Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3BF2/509096A8F6C311EC833AEF39C4F9AE02/xHGlbulPBbQ3wJ7uD0QgP6RZJzY.mft
File:                     xHGlbulPBbQ3wJ7uD0QgP6RZJzY.mft (raw, json)
Hash identifier:          tCpjdrHuYDgwHMb8TFQkyOBJTkM2tsA3+QeoOpblk84=
Subject key identifier:   03:6F:54:22:8D:8B:1A:1B:25:39:E7:9A:74:59:70:AC:25:EB:67:65
Authority key identifier: C4:71:A5:6E:E9:4F:05:B4:37:C0:9E:EE:0F:44:20:3F:A4:59:27:36
Certificate issuer:       /CN=A91E3BF2/serialNumber=C471A56EE94F05B437C09EEE0F44203FA4592736
Certificate serial:       037A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHGlbulPBbQ3wJ7uD0QgP6RZJzY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3BF2/509096A8F6C311EC833AEF39C4F9AE02/xHGlbulPBbQ3wJ7uD0QgP6RZJzY.mft
Manifest number:          0372
Signing time:             Sat 13 Jun 2026 00:50:28 +0000
Manifest this update:     Sat 13 Jun 2026 00:50:28 +0000
Manifest next update:     Sat 20 Jun 2026 00:50:28 +0000
Files and hashes:         1: xHGlbulPBbQ3wJ7uD0QgP6RZJzY.crl (hash: nG4MKbkp9hxFE11V1l+jTDKVVC5rsnB+tHEkzaN7xnw=)
                          2: 6B7C33C8F6C811ECBDF7DD40C4F9AE02.roa (hash: OXdwgZN4vaFZ6nWyjvt24Xk4nrgBuF6Vr7LgDqZpHIc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3BF2/509096A8F6C311EC833AEF39C4F9AE02/xHGlbulPBbQ3wJ7uD0QgP6RZJzY.crl
                          rsync://rpki.apnic.net/member_repository/A91E3BF2/509096A8F6C311EC833AEF39C4F9AE02/xHGlbulPBbQ3wJ7uD0QgP6RZJzY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHGlbulPBbQ3wJ7uD0QgP6RZJzY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 00:50:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 890 (0x37a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3BF2, serialNumber=C471A56EE94F05B437C09EEE0F44203FA4592736
        Validity
            Not Before: Jun 13 00:50:28 2026 GMT
            Not After : Jun 20 00:50:28 2026 GMT
        Subject: CN=6a2ca954-5e2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e8:1b:c0:eb:9b:f1:4a:f4:03:fb:ca:17:f1:
                    bd:2a:64:c4:f5:07:91:5b:47:e7:5d:d5:1f:b1:c0:
                    22:8b:e8:9d:70:dc:34:54:9a:93:7a:34:54:8e:97:
                    b9:c2:45:ec:ba:39:49:25:68:08:7e:38:55:b0:3f:
                    74:30:3c:c3:e0:27:55:e8:29:c0:36:cb:07:38:70:
                    1e:67:16:e0:81:0c:c9:f6:1d:35:7d:97:f3:16:3d:
                    04:7f:45:7f:0c:ae:61:8b:53:59:8c:3e:fa:86:b9:
                    23:ba:c3:5f:3b:fb:70:8c:28:ab:39:6e:2c:9c:8c:
                    a5:c4:91:db:59:c8:b2:cb:3f:fb:be:fd:48:86:e8:
                    5d:d8:94:14:f9:97:33:ff:eb:6c:55:41:83:7b:93:
                    3a:d4:ba:a4:4d:f4:ef:ab:16:b9:d3:7f:45:5f:3b:
                    88:68:a9:4a:f6:47:4f:e7:1f:fd:92:85:a5:45:07:
                    3a:a2:34:8e:37:4c:a9:1e:95:09:c5:a6:a5:21:6a:
                    3e:ec:10:9c:6a:ad:fe:6b:f4:31:b0:8b:6c:61:d2:
                    9c:61:4c:7a:0a:c8:34:5b:9d:3d:07:6c:ad:7d:11:
                    e3:37:98:5d:15:a8:24:63:94:47:f0:e5:12:8a:7c:
                    f8:30:31:8a:6f:b3:7d:28:d5:fa:8b:a3:fe:4f:e1:
                    8d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:6F:54:22:8D:8B:1A:1B:25:39:E7:9A:74:59:70:AC:25:EB:67:65
            X509v3 Authority Key Identifier:
                keyid:C4:71:A5:6E:E9:4F:05:B4:37:C0:9E:EE:0F:44:20:3F:A4:59:27:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3BF2/509096A8F6C311EC833AEF39C4F9AE02/xHGlbulPBbQ3wJ7uD0QgP6RZJzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHGlbulPBbQ3wJ7uD0QgP6RZJzY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3BF2/509096A8F6C311EC833AEF39C4F9AE02/xHGlbulPBbQ3wJ7uD0QgP6RZJzY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:f6:23:43:ef:78:c4:29:e5:34:5a:0e:d1:1a:46:01:0c:e1:
         ba:cc:19:14:d2:13:03:63:1a:b6:92:a6:a2:2c:80:8e:b3:72:
         41:9e:ad:e1:5e:93:63:f6:57:30:e2:9f:e6:92:18:b3:fb:8f:
         50:c4:25:73:ce:3d:6b:19:7d:2f:4c:f2:ad:b5:6a:f9:64:33:
         81:b3:b0:3c:20:8d:d8:47:6b:35:6f:e9:b5:5b:5a:15:69:70:
         2e:fb:a5:c1:70:1c:ef:93:4b:b2:89:70:d1:04:92:32:b9:12:
         51:5a:11:c0:a0:83:b1:e3:fc:79:a2:a8:a8:de:be:d3:8c:68:
         8b:44:f8:47:06:f0:26:0b:41:ce:15:85:0a:f2:45:f3:69:08:
         72:7a:e0:f6:88:51:ab:81:7a:e9:1d:33:ee:7e:e2:fb:39:10:
         af:b5:c0:a8:b8:14:9b:08:96:30:cf:58:9c:d4:4a:21:8e:fa:
         ea:66:e3:07:93:e4:7d:df:d9:9c:a8:a8:d8:42:20:12:b4:97:
         59:f0:38:d8:a1:6d:3e:b4:55:b0:05:f7:cd:92:ba:61:c7:df:
         bc:54:db:2f:53:02:db:0f:7c:8d:d1:c6:a9:11:14:2f:e0:9b:
         4a:94:85:6e:1f:47:4d:55:74:ea:a8:cb:61:f8:33:fa:af:cd:
         28:f7:ed:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:00:52 2026 by rpki-client