Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft
File:                     Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft (raw, json)
Hash identifier:          af71fTg0t0MlMFES991Ww2oO22S6NmQ4M25R3UkqTuI=
Subject key identifier:   D3:11:68:66:77:45:A8:DB:F6:A2:95:CE:7C:B2:0B:68:C7:0A:41:EF
Authority key identifier: 5E:FD:E9:8C:4F:BF:8D:11:87:B6:85:8E:BC:81:F0:62:5B:29:31:60
Certificate issuer:       /CN=A9199CFF/serialNumber=5EFDE98C4FBF8D1187B6858EBC81F0625B293160
Certificate serial:       0101
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft
Manifest number:          FC
Signing time:             Wed 13 May 2026 06:25:21 +0000
Manifest this update:     Wed 13 May 2026 06:25:20 +0000
Manifest next update:     Wed 20 May 2026 06:25:20 +0000
Files and hashes:         1: Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl (hash: X6Yd8nyO7g+G13RiJts1W5fSsJjkwFjYTkdJpeDs3HM=)
                          2: 8A941156D7E211EFBF26DA72C4F9AE02.roa (hash: UZCERNruPtgrrK+OYbHFA8i9cAcCHqIOlldjCtyuoQo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl
                          rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 06:14:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 257 (0x101)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199CFF, serialNumber=5EFDE98C4FBF8D1187B6858EBC81F0625B293160
        Validity
            Not Before: May 13 06:25:20 2026 GMT
            Not After : May 20 06:25:20 2026 GMT
        Subject: CN=6a041950-08b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d7:89:f4:fb:d3:ec:d3:3b:c1:56:8e:29:58:
                    eb:ff:17:e2:e8:94:ef:dd:d7:e3:18:ec:0e:7b:7e:
                    c3:15:b5:5c:2d:27:9a:6c:eb:4f:cf:ad:0a:b5:f1:
                    70:0e:97:09:13:e2:b7:94:8a:33:28:64:92:60:ce:
                    51:7a:a5:d4:02:16:4c:65:85:6c:63:3a:d7:33:da:
                    a8:e7:00:7f:22:fc:80:1e:5c:a9:d8:9d:c7:42:d1:
                    09:e8:b4:0a:99:5c:d5:f9:fd:76:98:71:8c:af:c5:
                    94:ab:af:4e:95:20:fd:8f:91:57:a9:b7:25:9b:d4:
                    f8:8d:57:b3:03:ed:ba:5e:00:93:f1:9d:2f:b9:ef:
                    c9:fb:48:94:b7:24:05:8f:c9:c1:37:b6:c5:07:3d:
                    33:ca:10:76:d1:e7:51:66:0e:63:81:18:9c:91:5e:
                    cf:60:91:a2:70:89:f7:dc:42:19:47:f2:b9:7b:87:
                    94:5f:0b:6f:44:11:6c:d8:4b:97:e3:d1:b5:8b:e1:
                    43:96:cc:fa:2a:dc:45:85:61:8d:de:ed:bb:9d:3d:
                    df:df:f0:69:32:60:52:ff:67:ce:bb:63:46:ed:53:
                    b7:59:6e:59:f9:f3:9e:5e:09:4e:e7:13:7b:b7:a7:
                    00:8d:8f:83:3e:5b:62:be:ae:88:e0:e0:f4:ee:94:
                    22:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:11:68:66:77:45:A8:DB:F6:A2:95:CE:7C:B2:0B:68:C7:0A:41:EF
            X509v3 Authority Key Identifier:
                keyid:5E:FD:E9:8C:4F:BF:8D:11:87:B6:85:8E:BC:81:F0:62:5B:29:31:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:64:ac:5a:84:e8:b3:7c:d7:d0:34:e6:11:a0:2f:78:f1:6b:
         ed:67:19:5e:de:b1:4d:83:b1:ee:70:32:d2:1d:1a:7e:a4:23:
         ba:e7:d8:39:75:47:21:7d:34:89:ff:17:f4:df:56:ce:d8:57:
         2a:f0:10:15:09:91:cc:d2:06:fc:4a:c7:87:37:7c:76:56:70:
         db:07:1b:6e:8a:95:ba:34:64:23:d6:3f:d2:0c:77:7d:7b:9e:
         87:6e:71:b0:dc:82:34:f6:e0:64:f2:a8:2a:fa:a8:02:83:f6:
         d0:5a:e5:17:86:13:7a:f8:34:f8:16:f9:a5:9e:c1:ba:75:6f:
         73:a0:b6:ca:08:93:e6:94:0d:26:75:16:25:93:ab:4c:d8:dc:
         0f:3e:c4:cf:40:9c:53:aa:7c:32:f3:59:34:52:db:7d:6d:ef:
         a5:cf:ae:d1:01:43:15:35:a6:38:d5:ec:7f:62:b2:b4:65:12:
         6c:05:03:e7:78:a0:c1:89:29:b2:05:d2:05:8f:3a:e4:ee:8e:
         b4:30:a0:8e:d2:22:a3:ae:5b:12:d3:07:b4:67:bb:55:79:19:
         d1:5e:3c:51:ed:97:4a:c2:ee:ce:b6:ab:57:37:92:72:04:2c:
         72:af:4c:30:cc:3b:34:77:65:04:22:52:c1:dc:3a:d2:43:c2:
         97:10:59:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:38:34 2026 by rpki-client