Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft
File:                     xGfLLMucIacHtd-86roFTBkFI64.mft (raw, json)
Hash identifier:          C0wJbnUTNL/VfBJpcMI27sRGkI7Swm1atZxrBz3/lFU=
Subject key identifier:   E9:F9:07:DE:13:71:3E:B9:79:18:98:CB:6D:FB:5D:64:3C:7A:ED:3B
Authority key identifier: C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE
Certificate issuer:       /CN=A919C3BE/serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE
Certificate serial:       0D3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft
Manifest number:          0D0C
Signing time:             Tue 12 May 2026 18:23:20 +0000
Manifest this update:     Tue 12 May 2026 18:23:20 +0000
Manifest next update:     Tue 19 May 2026 18:23:20 +0000
Files and hashes:         1: xGfLLMucIacHtd-86roFTBkFI64.crl (hash: gOwUlhwfHe2ZR2jBlcezI7qDGFTyE6IV3dyFpZBBXRI=)
                          2: F0202A84B36311F082F02072C4F9AE02.roa (hash: rVfs6LGzrLN0wWbbQ4d7gHO9mKYMBzycz9A93jxHPEY=)
                          3: C13356C0921511F089DDCF39C4F9AE02.roa (hash: MW2m99OxK43iMBOt891iR2xsv1oqz6WeSP9nGWOwPAo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl
                          rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:23:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3390 (0xd3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C3BE, serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE
        Validity
            Not Before: May 12 18:23:20 2026 GMT
            Not After : May 19 18:23:20 2026 GMT
        Subject: CN=6a037018-93a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:59:12:0e:84:72:3a:d7:f4:32:31:9b:e8:1b:
                    55:20:e9:f2:75:b7:49:9a:29:92:16:2f:6f:fd:c9:
                    0e:be:63:8c:4b:3c:f6:33:9a:f0:cc:31:9c:13:54:
                    4c:1e:00:d7:9c:6d:90:54:9a:7f:11:18:81:7c:4b:
                    21:ad:ef:b8:70:ea:50:3a:cd:20:1b:9d:09:c2:4c:
                    fa:5f:a0:a1:9b:78:50:86:e8:14:95:fd:98:26:af:
                    bc:5f:ce:60:cc:52:31:e1:12:2a:2a:fb:07:e8:4e:
                    92:e2:f1:69:c6:22:53:02:38:47:dc:3e:70:89:dd:
                    a2:fe:20:71:31:03:9c:56:e0:5f:95:91:ce:26:d2:
                    9e:99:5f:de:c3:9c:24:bf:4e:56:51:ed:7d:db:3e:
                    da:dd:93:d3:ce:84:0f:4f:ef:21:57:e3:e2:16:c0:
                    b9:fd:11:a0:6e:6d:f8:9c:88:65:99:24:13:a3:68:
                    d5:b4:81:61:66:59:60:6d:be:7d:be:0f:3f:73:98:
                    84:fe:95:78:d9:17:b9:d0:54:fd:a3:a7:35:7f:c5:
                    11:78:80:13:35:9b:d0:2a:2a:32:a0:d6:c2:8c:c0:
                    c0:76:ca:71:eb:30:0c:54:0c:61:9b:a8:8a:7c:4b:
                    9a:fd:43:83:38:23:cf:96:33:5c:02:ee:3a:84:e8:
                    08:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:F9:07:DE:13:71:3E:B9:79:18:98:CB:6D:FB:5D:64:3C:7A:ED:3B
            X509v3 Authority Key Identifier:
                keyid:C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:80:eb:c6:14:0b:4c:9a:4c:ba:ba:02:3d:e1:16:c8:c7:a4:
         df:45:14:4b:71:ee:8e:dc:d8:f6:ff:13:d8:23:d0:f1:f5:4b:
         49:e4:88:ea:97:3e:f4:b8:ac:45:aa:d2:54:bf:0d:e9:9b:1d:
         20:c8:52:c6:5f:d3:d8:66:d4:38:68:7e:7d:8c:4f:97:3e:24:
         31:11:08:7b:34:33:28:bb:fe:94:90:ce:a9:a6:44:19:ca:90:
         be:dd:ef:cc:4b:fb:d2:c0:4f:7e:c9:94:b4:ed:da:07:4a:ce:
         b0:f0:95:19:41:ba:3f:bd:b4:19:aa:be:e1:82:74:7d:e7:9c:
         fa:82:8e:22:d6:b1:fc:87:43:4c:11:e2:ae:bd:18:e2:65:cd:
         38:b4:d4:d2:68:68:4b:36:62:96:63:28:db:53:63:2f:53:c1:
         89:89:38:1a:20:3b:b1:01:f2:78:07:1a:42:05:18:17:64:b4:
         18:73:f4:10:0a:af:ac:92:b5:0b:f6:83:c6:89:f5:6e:13:29:
         78:fb:3b:f8:1f:00:ac:57:fb:de:75:4c:91:4f:07:0c:54:42:
         73:8d:27:9a:5b:7e:90:70:7f:78:37:7d:c6:55:1e:44:82:f0:
         e8:05:2f:af:5e:d4:17:df:2e:28:3e:71:ca:01:6e:8c:58:fb:
         fc:1c:4a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:47:20 2026 by rpki-client