Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft
File:                     XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft (raw, json)
Hash identifier:          A2sqSw5phrDdiA+JmgWGIgk9J9MyU1CHrUn2XN6bAWw=
Subject key identifier:   E0:86:9F:33:7C:5D:0D:D9:F2:D2:74:35:47:E7:8A:72:7B:AF:5A:61
Authority key identifier: 5E:70:99:49:BA:A4:0A:7D:47:D4:4D:21:16:90:B3:77:E0:51:C4:5F
Certificate issuer:       /CN=A91F0C73/serialNumber=5E709949BAA40A7D47D44D211690B377E051C45F
Certificate serial:       0390
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnCZSbqkCn1H1E0hFpCzd-BRxF8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft
Manifest number:          0388
Signing time:             Sat 13 Jun 2026 00:48:33 +0000
Manifest this update:     Sat 13 Jun 2026 00:48:32 +0000
Manifest next update:     Sat 20 Jun 2026 00:48:32 +0000
Files and hashes:         1: XnCZSbqkCn1H1E0hFpCzd-BRxF8.crl (hash: RdfiwOxiSDHjV+vtYGP8xjHAy5dvaHkKHryg0cx36cQ=)
                          2: FA3FF1D4F13D11EC9B673A2AC4F9AE02.roa (hash: 2U6xmhzv0fOgJj7RZr6nEhhX0Za/2a3PlEUXvRGOzUs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.crl
                          rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnCZSbqkCn1H1E0hFpCzd-BRxF8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 00:48:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 912 (0x390)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0C73, serialNumber=5E709949BAA40A7D47D44D211690B377E051C45F
        Validity
            Not Before: Jun 13 00:48:32 2026 GMT
            Not After : Jun 20 00:48:32 2026 GMT
        Subject: CN=6a2ca8e0-1dcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:50:21:74:56:d1:69:54:20:56:c6:90:78:a4:
                    1a:f0:a9:d3:6c:68:4a:a5:42:27:f0:77:04:d1:d6:
                    03:31:14:eb:02:e0:46:19:f4:73:2d:cd:89:a8:df:
                    b9:be:ba:d2:c1:f4:f5:42:84:97:d3:b5:cc:67:dc:
                    91:74:41:bd:c4:c7:93:1d:f5:e0:df:31:c8:27:af:
                    7d:fc:7e:be:0d:77:18:af:69:64:8a:0b:6c:53:f5:
                    4c:36:fd:b9:33:f1:24:d7:75:36:6b:a2:55:1e:1d:
                    cf:5f:7b:93:26:70:00:8e:22:34:f9:3e:f9:71:58:
                    f0:72:c2:bc:b0:98:96:31:3e:7f:d3:c6:be:48:69:
                    21:05:4c:fb:41:6d:80:90:56:e2:00:84:d2:b5:59:
                    0b:fa:81:74:4c:ff:42:dc:bd:c9:dd:a8:f7:0a:eb:
                    65:be:c7:29:eb:ac:6b:d1:9c:71:50:eb:68:25:dc:
                    30:d2:c2:30:7c:40:17:57:f7:42:97:5c:ba:c2:b7:
                    d0:a9:db:a7:4b:58:74:48:69:73:3d:e8:99:01:80:
                    70:28:17:fa:35:ec:d3:6e:1b:0b:75:01:af:3e:70:
                    1a:5b:be:b7:27:e5:ab:31:f0:dc:b1:c9:ea:2d:90:
                    de:9c:a7:b0:1f:30:28:01:66:75:13:40:13:3e:a4:
                    4a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:86:9F:33:7C:5D:0D:D9:F2:D2:74:35:47:E7:8A:72:7B:AF:5A:61
            X509v3 Authority Key Identifier:
                keyid:5E:70:99:49:BA:A4:0A:7D:47:D4:4D:21:16:90:B3:77:E0:51:C4:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnCZSbqkCn1H1E0hFpCzd-BRxF8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:ca:8b:b1:94:54:0f:a2:0c:b3:8e:e8:17:81:91:8e:65:04:
         21:08:db:0b:76:02:e5:f6:fb:e8:41:26:56:0a:90:ae:62:c7:
         59:f6:b3:01:f7:3b:e4:df:3d:c9:50:18:8a:99:22:4c:f2:dc:
         bb:fd:c8:7b:5c:fd:95:29:97:7a:7e:c0:de:b9:d1:ca:26:7d:
         cb:3d:ed:4c:95:e0:9b:17:9c:bd:ac:75:2a:9b:63:a6:cb:c8:
         86:a7:bc:ff:0d:5d:11:1d:f5:ef:71:35:ff:a9:ad:7f:68:b5:
         8e:8f:37:bc:c3:8f:bc:2b:48:65:05:f0:89:ea:13:f9:92:8c:
         26:8b:5d:b5:8c:04:56:e6:c2:08:1f:c5:7f:32:4d:bc:5f:09:
         83:d6:30:0c:ad:8f:7c:fd:b0:d6:bf:f6:a8:c6:cb:99:36:ec:
         d6:fd:61:46:c4:71:6a:0c:ee:9a:04:ff:7f:b7:5d:19:0e:0b:
         89:02:45:96:34:86:59:fd:8f:d5:ff:e5:df:28:a9:e5:1a:bc:
         61:ab:57:26:f9:ee:3d:7d:d8:f2:35:de:4b:7d:f3:b5:6b:93:
         04:c4:96:cc:15:c2:83:c1:e4:13:7c:40:b0:10:f8:35:33:ee:
         99:ee:40:6e:51:85:c7:19:48:37:72:be:97:c2:cb:f1:c0:30:
         94:53:ff:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:23:54 2026 by rpki-client