Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft
File:                     xA63gWRRh1SG2mQ_j5Nht337IaM.mft (raw, json)
Hash identifier:          ucTiil9/klQ7+tj1siJLrezmZYD60Qu9Ioc2Au5Ll7k=
Subject key identifier:   DA:9C:F8:1D:FF:A3:75:27:4C:A0:EE:E0:02:00:95:03:D0:4F:24:69
Authority key identifier: C4:0E:B7:81:64:51:87:54:86:DA:64:3F:8F:93:61:B7:7D:FB:21:A3
Certificate issuer:       /CN=A9125590/serialNumber=C40EB7816451875486DA643F8F9361B77DFB21A3
Certificate serial:       3577
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft
Manifest number:          355C
Signing time:             Wed 20 May 2026 14:19:33 +0000
Manifest this update:     Wed 20 May 2026 14:19:32 +0000
Manifest next update:     Wed 27 May 2026 14:19:32 +0000
Files and hashes:         1: xA63gWRRh1SG2mQ_j5Nht337IaM.crl (hash: q0VAgu6qyZ+6J1VqgWOrocMIAaAfvIqCvVIZX0XYnFc=)
                          2: 26E02598562F11EB94FD0463C4F9AE02.roa (hash: w327Pi+TEmh3026Kes4gzOM+DtAPkeVB2eFJdQaVwbI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.crl
                          rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 14:19:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13687 (0x3577)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125590, serialNumber=C40EB7816451875486DA643F8F9361B77DFB21A3
        Validity
            Not Before: May 20 14:19:32 2026 GMT
            Not After : May 27 14:19:32 2026 GMT
        Subject: CN=6a0dc2f5-5b0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b4:eb:71:2c:d9:b2:80:a7:0e:54:76:7b:af:
                    b4:76:32:7c:35:98:ec:40:56:ac:1b:d2:16:e1:31:
                    d3:d5:03:95:25:ce:2e:6f:f6:fb:2a:86:7e:37:be:
                    0b:52:98:29:3a:83:b0:7a:f4:10:3f:64:2c:ed:32:
                    0b:02:71:dc:ad:35:8d:cc:d7:7f:69:c6:de:62:4b:
                    d1:ef:9d:40:b6:84:eb:a8:4d:a2:88:20:d7:46:51:
                    f9:af:70:45:c6:9a:5d:9c:33:52:c6:86:d5:d2:16:
                    7b:5d:96:3f:b8:89:5f:fa:59:cd:53:cd:b5:7e:1b:
                    0f:64:fc:5c:11:10:03:9a:56:14:96:50:e0:67:2b:
                    d4:ea:60:43:aa:2a:5c:66:bc:64:68:20:aa:fe:d1:
                    2c:ec:c3:c7:63:7b:fb:47:eb:db:73:71:61:ec:90:
                    19:57:6d:d4:40:5e:fb:cc:ec:5a:b7:81:76:2f:e5:
                    87:bf:44:aa:55:3b:6a:2a:95:42:ef:98:d0:23:94:
                    15:d4:54:53:c4:68:82:3e:f6:81:57:c6:81:76:f4:
                    10:32:21:1c:93:c0:1e:c8:41:d5:d1:5d:25:ac:01:
                    d3:d4:0b:3d:e1:1f:4a:fd:fd:73:ba:e7:4f:7d:e3:
                    0d:80:e9:88:51:74:19:65:0f:26:4b:87:25:36:f9:
                    b2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:9C:F8:1D:FF:A3:75:27:4C:A0:EE:E0:02:00:95:03:D0:4F:24:69
            X509v3 Authority Key Identifier:
                keyid:C4:0E:B7:81:64:51:87:54:86:DA:64:3F:8F:93:61:B7:7D:FB:21:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:ae:ea:04:d3:f0:55:8c:5b:2a:ee:cb:a5:d7:20:a4:9d:07:
         a3:ec:bd:a6:68:25:07:58:ae:c9:2b:5c:f6:31:b4:1f:a1:c9:
         e1:27:51:fd:1f:2e:54:6c:b8:2a:cd:ea:49:67:53:c0:79:5e:
         6b:66:81:74:83:c7:c0:e6:65:5f:d4:29:19:3a:67:d9:df:fe:
         d2:4b:50:4f:37:99:70:41:de:4e:35:86:ca:29:b1:2b:87:b4:
         24:16:e4:82:24:c3:84:45:36:4f:72:92:09:2e:cf:1e:41:0e:
         13:0d:46:05:1b:28:1d:82:ec:e9:4a:6a:7d:3a:4d:93:e5:e2:
         70:6f:27:5f:5d:8c:32:cf:d0:63:ae:c0:ca:75:d6:1f:74:19:
         9a:e8:62:72:f1:67:91:04:0a:17:4b:8f:30:39:8f:da:12:2b:
         89:9f:3e:e6:68:5d:12:c1:24:13:67:b0:42:b4:00:d2:f4:b3:
         3d:d9:8c:78:d0:90:8c:26:12:6b:21:a2:7c:f3:ae:31:82:a4:
         da:0c:fe:67:c5:0c:47:63:91:f8:0a:84:1c:7e:55:db:56:b7:
         17:d3:da:c9:cd:9b:cb:31:3f:d2:5d:d6:1b:3d:f5:48:b7:15:
         8c:b0:fb:d0:92:30:51:4b:4a:56:2e:36:58:a4:6d:0e:b6:5a:
         b6:9e:b3:19
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjU1OTAxMTAvBgNVBAUTKEM0MEVCNzgxNjQ1MTg3NTQ4NkRBNjQzRjhGOTM2MUI3
N0RGQjIxQTMwHhcNMjYwNTIwMTQxOTMyWhcNMjYwNTI3MTQxOTMyWjAYMRYwFAYD
VQQDEw02YTBkYzJmNS01YjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvLTrcSzZsoCnDlR2e6+0djJ8NZjsQFasG9IW4THT1QOVJc4ub/b7KoZ+N74L
UpgpOoOwevQQP2Qs7TILAnHcrTWNzNd/acbeYkvR751AtoTrqE2iiCDXRlH5r3BF
xppdnDNSxobV0hZ7XZY/uIlf+lnNU821fhsPZPxcERADmlYUllDgZyvU6mBDqipc
ZrxkaCCq/tEs7MPHY3v7R+vbc3Fh7JAZV23UQF77zOxat4F2L+WHv0SqVTtqKpVC
75jQI5QV1FRTxGiCPvaBV8aBdvQQMiEck8AeyEHV0V0lrAHT1As94R9K/f1zuudP
feMNgOmIUXQZZQ8mS4clNvmySQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNqc+B3/
o3UnTKDu4AIAlQPQTyRpMB8GA1UdIwQYMBaAFMQOt4FkUYdUhtpkP4+TYbd9+yGj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTU5MC9GQzQ0QjM4QTFE
NzAxMUUyODk1MUE5QjUwOEIwMkNEMi94QTYzZ1dSUmgxU0cybVFfajVOaHQzMzdJ
YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hBNjNnV1JSaDFTRzJtUV9qNU5odDMzN0lhTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NTU5MC9GQzQ0QjM4QTFENzAxMUUyODk1MUE5QjUwOEIwMkNEMi94QTYzZ1dSUmgx
U0cybVFfajVOaHQzMzdJYU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAH67qBNPwVYxbKu7LpdcgpJ0Ho+y9pmglB1iuyStc9jG0H6HJ4SdR/R8uVGy4
Ks3qSWdTwHlea2aBdIPHwOZlX9QpGTpn2d/+0ktQTzeZcEHeTjWGyimxK4e0JBbk
giTDhEU2T3KSCS7PHkEOEw1GBRsoHYLs6UpqfTpNk+XicG8nX12MMs/QY67AynXW
H3QZmuhicvFnkQQKF0uPMDmP2hIriZ8+5mhdEsEkE2ewQrQA0vSzPdmMeNCQjCYS
ayGifPOuMYKk2gz+Z8UMR2OR+AqEHH5V21a3F9Payc2byzE/0l3WGz31SLcVjLD7
0JIwUUtKVi42WKRtDrZatp6zGQ==
-----END CERTIFICATE-----
Generated at Thu May 21 09:38:07 2026 by rpki-client