Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.mft
File:                     XRhbcS2TBWvydLi3qJjGklTruYM.mft (raw, json)
Hash identifier:          Gj+KEWAhCYZO6rOuX+6yMwlOOdrDtTGK8IEHuv/4oxY=
Subject key identifier:   6C:42:A0:AA:2D:6A:77:9F:25:74:81:61:87:AB:52:7D:58:2D:94:1A
Authority key identifier: 5D:18:5B:71:2D:93:05:6B:F2:74:B8:B7:A8:98:C6:92:54:EB:B9:83
Certificate issuer:       /CN=A91AE972/serialNumber=5D185B712D93056BF274B8B7A898C69254EBB983
Certificate serial:       01EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XRhbcS2TBWvydLi3qJjGklTruYM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.mft
Manifest number:          01D6
Signing time:             Mon 11 May 2026 03:52:57 +0000
Manifest this update:     Mon 11 May 2026 03:52:56 +0000
Manifest next update:     Mon 18 May 2026 03:52:56 +0000
Files and hashes:         1: XRhbcS2TBWvydLi3qJjGklTruYM.crl (hash: /u0/osH/dc7dRiOBOjhxp7/ecoLOIthwUJv78TJYyQ0=)
                          2: 749BAA209BC911F0B2979527C4F9AE02.roa (hash: yisXBV9UfHcLi2zgyB/ljlR1ltN6rD2jMrD7xMFxYDU=)
                          3: DCCEA912A3EB11EE8049E335C4F9AE02.roa (hash: I8WOH8J1MhGqNbLqVfvMzdR8rX2Yq8UcwqrXooh3Mjw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.crl
                          rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XRhbcS2TBWvydLi3qJjGklTruYM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 03:52:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 490 (0x1ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE972, serialNumber=5D185B712D93056BF274B8B7A898C69254EBB983
        Validity
            Not Before: May 11 03:52:56 2026 GMT
            Not After : May 18 03:52:56 2026 GMT
        Subject: CN=6a015298-52c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d3:c4:e5:cd:0c:58:cd:f9:6e:06:f7:44:c9:
                    52:1e:be:cd:3e:a1:ad:01:16:4d:c3:55:34:99:90:
                    97:df:aa:54:bd:4d:cf:0e:c7:12:2e:a9:7c:9f:6f:
                    5f:bd:63:03:1a:7a:8b:60:9d:87:28:69:bd:88:20:
                    14:d1:84:1d:57:d7:28:8c:f1:42:00:38:ae:1b:93:
                    0d:eb:31:eb:a1:85:1e:d2:da:8b:6c:3d:9f:a2:99:
                    a5:eb:a8:67:78:39:33:27:f1:f1:93:66:2c:21:7f:
                    2f:e4:a0:d6:f0:7b:03:f2:c1:61:97:f0:de:11:0f:
                    64:4a:ff:21:31:d9:9e:3c:e1:7c:c3:7a:7f:5e:73:
                    cc:d3:b4:d6:4a:ea:24:a6:41:12:13:c2:ba:bb:7e:
                    23:5c:f9:85:a4:94:8a:05:95:e6:c2:74:57:f2:ce:
                    7a:ba:d7:71:4b:50:55:26:3c:1e:1f:4b:fc:06:09:
                    e2:9f:a3:fb:42:07:ac:2b:4c:a6:de:38:cd:74:6c:
                    ae:e5:18:ae:23:47:be:ce:68:25:26:0f:1c:8f:2f:
                    70:d1:86:ef:9e:9b:bf:a3:74:b3:85:cb:40:18:b0:
                    a9:de:f1:79:be:05:12:56:0c:c4:45:e5:48:cb:6b:
                    9d:b9:2c:14:82:b3:d1:9a:c0:51:8b:0d:77:7e:fc:
                    9d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:42:A0:AA:2D:6A:77:9F:25:74:81:61:87:AB:52:7D:58:2D:94:1A
            X509v3 Authority Key Identifier:
                keyid:5D:18:5B:71:2D:93:05:6B:F2:74:B8:B7:A8:98:C6:92:54:EB:B9:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XRhbcS2TBWvydLi3qJjGklTruYM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:4e:56:54:6a:ef:cc:5a:72:b8:57:ab:b1:64:61:39:b7:74:
         0f:0e:8d:57:aa:c2:4a:52:d4:40:cb:e7:97:24:a1:73:bc:64:
         b2:a4:f0:21:95:c0:db:6d:92:f1:a5:ba:09:8d:fd:55:89:54:
         d2:42:6a:31:f0:5c:cb:e5:20:bf:b5:d4:d4:aa:d6:f9:23:d1:
         36:56:1b:5b:bf:b9:59:52:64:36:3c:9e:5b:9a:e3:e4:30:33:
         34:70:9a:10:3e:57:cb:ff:26:01:b5:2a:77:74:1e:0c:5d:93:
         ec:fd:e7:2e:ca:a1:8a:b1:98:83:32:a4:1c:f1:41:d0:ec:39:
         d4:fe:e5:82:1e:5c:30:2e:40:8e:3d:c7:03:d0:c2:7a:74:4e:
         23:45:18:55:fe:47:ac:e6:4c:21:f4:d4:e3:f4:4f:13:76:a3:
         80:4c:62:e7:13:e4:95:03:9d:6b:1f:b4:b7:ee:d8:f1:f8:ed:
         5a:01:aa:d4:27:6a:0b:78:06:0a:a5:1e:d5:c6:9a:ca:3f:8e:
         ae:45:5f:93:0b:ad:e3:3f:e4:0d:da:ed:64:93:26:75:b9:50:
         97:e6:64:13:55:4f:92:43:86:b3:0c:33:00:1f:34:76:3c:0d:
         6c:8e:3a:f4:f7:11:6b:86:17:ee:0c:0d:e3:8f:11:16:98:d0:
         f5:f6:a3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:20:29 2026 by rpki-client