Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft
File:                     xIqs603a7jxgQuZiFq15FQe0fGs.mft (raw, json)
Hash identifier:          ay961chL5s2CVe5A4m50dJtn2jDuLpHXZWaubXta2gg=
Subject key identifier:   72:93:50:64:28:38:E4:82:E8:86:78:7C:E8:5F:1B:22:62:36:F9:D6
Authority key identifier: C4:8A:AC:EB:4D:DA:EE:3C:60:42:E6:62:16:AD:79:15:07:B4:7C:6B
Certificate issuer:       /CN=A918EF61/serialNumber=C48AACEB4DDAEE3C6042E66216AD791507B47C6B
Certificate serial:       19C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft
Manifest number:          19B5
Signing time:             Tue 12 May 2026 16:23:41 +0000
Manifest this update:     Tue 12 May 2026 16:23:41 +0000
Manifest next update:     Tue 19 May 2026 16:23:41 +0000
Files and hashes:         1: xIqs603a7jxgQuZiFq15FQe0fGs.crl (hash: wfSKNtxYc2n/RPbVVfzhGpX/WgA/KZCGE2o9ZNNz3h0=)
                          2: C44B0ADA83DA11E7AD4F156CC4F9AE02.roa (hash: 0nLp1OlV0LLPyBtXTqJ9vts/gXbJ/cJqsL/wcTsmJpg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.crl
                          rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 16:23:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6593 (0x19c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EF61, serialNumber=C48AACEB4DDAEE3C6042E66216AD791507B47C6B
        Validity
            Not Before: May 12 16:23:41 2026 GMT
            Not After : May 19 16:23:41 2026 GMT
        Subject: CN=6a03540d-2a51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ac:85:25:47:63:40:27:5a:50:3b:75:3f:06:
                    51:36:f3:38:c4:aa:8f:e4:1e:29:20:9f:ec:ae:ae:
                    a2:a1:25:19:86:91:e7:6d:c1:6e:21:42:bb:e0:bc:
                    46:bc:81:6b:26:d4:37:31:e2:a9:73:86:93:d3:c9:
                    d9:bf:77:b2:c9:43:1a:08:59:ee:5a:2d:ab:67:67:
                    f6:06:44:f0:2b:70:df:30:25:f9:4b:47:b2:45:bd:
                    aa:cb:af:34:ef:22:2a:7c:15:65:b0:58:a5:78:40:
                    0d:b3:2a:e4:c7:bb:92:3f:00:f8:f3:22:19:23:8e:
                    6b:d8:79:58:8e:ee:ee:c9:fd:2f:a3:b5:b3:9f:fd:
                    27:2a:e2:0e:5d:f8:a3:ad:f0:1d:db:65:ca:65:a9:
                    7d:48:01:6c:5e:23:65:57:2f:62:a3:c4:41:2d:d7:
                    dc:01:bc:36:19:15:9e:68:54:6b:fc:8b:c9:85:84:
                    15:66:f7:fa:40:2d:dc:ad:3f:5f:89:50:6e:e9:4e:
                    73:8b:16:53:01:98:dd:ec:b8:e6:5f:82:62:8c:c8:
                    d1:eb:d8:50:13:35:02:a7:d0:db:37:45:87:fe:12:
                    cf:ac:ca:f8:ad:40:ba:8c:88:a0:d3:05:47:e6:ce:
                    21:df:2e:ab:31:52:d1:05:f4:7a:ef:98:d5:19:e5:
                    a6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:93:50:64:28:38:E4:82:E8:86:78:7C:E8:5F:1B:22:62:36:F9:D6
            X509v3 Authority Key Identifier:
                keyid:C4:8A:AC:EB:4D:DA:EE:3C:60:42:E6:62:16:AD:79:15:07:B4:7C:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:ce:7b:95:f4:83:6f:f8:d0:0d:6d:ef:ef:eb:4a:d7:18:07:
         08:4e:cc:82:74:ff:29:d9:bf:d9:cc:bb:f1:bf:46:6b:23:be:
         c9:53:d0:da:c9:1d:c6:d7:b5:04:49:bc:56:d7:a0:e1:68:fe:
         5f:cf:2e:8b:05:48:69:53:1f:0e:b7:9e:de:d3:a4:ea:5f:52:
         35:80:67:76:95:f2:b7:4f:10:4f:2a:b0:6a:e6:e2:d9:b5:12:
         c9:9b:2c:32:ed:c6:33:1d:86:87:f1:09:c9:b5:e1:22:c7:6e:
         9f:fb:7f:b6:b6:66:74:a3:f8:b9:99:06:30:36:ac:30:c9:dd:
         fa:d9:7b:c6:2c:36:b4:22:0d:8c:6c:95:b8:20:41:94:e1:62:
         3f:6c:0f:42:c8:8d:28:15:a9:a4:e6:13:1c:20:4a:62:e7:20:
         c2:83:08:d5:65:74:c9:aa:85:82:11:e9:fe:9e:2f:38:c1:a8:
         6a:7c:d3:97:30:0e:bd:37:8f:dc:4c:f0:b2:5f:31:27:dd:52:
         d9:2e:8b:f2:1f:3b:72:f0:3f:c3:14:f6:0f:d2:f8:48:01:d9:
         3e:2e:9d:fb:f4:e6:b5:b0:ad:42:94:36:83:25:69:46:a3:c0:
         48:04:d9:40:69:f9:76:b1:96:56:f4:4f:a1:e5:57:43:1c:c6:
         59:74:de:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:54:49 2026 by rpki-client