Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft
File:                     xsPe6PYn19lovt8i_GEJRiUwF4M.mft (raw, json)
Hash identifier:          isA56D5HtDMOwunJWpaTU7Oi7fHceHG7giRJ2+Xxbq0=
Subject key identifier:   93:54:C7:A4:86:6F:79:A3:F0:CB:64:CE:1D:F9:DC:16:B4:AE:E3:4A
Authority key identifier: C6:C3:DE:E8:F6:27:D7:D9:68:BE:DF:22:FC:61:09:46:25:30:17:83
Certificate issuer:       /CN=A9151258/serialNumber=C6C3DEE8F627D7D968BEDF22FC61094625301783
Certificate serial:       3578
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft
Manifest number:          3545
Signing time:             Tue 12 May 2026 15:11:44 +0000
Manifest this update:     Tue 12 May 2026 15:11:43 +0000
Manifest next update:     Tue 19 May 2026 15:11:43 +0000
Files and hashes:         1: xsPe6PYn19lovt8i_GEJRiUwF4M.crl (hash: MCOG/vdQp7RRKBB4wpwWeIa0gTiM6amTgF8wQxjvDTQ=)
                          2: 504CB1588D3911F093856C71C4F9AE02.roa (hash: XbsPrmHsv3A3kJ0QH0nWqPm+aVwo38LG2afXIGK/eHk=)
                          3: AF01BDAE331211F1A2C10B79B1833773.roa (hash: +lp+LJ18Jwi0gflyPYkZccPDvT37HJQu97mBM2XRD3I=)
                          4: 8D769B548D3C11F0A8123F21C4F9AE02.roa (hash: 5cXLpNEPj2n6/HEGy8/26JkT8yzOfvZLJ/SaAIq5f84=)
                          5: 8CF6EB2A8D3C11F0A8123F21C4F9AE02.roa (hash: IHiT2JkC8madnsWfQDkJBYO++lG67IBJ1W4/S66TXLY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.crl
                          rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:11:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13688 (0x3578)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151258, serialNumber=C6C3DEE8F627D7D968BEDF22FC61094625301783
        Validity
            Not Before: May 12 15:11:43 2026 GMT
            Not After : May 19 15:11:43 2026 GMT
        Subject: CN=6a034330-131c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e3:83:f0:9e:16:f7:25:e4:5f:df:4e:1b:dc:
                    9c:6b:50:ec:0a:8e:ea:81:bd:47:88:10:89:bd:b8:
                    25:1d:83:f6:bb:e8:b0:fa:d6:05:26:58:00:d2:49:
                    0c:bb:34:ad:52:3e:da:08:b7:04:1b:f8:3f:79:f7:
                    49:20:72:90:4c:29:92:a2:c1:88:48:00:f5:b8:c3:
                    ad:f7:27:7d:39:b7:31:38:12:f9:dd:97:e0:00:fb:
                    7a:b1:61:ea:af:f5:bb:e0:0c:82:65:ee:1c:b9:7f:
                    15:99:19:0a:e7:41:25:0f:09:73:c2:39:54:22:2c:
                    3e:a7:dd:df:0e:71:1d:21:cc:15:ee:10:40:35:74:
                    50:f8:09:d3:42:6c:7a:0f:f8:9c:59:d7:a7:34:64:
                    a3:e2:54:82:ca:21:e0:60:5e:dd:d7:2f:6a:62:28:
                    00:d3:3d:27:d9:cd:ff:58:25:6a:4c:26:1a:e5:ed:
                    4c:12:0b:b1:64:12:f8:50:68:a9:8e:89:52:65:dd:
                    9e:1c:67:a3:9d:4b:8c:27:7e:b5:ea:63:12:af:04:
                    29:5f:be:e5:f1:ff:42:8b:d4:2f:02:1e:e6:56:d7:
                    93:62:1c:37:7c:3c:53:da:13:a2:80:9e:03:1c:46:
                    16:cd:3b:89:7c:8e:e1:a7:a3:e3:b9:20:75:e3:bb:
                    b2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:54:C7:A4:86:6F:79:A3:F0:CB:64:CE:1D:F9:DC:16:B4:AE:E3:4A
            X509v3 Authority Key Identifier:
                keyid:C6:C3:DE:E8:F6:27:D7:D9:68:BE:DF:22:FC:61:09:46:25:30:17:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:06:62:e5:61:ec:5d:a8:b4:4d:aa:d2:43:a2:80:4d:58:b9:
         52:ac:67:90:c2:56:ef:a7:7e:70:d6:a5:80:44:23:d7:69:6e:
         46:e9:11:f4:aa:90:cc:09:a5:ac:72:96:43:87:e8:72:06:df:
         2e:df:8e:91:9e:05:5d:11:ad:ed:36:92:d7:18:b9:67:19:54:
         9a:47:e9:43:28:ac:18:e2:0a:0a:32:d8:cc:a3:a8:af:ef:f0:
         9f:4f:99:3b:ff:fd:29:ee:a3:e5:fd:7a:06:55:9e:6c:8a:0d:
         37:e9:12:c3:6c:f2:9e:cc:58:49:7b:9d:bc:a2:5a:ab:ec:30:
         9f:ca:a8:a3:b8:92:9f:d9:4d:34:7e:1b:cd:9a:b2:a2:0e:00:
         45:78:bf:01:ca:71:44:bd:d3:1d:77:a1:99:e6:69:c4:8a:0b:
         81:73:79:ff:f3:cf:4d:54:0c:b4:1a:18:27:9d:1b:af:29:9c:
         eb:01:dc:92:ba:d6:57:e0:f4:2d:04:90:01:9a:b4:b1:93:e9:
         ba:a2:e4:e5:78:57:53:b4:1f:ae:09:46:6a:05:b6:11:be:81:
         bd:3b:cf:db:13:2c:d9:88:1b:bc:2e:6b:06:db:e0:f9:0d:e1:
         42:b9:25:56:52:dc:98:41:a1:7c:b9:4b:40:5c:87:46:a1:e8:
         16:d3:91:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:04:42 2026 by rpki-client