Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft
File:                     XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft (raw, json)
Hash identifier:          fLCd7kooxAp30+aS3kVjTRRFtYG7YbhAD7rD3cZ4YM8=
Subject key identifier:   BE:72:ED:04:90:D0:BE:78:72:70:32:39:19:9D:79:1D:52:93:F3:AE
Authority key identifier: 5F:30:7E:62:74:AC:39:E5:4E:99:86:6D:AB:B8:5C:2C:9E:FD:16:B1
Certificate issuer:       /CN=A91E9F89/serialNumber=5F307E6274AC39E54E99866DABB85C2C9EFD16B1
Certificate serial:       0930
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XzB-YnSsOeVOmYZtq7hcLJ79FrE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft
Manifest number:          0927
Signing time:             Fri 12 Jun 2026 20:16:01 +0000
Manifest this update:     Fri 12 Jun 2026 20:16:00 +0000
Manifest next update:     Fri 19 Jun 2026 20:16:00 +0000
Files and hashes:         1: XzB-YnSsOeVOmYZtq7hcLJ79FrE.crl (hash: HUZ7yEfVEJ94Nr7c0y08rR4OfWrOhXL03S6DfJyuFCg=)
                          2: 05B67AF8C6A011EAA70D183FC4F9AE02.roa (hash: cUXww9pLUmzXMLoFEIgXrShzexTLcuKYoU1Hg9CwYj8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.crl
                          rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XzB-YnSsOeVOmYZtq7hcLJ79FrE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 20:15:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2352 (0x930)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9F89, serialNumber=5F307E6274AC39E54E99866DABB85C2C9EFD16B1
        Validity
            Not Before: Jun 12 20:16:00 2026 GMT
            Not After : Jun 19 20:16:00 2026 GMT
        Subject: CN=6a2c6900-57fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a0:18:af:6f:63:7d:d9:86:83:fa:00:e8:e6:
                    f4:95:55:b2:cc:53:29:97:16:37:1e:88:25:56:70:
                    b8:7b:5a:9d:60:79:50:30:56:e6:88:48:39:91:10:
                    f5:ce:64:b5:0f:f8:bc:7c:e0:b5:72:c2:7e:e3:77:
                    af:16:98:05:e1:d6:ac:5c:78:23:39:fe:9a:58:0a:
                    e1:c2:2b:d8:80:4c:54:15:24:6d:94:ef:59:3d:27:
                    12:2f:4a:24:92:b2:0a:27:54:ae:03:3b:3c:01:17:
                    62:96:14:b4:a9:50:98:68:5d:91:36:49:77:fb:e8:
                    94:e4:69:27:e6:fc:10:b9:2b:75:a4:16:b3:0d:58:
                    d7:84:72:c0:cf:11:12:57:f3:95:81:35:45:6f:6f:
                    a8:7d:62:9e:3d:99:b1:24:cc:e9:76:f6:59:52:73:
                    1c:c1:19:a2:5a:09:a7:6d:86:b3:69:6b:a1:82:c6:
                    59:3d:e7:64:10:73:c7:da:9b:c1:5b:e4:ef:7f:79:
                    af:a5:98:7b:ec:9c:f0:e3:2e:f4:bb:cd:7e:3a:59:
                    13:0c:59:89:da:23:b4:23:08:38:51:f2:eb:d7:22:
                    32:b4:89:83:00:a4:19:61:d5:c9:4b:d9:c0:17:fa:
                    5c:e3:5f:8a:9a:01:72:5c:18:7b:de:f5:2c:cc:62:
                    3e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:72:ED:04:90:D0:BE:78:72:70:32:39:19:9D:79:1D:52:93:F3:AE
            X509v3 Authority Key Identifier:
                keyid:5F:30:7E:62:74:AC:39:E5:4E:99:86:6D:AB:B8:5C:2C:9E:FD:16:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XzB-YnSsOeVOmYZtq7hcLJ79FrE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:73:1a:2d:c1:96:4f:f6:16:f1:59:d2:5f:44:4f:ee:56:71:
         46:1a:8f:18:18:a2:41:bb:0b:ea:20:f8:50:26:13:26:8d:6f:
         13:43:0c:cd:75:27:3d:19:fc:65:2f:f1:5e:da:7b:6f:7a:02:
         c3:2b:0f:70:a7:89:e6:e7:bd:4c:70:b6:44:07:21:29:65:30:
         55:20:5f:34:31:11:c5:61:04:e0:46:7d:3f:e7:40:39:63:25:
         b6:e1:f4:dc:94:ef:c1:b9:a4:d4:f1:d3:dc:9a:2c:da:99:ec:
         f7:f0:1b:c5:51:ce:70:f4:1d:36:c6:3e:05:4b:76:e6:04:17:
         3b:1a:6c:ca:2f:e5:7d:c6:85:dd:03:cc:31:26:b7:af:ee:d4:
         89:1d:73:cd:6a:95:b7:d9:9a:d3:c9:eb:81:0b:7a:56:96:21:
         18:93:55:d3:cd:31:70:cd:11:ce:2a:58:e6:0c:5e:11:85:2a:
         71:7b:f7:da:79:24:40:78:5d:a3:5f:75:c5:a1:22:ad:f4:87:
         43:be:0c:b6:92:b5:d5:c0:ca:bb:e5:b6:65:3d:23:5c:d8:cf:
         a4:ab:99:e3:e0:66:ca:45:2c:ef:69:bb:4c:3d:d4:2c:cf:6e:
         75:f0:87:9f:ec:c4:4b:ee:94:d7:21:62:6a:2c:ac:53:92:89:
         f9:f3:0e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:37:36 2026 by rpki-client