Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft
File:                     xIKbbAf9gE3wklz_wWHGcCgHoCY.mft (raw, json)
Hash identifier:          qlS681rei3MOb2ukhs5uzrTnJw2fvtkB7Df/mTYeKYY=
Subject key identifier:   0B:85:C1:56:0D:D5:9B:34:34:0D:BF:24:08:A3:EA:AD:09:AB:0C:57
Authority key identifier: C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26
Certificate issuer:       /CN=A91E7E45/serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026
Certificate serial:       0ADB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft
Manifest number:          0A9B
Signing time:             Fri 12 Jun 2026 19:37:08 +0000
Manifest this update:     Fri 12 Jun 2026 19:37:07 +0000
Manifest next update:     Fri 19 Jun 2026 19:37:07 +0000
Files and hashes:         1: xIKbbAf9gE3wklz_wWHGcCgHoCY.crl (hash: 7mEg8zT+9tpnDsBxE32+7PRi9tqLKu6fUFukwa0//IM=)
                          2: FBA017C0B26F11EF9B327759C4F9AE02.roa (hash: Qmb5CZlRJ9SRPdF9+9wPc93vQjmXJvRUUhlA9HA/iv0=)
                          3: 7A976A4E0A7011F0AA901820C4F9AE02.roa (hash: lOSfBUeEb4G442+2bNGlYlivb25gkqMO2oRz4+FOtEQ=)
                          4: 0FD437CAC11811EE8328EF7AC4F9AE02.roa (hash: 1oGgEhKuTYfIMH1bWvTdBPiLxB8rj3+diEjF16TDep8=)
                          5: 9406C1209FDB11EDB88C5662C4F9AE02.roa (hash: gA8IJGSCT4umqS8N4XtEGwWN2XXvpmZtzI2ciAxreo8=)
                          6: E8137EDEA29011EAA7A47878C4F9AE02.roa (hash: x+75KtA6yIXg16cK6d8RSXKx6oc30iJuxpXNxIM3qBk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl
                          rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:37:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2779 (0xadb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7E45, serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026
        Validity
            Not Before: Jun 12 19:37:07 2026 GMT
            Not After : Jun 19 19:37:07 2026 GMT
        Subject: CN=6a2c5fe3-2ba5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2a:27:d4:8f:e4:2d:ed:ea:c5:4f:41:4b:97:
                    26:a9:4e:b7:42:7e:e5:f8:37:f6:1d:4f:87:93:48:
                    c1:45:76:4b:8f:47:88:51:52:8c:2e:66:c5:9a:47:
                    23:b2:72:98:5d:cb:f5:62:15:94:c8:78:11:b4:67:
                    44:18:0c:7a:78:33:af:fe:c9:b2:84:e2:46:3b:01:
                    8f:69:a8:6c:4f:ba:bf:d6:40:fa:2f:78:e8:c6:3a:
                    a1:fd:7a:fe:b8:90:48:65:b2:75:09:a8:a2:be:3e:
                    a1:a1:5d:dd:29:dc:20:e7:60:fe:6d:a1:77:59:d6:
                    c1:6c:52:68:bc:0b:ce:9d:55:0c:27:6a:d5:d8:4e:
                    2a:da:0b:73:fc:3f:3d:d6:0b:da:42:17:4c:58:c8:
                    1b:e2:b3:fc:07:c9:aa:f3:e2:15:70:d0:6b:44:9f:
                    9c:ad:66:e7:dc:aa:f7:f1:92:2c:58:10:75:1d:06:
                    f8:bb:9a:ca:09:92:de:c6:0d:9f:34:23:1a:c5:0b:
                    f7:7f:d3:09:54:fe:99:35:f9:44:5a:78:49:75:d1:
                    ee:07:a1:34:55:41:b2:93:ab:8f:b2:63:e3:86:a4:
                    7a:1e:98:16:32:37:57:94:10:99:9c:24:81:36:42:
                    1d:ec:98:c2:3c:0c:d5:5e:fc:4e:ea:77:5d:ae:3b:
                    7d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:85:C1:56:0D:D5:9B:34:34:0D:BF:24:08:A3:EA:AD:09:AB:0C:57
            X509v3 Authority Key Identifier:
                keyid:C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:84:26:df:86:60:fc:59:75:34:aa:44:b5:4f:96:0c:ee:c5:
         5a:bc:3c:a2:84:fe:3f:12:26:97:ae:bc:62:e5:54:80:9a:5d:
         e1:54:ed:d7:54:94:dc:d3:05:eb:af:99:0d:89:c6:b9:9a:4c:
         3b:9a:c9:23:2c:21:c7:83:02:47:5b:76:58:68:26:a8:6b:44:
         82:f1:7f:39:4d:d6:05:1d:54:cf:fb:3c:22:24:0f:47:5e:2e:
         4e:5b:18:0b:3c:c7:d6:75:2a:b3:15:68:3c:81:a5:af:24:89:
         de:d6:9b:cf:21:a0:f9:74:48:47:49:9c:94:ea:76:5e:99:22:
         1e:0f:51:ee:78:03:79:a2:78:cc:c5:28:03:c7:52:f8:77:91:
         f9:e5:8a:16:dd:7b:f9:80:29:c0:8f:7e:d8:bf:bc:90:c5:5a:
         1c:1b:a6:0b:1b:45:df:4d:e7:9c:3c:da:7d:95:fd:2f:39:94:
         93:19:29:64:c7:d4:8f:2e:0c:82:69:7e:e1:ca:52:21:4a:42:
         f0:61:35:97:c3:0c:a2:7a:f3:31:22:84:2f:32:b6:cd:da:7c:
         9f:93:5b:c5:42:4b:e1:d7:4c:9f:4d:6f:fe:b4:30:b4:e3:93:
         35:75:40:4d:9e:9c:03:86:46:2b:bd:42:21:0f:49:ce:cf:78:
         d3:ca:cf:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:07:20 2026 by rpki-client