Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/XAPGyccm_z0gJ0cKGKDIgiLsZvs.mft
File:                     XAPGyccm_z0gJ0cKGKDIgiLsZvs.mft (raw, json)
Hash identifier:          9EFzS8v17z7tNyyUwUDiC0qqIgIgA7SSjvemVzJgAL8=
Subject key identifier:   12:90:2B:D8:1F:5C:2A:5C:47:6B:AC:F8:AC:A6:64:4F:2F:8C:C3:D3
Authority key identifier: 5C:03:C6:C9:C7:26:FF:3D:20:27:47:0A:18:A0:C8:82:22:EC:66:FB
Certificate issuer:       /CN=A9162B98/serialNumber=5C03C6C9C726FF3D2027470A18A0C88222EC66FB
Certificate serial:       4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAPGyccm_z0gJ0cKGKDIgiLsZvs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/XAPGyccm_z0gJ0cKGKDIgiLsZvs.mft
Manifest number:          4D
Signing time:             Mon 11 May 2026 08:29:06 +0000
Manifest this update:     Mon 11 May 2026 08:29:05 +0000
Manifest next update:     Mon 18 May 2026 08:29:05 +0000
Files and hashes:         1: XAPGyccm_z0gJ0cKGKDIgiLsZvs.crl (hash: plJQFpOST/y4mkVc6Zr6ZXIKJkNBL37Wt8hmcCPgt+U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/XAPGyccm_z0gJ0cKGKDIgiLsZvs.crl
                          rsync://rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/XAPGyccm_z0gJ0cKGKDIgiLsZvs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAPGyccm_z0gJ0cKGKDIgiLsZvs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:29:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162B98, serialNumber=5C03C6C9C726FF3D2027470A18A0C88222EC66FB
        Validity
            Not Before: May 11 08:29:05 2026 GMT
            Not After : May 18 08:29:05 2026 GMT
        Subject: CN=6a019352-de62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:6f:8b:67:78:14:be:a7:61:2c:20:f2:91:0d:
                    6c:38:9f:2c:00:46:26:13:fd:c2:5f:80:4c:22:7a:
                    b3:86:87:9b:f9:cf:8c:16:a1:74:b4:e2:1a:ad:58:
                    54:84:19:d6:62:0a:38:45:10:54:b2:01:3b:b6:6b:
                    62:4e:bf:d2:e0:5e:0f:d4:e4:40:3e:02:17:5a:01:
                    a1:c8:58:e9:f9:48:64:3b:db:ce:5a:98:26:64:f9:
                    87:9b:a8:2d:e7:01:07:42:db:b0:d4:e9:e9:9b:1e:
                    a9:02:fa:a5:f0:d5:ae:d4:44:ba:b5:5b:69:20:c7:
                    c1:99:ee:87:e1:50:5d:31:84:7c:9f:11:11:c0:07:
                    a3:7d:bf:14:3d:ed:f6:d8:42:89:44:e4:b0:ad:29:
                    bb:8b:f0:e2:21:fd:c0:88:27:51:64:33:d7:6e:51:
                    3b:85:b3:9c:fc:10:be:78:ad:df:08:7b:25:73:ef:
                    d8:bc:5a:e3:ae:23:27:6b:61:bc:7a:b4:ab:87:80:
                    f1:cb:ff:15:8d:db:86:e2:cc:f4:01:af:0f:c1:a2:
                    a5:99:c5:21:f3:8e:fb:0a:35:6d:a9:49:e0:d2:58:
                    e2:67:7e:da:25:ce:07:53:85:02:1b:9a:c1:e7:12:
                    a0:7a:c8:92:b4:0e:cf:ad:75:14:66:a4:3c:31:cd:
                    a0:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:90:2B:D8:1F:5C:2A:5C:47:6B:AC:F8:AC:A6:64:4F:2F:8C:C3:D3
            X509v3 Authority Key Identifier:
                keyid:5C:03:C6:C9:C7:26:FF:3D:20:27:47:0A:18:A0:C8:82:22:EC:66:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/XAPGyccm_z0gJ0cKGKDIgiLsZvs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAPGyccm_z0gJ0cKGKDIgiLsZvs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/XAPGyccm_z0gJ0cKGKDIgiLsZvs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:20:72:fe:48:51:ea:03:f4:ec:65:3e:93:d6:e6:22:ef:5a:
         02:86:33:ed:2c:2f:ec:7e:db:30:50:d6:f4:2f:76:6f:38:79:
         da:f2:a7:7e:f4:df:05:0d:ac:64:d5:30:3e:e0:f5:50:b6:90:
         dd:dc:86:3a:b5:97:3c:bb:e9:f6:f3:0f:a4:ce:a8:fe:34:5d:
         7e:c1:29:b1:4b:c2:5b:60:fc:6b:2d:25:40:41:81:8b:cb:3b:
         81:70:c7:45:0b:ca:04:0d:c1:c4:25:f2:a9:d0:5c:b5:e2:bc:
         2c:63:ff:94:64:4e:fd:c4:58:ba:3c:50:da:28:ec:a9:89:6e:
         bb:fd:81:f2:e8:72:68:53:2f:ba:a2:97:37:39:6d:2f:fe:00:
         52:3a:bd:94:b2:93:b9:78:95:7d:ac:b6:ab:98:71:32:ce:81:
         39:28:12:5e:1d:f5:28:c0:58:fe:bb:87:c1:fe:e8:1b:51:0b:
         05:46:e7:96:14:f3:ad:89:f3:a4:af:ed:f1:c2:d0:be:b5:40:
         c4:9f:7a:63:ae:81:7b:2c:05:ef:1e:99:ac:74:85:6a:a4:e4:
         c6:a2:f7:e9:8d:3e:ee:6a:d4:a0:91:7c:83:e6:c0:5a:dd:eb:
         ce:20:af:bf:ed:45:87:2f:04:3f:02:ed:dd:c8:3a:d0:9f:ae:
         9d:40:93:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:57:13 2026 by rpki-client