Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft
File:                     xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft (raw, json)
Hash identifier:          Ojux/VpN+Yb5SaCWGgtVq1zWjNbOPUbvKzaC5JLE+Wo=
Subject key identifier:   28:BE:DB:86:6F:2F:3E:2B:6C:11:64:30:D3:06:F6:DB:43:8F:20:B8
Authority key identifier: C6:D0:06:7F:24:28:1C:E1:F4:9C:90:81:2D:15:B1:F5:61:B9:5D:DE
Certificate issuer:       /CN=A9118166/serialNumber=C6D0067F24281CE1F49C90812D15B1F561B95DDE
Certificate serial:       086F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft
Manifest number:          0867
Signing time:             Tue 12 May 2026 20:47:40 +0000
Manifest this update:     Tue 12 May 2026 20:47:39 +0000
Manifest next update:     Tue 19 May 2026 20:47:39 +0000
Files and hashes:         1: xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl (hash: Lej2aIqMnfIzFzRd7Z2glIOi+jlMFZfc411o7KN06y4=)
                          2: 6AF8F822FDAB11EAAAB1FB37C4F9AE02.roa (hash: 0atk63T1W/wzmM9R09qN0CbSSQOZFaD/GMI/cNzoG4U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl
                          rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:47:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2159 (0x86f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118166, serialNumber=C6D0067F24281CE1F49C90812D15B1F561B95DDE
        Validity
            Not Before: May 12 20:47:39 2026 GMT
            Not After : May 19 20:47:39 2026 GMT
        Subject: CN=6a0391ec-8140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:66:7d:25:55:24:16:16:1d:62:29:84:38:bd:
                    68:bf:40:b0:14:21:72:bd:0e:dc:09:f4:3b:7b:a8:
                    99:04:f0:d5:82:d3:b8:b6:49:52:1c:38:75:6f:7f:
                    d7:b6:a4:68:fa:17:19:6f:e5:d8:fc:d3:00:80:a4:
                    e2:42:fc:54:0c:9e:90:fa:bd:84:a8:44:80:72:93:
                    91:30:2a:26:d2:d2:38:bb:73:60:f8:f8:83:52:47:
                    81:84:84:db:81:af:28:30:da:b8:25:4c:96:62:96:
                    47:f0:c0:bf:73:8e:b5:46:f3:8f:72:3b:92:3e:64:
                    1c:ce:43:77:20:30:7a:d9:87:00:e4:11:a4:f0:a1:
                    54:99:8f:5f:4c:d1:51:33:b7:c0:f4:ac:aa:22:da:
                    c5:8e:75:74:18:b8:69:0f:a2:07:a3:43:39:39:6a:
                    8a:49:02:4a:9e:4c:34:e1:3f:bc:e0:e5:62:0b:72:
                    8b:b4:a9:42:b9:9c:0f:b3:a4:ae:bf:74:f0:98:fc:
                    54:b2:25:d9:ed:17:28:f4:3d:4a:44:4b:da:c8:f8:
                    7a:dd:21:f3:bd:e3:cb:32:c5:b0:61:fc:24:38:71:
                    db:df:bb:4f:8e:b1:06:10:11:33:51:46:67:d2:eb:
                    2f:fe:f1:d2:51:73:02:b4:6b:f8:0d:cd:fc:71:ec:
                    2a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:BE:DB:86:6F:2F:3E:2B:6C:11:64:30:D3:06:F6:DB:43:8F:20:B8
            X509v3 Authority Key Identifier:
                keyid:C6:D0:06:7F:24:28:1C:E1:F4:9C:90:81:2D:15:B1:F5:61:B9:5D:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:33:d7:4c:e9:0b:a9:3c:35:1a:0b:99:f5:0b:bb:75:e0:27:
         19:e6:00:51:7e:4c:0f:5a:da:37:36:b8:db:7d:c1:a3:36:54:
         72:5b:a4:59:23:3f:6b:09:41:96:4b:d9:84:c5:60:f2:57:39:
         50:1b:50:b8:cc:05:99:69:b6:67:09:a9:cb:84:75:27:61:16:
         a0:5a:f5:94:ac:d4:88:e4:5a:e8:ca:34:50:df:52:35:c9:60:
         e1:b1:aa:d4:1a:e0:d7:27:fd:8a:a2:a7:19:75:a0:fe:c0:86:
         aa:5f:36:11:08:f3:9e:1a:d2:03:ae:2b:c4:03:0d:fa:04:b6:
         c9:1c:c2:c9:79:7f:2d:e8:a7:77:63:1c:72:10:90:e6:ff:01:
         65:98:88:12:17:9c:28:1c:3f:53:a5:9d:f7:66:c5:77:71:8a:
         1a:bd:f0:97:98:fb:3a:21:0e:bb:06:4d:af:c3:94:c2:e5:2b:
         d4:e8:24:2c:57:69:5f:87:3f:87:d5:93:f6:eb:d4:dd:22:f9:
         71:c1:09:49:65:b5:b6:dc:c4:d6:7c:a7:cd:99:88:7e:e2:e5:
         ad:0d:8f:07:96:a1:11:83:2c:1f:a2:57:4a:cd:0b:df:c9:0a:
         37:e4:73:51:70:90:41:ce:c4:97:8b:dd:69:bd:6a:f8:c8:47:
         58:d7:e4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:54:15 2026 by rpki-client