Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.mft
File:                     xz6_TxX6Jikr9a24ioZXfsOnHN4.mft (raw, json)
Hash identifier:          +QPBVrMi3/xFXYJ3XAzZveRzQhw3BcvWMJNjT/Je1x0=
Subject key identifier:   A3:1C:D5:7F:FD:B5:78:73:CF:D7:BA:B3:7C:1C:C4:A7:17:D6:16:86
Authority key identifier: C7:3E:BF:4F:15:FA:26:29:2B:F5:AD:B8:8A:86:57:7E:C3:A7:1C:DE
Certificate issuer:       /CN=A9161EA6/serialNumber=C73EBF4F15FA26292BF5ADB88A86577EC3A71CDE
Certificate serial:       13B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xz6_TxX6Jikr9a24ioZXfsOnHN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.mft
Manifest number:          13A4
Signing time:             Tue 12 May 2026 16:58:45 +0000
Manifest this update:     Tue 12 May 2026 16:58:45 +0000
Manifest next update:     Tue 19 May 2026 16:58:45 +0000
Files and hashes:         1: xz6_TxX6Jikr9a24ioZXfsOnHN4.crl (hash: b74pvfI4x2yz6afZA0hTk9T1ze1juo0qgwRFJjH8X08=)
                          2: FF3B3F84B63311E8BAD5A95EC4F9AE02.roa (hash: 4+E5E8FScsGLPxnpqLaTouQdBYC+cZmSDj6CuV7yD1Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.crl
                          rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xz6_TxX6Jikr9a24ioZXfsOnHN4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 16:58:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5040 (0x13b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161EA6, serialNumber=C73EBF4F15FA26292BF5ADB88A86577EC3A71CDE
        Validity
            Not Before: May 12 16:58:45 2026 GMT
            Not After : May 19 16:58:45 2026 GMT
        Subject: CN=6a035c45-6bd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8e:16:aa:e8:2d:24:b8:b4:24:2d:9b:e1:2c:
                    e9:09:87:4f:85:0e:84:9f:04:a1:a4:bb:31:c2:a9:
                    e4:a8:09:12:47:f7:bd:65:17:44:f7:9f:b5:49:93:
                    a6:cd:3c:fb:9b:a1:ac:3f:18:3d:30:fa:df:db:c9:
                    79:bc:b6:a0:26:63:09:ad:7f:07:43:9c:da:6a:5a:
                    45:eb:a3:2b:2f:63:6d:c2:43:05:9f:72:c5:75:e6:
                    7c:0f:95:2a:b2:3f:62:0b:e8:d9:38:04:ae:a8:8d:
                    60:2a:6c:ea:fb:ad:79:5a:69:b3:e9:66:2d:bf:7d:
                    d1:cc:81:7a:4e:c4:52:9e:63:04:b9:d8:f2:52:9f:
                    7f:78:87:3f:c1:13:e8:02:5d:0c:15:93:06:f4:7c:
                    dc:cd:ff:dc:ba:b7:46:49:d3:82:b6:81:f9:da:3b:
                    5c:02:96:fe:7b:e7:29:5c:38:4a:84:94:d5:a0:85:
                    b9:46:16:7f:40:b7:3e:76:c6:6c:35:7f:62:13:e8:
                    08:0c:20:cd:cb:fb:6a:62:d0:eb:d2:96:0b:94:b5:
                    10:e1:dc:e3:7a:3d:06:38:37:2a:c5:9a:e4:e2:29:
                    2d:09:ea:e2:5b:e3:7e:13:30:f8:20:0e:21:a0:fe:
                    9a:ab:17:13:ed:f2:99:bd:26:b4:13:2f:4f:1c:6c:
                    a8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:1C:D5:7F:FD:B5:78:73:CF:D7:BA:B3:7C:1C:C4:A7:17:D6:16:86
            X509v3 Authority Key Identifier:
                keyid:C7:3E:BF:4F:15:FA:26:29:2B:F5:AD:B8:8A:86:57:7E:C3:A7:1C:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xz6_TxX6Jikr9a24ioZXfsOnHN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:a1:02:7a:59:2e:85:37:87:b5:a6:31:a7:44:d9:e1:44:2b:
         d2:56:3e:4b:67:41:d3:b6:39:00:fd:73:50:c1:a5:8f:df:c8:
         3c:53:db:a0:07:9d:8a:79:5c:b9:89:1d:f0:24:78:73:1b:03:
         e1:fc:7e:21:09:1a:8b:61:75:31:c3:7f:6f:e1:0f:f2:1e:d2:
         0f:4a:08:8f:cc:a8:e1:a7:e1:da:85:3a:cb:10:52:b6:c7:15:
         c7:eb:ea:52:75:84:13:19:a8:81:0a:b6:23:a2:0c:4c:94:4d:
         b3:ec:26:7c:d6:05:f7:85:0c:c6:8a:0c:4b:f5:0c:52:15:1b:
         c9:fa:36:aa:f6:e5:e0:34:66:1b:a1:20:fb:fc:88:f7:e6:e5:
         52:8f:6e:e5:65:e0:c0:67:d9:51:d0:13:53:52:e0:7d:2e:01:
         c8:6a:14:79:41:8b:93:8e:ae:4f:a8:66:3f:a0:b6:63:47:49:
         90:ea:27:4a:68:d3:37:28:9b:3a:8b:94:6c:bd:ce:e3:c3:c6:
         26:24:ef:2f:b4:92:2d:e7:9a:5f:7d:0d:65:b8:ab:79:7e:6c:
         89:9b:0b:a8:73:2e:51:65:4e:a7:84:4a:3b:82:43:a7:ad:f3:
         3d:14:4d:58:ab:d8:4f:c1:ea:39:3d:9e:af:49:29:64:be:2a:
         08:d3:8d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:23:19 2026 by rpki-client