Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft
File:                     xGxDuid9LBDufR7_PfDi78iFGh0.mft (raw, json)
Hash identifier:          Y/IYJyT1czPMysjDsnRIX28ZkXIk+8FD+qf9wU6L0Co=
Subject key identifier:   0D:7A:1D:80:25:C4:0E:4F:72:E9:86:50:B3:C4:87:98:3F:36:5F:26
Authority key identifier: C4:6C:43:BA:27:7D:2C:10:EE:7D:1E:FF:3D:F0:E2:EF:C8:85:1A:1D
Certificate issuer:       /CN=A913638A/serialNumber=C46C43BA277D2C10EE7D1EFF3DF0E2EFC8851A1D
Certificate serial:       0141
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft
Manifest number:          0138
Signing time:             Tue 23 Jun 2026 05:43:06 +0000
Manifest this update:     Tue 23 Jun 2026 05:43:06 +0000
Manifest next update:     Tue 30 Jun 2026 05:43:06 +0000
Files and hashes:         1: xGxDuid9LBDufR7_PfDi78iFGh0.crl (hash: WoW86vCfh9gpQiMHcevXNOs1mf4vMa7/ae1D923kIoc=)
                          2: 9D7ED59A954711EF9830412DC4F9AE02.roa (hash: ekvUghltwWP4FQ66hV4j9tf5nEe4NKO+RhKkAq+FQXQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.crl
                          rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 05:43:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 321 (0x141)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913638A, serialNumber=C46C43BA277D2C10EE7D1EFF3DF0E2EFC8851A1D
        Validity
            Not Before: Jun 23 05:43:06 2026 GMT
            Not After : Jun 30 05:43:06 2026 GMT
        Subject: CN=6a3a1cea-5530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8b:ad:fe:19:51:b8:1d:ba:00:0f:1e:57:37:
                    b8:b7:34:3d:b3:42:7f:8c:82:b6:91:08:8a:67:74:
                    82:17:9c:c4:c1:34:5d:f0:9d:12:51:57:51:11:c4:
                    04:5e:a0:ed:c7:17:11:42:a8:76:49:4c:57:13:1d:
                    f1:ee:30:84:87:20:06:d6:92:dc:3c:fe:6d:22:f0:
                    86:40:d4:59:f5:03:f0:0f:cf:e9:28:fc:bf:ac:81:
                    de:cd:a2:5d:21:b3:3d:98:a6:42:02:1f:3b:f5:a9:
                    a6:b6:13:5c:11:74:6b:55:41:42:60:da:a6:2a:1e:
                    ca:85:c0:08:01:45:24:d3:7e:9b:19:c8:28:77:ea:
                    a9:3e:95:7b:fb:db:cc:de:51:2f:be:ee:ff:e1:d1:
                    f1:a4:2c:9a:c0:21:0d:be:da:27:46:f2:16:62:86:
                    72:da:50:f9:a6:b8:f6:41:2b:4d:97:0e:0b:b7:de:
                    07:fa:50:95:39:0f:a0:f5:0b:cf:47:6a:71:ad:26:
                    3b:76:ea:18:31:b5:8a:68:8b:a4:e7:62:c5:24:11:
                    70:a9:4f:07:ef:6e:f9:cd:ad:32:01:93:62:f5:cb:
                    c4:8c:c9:12:d2:fd:1a:2a:a1:d9:88:f0:22:ea:f2:
                    89:47:b5:e3:54:29:8c:e1:e6:7a:84:c5:13:22:89:
                    59:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:7A:1D:80:25:C4:0E:4F:72:E9:86:50:B3:C4:87:98:3F:36:5F:26
            X509v3 Authority Key Identifier:
                keyid:C4:6C:43:BA:27:7D:2C:10:EE:7D:1E:FF:3D:F0:E2:EF:C8:85:1A:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:98:bc:90:12:c9:5f:b2:41:1e:0e:87:12:8f:b2:ba:4c:b9:
         8f:a1:87:74:8b:7a:a7:45:15:b9:7b:99:c5:9f:84:33:0f:95:
         d0:57:8c:0d:4f:b0:5f:03:c4:f5:f0:9d:a5:35:be:30:52:c0:
         50:3c:e9:2e:b0:ea:62:ff:c3:d2:72:3a:ff:48:fb:dc:7b:35:
         4f:d5:29:a6:e7:9c:f9:7b:a9:4d:ab:8d:f0:32:40:79:61:03:
         28:1a:bd:f5:91:cc:3d:5a:34:84:07:67:90:60:e9:fd:fe:02:
         94:86:0f:8d:7d:ef:1a:14:b2:cc:73:c2:f2:13:75:31:9e:9e:
         5f:3c:a6:fe:ef:97:a6:49:e5:a8:3a:6c:9a:52:58:f6:37:d4:
         b2:81:34:85:92:2a:b7:b5:ad:c9:7f:f6:9f:12:39:d7:be:61:
         c8:4c:0c:01:bd:5c:90:70:ba:16:f3:54:d3:8c:66:14:09:3a:
         79:65:25:1f:17:10:55:22:a8:73:f5:86:bc:79:c3:89:56:f9:
         b6:b3:56:dc:ee:95:61:0d:83:8c:77:11:da:f0:62:30:09:46:
         5e:3e:be:08:b7:34:80:d8:40:f0:0d:38:58:d6:b0:50:40:37:
         35:50:e8:f9:ec:f9:43:8c:68:37:c2:d9:63:f3:00:2f:d5:8b:
         c3:4f:26:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:18:29 2026 by rpki-client