Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft
File:                     XBJjPm2nhhExvM_qH3t6vTUdIy8.mft (raw, json)
Hash identifier:          Qr1MQmgP8vayX8UwCVauR/USDw3FzrXI32A5EIEmWAo=
Subject key identifier:   8D:C2:1E:70:A3:F0:BB:E0:D3:7E:93:F2:88:E0:02:8F:15:FE:D1:B8
Authority key identifier: 5C:12:63:3E:6D:A7:86:11:31:BC:CF:EA:1F:7B:7A:BD:35:1D:23:2F
Certificate issuer:       /CN=A91A5577/serialNumber=5C12633E6DA7861131BCCFEA1F7B7ABD351D232F
Certificate serial:       0360
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft
Manifest number:          034B
Signing time:             Wed 13 May 2026 01:06:11 +0000
Manifest this update:     Wed 13 May 2026 01:06:10 +0000
Manifest next update:     Wed 20 May 2026 01:06:10 +0000
Files and hashes:         1: XBJjPm2nhhExvM_qH3t6vTUdIy8.crl (hash: r9wphrVC+r/12kxnEswkrPdbdaqoENjUSryRAeh9lGw=)
                          2: 6B10211E032B11ED8B3C5B4EC4F9AE02.roa (hash: ZTRqgNwjBkeuivQjU7gcegMWDfuZgfLXOKzQP0Bh2cg=)
                          3: 94584738031A11ED934E3D58C4F9AE02.roa (hash: OaWwFBJ2VuraLrnztPga6D3zvzu6QrQ5pOtTXqQFSQI=)
                          4: 418966DA032011ED84D6CA1EC4F9AE02.roa (hash: Jhz4r7a7iCxB4QnIuBoSZs0NvgYjtq+Y2BQvYiRhg6E=)
                          5: 92F62AF0032811ED8DFE1842C4F9AE02.roa (hash: oqSNYumQsq3ZDteZzV5l2Z7zpv8vOsyYUQUAq+amOrw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.crl
                          rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 01:06:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 864 (0x360)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5577, serialNumber=5C12633E6DA7861131BCCFEA1F7B7ABD351D232F
        Validity
            Not Before: May 13 01:06:10 2026 GMT
            Not After : May 20 01:06:10 2026 GMT
        Subject: CN=6a03ce83-6c42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:46:e0:68:a5:74:df:06:ac:d4:5e:b2:ff:a6:
                    0c:ce:79:59:ad:37:a4:55:67:08:4c:23:cb:fe:de:
                    a4:79:43:29:92:56:78:1e:de:28:35:ca:7c:fd:e4:
                    ab:5d:94:46:0a:a3:44:76:16:93:55:0d:bc:a0:d3:
                    e5:a9:04:78:29:dd:39:7a:2f:91:2f:a3:5b:3d:0d:
                    ad:fe:1f:f4:f1:ab:e5:1c:7d:a2:c6:bb:28:e4:b6:
                    8f:80:aa:c7:1a:25:9e:26:40:3f:08:8c:b4:fc:7b:
                    c8:eb:e1:3b:6f:90:05:70:35:9f:a1:6d:fa:41:46:
                    4f:e0:84:0b:7c:69:17:ff:61:1a:17:ba:f3:7b:6b:
                    e3:de:9b:b3:3a:2c:1e:15:75:74:ee:69:49:f5:f1:
                    1c:59:f4:a3:9d:df:e2:f9:63:e0:b6:7f:ce:e2:70:
                    af:9b:d2:12:0c:b0:cc:9d:35:f2:d9:1c:4e:d8:15:
                    77:3d:54:ab:fa:84:ef:1e:9a:65:59:36:fe:5c:f9:
                    68:90:eb:1a:ce:2b:30:60:d1:f4:bd:17:de:5d:d8:
                    36:f5:1d:08:52:bb:21:e7:8a:49:82:64:0f:c7:0a:
                    73:34:6c:3f:de:75:69:01:4d:5e:71:b2:85:a0:34:
                    99:59:56:7a:74:ef:e3:ed:39:e5:4c:20:3f:c3:05:
                    08:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C2:1E:70:A3:F0:BB:E0:D3:7E:93:F2:88:E0:02:8F:15:FE:D1:B8
            X509v3 Authority Key Identifier:
                keyid:5C:12:63:3E:6D:A7:86:11:31:BC:CF:EA:1F:7B:7A:BD:35:1D:23:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:b4:52:e9:3a:97:19:24:cc:01:4f:dc:fe:fb:58:44:f5:da:
         0c:d3:53:1b:83:77:84:5f:1f:53:9e:a7:28:f2:bf:f3:4e:02:
         99:bb:81:1b:26:7e:ed:05:3e:d6:cf:df:88:ca:5c:06:07:f2:
         d5:a5:33:53:67:53:d0:3d:cf:c2:7a:92:5f:bf:3b:3a:d8:02:
         cb:5e:18:ff:48:88:23:58:5a:83:86:24:23:66:07:1b:e4:88:
         eb:6e:b1:3a:af:6a:bd:c2:de:76:8e:ae:0b:0e:53:92:f2:71:
         85:4a:f0:14:a8:a0:cc:56:d5:e5:57:37:7d:d5:54:8a:8f:b7:
         af:77:74:a7:10:e5:b2:54:67:47:9a:9b:25:70:f9:ce:26:ba:
         9e:30:75:69:92:04:66:86:ce:59:b8:96:61:9e:ab:57:9b:43:
         75:e7:9a:d4:86:00:ea:44:6a:d2:88:17:4f:5b:92:d6:ea:2d:
         38:2b:4c:f7:f4:c3:bc:0f:e5:95:aa:8f:b4:0b:f2:6f:29:3b:
         f2:b5:3d:5e:31:e8:d2:bd:75:99:a9:24:4c:b6:1e:67:e0:ed:
         8b:93:c6:f8:99:0b:0d:7c:05:18:a2:6a:28:9c:d6:94:42:6c:
         7b:60:e3:cb:51:8c:58:af:a7:a9:1d:2e:a3:9c:1d:14:16:53:
         47:ec:d3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:04:57 2026 by rpki-client