Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft
File:                     xiZYMphXjR1K9yc-vXkccjCjdEk.mft (raw, json)
Hash identifier:          cIdsauHOwZR8wVSyQ+u4V2RS8DlBLok2vgglClpe6XE=
Subject key identifier:   6E:5A:72:EC:3B:29:82:4E:4E:2F:AB:33:7A:40:5C:24:ED:39:88:26
Authority key identifier: C6:26:58:32:98:57:8D:1D:4A:F7:27:3E:BD:79:1C:72:30:A3:74:49
Certificate issuer:       /CN=A91186C2/serialNumber=C626583298578D1D4AF7273EBD791C7230A37449
Certificate serial:       010D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiZYMphXjR1K9yc-vXkccjCjdEk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft
Manifest number:          0105
Signing time:             Mon 01 Jun 2026 06:52:52 +0000
Manifest this update:     Mon 01 Jun 2026 06:52:51 +0000
Manifest next update:     Mon 08 Jun 2026 06:52:51 +0000
Files and hashes:         1: xiZYMphXjR1K9yc-vXkccjCjdEk.crl (hash: nJlDJKZIYFpEEb1+roI3B1G8qydHML7cuImWtV173YY=)
                          2: 7DFFCDA4D17F11EF8FAE452BC4F9AE02.roa (hash: 88RG+IBp3+3IKje/6h9nyZS5YfSLYuAiRdPmohXdymE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.crl
                          rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiZYMphXjR1K9yc-vXkccjCjdEk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 06:52:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 269 (0x10d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91186C2, serialNumber=C626583298578D1D4AF7273EBD791C7230A37449
        Validity
            Not Before: Jun  1 06:52:51 2026 GMT
            Not After : Jun  8 06:52:51 2026 GMT
        Subject: CN=6a1d2c44-a642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:29:27:81:60:4f:cc:69:6e:3d:6f:db:1e:8f:
                    c5:ee:e5:e7:80:a9:0e:0d:fa:8b:e1:bd:90:3c:82:
                    4f:fb:1e:7f:ca:99:3e:b5:e5:42:0b:49:32:be:2b:
                    37:01:34:45:0d:c3:fb:a2:bc:47:d6:ca:9a:96:77:
                    08:61:39:dc:71:ce:83:dd:b4:7a:f8:72:cc:2d:d7:
                    17:9a:a2:ea:63:96:50:15:f2:6b:8d:ae:83:75:c5:
                    ed:78:8c:d0:25:70:d7:f6:b9:22:19:2b:8f:6a:cc:
                    a8:6f:80:e7:82:ef:7e:67:46:ed:93:b8:b6:3c:59:
                    c1:21:86:f9:2e:df:e1:49:6b:85:d7:85:23:3c:29:
                    95:e3:70:9e:28:bd:da:8d:65:0c:bc:a7:e8:ad:2c:
                    ca:7c:b8:56:56:cd:f9:01:53:88:b5:ae:85:10:c6:
                    5b:fc:9e:c7:20:ec:0e:93:af:fb:e2:73:89:d5:cb:
                    23:98:f2:56:5d:b9:72:8f:58:7d:81:ac:c4:5d:a5:
                    de:79:f6:38:94:31:80:5a:f3:aa:72:de:17:a4:37:
                    9a:f7:41:a5:66:6b:e5:77:9c:7b:4e:5f:20:8e:9a:
                    f9:09:4c:60:8d:ce:84:e5:4d:68:c8:5a:5a:ad:9f:
                    19:81:90:f1:4c:75:85:e3:91:99:40:5d:49:85:78:
                    8b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:5A:72:EC:3B:29:82:4E:4E:2F:AB:33:7A:40:5C:24:ED:39:88:26
            X509v3 Authority Key Identifier:
                keyid:C6:26:58:32:98:57:8D:1D:4A:F7:27:3E:BD:79:1C:72:30:A3:74:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiZYMphXjR1K9yc-vXkccjCjdEk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:2c:d6:f7:15:96:c6:43:ba:bc:e4:26:f9:e3:37:0e:5c:ca:
         ff:71:bd:89:d5:8d:b1:94:78:23:af:96:8e:76:58:ac:ab:93:
         14:1e:a1:45:2c:18:37:73:5e:77:30:e9:10:5f:af:0b:56:45:
         3a:f0:e8:0d:80:9c:ac:39:1b:fc:68:b1:31:be:1e:c6:9f:2d:
         d1:51:9c:bd:28:d0:24:7a:ad:43:97:86:5a:71:07:c2:68:14:
         d0:1f:07:11:cb:96:41:8f:64:35:89:f1:b2:06:c7:67:ae:5c:
         25:ee:5c:f9:99:ae:18:b2:49:4a:01:3d:43:7a:44:4f:4b:b7:
         56:6c:5e:f2:f3:af:00:bb:04:e2:d7:52:89:da:6f:8f:9a:92:
         04:0c:6e:d4:a8:54:8a:12:70:a7:98:61:f5:59:41:7b:72:8b:
         c4:da:e8:5f:0d:b5:34:f1:57:b9:0f:81:f2:15:f0:4a:72:c6:
         a1:fe:a7:1d:19:c9:76:3e:5e:25:f3:a4:79:1b:af:01:5a:46:
         dc:d6:45:0d:e3:84:f3:1a:32:3e:b2:50:1b:a4:04:96:e6:9d:
         1f:6c:c5:46:d4:7e:26:9f:61:98:96:9d:15:e3:8c:6f:1a:21:
         32:de:f3:93:7a:59:2d:01:5c:c9:0d:fe:1f:e7:a1:c4:70:92:
         58:40:48:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:45 2026 by rpki-client