Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft
File:                     XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft (raw, json)
Hash identifier:          CM5ya5N8DWMDsBGiXfk1uWopsNA23OL0hpho8IOU218=
Subject key identifier:   46:0A:34:92:0E:A3:3C:61:31:B6:60:93:9C:3D:9E:86:DA:3B:4D:91
Authority key identifier: 5D:55:F1:50:9B:6F:03:42:4D:29:44:F8:11:F8:69:93:80:99:BB:BC
Certificate issuer:       /CN=A914F870/serialNumber=5D55F1509B6F03424D2944F811F869938099BBBC
Certificate serial:       FE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XVXxUJtvA0JNKUT4Efhpk4CZu7w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft
Manifest number:          F6
Signing time:             Mon 11 May 2026 06:24:37 +0000
Manifest this update:     Mon 11 May 2026 06:24:37 +0000
Manifest next update:     Mon 18 May 2026 06:24:37 +0000
Files and hashes:         1: XVXxUJtvA0JNKUT4Efhpk4CZu7w.crl (hash: b9JCo2xqA+MCCa/F4Wh/4YZ/s0dQi+OX8WoOBAMYFoA=)
                          2: 212A832AD7E311EF86266212C4F9AE02.roa (hash: y/d4ENW45K+wLuEcJR7g6U0WWFs54zradi3gAEB43Fg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.crl
                          rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XVXxUJtvA0JNKUT4Efhpk4CZu7w.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:24:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 254 (0xfe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914F870, serialNumber=5D55F1509B6F03424D2944F811F869938099BBBC
        Validity
            Not Before: May 11 06:24:37 2026 GMT
            Not After : May 18 06:24:37 2026 GMT
        Subject: CN=6a017625-83ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e1:c7:fe:1e:14:9e:19:b2:cc:4f:31:21:a6:
                    9f:2d:22:bd:91:b6:0b:60:87:81:4e:23:10:67:19:
                    d5:13:f9:54:00:97:1a:0b:9b:07:c5:ae:29:21:66:
                    d8:3c:bf:76:ee:31:db:2f:80:90:71:55:c1:aa:17:
                    7b:44:f5:8e:e4:67:88:5b:fa:9c:13:7e:b1:b6:12:
                    91:8e:82:b9:90:a0:c0:1d:af:8e:90:55:55:54:70:
                    a0:e0:62:2a:b7:ef:0b:69:4b:36:c7:d8:ca:6e:33:
                    7e:d2:a5:df:84:c4:73:d8:66:26:d0:83:e2:29:6e:
                    1a:ce:33:55:8f:0d:62:97:e5:86:c8:8e:1a:d8:4c:
                    5d:be:0c:5a:6f:f2:1a:8a:25:00:02:31:b1:b3:89:
                    91:71:a0:21:8e:d4:cd:7a:53:8e:53:b1:27:23:db:
                    00:0f:bd:cb:22:4f:5a:9e:23:47:19:e5:d3:68:5d:
                    36:f6:33:34:69:57:07:cf:f5:b7:d5:94:80:5d:b9:
                    5a:80:14:7f:c8:3c:7c:c1:23:a7:fb:f4:de:1a:cf:
                    1d:51:16:d1:eb:e4:ae:ca:22:92:b1:34:3e:68:14:
                    fd:25:c2:97:c3:37:d8:83:d3:b7:33:ee:0a:e3:e7:
                    9b:67:e1:5f:14:4e:d2:2a:e6:b1:92:8b:ca:f5:a3:
                    9b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:0A:34:92:0E:A3:3C:61:31:B6:60:93:9C:3D:9E:86:DA:3B:4D:91
            X509v3 Authority Key Identifier:
                keyid:5D:55:F1:50:9B:6F:03:42:4D:29:44:F8:11:F8:69:93:80:99:BB:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XVXxUJtvA0JNKUT4Efhpk4CZu7w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:b5:dc:cf:be:e8:81:86:58:19:58:58:df:8f:04:5f:5e:72:
         ee:1b:b1:6a:e5:f7:3c:2b:4a:8c:11:f7:9b:c2:83:fe:4f:8a:
         37:22:64:18:c2:27:5a:ad:6a:47:9c:6d:94:7e:28:3c:fd:5b:
         c0:2e:39:58:24:ae:98:8e:0e:13:69:77:5f:94:2a:8f:2f:c7:
         e1:68:6c:c4:4c:d5:95:d2:a0:e8:c0:bf:55:1a:ee:a5:04:62:
         33:6a:3c:dc:5b:a1:0f:02:e1:76:b0:68:85:0a:a7:2f:78:70:
         e4:36:9f:8c:ae:a6:56:b4:66:94:4b:ed:61:48:2f:fc:52:82:
         02:1a:77:19:bf:06:46:fa:57:29:d3:c1:de:23:86:75:62:21:
         f9:17:30:98:ff:83:dd:71:66:11:71:b8:40:c4:f5:ef:77:27:
         0c:33:64:ed:b7:3f:c8:21:94:ec:ef:b0:1d:a5:bd:70:44:42:
         9f:87:94:73:dd:3c:c2:84:c5:ad:75:89:54:6b:53:62:73:d8:
         c4:7c:62:86:e1:b6:78:24:0d:da:60:9a:9f:e7:3f:6c:d4:66:
         c0:99:cf:c7:ba:f0:46:8f:0e:9c:5f:70:ab:58:47:87:e7:d8:
         a5:a9:bd:86:29:16:11:ff:06:70:77:a2:68:b5:e0:e3:c0:cd:
         bd:41:ba:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:15:43 2026 by rpki-client