun 2026 23:15:35 +0000
Manifest this update:     Fri 12 Jun 2026 23:15:35 +0000
Manifest next update:     Fri 19 Jun 2026 23:15:35 +0000
Files and hashes:         1: 8XiofFRzBDe6WfqpzhhP-HkP5PE.crl (hash: xDRoPh8NDA7+aCpwqp5PgS29K5kqVrWfBXaMKQ2u+QQ=)
                          2: CB89040A73EA11EC8A823312C4F9AE02.roa (hash: JC7lbeFnRnICzkSYuKq2WaMSqXlPZ3bBUzx31GKWCuw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.crl
                          rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XiofFRzBDe6WfqpzhhP-HkP5PE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 23:15:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1443 (0x5a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6792, serialNumber=F178A87C54730437BA59FAA9CE184FF8790FE4F1
        Validity
            Not Before: Jun 12 23:15:35 2026 GMT
            Not After : Jun 19 23:15:35 2026 GMT
        Subject: CN=6a2c9317-df02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:16:50:5c:6f:7b:cb:fe:cf:d6:c1:c1:78:d2:
                    84:43:4f:18:42:ff:31:10:60:0f:b7:9a:f8:de:32:
                    a6:1b:aa:d9:99:d2:99:dc:4f:0d:8e:9a:5e:48:83:
                    e2:49:a1:e8:e6:5b:d6:b3:5e:1b:ed:a4:eb:f9:ca:
                    b1:70:c2:cf:fb:30:76:13:0b:53:04:df:b9:c7:d9:
                    ec:b4:cc:90:de:cb:f4:a5:f1:4b:6b:82:72:7d:3d:
                    4d:3f:66:21:c5:7c:84:40:b7:cc:31:01:a3:9c:68:
                    09:09:40:bb:9f:2e:46:ae:35:70:45:f2:be:b4:c5:
                    58:40:9b:6a:35:11:87:65:23:a0:e5:d1:e0:27:44:
                    66:38:37:2c:c0:c2:12:af:a8:c0:17:58:07:c8:ef:
                    01:3e:81:9d:1d:7d:eb:d9:82:05:55:b1:bf:70:df:
                    8c:53:a1:1c:b2:d2:98:dc:bd:03:b7:55:e6:42:ff:
                    ee:ca:ad:31:fd:07:eb:03:48:18:f9:eb:44:d5:b6:
                    8d:ad:66:e6:81:1a:e6:22:01:b9:b4:2f:98:73:a5:
                    48:06:db:73:b5:da:8a:85:e8:d7:21:8d:d4:d5:29:
                    ac:46:93:c4:15:35:d6:39:ee:e3:e9:e0:74:76:69:
                    4e:2b:5d:db:be:44:c6:32:cf:e5:de:46:93:f4:15:
                    a6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:FE:27:6C:61:DB:12:7F:F1:D0:CC:80:67:60:FE:78:0E:3F:87:07
            X509v3 Authority Key Identifier:
                keyid:F1:78:A8:7C:54:73:04:37:BA:59:FA:A9:CE:18:4F:F8:79:0F:E4:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XiofFRzBDe6WfqpzhhP-HkP5PE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:d2:5a:4d:32:e0:c5:a4:bb:14:2b:6d:0a:a9:0c:17:85:47:
         9a:f8:1c:5a:2f:15:22:cf:24:49:50:14:a9:0c:1a:85:84:09:
         25:0d:c6:bf:a7:90:fd:da:13:4f:2f:92:65:3b:98:53:0a:ea:
         21:63:a2:f7:53:37:bd:3f:0d:6c:ca:b0:52:2f:01:83:97:a4:
         ac:92:bc:b9:b1:74:5f:5d:91:04:6a:af:59:f7:0d:18:f8:ec:
         ba:76:93:f5:6c:4a:d8:6d:db:94:04:74:c3:ea:b4:77:6a:92:
         39:98:61:11:ef:a9:01:49:bc:b7:f9:7d:0c:52:7d:ec:25:1d:
         29:c6:53:ed:ce:77:94:84:6e:d5:d4:64:0c:cc:10:03:2d:bc:
         65:dc:fa:93:fd:99:38:3c:9f:ce:be:39:da:d1:a9:1a:f0:66:
         55:6a:5b:e1:2a:0e:da:56:3d:39:02:93:c9:d5:71:7d:15:3b:
         ca:93:f0:81:a1:09:bd:42:ca:92:03:db:32:2c:0d:37:49:e5:
         32:82:e5:00:26:41:e5:3d:d2:fb:03:9e:f8:8f:b6:1d:32:32:
         f5:9c:1a:ca:c7:0e:a3:bb:1d:bb:22:53:d9:4f:6f:d7:5b:c4:
         a4:e3:62:d8:13:3f:cd:d0:ab:6c:fc:e0:65:f7:49:05:70:16:
         72:40:af:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:32:15 2026 by rpki-client