Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft
File:                     xPfGGVRtktYGb7L0x2VFqc4v4wM.mft (raw, json)
Hash identifier:          UXYKR0tQ87DmviiKftuvu3L0AqX7rg6Q1K/BtnNrqYI=
Subject key identifier:   1C:D8:03:1A:C0:9D:AD:BB:1D:64:B7:78:9B:EE:08:0C:B1:83:82:DE
Authority key identifier: C4:F7:C6:19:54:6D:92:D6:06:6F:B2:F4:C7:65:45:A9:CE:2F:E3:03
Certificate issuer:       /CN=A91DC0C0/serialNumber=C4F7C619546D92D6066FB2F4C76545A9CE2FE303
Certificate serial:       0914
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft
Manifest number:          0904
Signing time:             Fri 12 Jun 2026 20:19:49 +0000
Manifest this update:     Fri 12 Jun 2026 20:19:49 +0000
Manifest next update:     Fri 19 Jun 2026 20:19:49 +0000
Files and hashes:         1: xPfGGVRtktYGb7L0x2VFqc4v4wM.crl (hash: imxkplP1tEaeEPkgL5hxIdLyO8gY6u6DhzePs0V5AKg=)
                          2: BEB276EECCE311EAA397205EC4F9AE02.roa (hash: x5+raeLBFBsuJLXzYfMJr0ORy85GDM9eQZw+pvlyKEo=)
                          3: BE243D98CCE311EAA397205EC4F9AE02.roa (hash: qZ3PJo0PmY9ezmHmQvTDErn7qslnxEuobh+f3U89VNI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.crl
                          rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 20:19:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2324 (0x914)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC0C0, serialNumber=C4F7C619546D92D6066FB2F4C76545A9CE2FE303
        Validity
            Not Before: Jun 12 20:19:49 2026 GMT
            Not After : Jun 19 20:19:49 2026 GMT
        Subject: CN=6a2c69e5-be30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f1:ee:33:25:6a:28:ea:43:3e:fa:05:7b:f7:
                    df:d0:e5:d5:d4:b9:83:b2:f5:55:7f:bd:ba:d5:c7:
                    7b:6b:af:bb:fc:af:44:ef:4a:da:1f:e3:5f:6d:ce:
                    35:6a:59:2b:ab:0f:08:eb:25:78:34:fe:38:69:da:
                    1b:ae:fa:46:1c:4e:bb:db:71:1b:bb:c2:59:0a:0b:
                    f3:0d:79:85:ee:be:f9:b8:46:2c:8b:7a:16:09:26:
                    ac:2c:13:9a:c8:99:83:e2:f7:0e:14:f6:d2:85:0b:
                    b9:7a:35:5e:aa:2c:d2:3f:c1:01:f8:00:a2:2d:8b:
                    f9:59:46:d5:55:bb:65:c1:06:57:9c:cc:dd:7a:cf:
                    fb:22:c0:e1:2a:45:6e:ba:05:09:75:da:30:f0:ee:
                    47:90:52:28:a1:ee:d2:8e:f1:57:81:d4:e5:9d:c8:
                    b3:ba:72:dc:7c:ff:96:65:f0:6c:3d:c5:a8:1b:51:
                    4b:32:48:3b:a9:fa:0d:1e:36:c6:33:bf:be:7e:a8:
                    30:d1:81:15:df:38:38:55:cf:10:e7:d0:eb:5e:bb:
                    a2:bd:b2:a4:eb:6a:4f:ed:2a:82:ee:fb:2d:09:ec:
                    76:c3:60:68:27:bc:80:b4:5d:24:cd:eb:02:3d:d9:
                    26:a0:c2:02:8a:6c:22:b1:66:e5:82:b9:80:17:2c:
                    cc:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D8:03:1A:C0:9D:AD:BB:1D:64:B7:78:9B:EE:08:0C:B1:83:82:DE
            X509v3 Authority Key Identifier:
                keyid:C4:F7:C6:19:54:6D:92:D6:06:6F:B2:F4:C7:65:45:A9:CE:2F:E3:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:4b:d8:c2:57:43:58:13:91:54:e9:02:37:50:cf:e1:13:e9:
         70:ba:e3:13:23:f0:94:3b:95:14:e5:f3:51:e2:72:44:88:8b:
         1a:69:b5:19:95:83:91:60:9c:0a:98:3f:1c:6f:7d:c0:79:2e:
         23:54:b9:e2:dc:0d:89:13:bd:d7:34:c3:46:75:3e:6b:f3:94:
         4a:2b:b8:9c:b4:f9:0e:a6:07:4b:54:8a:c4:89:88:73:db:73:
         a3:9a:dd:bb:97:d0:7a:2d:ac:c6:2d:4b:ee:6b:90:16:6b:d5:
         ec:97:29:01:f4:6e:72:8d:19:8d:9b:53:92:8f:62:a6:b4:02:
         85:99:71:15:26:48:34:53:10:01:95:6c:67:50:50:90:3c:1b:
         cf:e2:87:99:c5:1b:45:46:ea:61:0c:2a:77:97:97:51:f0:49:
         35:c5:e5:99:fb:ed:8b:30:9a:c0:89:d1:04:68:b3:7e:f4:76:
         1b:3a:29:cf:1a:e5:bd:ac:d1:01:2f:c5:36:9e:e9:0b:a2:f8:
         ae:d4:6a:51:6f:c2:38:28:7e:7a:34:b5:03:49:de:f8:88:fa:
         7e:b6:70:4e:96:f3:f6:2b:a5:a5:99:41:ba:2c:cc:d7:5b:0c:
         10:a0:77:0b:34:de:49:4d:07:2f:a4:1c:1a:e9:1e:45:bf:e3:
         c1:cc:30:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:54:18 2026 by rpki-client