Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.mft
File:                     xq-SXz6kP06O56MUIYIWk7Gt9qE.mft (raw, json)
Hash identifier:          138GrwVXL3QhKIwBl6aCBGNgBs/Ur03zgOhsMuIjImY=
Subject key identifier:   9A:50:FE:41:58:BD:BA:15:EC:2E:68:BD:02:6F:0F:92:44:88:68:2A
Authority key identifier: C6:AF:92:5F:3E:A4:3F:4E:8E:E7:A3:14:21:82:16:93:B1:AD:F6:A1
Certificate issuer:       /CN=A911E807/serialNumber=C6AF925F3EA43F4E8EE7A31421821693B1ADF6A1
Certificate serial:       0736
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xq-SXz6kP06O56MUIYIWk7Gt9qE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.mft
Manifest number:          072B
Signing time:             Tue 12 May 2026 21:54:17 +0000
Manifest this update:     Tue 12 May 2026 21:54:16 +0000
Manifest next update:     Tue 19 May 2026 21:54:16 +0000
Files and hashes:         1: xq-SXz6kP06O56MUIYIWk7Gt9qE.crl (hash: GI4ToN7hpxwYNStQ0tIOfmWNbBnaRfk768y8gDI5Rtk=)
                          2: 1A20AAF27BD311EBA6617987C4F9AE02.roa (hash: LQ6rMhZDzAY8FPwtfGTf2Oca3RZNu+bmDyNVPU27Ec0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.crl
                          rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xq-SXz6kP06O56MUIYIWk7Gt9qE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 21:54:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1846 (0x736)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E807, serialNumber=C6AF925F3EA43F4E8EE7A31421821693B1ADF6A1
        Validity
            Not Before: May 12 21:54:16 2026 GMT
            Not After : May 19 21:54:16 2026 GMT
        Subject: CN=6a03a188-ef90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ad:5e:b1:96:4f:93:a4:67:54:9d:2d:c3:c7:
                    05:33:45:76:1c:cf:a5:13:04:f5:46:80:e8:b1:1a:
                    e4:ef:16:7f:7b:2f:11:b3:5d:6a:fc:7a:bb:87:12:
                    18:7d:b2:06:10:e7:fc:b2:5f:fc:ca:b8:f1:71:0f:
                    ac:38:eb:dd:01:b0:27:87:c3:a2:b6:7f:6e:3d:2d:
                    ca:26:d6:12:55:9d:2b:94:8e:ad:94:77:dd:f3:c6:
                    ee:fc:ca:94:3d:10:49:db:0a:06:56:14:c3:38:e6:
                    ae:91:f7:07:87:f1:3b:b2:a1:42:94:51:9e:67:8c:
                    d5:73:04:70:f1:78:77:cb:12:5e:1e:68:63:bd:e8:
                    59:e4:6b:33:9c:e2:d2:a4:07:b8:f1:ac:2a:f6:e7:
                    24:c6:e9:e6:e9:7d:c9:0f:34:3e:50:2e:2e:a0:a1:
                    44:21:a9:09:8d:ed:f4:02:1e:74:8e:60:96:79:16:
                    df:c5:ce:d7:ae:0f:45:17:80:8f:07:66:90:a8:7e:
                    58:a3:05:37:67:9b:5e:ff:dd:6d:b6:a5:f2:d4:aa:
                    2b:74:bc:e2:98:43:a7:21:43:f6:e6:0a:2f:9d:7d:
                    64:1e:c9:bc:2e:58:37:f3:24:be:c0:52:27:00:d5:
                    37:dc:8c:d0:e9:66:be:c7:dd:49:23:a7:ae:0b:28:
                    81:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:50:FE:41:58:BD:BA:15:EC:2E:68:BD:02:6F:0F:92:44:88:68:2A
            X509v3 Authority Key Identifier:
                keyid:C6:AF:92:5F:3E:A4:3F:4E:8E:E7:A3:14:21:82:16:93:B1:AD:F6:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xq-SXz6kP06O56MUIYIWk7Gt9qE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:bc:a7:4b:16:ad:65:a1:16:a3:bc:dd:0d:00:44:5e:db:8d:
         80:b6:2c:d4:41:e6:2b:07:f4:c7:05:73:07:9c:ad:6e:fc:b6:
         86:c7:bd:6b:58:ed:25:b2:0d:24:0b:ab:83:c5:3a:c1:bc:cf:
         f5:42:05:35:7e:1a:0b:48:9b:52:72:e5:f0:fc:b2:e2:31:18:
         d2:3a:d1:86:03:15:d5:d9:4e:61:9d:a1:68:57:55:3d:ba:c6:
         12:4d:fa:3c:ce:41:45:4f:b6:b0:62:6e:52:e2:59:0a:18:aa:
         1f:50:2d:3a:1a:6b:2b:f2:4b:72:19:ee:81:f0:2a:ba:58:38:
         63:68:12:e9:fd:9c:9b:f9:3c:de:22:7d:59:5c:9c:d4:71:49:
         93:a4:7d:05:d4:38:23:b0:70:fe:e0:2c:1d:a7:af:85:b5:67:
         ac:c1:3b:6d:b7:01:e8:66:cd:20:5c:3e:ed:4e:5d:a8:71:98:
         70:45:d1:8e:3a:f0:09:c6:ab:f3:8a:81:ac:23:fc:6e:38:df:
         4d:25:b1:76:07:91:90:61:d6:a3:03:42:35:0e:28:85:50:eb:
         49:c9:dd:3a:89:80:c8:cb:ea:17:e0:81:52:d7:cf:1f:d7:17:
         40:5d:89:16:5f:ef:31:84:3e:62:b5:31:e0:96:d9:7e:eb:7d:
         0c:42:69:31
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUU4MDcxMTAvBgNVBAUTKEM2QUY5MjVGM0VBNDNGNEU4RUU3QTMxNDIxODIxNjkz
QjFBREY2QTEwHhcNMjYwNTEyMjE1NDE2WhcNMjYwNTE5MjE1NDE2WjAYMRYwFAYD
VQQDEw02YTAzYTE4OC1lZjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAta1esZZPk6RnVJ0tw8cFM0V2HM+lEwT1RoDosRrk7xZ/ey8Rs11q/Hq7hxIY
fbIGEOf8sl/8yrjxcQ+sOOvdAbAnh8Oitn9uPS3KJtYSVZ0rlI6tlHfd88bu/MqU
PRBJ2woGVhTDOOaukfcHh/E7sqFClFGeZ4zVcwRw8Xh3yxJeHmhjvehZ5GsznOLS
pAe48awq9uckxunm6X3JDzQ+UC4uoKFEIakJje30Ah50jmCWeRbfxc7Xrg9FF4CP
B2aQqH5YowU3Z5te/91ttqXy1KordLzimEOnIUP25govnX1kHsm8Llg38yS+wFIn
ANU33IzQ6Wa+x91JI6euCyiBPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJpQ/kFY
vboV7C5ovQJvD5JEiGgqMB8GA1UdIwQYMBaAFMavkl8+pD9OjuejFCGCFpOxrfah
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTgwNy8yNjk2RjZDNjdC
MzYxMUVCQkU4NzY0NjFDNEY5QUUwMi94cS1TWHo2a1AwNk81Nk1VSVlJV2s3R3Q5
cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hxLVNYejZrUDA2TzU2TVVJWUlXazdHdDlxRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RTgwNy8yNjk2RjZDNjdCMzYxMUVCQkU4NzY0NjFDNEY5QUUwMi94cS1TWHo2a1Aw
Nk81Nk1VSVlJV2s3R3Q5cUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMLynSxatZaEWo7zdDQBEXtuNgLYs1EHmKwf0xwVzB5ytbvy2hse9a1jtJbIN
JAurg8U6wbzP9UIFNX4aC0ibUnLl8Pyy4jEY0jrRhgMV1dlOYZ2haFdVPbrGEk36
PM5BRU+2sGJuUuJZChiqH1AtOhprK/JLchnugfAqulg4Y2gS6f2cm/k83iJ9WVyc
1HFJk6R9BdQ4I7Bw/uAsHaevhbVnrME7bbcB6GbNIFw+7U5dqHGYcEXRjjrwCcar
84qBrCP8bjjfTSWxdgeRkGHWowNCNQ4ohVDrScndOomAyMvqF+CBUtfPH9cXQF2J
Fl/vMYQ+YrUx4JbZfut9DEJpMQ==
-----END CERTIFICATE-----
Generated at Wed May 13 06:40:59 2026 by rpki-client