Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft
File:                     XS3RVLXc4h-3hsUm297xsEWSirg.mft (raw, json)
Hash identifier:          dUeJ3zP3a/2BcGVYtiiKJ6s0PvW0HMW36xAFaR3d5Mk=
Subject key identifier:   74:6E:C8:46:C2:0C:7C:E6:50:1B:E2:CA:0E:15:D3:0A:8F:9D:70:54
Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8
Certificate issuer:       /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
Certificate serial:       28DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft
Manifest number:          2600
Signing time:             Fri 12 Jun 2026 15:46:19 +0000
Manifest this update:     Fri 12 Jun 2026 15:46:18 +0000
Manifest next update:     Fri 19 Jun 2026 15:46:18 +0000
Files and hashes:         1: XS3RVLXc4h-3hsUm297xsEWSirg.crl (hash: Ww7f3t3hN9ilRrQHz4cCpIQl41rsFm+dXM2BUf3S0f4=)
                          2: 6DBD2412C9EB11EC886A6D51C4F9AE02.roa (hash: X4W8KPzkD6jrY8LiA2LHjxX8s0fpYowcQUXXGe2/Dfo=)
                          3: F5F86ADA8C5611E792848B4AC4F9AE02.roa (hash: wnYTp3fsOW2HQITJ5FlOwfrkiKlWT5LLwinFPfnjQu0=)
                          4: EEBDFBB88C5611E792848B4AC4F9AE02.roa (hash: 38VxGKNTIqjI7WmYVTAs2Vk4XEsvNHdC+sfnVA/u1Zk=)
                          5: EF3B21E28C5611E792848B4AC4F9AE02.roa (hash: sL6rlhwT2LpkTZEnGwa+sTT6+sRP4qeJqtLHhVBZMAA=)
                          6: BE5DA1A0E3BE11EEAEC5E061C4F9AE02.roa (hash: VJCnaf5Klg6jmYuqx2mGsqpPv1Kkhc3IprBxsydE49k=)
                          7: 62F6493EE3BE11EE933A0461C4F9AE02.roa (hash: 5ldMM2cJXLvn3rFlQhmNWhHj8IBemlnHR9gxFxzEiLw=)
                          8: 7BFDDDB8D42E11EB8E13801EC4F9AE02.roa (hash: VtV1xShyMh9sjenS152zbiOl5v/xr19d8+vqjj03D0M=)
                          9: 586845003D5B11F1BC7D03E3A9833773.roa (hash: bksTinMhSZQ6iaAs+xQLVJBbYxr1WgrHFBPOHrnAF48=)
                          10: F47B5B188C5611E792848B4AC4F9AE02.roa (hash: 9rwvDynWMk6qsy3E/KYOqtc0csn9No217jDY1XnUZzc=)
                          11: B61774A4D9DF11EFB722C742C4F9AE02.roa (hash: UrzW/ghTReXDIIXXuUNwm0r5S8hfMJ1iOmM4g5cXqO0=)
                          12: EFBF37208C5611E792848B4AC4F9AE02.roa (hash: QMEMNFl/Jl1WfdjUzvj9WgadU2H5AGalIKmrTUa6R+g=)
                          13: F15AD0CE544E11ED9C5E2F3AC4F9AE02.roa (hash: V0Bxe9pvCdmpHFNAup44+kDyfw/tamlGcA2MYQmUsO0=)
                          14: CAC3390AD30E11EB98AEFF45C4F9AE02.roa (hash: sgw4Va5xBAbvxEnA80g+uDGNNw3JilHTbxgmChJswfI=)
                          15: F04860C28C5611E792848B4AC4F9AE02.roa (hash: t1OURYtTlAtfNdWLrnHxkvZF4FFX+C17Jb19CIwfihg=)
                          16: 543386248C5811E782F42951C4F9AE02.roa (hash: n3uqup7GQBgv1FQz4tcE6zqiYYLPHwkPhVC8sJy/BDw=)
                          17: EDA1B0D8A1CE11EDA692F359C4F9AE02.roa (hash: f0nSJ61GA5QPVsLKjddcC0wfT/tT/FK1nC1PrxX8MeQ=)
                          18: F1475E928C5611E792848B4AC4F9AE02.roa (hash: 31VZpJVWKNF5mab4XZ5JTLuEycfyZELw3YTbEtHVoIE=)
                          19: DB3E929E199611EF9EBFBF4AC4F9AE02.roa (hash: yniPMcdgFbwNhplTc+rydNjzQLU8O29V8C25W4mTbeU=)
                          20: C82D6ACC969A11EB9BC1FA1BC4F9AE02.roa (hash: 8hJseycbUR3zK2+zXkoIB6I2ViNeMkJgkdW6VsK7qO0=)
                          21: B6D7E1547EEE11EF8B38A43BC4F9AE02.roa (hash: aRK8QB1JQ1E7tEOryxg9vqmCGo1+++BBG/tSU9uGFOQ=)
                          22: F55175EA8C5611E792848B4AC4F9AE02.roa (hash: kFQioVNwia+/qizEhlyCPhiOpzPpIkRHCfZvLOC7QmI=)
                          23: F1C092BC8C5611E792848B4AC4F9AE02.roa (hash: qRXk9dzH9yzccBqYsDfVw2E8u5nyXXCoXpdl1ASSh24=)
                          24: F688FE388C5611E792848B4AC4F9AE02.roa (hash: t6f1Kosop/CbP7AwXXw0yAnoWx86X0b95L/+s+Yi+WE=)
                          25: 19A3CD9E4B7011EC8E9FCB48C4F9AE02.roa (hash: +ezEBpxkY8f4PY2reVhjPmzVyzhmj21Jd5Qr+MbJDt0=)
                          26: 8A8C093A42E311F1B93532028F833773.roa (hash: 9m8Dvq8GVyNZk2cbyrBZleTZzmMEk1mdl6ftuO3mqFA=)
                          27: F721F6B08C5611E792848B4AC4F9AE02.roa (hash: 9gIlVUVnVNmYm0bLzGl5b38yoqx/v/vATXeAALoSuAs=)
                          28: 7271CAB217D711EA90BA7F4EC4F9AE02.roa (hash: yO9FNu/9OHp6I+wCsbe7slCX+CdTGzP0ftlr5EH77RY=)
                          29: 743ABB72997011EAB50D6934C4F9AE02.roa (hash: TgloTHCWPURsO/1k0p40DWKdaGHNBtdJOfoMLcQC4gA=)
                          30: B4C0B17CC94E11EDB5018458C4F9AE02.roa (hash: v18fC46MYs+2IjS6va5v9tqHDD2ALPl/gY1gvz9Tbm0=)
                          31: A293EE844BFB11EAADB0780AC4F9AE02.roa (hash: Bf1VexJZ8ePZKh8sXCKZqIgTsDNhulqFPVDnqdnEaj0=)
                          32: F3DC1FD08C5611E792848B4AC4F9AE02.roa (hash: j51cLfGITBXR/xee14Rv6rfJpCWZzT3Rfl0VvL2R5/I=)
                          33: 5366509AC63511EAAC843455C4F9AE02.roa (hash: 2dGdHKeMcuIvSTX7iFjfVdensV8pnXlc8bJBe8kDDVc=)
                          34: E0CC1C58235911ECAB7C7661C4F9AE02.roa (hash: tYH203EuDB6n9E6nUVPwIVfHVAXXBv2Io3OA+Ey8sS8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl
                          rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 15:46:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10462 (0x28de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFB70, serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
        Validity
            Not Before: Jun 12 15:46:18 2026 GMT
            Not After : Jun 19 15:46:18 2026 GMT
        Subject: CN=6a2c29ca-a7c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:50:79:de:19:34:01:d7:2e:e9:88:0b:e7:f5:
                    00:a5:ac:8e:0e:f9:6e:e8:ba:0d:cd:32:53:ff:65:
                    fa:a8:9c:d1:ac:7b:4b:ae:70:11:84:06:ee:2d:c5:
                    26:e8:6d:bc:f9:72:60:4b:9e:97:34:d0:65:eb:57:
                    b1:05:ec:5f:8f:12:eb:e5:2d:6f:62:a2:8d:e3:23:
                    08:58:1d:5e:f6:5e:ea:9a:f8:5d:41:8a:cc:1e:6a:
                    05:89:45:03:7a:31:ee:c0:d7:fa:a0:d9:a7:67:cc:
                    56:d5:47:f5:c0:00:d8:80:8c:9b:cc:8c:bd:a9:9a:
                    40:ff:60:d8:bd:c2:8c:c6:a8:ba:4e:77:2f:02:ea:
                    70:e5:98:20:33:53:0c:08:17:3c:ca:e1:ad:d5:af:
                    0c:b9:ae:ae:11:29:3f:ef:3e:e6:35:93:0f:1f:cb:
                    62:a9:58:cb:1c:c0:49:22:a8:26:b6:99:4d:0e:05:
                    b3:7e:17:ce:04:65:06:4d:44:59:5b:9a:d7:cc:aa:
                    d2:23:f1:86:d1:1d:34:e2:4d:c5:45:be:92:81:ea:
                    c5:fd:76:62:76:3c:fb:31:ea:27:04:44:8f:9e:a2:
                    cd:11:dd:6e:bf:14:9d:c4:ce:d5:a4:ca:18:e7:cd:
                    09:ed:15:c4:9a:15:c6:c5:89:90:79:9f:97:31:ba:
                    28:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:6E:C8:46:C2:0C:7C:E6:50:1B:E2:CA:0E:15:D3:0A:8F:9D:70:54
            X509v3 Authority Key Identifier:
                keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:bc:3f:54:f7:2f:68:77:88:62:52:7e:3a:d7:f2:10:2c:a1:
         4e:f6:98:01:63:8b:18:d9:8d:56:31:09:65:8f:6d:f9:db:23:
         74:e0:8c:62:90:65:50:e6:67:c9:f4:33:81:95:b1:68:85:17:
         1a:87:26:cb:73:05:82:2c:d5:ab:5c:31:ae:a8:fa:1f:dd:bd:
         65:b1:1f:ef:84:3c:e0:4a:d4:76:46:d7:12:fa:4f:29:12:01:
         52:69:b5:13:05:d4:ee:48:7b:d8:dd:08:9d:ca:38:d3:03:7b:
         c4:91:be:b8:b7:c4:2a:ad:dc:1a:05:1b:69:9f:40:1e:e5:8a:
         6f:80:e5:b6:9c:8a:92:4d:85:aa:fb:78:d8:fe:ab:c5:ff:55:
         03:ad:e8:dd:24:eb:59:72:53:bb:93:f3:c6:ec:7b:93:91:62:
         bc:e0:3c:b7:8c:2f:a9:bf:0b:4d:7a:e5:26:8e:30:60:9a:04:
         46:ec:25:e0:09:ec:5c:4f:2b:82:98:98:ba:85:25:15:05:9f:
         3a:2f:4d:7c:05:6a:9b:f2:2f:91:49:c9:21:f2:c9:4b:1d:fc:
         72:b7:b8:e6:bf:49:fd:e1:c8:99:f0:27:da:25:b4:05:5b:87:
         7c:f5:70:9f:07:01:40:72:ab:5e:01:03:4a:25:5d:e5:b0:b7:
         ac:51:d7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----