Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft
File:                     v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft (raw, json)
Hash identifier:          VuSrN/TAfkWi6y1khpeB/uO7smLkT0SR3KM3Ey2j7vs=
Subject key identifier:   10:06:D2:0B:1E:7A:E3:0A:CC:2F:68:D4:79:FC:D3:FD:E6:3B:2F:86
Authority key identifier: BF:45:D4:7E:7F:8F:D1:77:D4:59:2C:43:4B:CF:96:2B:C0:A8:C6:69
Certificate issuer:       /CN=A91168B5/serialNumber=BF45D47E7F8FD177D4592C434BCF962BC0A8C669
Certificate serial:       1C97
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft
Manifest number:          1C90
Signing time:             Tue 02 Jun 2026 16:10:26 +0000
Manifest this update:     Tue 02 Jun 2026 16:10:25 +0000
Manifest next update:     Tue 09 Jun 2026 16:10:25 +0000
Files and hashes:         1: v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl (hash: q7kuDmRr6bB+ILXt82ei9w+ORfZQ3n5utmwSiClym6I=)
                          2: 11600CECBA8E11F09FE88B46C4F9AE02.roa (hash: NzPA3vTx/A3a5wnPCMTUeeGHZAhzPwo4b+b76jAubug=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl
                          rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 15:18:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7319 (0x1c97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91168B5, serialNumber=BF45D47E7F8FD177D4592C434BCF962BC0A8C669
        Validity
            Not Before: Jun  2 16:10:25 2026 GMT
            Not After : Jun  9 16:10:25 2026 GMT
        Subject: CN=6a1f0072-3531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b5:07:c9:c0:61:38:f3:4e:88:67:49:ba:f6:
                    4e:38:7e:9f:fa:15:5f:81:7c:60:55:c3:bb:f8:f2:
                    95:7d:d4:42:5c:cc:3b:c7:a9:29:5c:fc:ed:df:d9:
                    9c:d9:6d:2e:55:e8:62:18:ea:39:50:08:2d:e7:ad:
                    06:dd:5c:d6:0c:04:22:4b:95:9d:e0:70:c4:a9:3d:
                    ee:17:8e:89:7a:69:ec:58:71:da:2d:c5:fe:c2:3b:
                    84:18:0f:5b:4b:fa:ae:56:2a:78:52:79:6c:70:2c:
                    41:d4:23:37:78:5a:db:0d:cb:64:f6:8b:0f:8d:81:
                    ac:e2:bb:ad:e1:97:50:03:6d:05:e6:9e:5a:c3:c0:
                    d5:59:95:e3:a7:32:bc:71:9c:c9:55:33:e6:02:26:
                    35:53:47:57:dc:ea:b8:c5:b5:44:f9:e5:8f:af:80:
                    9a:41:a3:86:e7:e7:07:ce:57:8a:87:47:b9:b2:32:
                    22:33:10:3f:a8:33:77:a9:be:6a:3b:7d:f4:ea:82:
                    1a:8b:5d:ae:63:29:53:c5:5b:af:e1:55:f9:e8:fb:
                    95:3c:41:52:65:e3:fb:cf:f6:b1:83:ba:e7:42:99:
                    8f:e2:9d:dc:90:23:7c:68:3f:1b:f4:59:07:67:5d:
                    2c:33:ff:1d:3a:e2:96:1d:05:8f:ad:13:39:2f:5f:
                    92:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:06:D2:0B:1E:7A:E3:0A:CC:2F:68:D4:79:FC:D3:FD:E6:3B:2F:86
            X509v3 Authority Key Identifier:
                keyid:BF:45:D4:7E:7F:8F:D1:77:D4:59:2C:43:4B:CF:96:2B:C0:A8:C6:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:7e:08:71:d4:32:14:ed:c4:43:2f:c2:09:3d:1e:cd:e8:38:
         b2:e4:6f:74:d1:ea:5f:b0:39:02:95:c8:b1:3b:7b:e9:27:6e:
         4d:50:6c:b1:48:35:07:f3:59:00:68:bc:a9:b2:f4:07:95:b8:
         71:f1:a7:29:c1:82:96:b9:ce:00:63:04:1d:c5:9d:05:b3:fd:
         3d:cf:50:da:2b:a2:29:06:6b:6b:08:1c:d6:b9:85:5b:12:25:
         4b:a8:f9:d3:f0:79:3c:8a:50:5a:c2:16:01:62:47:d3:b7:e5:
         44:da:58:84:91:b8:03:bf:6a:dd:13:b6:99:f5:73:09:c0:f4:
         be:a7:9a:fd:35:f4:53:ef:47:2e:bb:de:15:0d:7b:cf:c1:ff:
         4b:fc:38:db:c3:37:f2:d2:13:bf:e9:ae:a5:8c:4c:d3:41:90:
         f0:4f:af:60:4e:d0:b7:39:26:eb:6e:9c:9b:f7:1e:9e:87:31:
         1e:c4:15:5d:78:8b:66:1f:b9:68:85:3d:01:d7:0d:9c:3c:b1:
         71:19:0b:7a:f1:e2:69:97:3c:b2:40:3e:4d:36:49:36:68:48:
         21:7b:e8:e2:12:99:08:8e:10:fd:6f:3b:ea:7f:1e:ac:52:4f:
         0f:3d:5d:9d:96:e1:54:f0:7a:36:e9:0f:66:57:ea:85:8f:43:
         d2:62:e1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:46 2026 by rpki-client