Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft
File:                     XnPt2W_yeohfYTVup3sfVDXIT8w.mft (raw, json)
Hash identifier:          Pk653mVB+TATELoW1GeDGCrqhuZynU8v2R2lElsvzFY=
Subject key identifier:   D9:52:57:BA:F8:FF:FE:EA:A3:AF:36:7F:F3:50:F5:31:98:11:CC:B1
Authority key identifier: 5E:73:ED:D9:6F:F2:7A:88:5F:61:35:6E:A7:7B:1F:54:35:C8:4F:CC
Certificate issuer:       /CN=A912759E/serialNumber=5E73EDD96FF27A885F61356EA77B1F5435C84FCC
Certificate serial:       0335
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnPt2W_yeohfYTVup3sfVDXIT8w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft
Manifest number:          032E
Signing time:             Wed 13 May 2026 01:13:01 +0000
Manifest this update:     Wed 13 May 2026 01:13:00 +0000
Manifest next update:     Wed 20 May 2026 01:13:00 +0000
Files and hashes:         1: XnPt2W_yeohfYTVup3sfVDXIT8w.crl (hash: E611R52DRaWIDTrjud0I/iTIeL/TcvvTzt9SIMMR174=)
                          2: 7F0509300CCE11ED97C94316C4F9AE02.roa (hash: GH8dqSP0QmMlKcJcp63ed2knJx2c+htyAC4yLriIV0k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.crl
                          rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnPt2W_yeohfYTVup3sfVDXIT8w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 01:13:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 821 (0x335)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912759E, serialNumber=5E73EDD96FF27A885F61356EA77B1F5435C84FCC
        Validity
            Not Before: May 13 01:13:00 2026 GMT
            Not After : May 20 01:13:00 2026 GMT
        Subject: CN=6a03d01d-e44b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f8:bd:e6:cf:e7:55:93:64:0a:46:1f:d5:a9:
                    a9:f1:0b:7c:80:44:7a:1d:66:07:00:18:40:ce:4b:
                    8c:bb:a0:47:68:a1:48:5c:98:1b:ee:15:5f:f9:45:
                    5c:31:6a:b7:9c:ab:88:bb:cc:26:ec:aa:4a:2d:e2:
                    ff:2d:5a:cd:53:80:89:31:31:a4:2d:fa:08:99:47:
                    40:1b:10:60:05:da:7d:2c:4d:71:0b:49:94:15:48:
                    39:38:31:3b:ee:12:f3:bb:bf:d4:67:76:38:93:37:
                    09:e7:30:8d:00:e7:bd:49:a8:d0:04:81:e8:b5:a7:
                    6e:b3:19:9a:d2:d8:9f:3d:e9:9e:b9:4a:99:1e:50:
                    e9:3c:c8:4b:9f:2f:d3:a0:7b:b0:63:6e:4d:2f:c1:
                    37:56:8f:f0:fb:ed:e0:da:2a:20:8d:e2:2e:8b:d2:
                    42:9c:4e:33:32:22:c0:6c:1e:8f:8d:72:3c:53:33:
                    f8:98:f1:43:0c:fb:bd:9e:0a:10:73:51:50:ba:29:
                    89:3d:19:94:58:93:7d:e4:26:d6:85:68:ea:97:cd:
                    64:ac:31:38:a8:fc:67:cc:9a:e0:2a:21:35:c4:43:
                    09:87:91:e9:60:d4:19:e5:7d:5d:c9:cc:6f:2b:94:
                    96:e9:73:06:da:da:37:8b:89:7e:ca:4a:f6:5c:ee:
                    ae:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:52:57:BA:F8:FF:FE:EA:A3:AF:36:7F:F3:50:F5:31:98:11:CC:B1
            X509v3 Authority Key Identifier:
                keyid:5E:73:ED:D9:6F:F2:7A:88:5F:61:35:6E:A7:7B:1F:54:35:C8:4F:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnPt2W_yeohfYTVup3sfVDXIT8w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:75:df:ad:5b:f5:82:fa:9b:a9:86:87:93:3c:32:ad:ae:94:
         5e:43:ed:77:5b:f8:09:ce:e7:4e:f9:1c:1f:a2:76:7f:3d:8b:
         08:1a:ea:3c:b0:69:2a:31:0b:87:0c:71:fd:2e:d1:4c:4a:a6:
         93:d4:99:81:64:d0:3d:d8:7a:6c:9e:b7:43:b7:8f:5b:f8:d5:
         22:13:c9:2a:cc:ec:81:63:64:ca:e2:5d:81:d5:27:a5:0e:5a:
         c9:67:56:5b:b2:00:33:ae:54:be:95:a7:48:b0:38:75:19:2d:
         0f:65:bd:8b:be:97:50:b1:b0:72:74:34:f3:9e:ec:c2:a5:92:
         41:ce:96:94:98:59:6b:cd:c8:44:87:5c:fd:2a:ae:8c:89:15:
         09:8d:27:bb:76:d9:69:91:f0:5c:fd:22:69:b9:4b:c1:43:5e:
         06:ba:0d:f9:c5:5a:f1:60:98:d8:91:8a:89:6e:94:5c:80:57:
         32:07:d4:74:7e:4d:00:9d:df:14:c7:cf:85:0c:51:43:ee:bd:
         e9:ce:a4:bc:b8:dc:33:75:8d:c9:25:69:68:b9:10:8d:52:1a:
         23:e8:9f:8c:98:c3:d0:8e:ae:17:28:ed:b2:3d:38:62:92:03:
         d6:0d:c8:05:e9:b1:13:d7:1e:16:bc:45:b2:d5:e7:7c:96:18:
         64:a5:1f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:34:08 2026 by rpki-client