Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91582DF/9501E2464A1C11F1AAFBA6B1C9833773/xz0GwFqHVeyG868ZQO6Q2kmuPmQ.mft
File:                     xz0GwFqHVeyG868ZQO6Q2kmuPmQ.mft (raw, json)
Hash identifier:          hoAJXlX2Hyb01sX3Cq/0p0RULuyavFmwzzN1g4YDm2g=
Subject key identifier:   C7:D6:F8:38:83:F2:83:A6:2A:B1:E2:92:43:72:C8:BB:4E:FC:C7:30
Authority key identifier: C7:3D:06:C0:5A:87:55:EC:86:F3:AF:19:40:EE:90:DA:49:AE:3E:64
Certificate issuer:       /CN=A91582DF/serialNumber=C73D06C05A8755EC86F3AF1940EE90DA49AE3E64
Certificate serial:       07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xz0GwFqHVeyG868ZQO6Q2kmuPmQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91582DF/9501E2464A1C11F1AAFBA6B1C9833773/xz0GwFqHVeyG868ZQO6Q2kmuPmQ.mft
Manifest number:          05
Signing time:             Mon 11 May 2026 09:26:08 +0000
Manifest this update:     Mon 11 May 2026 09:26:08 +0000
Manifest next update:     Mon 18 May 2026 09:26:08 +0000
Files and hashes:         1: xz0GwFqHVeyG868ZQO6Q2kmuPmQ.crl (hash: 3Fmr8vVutcdvTb1LEmHXfgJ+vp5ZKmoZdictYMdIExU=)
                          2: A0AA3CC84A1D11F1B98DEBB6C9833773.roa (hash: vg1YeXy7A3skRrMrzsOzoL6vwmPs9b3WJpIatWza3uI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91582DF/9501E2464A1C11F1AAFBA6B1C9833773/xz0GwFqHVeyG868ZQO6Q2kmuPmQ.crl
                          rsync://rpki.apnic.net/member_repository/A91582DF/9501E2464A1C11F1AAFBA6B1C9833773/xz0GwFqHVeyG868ZQO6Q2kmuPmQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xz0GwFqHVeyG868ZQO6Q2kmuPmQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 09:26:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91582DF, serialNumber=C73D06C05A8755EC86F3AF1940EE90DA49AE3E64
        Validity
            Not Before: May 11 09:26:08 2026 GMT
            Not After : May 18 09:26:08 2026 GMT
        Subject: CN=6a01a0b0-76d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:d4:2c:3c:ca:f5:9c:41:52:0f:00:59:d5:99:
                    21:d7:28:da:26:e7:df:55:1c:e9:08:c9:50:2a:8b:
                    bb:46:b4:58:44:30:44:4f:69:1c:02:63:a6:80:b7:
                    2e:d0:a8:5d:cb:be:03:dd:fb:4c:5c:26:33:02:8c:
                    92:43:ae:57:da:b8:92:12:18:fb:56:4a:fa:39:0b:
                    30:9a:23:3f:26:e1:64:28:e9:de:f7:03:88:d4:21:
                    60:4d:0e:29:54:ab:0d:74:05:3f:96:91:ff:1a:09:
                    63:26:ca:3a:aa:d5:66:32:34:1d:dd:58:de:20:f6:
                    9f:8d:61:3f:37:2a:21:17:35:4e:53:ea:73:33:bf:
                    9a:2b:ed:7d:56:f2:2d:3e:c8:f6:8e:51:7a:44:93:
                    cb:3c:23:d7:b4:c0:4d:62:0b:35:3c:d3:5f:69:c2:
                    20:c1:ed:51:e9:5c:2f:22:fc:ff:8a:1c:ed:ba:c5:
                    2b:3c:70:1a:17:d2:49:85:6b:b0:b9:52:23:ce:c1:
                    63:b6:ee:3d:cb:1f:09:49:cc:76:09:a3:fc:93:04:
                    6e:04:fb:d8:04:cc:a4:b2:4f:d1:e5:79:76:7b:6c:
                    bb:7c:aa:9f:8f:e0:92:7e:ce:e9:20:34:cd:be:1a:
                    48:f8:a0:f8:c6:5d:0f:a1:ab:95:b6:50:e6:98:5d:
                    58:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:D6:F8:38:83:F2:83:A6:2A:B1:E2:92:43:72:C8:BB:4E:FC:C7:30
            X509v3 Authority Key Identifier:
                keyid:C7:3D:06:C0:5A:87:55:EC:86:F3:AF:19:40:EE:90:DA:49:AE:3E:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91582DF/9501E2464A1C11F1AAFBA6B1C9833773/xz0GwFqHVeyG868ZQO6Q2kmuPmQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xz0GwFqHVeyG868ZQO6Q2kmuPmQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91582DF/9501E2464A1C11F1AAFBA6B1C9833773/xz0GwFqHVeyG868ZQO6Q2kmuPmQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:9f:40:33:50:3f:8a:aa:19:dd:94:ff:f6:78:a6:4e:b5:bc:
         6e:8e:8c:5a:a1:4c:a8:9e:a3:32:f6:2b:5b:f5:ca:3c:ee:88:
         8d:b9:e1:d4:a9:4d:e0:97:89:0e:24:26:1e:9b:69:32:ec:ff:
         46:6d:a6:cf:79:01:15:6f:15:4f:39:51:db:1e:c3:2a:69:76:
         1b:a2:ed:cb:67:67:61:e2:6f:37:34:81:3d:a2:05:36:86:d3:
         30:5f:ff:ae:38:5c:35:92:e8:90:2d:88:2c:5e:c7:a0:61:4a:
         c9:da:a3:e9:fb:1d:b4:62:41:cc:13:12:17:3d:04:22:1c:30:
         6d:af:83:4f:39:dd:1a:85:56:26:a1:3e:fa:9d:4a:e3:af:77:
         f8:a1:31:00:a1:54:b9:e1:88:47:3e:53:1e:f8:ff:0d:b6:6e:
         3b:06:bd:33:98:da:5e:d3:4f:80:d4:29:c0:94:a6:2b:cf:a5:
         97:f6:5d:11:c3:a7:34:ef:c4:e2:4e:2f:b3:0e:a2:99:4a:d9:
         c2:80:00:8c:73:d9:b9:73:3a:55:9d:be:59:8c:1e:b9:fc:28:
         09:36:7f:ef:35:05:8f:a1:69:5c:b2:34:4d:2b:33:dc:77:2e:
         3a:b8:3f:e3:ea:c8:85:26:76:44:e7:fb:7a:70:58:af:fb:c6:
         c0:c2:06:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:39:35 2026 by rpki-client