Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
File:                     xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft (raw, json)
Hash identifier:          aQlwItDBT743Wo2VsIb9To8nTCwiGC6FRXCvEs1ken8=
Subject key identifier:   0E:93:55:81:25:ED:32:7C:CE:65:BD:3B:EB:73:68:56:D9:A4:AF:6C
Authority key identifier: C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39
Certificate issuer:       /CN=A91D51A0/serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539
Certificate serial:       0506
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
Manifest number:          04BD
Signing time:             Wed 13 May 2026 00:05:11 +0000
Manifest this update:     Wed 13 May 2026 00:05:11 +0000
Manifest next update:     Wed 20 May 2026 00:05:11 +0000
Files and hashes:         1: xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl (hash: qBtk9I7yMG0CC00frMCm3FmNDrpbpH4nMstXCQ+UsUY=)
                          2: 874B6EBC0F6E11F190C9BD30293D8C67.roa (hash: HqtrqO9wtp4Bw9to/IZBSTc+H4UcScxKGJWTDnLTim8=)
                          3: D46B2C087F8711EC81E76A59C4F9AE02.roa (hash: hUayntDdKbP8YD8KFW+2g7hE9d13fe7KDzMZQmXs21I=)
                          4: F0259B5AC4BF11F0B2402975C4F9AE02.roa (hash: Sro4OLk/DSMCZn4K0Wy038cX6/xvomXtZ3z40SAC7Vo=)
                          5: 350FEB88D40611EDADEE3D1EC4F9AE02.roa (hash: D9z3NJUY8YNFb7cpJMaWfb8axb5uXCoUzET824J42QI=)
                          6: C5B45CA014F411F180EDEBBD193D8C67.roa (hash: 1jcExNuLyHWYrWjBJRhFw6fSw8L5FWvGvk7sIxrsGAg=)
                          7: 5CA964A68AC111EC91D19A11C4F9AE02.roa (hash: gvK8maqGxYp4lJeyX+W8kif65fkOj90NEZevEg0iRXM=)
                          8: 86131D8AEA5D11ED80641166C4F9AE02.roa (hash: 4zgXlz4lhWhr5EJp9fYE8JRkFNuqjMzkEZkN69QI13A=)
                          9: F179A39E0F0011F1AA61A6530E3D8C67.roa (hash: z5YNw9oqROxQNw3poTnbGicNOXVgbGeLROsEVEcC0k8=)
                          10: 8FD0B12E400311EEBF5A8B52C4F9AE02.roa (hash: Fu109TGeOUOlOrI2XIFdihyRA7Fr+8/prz/x7VcBoCE=)
                          11: C3261EF826DF11ED94E18118C4F9AE02.roa (hash: hTS0InVz4oILVGeujjlkHVbEAsw1NZRZHIk3vW8oIWw=)
                          12: 6F8A81CCF30C11ED94750772C4F9AE02.roa (hash: +lysYAiE7tAFh6WIuGOmgLYRebmV1ikcUzBVaS8mik0=)
                          13: D83192B0152B11EE85ED4B1DC4F9AE02.roa (hash: EMlA3Q/StxXuEEyaCIdkb3FX9P3Rrmoemgp7n81D5+4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl
                          rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 00:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1286 (0x506)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D51A0, serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539
        Validity
            Not Before: May 13 00:05:11 2026 GMT
            Not After : May 20 00:05:11 2026 GMT
        Subject: CN=6a03c037-e9d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:28:95:a9:3e:7d:73:50:23:c2:9b:dc:0a:53:
                    3b:78:a4:81:a9:20:9d:23:8f:11:5b:9b:cd:f3:26:
                    2a:cb:df:ef:d1:b9:a9:a1:85:5a:93:a6:7e:65:1f:
                    26:fd:e5:4c:4f:61:1d:7e:75:c7:22:f8:9d:92:b8:
                    05:a9:4c:5b:6e:6e:62:70:cd:29:5f:af:0f:cd:59:
                    9f:ff:9f:fc:19:70:b5:0f:fd:a1:5a:c7:04:ec:23:
                    c2:6d:50:16:2f:0a:31:82:3c:d6:35:34:60:f0:d2:
                    0a:fa:4f:16:18:4f:9c:c7:35:fa:a5:03:0a:5c:07:
                    55:47:f9:f8:56:3d:a1:ea:85:90:5a:9e:52:68:e9:
                    b8:f2:c4:1b:ed:c3:39:26:15:cf:f9:33:c4:86:de:
                    b3:27:73:68:70:ad:e3:2e:ce:11:cb:c0:d7:48:88:
                    45:b0:50:a6:e4:73:a7:dc:a6:5e:b7:28:93:ea:e6:
                    c5:62:17:33:99:f3:9e:58:e1:bf:92:b7:4e:c5:af:
                    00:b1:63:40:c8:ed:39:fa:c8:19:52:c6:a9:8e:bd:
                    45:78:08:62:73:73:c3:4c:d5:0d:13:ee:cd:08:e8:
                    fb:9c:ac:22:dc:c5:b5:8e:0d:df:99:d5:18:6d:9f:
                    38:8e:34:c9:36:ee:99:25:54:21:7c:aa:dc:c5:5a:
                    37:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:93:55:81:25:ED:32:7C:CE:65:BD:3B:EB:73:68:56:D9:A4:AF:6C
            X509v3 Authority Key Identifier:
                keyid:C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:2a:b6:e9:ef:f2:18:e2:df:95:a3:b7:a7:9d:ad:6a:9d:65:
         d5:8a:a4:42:e1:3f:12:1b:46:20:ac:66:9e:a5:1f:34:36:16:
         a8:40:9e:1a:47:bf:27:7e:0d:f0:2f:3d:4d:c7:6e:e7:d3:25:
         31:1e:4c:63:17:7c:a0:40:f5:b4:fa:bd:bd:52:8b:6b:0f:c4:
         f9:13:1d:96:66:03:2c:8a:12:10:6c:0a:b3:6f:89:bc:5a:61:
         b9:ab:b4:94:6f:9c:ae:b0:d8:af:f9:61:cf:61:37:74:48:22:
         f4:ab:f8:54:6c:02:97:5a:f6:b1:01:a5:df:61:e8:4f:93:1f:
         90:ce:41:fd:b1:31:a2:28:37:17:45:ea:96:55:02:f1:24:d9:
         b7:8c:9f:7a:84:f2:ed:69:ff:96:1b:c6:05:ea:f2:19:af:6d:
         ac:bb:5b:47:df:45:a8:ac:28:62:e2:22:85:e3:4e:0d:7f:32:
         5e:be:09:0d:69:2e:0c:9a:df:6e:f9:7d:2c:af:22:02:14:db:
         c1:ec:20:08:c2:a2:39:4d:e8:f9:57:5b:f9:f7:2e:7d:57:28:
         44:36:72:2b:50:22:86:25:71:dd:e3:8d:68:63:d4:76:86:56:
         f8:9a:c3:ca:55:2c:b1:5f:69:8e:b1:6c:0c:86:fb:ae:fe:7d:
         22:e9:04:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:10:19 2026 by rpki-client