Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft
File:                     xGxDuid9LBDufR7_PfDi78iFGh0.mft (raw, json)
Hash identifier:          iqMz0/LRqBEn2cLTD5GsSuT+lKGIRIvzLy32FtonEOg=
Subject key identifier:   BD:84:1A:6C:26:B6:45:09:BD:46:7A:6C:2A:84:C3:18:19:D7:BF:AE
Authority key identifier: C4:6C:43:BA:27:7D:2C:10:EE:7D:1E:FF:3D:F0:E2:EF:C8:85:1A:1D
Certificate issuer:       /CN=A913638A/serialNumber=C46C43BA277D2C10EE7D1EFF3DF0E2EFC8851A1D
Certificate serial:       012C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft
Manifest number:          0123
Signing time:             Mon 11 May 2026 05:50:15 +0000
Manifest this update:     Mon 11 May 2026 05:50:15 +0000
Manifest next update:     Mon 18 May 2026 05:50:15 +0000
Files and hashes:         1: xGxDuid9LBDufR7_PfDi78iFGh0.crl (hash: QUYRjVUoxpsRjc7f/TqyEQuCx8X7e2wGfvZ9Vxowj9U=)
                          2: 9D7ED59A954711EF9830412DC4F9AE02.roa (hash: ekvUghltwWP4FQ66hV4j9tf5nEe4NKO+RhKkAq+FQXQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.crl
                          rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 05:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 300 (0x12c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913638A, serialNumber=C46C43BA277D2C10EE7D1EFF3DF0E2EFC8851A1D
        Validity
            Not Before: May 11 05:50:15 2026 GMT
            Not After : May 18 05:50:15 2026 GMT
        Subject: CN=6a016e17-eb71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:89:cc:ed:9c:3e:02:de:4c:8c:dc:78:9a:d1:
                    1e:b8:0c:ae:e9:2b:c3:df:d4:c9:f5:00:f9:6a:bf:
                    b3:04:25:c0:b5:88:43:15:9a:83:2b:a2:38:b9:cc:
                    bd:7c:fe:72:43:75:7b:9e:e5:9d:fd:62:16:c7:91:
                    e6:31:7e:87:ae:62:aa:93:24:ed:13:4b:77:55:14:
                    6c:bd:8f:08:51:c0:bf:ac:65:47:d9:1a:85:2b:8e:
                    16:3c:75:4c:3e:f7:c2:ae:cf:4e:5f:be:c1:76:6e:
                    d3:32:82:1d:da:d4:7a:6a:e8:a9:0c:8b:73:f1:74:
                    1c:77:3f:56:1d:5f:22:c8:07:42:4a:ea:34:e6:3c:
                    69:87:e5:75:5c:0e:c2:03:a4:e2:97:9b:1c:55:a6:
                    00:09:e8:b2:ed:1d:13:69:84:0c:27:93:d9:48:0f:
                    d9:19:8d:f6:8c:62:30:22:6e:38:5d:72:54:65:ac:
                    8a:ed:63:7c:4c:29:47:fa:b0:77:52:66:c8:c5:1e:
                    8d:70:98:21:5d:26:ce:3b:93:3a:6b:e7:26:b2:c5:
                    2e:51:bc:2a:5a:63:6d:48:45:e4:ad:03:65:9d:d2:
                    22:e0:23:f3:8e:5c:eb:7a:8e:db:f2:ea:2a:d1:76:
                    99:1b:53:d8:a4:be:33:3c:5c:6a:0a:b6:d1:f7:11:
                    67:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:84:1A:6C:26:B6:45:09:BD:46:7A:6C:2A:84:C3:18:19:D7:BF:AE
            X509v3 Authority Key Identifier:
                keyid:C4:6C:43:BA:27:7D:2C:10:EE:7D:1E:FF:3D:F0:E2:EF:C8:85:1A:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:15:8b:43:1c:9a:ae:07:85:12:c2:05:c1:22:cd:d5:b8:47:
         20:9a:c1:e6:8b:8a:6b:de:3b:b1:31:a9:ab:b5:67:c4:a7:e8:
         9e:40:44:50:8a:64:bf:d6:fb:13:b4:8d:7d:6a:ca:f5:60:be:
         5c:a1:8b:e5:5d:1b:d5:49:5d:5b:09:ff:df:31:bd:05:23:74:
         cc:cb:3b:c4:4e:78:69:26:cb:e0:74:59:8c:51:56:eb:82:2f:
         09:4a:f6:af:71:8d:01:83:1e:ab:d1:67:ec:70:e6:8e:32:32:
         32:8b:0c:18:a7:9a:ea:91:50:4f:8f:61:4c:a6:2b:93:30:b3:
         4f:63:45:2e:4f:e0:9f:af:61:7a:af:8b:2a:62:ad:01:6a:93:
         05:f4:d1:2d:1f:96:84:43:00:41:c6:57:8c:c5:48:ef:75:22:
         a6:21:d0:22:d1:12:19:0f:70:ba:1c:cf:5a:1a:8e:41:7c:83:
         90:1d:c1:51:c6:8a:d9:e6:69:65:91:c3:86:e1:48:0c:6b:9e:
         a1:38:3c:f9:4e:35:f6:13:a4:8b:04:75:2a:a6:49:eb:ff:74:
         03:46:e5:f7:ae:75:aa:0c:9f:15:54:4d:04:7a:89:b8:9a:32:
         7d:80:69:ee:c0:76:84:02:34:c1:5e:64:92:be:34:2f:f1:10:
         6d:82:eb:01
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzYzOEExMTAvBgNVBAUTKEM0NkM0M0JBMjc3RDJDMTBFRTdEMUVGRjNERjBFMkVG
Qzg4NTFBMUQwHhcNMjYwNTExMDU1MDE1WhcNMjYwNTE4MDU1MDE1WjAYMRYwFAYD
VQQDEw02YTAxNmUxNy1lYjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqYnM7Zw+At5MjNx4mtEeuAyu6SvD39TJ9QD5ar+zBCXAtYhDFZqDK6I4ucy9
fP5yQ3V7nuWd/WIWx5HmMX6HrmKqkyTtE0t3VRRsvY8IUcC/rGVH2RqFK44WPHVM
PvfCrs9OX77Bdm7TMoId2tR6auipDItz8XQcdz9WHV8iyAdCSuo05jxph+V1XA7C
A6Til5scVaYACeiy7R0TaYQMJ5PZSA/ZGY32jGIwIm44XXJUZayK7WN8TClH+rB3
UmbIxR6NcJghXSbOO5M6a+cmssUuUbwqWmNtSEXkrQNlndIi4CPzjlzreo7b8uoq
0XaZG1PYpL4zPFxqCrbR9xFnjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL2EGmwm
tkUJvUZ6bCqEwxgZ17+uMB8GA1UdIwQYMBaAFMRsQ7onfSwQ7n0e/z3w4u/IhRod
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjM4QS81QkREMkNBRTk1
NDcxMUVGOTY4MDhGMkNDNEY5QUUwMi94R3hEdWlkOUxCRHVmUjdfUGZEaTc4aUZH
aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hHeER1aWQ5TEJEdWZSN19QZkRpNzhpRkdoMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NjM4QS81QkREMkNBRTk1NDcxMUVGOTY4MDhGMkNDNEY5QUUwMi94R3hEdWlkOUxC
RHVmUjdfUGZEaTc4aUZHaDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARhWLQxyargeFEsIFwSLN1bhHIJrB5ouKa947sTGpq7VnxKfonkBEUIpkv9b7
E7SNfWrK9WC+XKGL5V0b1UldWwn/3zG9BSN0zMs7xE54aSbL4HRZjFFW64IvCUr2
r3GNAYMeq9Fn7HDmjjIyMosMGKea6pFQT49hTKYrkzCzT2NFLk/gn69heq+LKmKt
AWqTBfTRLR+WhEMAQcZXjMVI73UipiHQItESGQ9wuhzPWhqOQXyDkB3BUcaK2eZp
ZZHDhuFIDGueoTg8+U419hOkiwR1KqZJ6/90A0bl9651qgyfFVRNBHqJuJoyfYBp
7sB2hAI0wV5kkr40L/EQbYLrAQ==
-----END CERTIFICATE-----
Generated at Wed May 13 04:29:32 2026 by rpki-client