Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.mft
File:                     sxbAG3t1QxTi8Y9zen19iayrfmg.mft (raw, json)
Hash identifier:          pxGpHtleDGzB0tI9krcOI2rVELUpPryRsRKq7/FJ54M=
Subject key identifier:   30:7B:92:EC:EE:BF:94:4B:82:99:8F:92:5A:4E:03:79:EE:A1:8E:19
Authority key identifier: B3:16:C0:1B:7B:75:43:14:E2:F1:8F:73:7A:7D:7D:89:AC:AB:7E:68
Certificate issuer:       /CN=A91D983B/serialNumber=B316C01B7B754314E2F18F737A7D7D89ACAB7E68
Certificate serial:       6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxbAG3t1QxTi8Y9zen19iayrfmg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.mft
Manifest number:          63
Signing time:             Wed 13 May 2026 08:17:36 +0000
Manifest this update:     Wed 13 May 2026 08:17:35 +0000
Manifest next update:     Wed 20 May 2026 08:17:35 +0000
Files and hashes:         1: sxbAG3t1QxTi8Y9zen19iayrfmg.crl (hash: E+BgeS7lnomQrIZ9tfiKyS1nqQ53tKtTCFzB7hxbK+A=)
                          2: 8C21D58ACCFB11F08C34EC45C4F9AE02.roa (hash: QrH4+yF/QV8+PWn2diJ35OJkx405jDujszCVYOanSfQ=)
                          3: 2601F1CEEB7111F0839E97F34E6F56BC.roa (hash: E07ldg3v3DN0Yw10RFkEuAEAUbz8ZBv51AcBSf3INAU=)
                          4: 8BB48B56CCFB11F0B624EC45C4F9AE02.roa (hash: idkvQzFYbdsBSjCaqZAU9RiEXtrOEJOl+VsJAR0ESu4=)
                          5: A8F5E5EE21BE11F183C1AD111C3D8C67.roa (hash: Ieln71UjZ6UVyBBDQ/jNR5EcXnNAYyh6zzX3XZ/UHBM=)
                          6: F6921460F58D11F0BCCF7FE5756F56BC.roa (hash: pMD/GHJGLubTp0PpPOjyflk922Gz+1O37/zrmRW8WCQ=)
                          7: F715DFB6F58D11F0BCCF7FE5756F56BC.roa (hash: PeJla8eoBWwUJgQxEstU1E2su1skE1min+boSaLfihI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.crl
                          rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxbAG3t1QxTi8Y9zen19iayrfmg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 08:17:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110 (0x6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D983B, serialNumber=B316C01B7B754314E2F18F737A7D7D89ACAB7E68
        Validity
            Not Before: May 13 08:17:35 2026 GMT
            Not After : May 20 08:17:35 2026 GMT
        Subject: CN=6a04339f-7eaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:95:36:2d:01:c4:1d:60:4d:32:54:95:cf:b4:
                    f5:5b:66:78:d1:dc:58:a4:81:52:e0:b4:c5:a2:65:
                    92:98:86:b2:81:08:43:68:b3:74:35:e5:b2:91:33:
                    92:d7:1e:a3:4f:41:c6:d2:87:e2:cd:7e:ba:b6:ae:
                    90:e1:df:f4:c2:5e:8f:e7:87:5c:ef:6b:b3:d6:fa:
                    29:93:a5:61:89:1d:99:e6:0b:15:fb:64:cb:8a:f9:
                    96:c4:9d:f7:64:de:71:d9:1c:65:f4:36:7d:11:63:
                    49:76:ba:be:95:81:ea:7e:b2:e5:fe:11:a5:d7:dd:
                    4d:bd:26:d5:d4:33:29:0e:a3:b4:88:c7:79:32:55:
                    7c:51:ac:f7:d8:10:b9:ee:ff:e4:76:02:2a:3a:61:
                    99:49:06:39:33:7e:30:a7:aa:49:f5:64:b8:e4:76:
                    9a:d5:c3:64:6a:54:2e:d5:7d:6f:2b:04:bd:24:b9:
                    91:b3:ed:2f:d5:9c:d9:4b:a8:82:dd:1b:6b:5c:67:
                    b9:2e:c9:7a:75:4e:f6:93:44:0b:e9:83:5f:3b:b1:
                    f4:87:4b:bb:16:2d:11:33:8d:d7:86:19:76:69:11:
                    23:3c:b2:6f:8b:2b:18:4a:d6:0b:f7:71:23:54:94:
                    98:2f:7f:7d:12:fd:20:00:b4:ce:b2:23:dd:10:c7:
                    62:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:7B:92:EC:EE:BF:94:4B:82:99:8F:92:5A:4E:03:79:EE:A1:8E:19
            X509v3 Authority Key Identifier:
                keyid:B3:16:C0:1B:7B:75:43:14:E2:F1:8F:73:7A:7D:7D:89:AC:AB:7E:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxbAG3t1QxTi8Y9zen19iayrfmg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:28:d1:f1:9a:f9:12:fd:9a:11:39:25:70:e6:0f:dd:18:96:
         ca:9d:15:b7:e7:a2:ef:b3:c5:21:c2:b2:78:ef:40:dd:11:1d:
         88:3e:32:02:c9:95:e0:3f:e5:13:6b:4a:ea:66:21:57:8d:06:
         31:ce:42:d4:8c:23:67:74:ba:7d:7f:20:c0:13:f6:5b:67:51:
         c0:62:e8:2b:93:f3:53:47:15:86:31:b8:40:d1:16:60:e0:d4:
         b2:fb:40:46:04:92:bd:99:a7:60:c3:8a:ea:12:dd:43:ae:e5:
         e3:15:89:92:ed:76:6f:5c:9e:9d:5f:1a:10:81:a4:ba:e2:b0:
         9b:a2:5b:71:f7:0c:2a:ed:88:3f:54:aa:fe:8d:ef:2a:12:5d:
         64:38:83:29:05:14:ca:61:58:33:d1:93:40:4f:02:b8:a0:a7:
         e3:55:fa:78:b5:50:fa:69:83:d1:a1:5a:0a:aa:44:ee:e7:9c:
         b6:3a:bb:33:7c:f4:ec:30:89:bd:5d:f2:f6:02:af:15:7f:67:
         31:61:be:13:09:00:a1:ab:b6:3a:cd:f3:76:33:ea:2b:23:97:
         e7:37:29:96:81:88:10:94:40:f8:71:5b:10:94:d3:a1:8d:1b:
         71:47:fb:fb:41:f9:ac:88:07:5e:42:39:db:93:80:df:ea:5c:
         5f:b5:65:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:23:43 2026 by rpki-client