Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft
File:                     x8kdlvp-jS2SIZUipkBEI3UR4FE.mft (raw, json)
Hash identifier:          XCeIior8Fk5Re26LHZ+I+KN8JiLJXpXL1etOydIvUtQ=
Subject key identifier:   3B:02:80:0A:E0:CA:51:0D:53:1C:D5:34:67:02:64:3B:78:8C:29:27
Authority key identifier: C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51
Certificate issuer:       /CN=A91F52E8/serialNumber=C7C91D96FA7E8D2D92219522A64044237511E051
Certificate serial:       0440
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft
Manifest number:          0433
Signing time:             Sat 13 Jun 2026 00:20:40 +0000
Manifest this update:     Sat 13 Jun 2026 00:20:40 +0000
Manifest next update:     Sat 20 Jun 2026 00:20:40 +0000
Files and hashes:         1: x8kdlvp-jS2SIZUipkBEI3UR4FE.crl (hash: Hk7U2/v+hYXlI5HWzLutpxz0ATpPX7lrb+pWJc/8Bs4=)
                          2: 89F6EEC4C82711EEBCC49737C4F9AE02.roa (hash: M48TTuq9ADhSv++/MbWv3dwOfaMFDhRB8S7kdUoR+jQ=)
                          3: C0BBFCC003A911EF9DE2F919C4F9AE02.roa (hash: uIe065ouSrK1ZyYaAyKs/pdPmvRv0EpPK089oDcTECA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.crl
                          rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 00:20:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1088 (0x440)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F52E8, serialNumber=C7C91D96FA7E8D2D92219522A64044237511E051
        Validity
            Not Before: Jun 13 00:20:40 2026 GMT
            Not After : Jun 20 00:20:40 2026 GMT
        Subject: CN=6a2ca258-f9ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8d:ea:4e:84:3a:9e:86:e7:40:b1:ea:96:25:
                    70:da:23:a8:eb:28:1a:3c:e8:4f:6d:26:26:50:a5:
                    01:22:86:9c:c6:ad:e6:eb:8c:88:3c:c0:c2:25:cf:
                    53:4f:cc:ad:76:2d:f5:50:f2:76:a9:30:53:cc:db:
                    69:f8:55:8c:0e:ef:fc:b4:98:49:32:d9:01:75:93:
                    dc:5c:28:cd:9f:4d:2b:c8:6c:ab:c0:f1:ff:05:31:
                    d2:13:97:88:04:47:58:82:b5:74:e8:8b:d1:44:ab:
                    f0:9d:e4:27:59:57:b7:0f:f9:64:f0:cd:80:95:3d:
                    b2:d3:8a:dd:f6:8e:22:19:40:67:af:82:8b:af:c9:
                    b3:70:87:af:0a:3d:47:8d:d3:d5:89:b3:63:60:b8:
                    17:3b:3d:e1:cb:81:94:69:05:d7:c3:37:fa:c7:dd:
                    cd:7f:40:dc:47:0d:c2:8f:a1:87:57:7f:d2:d8:64:
                    cd:ab:2f:c9:f9:7e:58:3c:c3:68:ce:e9:d1:2e:9a:
                    6a:e8:f6:68:91:fe:63:fd:2c:00:bf:78:f7:1e:4d:
                    74:3b:d2:5d:d7:cd:8f:6d:89:f1:96:ac:2d:67:21:
                    c1:fe:52:69:82:4e:a0:69:b8:2c:09:04:e7:88:2e:
                    fc:ff:e5:74:78:bf:ea:8a:34:48:2d:23:e0:60:47:
                    e2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:02:80:0A:E0:CA:51:0D:53:1C:D5:34:67:02:64:3B:78:8C:29:27
            X509v3 Authority Key Identifier:
                keyid:C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:a1:31:a2:49:80:b4:3f:40:26:62:98:b3:5b:79:71:58:db:
         28:22:32:c9:d9:1a:1a:fe:b1:ed:c6:e8:0c:43:cb:5a:ec:4b:
         f1:ed:1e:ce:cc:2d:fa:db:c1:99:92:f8:69:66:ac:d4:be:da:
         d7:bf:9e:ef:a7:5c:bf:17:fa:56:cc:0b:ef:e6:21:a6:76:07:
         13:ea:a7:c9:87:41:ea:e4:96:5e:9b:e5:85:2e:0f:1c:07:e0:
         b0:39:86:cf:b6:57:26:1f:b2:9d:0e:e5:95:f1:82:91:67:15:
         b0:06:83:70:ba:fc:55:54:58:0e:51:6a:01:0f:85:11:99:a7:
         4c:72:64:0e:d1:c5:5c:ba:74:a3:a3:89:27:55:94:0e:f3:ae:
         37:a5:af:4b:23:38:5e:79:d5:3a:89:75:9f:9b:a1:a0:1a:4b:
         ef:62:7b:e0:7f:e5:09:72:e7:74:62:d3:52:b0:b0:fb:85:1a:
         22:08:a4:70:ce:05:e6:23:88:1c:7b:cf:45:e9:a1:32:9f:7e:
         3a:84:40:40:ce:9a:70:e2:72:ee:ea:4a:90:28:08:cd:f6:e1:
         4d:1e:c9:d9:9c:05:52:a2:ea:c1:68:b9:2b:39:d4:69:a9:d7:
         3e:85:b8:a0:20:21:26:e5:e0:c9:8c:93:fc:af:6b:76:75:ed:
         91:1b:6d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:19:34 2026 by rpki-client