Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft
File:                     Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft (raw, json)
Hash identifier:          Vdjmq9PJCM8aY3hTltN1aiPmnSu/qJMa0WPys/WfNXc=
Subject key identifier:   07:C7:B7:B7:1C:01:BA:21:A2:02:1A:4B:26:0B:A1:E2:E4:C4:26:7D
Authority key identifier: 5D:DF:DD:38:31:56:FA:5B:65:34:11:2E:9C:8E:15:3B:B2:00:57:C6
Certificate issuer:       /CN=A91CB6E8/serialNumber=5DDFDD383156FA5B6534112E9C8E153BB20057C6
Certificate serial:       75
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xd_dODFW-ltlNBEunI4VO7IAV8Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft
Manifest number:          6F
Signing time:             Mon 11 May 2026 08:02:46 +0000
Manifest this update:     Mon 11 May 2026 08:02:45 +0000
Manifest next update:     Mon 18 May 2026 08:02:45 +0000
Files and hashes:         1: Xd_dODFW-ltlNBEunI4VO7IAV8Y.crl (hash: 7ffbLweuL9jrdvK9EQNGgLMUHNaYEJtEDWeSvnuEWt8=)
                          2: 1104D6A2AF1611F0AF70E679C4F9AE02.roa (hash: /VVN1pVbvBgJGM41ZpQK+E66Yb+yIlM6xDFzrudcVdc=)
                          3: 65FAD636AF1411F0BE4BF94FC4F9AE02.roa (hash: 9hr6Mrcekj4wBtLXcM+jj6TwfopvR4qZFirKjaGVgSI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.crl
                          rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xd_dODFW-ltlNBEunI4VO7IAV8Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB6E8, serialNumber=5DDFDD383156FA5B6534112E9C8E153BB20057C6
        Validity
            Not Before: May 11 08:02:45 2026 GMT
            Not After : May 18 08:02:45 2026 GMT
        Subject: CN=6a018d25-74a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bb:4d:48:f3:47:99:b0:0d:10:09:6f:e7:d8:
                    a3:b8:47:96:b9:bc:99:7d:1d:da:95:46:a0:fa:12:
                    bd:ef:9e:7c:f6:2c:23:6a:40:1f:1a:d0:63:2c:13:
                    30:76:fe:3f:7e:33:25:c5:a2:59:8f:67:f1:db:18:
                    14:81:40:40:c1:f5:1c:1c:65:e6:77:16:5e:78:b7:
                    ab:b3:9e:6a:71:c0:56:8a:a7:52:6e:25:41:c7:31:
                    89:fa:d6:1d:c5:0e:1a:72:c9:7e:c3:82:4b:0f:12:
                    30:b2:4c:cc:14:af:f0:74:f7:36:cf:ec:09:7a:b5:
                    aa:13:a9:af:83:ff:59:9c:c4:5e:be:30:28:4e:7b:
                    2c:a2:75:63:ad:21:af:d5:dc:68:aa:b1:d6:05:b6:
                    3e:4a:c2:f3:8c:36:31:a1:a6:69:dc:d5:e1:ef:37:
                    f3:7e:6a:22:ed:c3:80:72:cc:64:c1:e5:1d:45:71:
                    a2:66:b2:9b:1c:12:9c:26:49:4f:d8:68:56:95:4c:
                    b1:3e:ef:21:27:fe:cb:2e:b5:64:c7:ed:b2:1a:82:
                    1f:67:57:84:93:0e:97:43:7e:8e:a0:2d:2a:db:a8:
                    86:99:26:da:96:2b:05:2c:ae:b2:eb:ac:e7:74:10:
                    87:c1:fe:14:34:27:71:c9:ac:94:cd:9b:3f:f4:06:
                    a7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:C7:B7:B7:1C:01:BA:21:A2:02:1A:4B:26:0B:A1:E2:E4:C4:26:7D
            X509v3 Authority Key Identifier:
                keyid:5D:DF:DD:38:31:56:FA:5B:65:34:11:2E:9C:8E:15:3B:B2:00:57:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xd_dODFW-ltlNBEunI4VO7IAV8Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:45:b0:1a:9b:43:91:84:42:fd:3e:cb:7e:ac:82:ae:f1:80:
         51:ba:5b:3b:79:a1:8b:92:dd:41:bb:81:50:ad:c7:97:fd:04:
         ff:ee:61:e7:38:02:a0:ea:c4:e7:48:c8:4c:21:54:02:3a:cc:
         8f:32:eb:f2:59:40:9f:50:4e:50:48:7b:68:2e:a5:75:2d:34:
         a8:5b:6c:ab:b2:ce:13:41:d4:25:68:99:c3:35:7f:78:2a:b4:
         58:73:3f:5a:31:70:c6:db:f5:8d:7a:de:35:35:04:5c:3b:2b:
         b3:33:bf:7d:5f:b1:e5:c9:5c:6d:7c:15:d3:c3:cc:2c:b2:3c:
         1f:65:f6:1a:83:84:4f:16:ae:d1:f5:0b:f7:7e:ee:04:f8:39:
         57:d8:3d:57:40:c8:f5:8b:21:d7:2b:dc:ca:86:44:1f:a7:26:
         da:93:db:90:97:2f:11:56:63:0f:d5:85:72:be:b7:4e:a5:06:
         de:f1:de:36:f9:bc:69:ed:5b:08:77:b2:a2:09:21:01:76:20:
         5c:66:1a:6d:35:ca:69:98:30:53:c1:96:b1:19:e6:c9:b0:78:
         cf:d3:00:52:3e:fa:76:35:aa:a8:9d:28:fd:d1:6d:0f:2a:61:
         a2:1f:f1:49:02:51:da:ae:22:8a:df:f4:a7:8b:52:4a:c1:36:
         76:90:48:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:21:28 2026 by rpki-client