Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.mft
File:                     xHI5__XPeIUhf8bKkBt6MngIMfA.mft (raw, json)
Hash identifier:          YpzJwr0jn4TT2Q47hSgf9+FeZD2c1w0yv4doWgRscSM=
Subject key identifier:   76:EC:E3:04:36:A7:6B:5D:47:1F:F0:D2:D3:08:B8:CF:8F:23:AD:6B
Authority key identifier: C4:72:39:FF:F5:CF:78:85:21:7F:C6:CA:90:1B:7A:32:78:08:31:F0
Certificate issuer:       /CN=A91761A9/serialNumber=C47239FFF5CF7885217FC6CA901B7A32780831F0
Certificate serial:       54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHI5__XPeIUhf8bKkBt6MngIMfA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.mft
Manifest number:          50
Signing time:             Mon 11 May 2026 08:29:57 +0000
Manifest this update:     Mon 11 May 2026 08:29:57 +0000
Manifest next update:     Mon 18 May 2026 08:29:57 +0000
Files and hashes:         1: xHI5__XPeIUhf8bKkBt6MngIMfA.crl (hash: D/2CJjOs1SQtCIZ5ASUKtwNo010TTfjOC0XlkoHq7uE=)
                          2: 1B831C724A1811F1A8A9712CC9833773.roa (hash: u4Y6CGErEsB0B7gfACiMg7sntGtE2KvV4PDqZ7u1hQM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.crl
                          rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHI5__XPeIUhf8bKkBt6MngIMfA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:29:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91761A9, serialNumber=C47239FFF5CF7885217FC6CA901B7A32780831F0
        Validity
            Not Before: May 11 08:29:57 2026 GMT
            Not After : May 18 08:29:57 2026 GMT
        Subject: CN=6a019385-0320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b3:b3:7f:04:ed:fc:87:01:de:8f:3a:a9:9d:
                    d5:cc:b2:54:bd:d7:bd:4c:d5:5a:0c:d3:c4:c5:d5:
                    8e:6f:1b:64:5d:1e:c9:62:df:23:14:89:2b:61:bd:
                    75:db:4f:65:96:04:cd:c1:94:03:6c:de:6f:00:1f:
                    12:7a:d6:e5:ac:98:cf:7d:4e:23:d2:b1:5a:c0:39:
                    6e:49:5c:18:b1:9c:24:9d:3b:28:8f:78:e0:06:25:
                    cc:fb:d9:a6:75:98:63:32:82:f2:34:f3:f4:b9:8f:
                    27:b0:55:45:1b:f2:74:ab:a3:bb:9a:ac:fe:95:59:
                    1f:90:a3:89:47:0e:2a:07:50:ed:63:e7:56:d5:14:
                    3f:c3:94:63:68:34:3b:3a:98:60:d1:9a:02:7b:58:
                    e6:3c:0d:7f:a6:86:40:f2:df:ce:be:45:4f:57:16:
                    5a:ee:f4:ba:1f:1c:52:6b:0a:ae:9a:da:2a:f6:2d:
                    90:99:d5:98:09:ab:41:3f:51:3a:52:a5:db:83:92:
                    8b:81:18:94:78:83:19:94:0f:a6:df:9d:3f:04:91:
                    8a:d6:76:cf:e9:a3:a4:70:2a:a6:43:ed:fa:fb:3c:
                    39:c7:5b:8e:36:f2:15:94:db:00:fd:8c:8d:6b:9e:
                    c7:85:9f:f8:99:59:ad:56:81:cd:01:56:48:a5:8f:
                    00:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:EC:E3:04:36:A7:6B:5D:47:1F:F0:D2:D3:08:B8:CF:8F:23:AD:6B
            X509v3 Authority Key Identifier:
                keyid:C4:72:39:FF:F5:CF:78:85:21:7F:C6:CA:90:1B:7A:32:78:08:31:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHI5__XPeIUhf8bKkBt6MngIMfA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:14:1e:6f:0d:01:82:9b:e9:11:ea:03:e1:f9:64:53:c2:bf:
         2e:1f:85:49:7e:da:c2:a6:f9:b2:93:00:38:38:37:e8:16:28:
         6e:46:e8:1c:a9:92:9b:fb:c8:ff:1b:97:76:0b:7c:bd:f6:be:
         73:28:1e:4b:93:86:b3:9b:e5:b8:76:d0:68:7d:5e:f1:ad:17:
         a0:7a:bf:cc:dc:04:fd:18:dc:ee:74:86:76:98:16:44:d3:55:
         a2:2a:5e:85:1b:7e:60:5d:c7:f6:f7:0b:06:dc:cb:00:66:94:
         73:4d:69:88:a4:61:76:07:4a:7e:01:d7:1f:3d:8a:af:ba:54:
         3a:71:dd:44:41:8c:4e:f5:61:c1:28:3d:77:70:97:49:ed:e4:
         ed:ed:a6:62:76:fe:00:93:e3:d0:26:9f:e9:b3:08:6e:97:84:
         b8:39:69:2c:9f:2f:96:e0:54:53:ac:21:8b:ed:b3:57:db:fb:
         e0:99:cb:64:9d:d6:b7:63:df:24:22:3b:ea:1c:2e:c8:23:59:
         bf:98:e1:b0:97:79:4f:42:4b:a3:18:0a:ed:17:b3:83:5b:f0:
         0f:a6:0f:78:35:fc:fe:ba:14:f6:f4:98:19:ab:be:36:44:dc:
         c8:d4:24:e1:65:01:46:e5:28:e8:2a:78:5c:aa:ba:9b:47:5d:
         67:a4:21:d7
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
NjFBOTExMC8GA1UEBRMoQzQ3MjM5RkZGNUNGNzg4NTIxN0ZDNkNBOTAxQjdBMzI3
ODA4MzFGMDAeFw0yNjA1MTEwODI5NTdaFw0yNjA1MTgwODI5NTdaMBgxFjAUBgNV
BAMTDTZhMDE5Mzg1LTAzMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC0s7N/BO38hwHejzqpndXMslS9171M1VoM08TF1Y5vG2RdHsli3yMUiSthvXXb
T2WWBM3BlANs3m8AHxJ61uWsmM99TiPSsVrAOW5JXBixnCSdOyiPeOAGJcz72aZ1
mGMygvI08/S5jyewVUUb8nSro7uarP6VWR+Qo4lHDioHUO1j51bVFD/DlGNoNDs6
mGDRmgJ7WOY8DX+mhkDy386+RU9XFlru9LofHFJrCq6a2ir2LZCZ1ZgJq0E/UTpS
pduDkouBGJR4gxmUD6bfnT8EkYrWds/po6RwKqZD7fr7PDnHW4428hWU2wD9jI1r
nseFn/iZWa1Wgc0BVkiljwAxAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUduzjBDan
a11HH/DS0wi4z48jrWswHwYDVR0jBBgwFoAUxHI5//XPeIUhf8bKkBt6MngIMfAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2MUE5Lzc1MjhCM0IwREYy
NzExRjA4RjY5MUQ2NTY1NkY1NkJDL3hISTVfX1hQZUlVaGY4YktrQnQ2TW5nSU1m
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIveEhJNV9fWFBlSVVoZjhiS2tCdDZNbmdJTWZBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2
MUE5Lzc1MjhCM0IwREYyNzExRjA4RjY5MUQ2NTY1NkY1NkJDL3hISTVfX1hQZUlV
aGY4YktrQnQ2TW5nSU1mQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQB0FB5vDQGCm+kR6gPh+WRTwr8uH4VJftrCpvmykwA4ODfoFihuRugcqZKb+8j/
G5d2C3y99r5zKB5Lk4azm+W4dtBofV7xrReger/M3AT9GNzudIZ2mBZE01WiKl6F
G35gXcf29wsG3MsAZpRzTWmIpGF2B0p+AdcfPYqvulQ6cd1EQYxO9WHBKD13cJdJ
7eTt7aZidv4Ak+PQJp/pswhul4S4OWksny+W4FRTrCGL7bNX2/vgmctknda3Y98k
IjvqHC7II1m/mOGwl3lPQkujGArtF7ODW/APpg94Nfz+uhT29JgZq742RNzI1CTh
ZQFG5SjoKnhcqrqbR11npCHX
-----END CERTIFICATE-----
Generated at Wed May 13 04:18:40 2026 by rpki-client