Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft
File:                     XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft (raw, json)
Hash identifier:          kGydGcAimhpEo7SF73zVqKiOHVrOanVz/v5rZJLkyBU=
Subject key identifier:   39:23:07:00:5C:13:B6:8F:74:97:33:3A:38:9A:7F:F6:D3:EB:BE:96
Authority key identifier: 5C:32:7B:4A:23:5B:F8:90:FD:26:91:FB:03:E9:4A:6F:16:CB:F2:3C
Certificate issuer:       /CN=A91FBD89/serialNumber=5C327B4A235BF890FD2691FB03E94A6F16CBF23C
Certificate serial:       0270
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft
Manifest number:          0270
Signing time:             Fri 12 Jun 2026 23:06:06 +0000
Manifest this update:     Fri 12 Jun 2026 23:06:06 +0000
Manifest next update:     Fri 19 Jun 2026 23:06:06 +0000
Files and hashes:         1: XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl (hash: aJd4jZsXQcIv8a05XO9ais4ACAX6T3sGJ0j+8DuKzbM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl
                          rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 23:06:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 624 (0x270)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FBD89, serialNumber=5C327B4A235BF890FD2691FB03E94A6F16CBF23C
        Validity
            Not Before: Jun 12 23:06:06 2026 GMT
            Not After : Jun 19 23:06:06 2026 GMT
        Subject: CN=6a2c90de-488d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f4:0b:92:c1:38:1e:64:54:45:0a:58:ae:02:
                    c5:c1:1c:65:b9:25:dd:2a:c1:4e:d9:75:f8:17:93:
                    ac:ff:4f:19:15:5b:aa:24:7d:79:31:b1:7b:24:84:
                    9f:3f:0e:c8:4e:ef:30:09:94:c6:aa:ec:7b:93:5d:
                    9e:9d:34:a1:08:08:02:c3:1b:9b:0f:bf:aa:44:db:
                    b0:36:b1:d8:03:32:fe:0e:52:c5:4c:9b:79:46:6e:
                    d6:d7:90:39:b4:9c:2a:d0:70:72:d7:eb:ae:f7:ec:
                    5b:e0:9f:c7:5e:b1:5c:bb:96:3c:0b:53:15:98:61:
                    5a:91:42:e4:13:6b:6a:ce:b7:ec:ae:3f:00:10:f3:
                    06:ab:e4:91:86:8e:55:a6:30:d2:ec:f5:78:e2:d0:
                    33:6e:77:6d:6a:20:ad:b4:29:06:79:5a:3b:74:b9:
                    c5:c8:25:bb:2c:d0:78:c1:b3:33:04:dd:c4:6a:c4:
                    58:16:29:ff:86:38:d4:f4:4f:d6:13:dd:87:66:fd:
                    ed:59:1c:5d:36:0f:91:b2:33:9e:33:3d:3c:65:34:
                    44:b3:e4:96:87:5f:6c:8c:07:07:e1:7d:a5:33:33:
                    9c:ea:da:5b:14:ba:d5:34:26:4e:9a:c3:ef:0c:86:
                    13:1e:dd:3d:91:e8:ba:ae:d1:bf:ca:3b:a9:29:70:
                    d2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:23:07:00:5C:13:B6:8F:74:97:33:3A:38:9A:7F:F6:D3:EB:BE:96
            X509v3 Authority Key Identifier:
                keyid:5C:32:7B:4A:23:5B:F8:90:FD:26:91:FB:03:E9:4A:6F:16:CB:F2:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:bc:56:6e:e4:48:fa:9d:ce:69:a3:48:a6:d0:1c:8f:ea:03:
         9e:05:59:31:6c:bf:52:57:7f:ab:a4:3b:64:24:30:40:d9:e0:
         38:1e:ef:86:fc:12:a3:65:e3:c4:51:58:4b:20:44:df:e4:7e:
         af:32:f0:f4:66:1a:9c:18:46:c9:a1:55:70:7e:47:d2:b9:ac:
         90:d8:53:ae:43:55:36:c7:a3:39:98:b6:48:26:d5:9f:5b:e1:
         07:17:63:04:2a:73:3f:08:35:b5:f1:86:d1:a4:26:8b:f3:fe:
         80:7e:bf:6a:32:09:ec:ea:9f:a7:69:91:10:ad:d1:c9:86:fb:
         fd:89:0b:0c:7f:1f:c9:b1:26:6a:91:3e:a0:0f:32:ab:69:d9:
         87:90:94:c7:77:ec:af:75:29:d9:82:a5:5c:4d:6a:95:4a:5a:
         c9:9d:2a:ec:64:a3:f6:41:d5:19:e4:9c:a1:96:96:29:5f:f1:
         75:ea:f1:00:b1:b9:9f:9d:51:0e:27:42:91:08:1c:82:3e:14:
         0e:63:12:15:3a:f5:f5:53:da:8d:9e:51:52:0c:5d:98:68:1c:
         a7:92:ad:6e:9a:c4:06:ea:38:7b:2c:d5:37:3f:74:0e:bb:ea:
         ea:4e:fe:fa:8e:85:68:cd:e1:76:c5:49:1a:cb:84:91:b7:f6:
         13:bd:dc:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:50:55 2026 by rpki-client