Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft
File:                     xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft (raw, json)
Hash identifier:          VJwmxxe2/hn/O8AZ5/Sjos9aifGltRSCEcIZoURIQmw=
Subject key identifier:   97:79:4B:9F:7D:4E:F8:A0:B4:E3:C7:07:28:2E:14:F8:B7:27:44:72
Authority key identifier: C6:A5:76:F0:8C:D4:A7:3E:A9:DD:97:50:3B:C9:D2:8B:05:91:1B:9C
Certificate issuer:       /CN=A91423FF/serialNumber=C6A576F08CD4A73EA9DD97503BC9D28B05911B9C
Certificate serial:       0202
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqV28IzUpz6p3ZdQO8nSiwWRG5w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft
Manifest number:          01FC
Signing time:             Thu 21 May 2026 03:11:22 +0000
Manifest this update:     Thu 21 May 2026 03:11:22 +0000
Manifest next update:     Thu 28 May 2026 03:11:22 +0000
Files and hashes:         1: xqV28IzUpz6p3ZdQO8nSiwWRG5w.crl (hash: oA0OkI407J0zM/YNu9ZDoYsinGnnKTlDs4c5ZOlDDkw=)
                          2: 278C467E4DF911EE8927F265C4F9AE02.roa (hash: XYht5ZQ/KAnp+RFAT2TWXGSNLAgSyYgAZ+uFeNVyc8Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.crl
                          rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqV28IzUpz6p3ZdQO8nSiwWRG5w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 03:11:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 514 (0x202)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91423FF, serialNumber=C6A576F08CD4A73EA9DD97503BC9D28B05911B9C
        Validity
            Not Before: May 21 03:11:22 2026 GMT
            Not After : May 28 03:11:22 2026 GMT
        Subject: CN=6a0e77da-6f4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:32:6e:0b:38:51:75:c7:de:af:37:90:be:2a:
                    b9:35:3a:17:d0:88:88:1c:ce:ba:62:0d:47:1c:44:
                    69:32:6f:0a:9e:5c:1f:33:a7:31:0e:27:b8:50:e4:
                    35:51:25:a4:56:76:3d:00:a7:61:74:ca:f4:3d:15:
                    dc:1c:16:9e:94:c7:93:3f:6d:f4:ad:b2:c8:ac:e3:
                    9f:d6:b5:c8:af:34:61:9d:be:5e:28:5b:c6:b0:65:
                    2e:9c:2e:20:78:35:60:b9:01:14:f1:ad:cf:b3:eb:
                    15:da:8e:5f:56:d4:59:79:b7:ee:93:8a:7e:cf:75:
                    c6:5b:99:75:5d:83:ca:7d:2e:57:08:3e:a3:d2:3f:
                    f1:95:08:a9:05:54:e3:4b:69:14:29:7b:8b:0d:4b:
                    e5:dc:8e:0f:3f:52:05:76:be:4d:5e:c4:b5:81:7a:
                    ad:c5:7f:71:96:bd:0c:65:c2:b8:15:27:44:93:7b:
                    05:36:29:e3:1b:15:28:35:5e:60:2a:cd:cf:e5:44:
                    b1:42:13:aa:01:65:e7:6c:1c:48:bb:e2:f6:de:89:
                    7f:49:54:49:a3:84:45:65:68:fe:ef:98:75:ad:1f:
                    24:a2:99:cf:cc:d3:e6:d7:ec:c7:e4:44:a3:ce:36:
                    7a:43:ba:84:dd:e0:7f:d2:05:30:19:fa:db:d1:f3:
                    ec:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:79:4B:9F:7D:4E:F8:A0:B4:E3:C7:07:28:2E:14:F8:B7:27:44:72
            X509v3 Authority Key Identifier:
                keyid:C6:A5:76:F0:8C:D4:A7:3E:A9:DD:97:50:3B:C9:D2:8B:05:91:1B:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqV28IzUpz6p3ZdQO8nSiwWRG5w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:9a:7e:cd:41:ba:9f:4b:02:3b:9d:0c:f0:c9:7e:a8:78:e5:
         c8:e3:12:99:cb:7e:e9:8a:36:64:ec:43:51:76:d7:58:f6:eb:
         a1:4c:e4:54:09:e3:0e:7d:be:c6:16:a8:b3:da:d6:5a:f4:88:
         df:8e:ab:4e:97:cb:db:38:8b:76:fc:bb:02:62:5e:28:a9:59:
         be:57:38:85:ec:9e:8c:70:c3:10:bc:d3:d3:cf:f6:d7:56:65:
         33:60:dc:e6:17:dc:72:f6:76:52:0e:dd:34:ec:8c:51:58:f5:
         66:5e:98:d9:16:7b:1f:96:4a:fc:a2:fc:a9:56:73:36:be:bd:
         21:dd:c8:fe:81:3b:37:4b:4a:61:6f:f4:5c:3b:d6:d6:ac:9d:
         01:55:6b:84:e5:58:ec:f1:b4:f0:fd:f6:83:36:5c:2b:6e:e7:
         8a:08:3d:cf:ff:f7:e5:6f:29:8e:2b:d6:db:3a:c5:6a:67:60:
         d1:03:85:c8:0c:6d:f1:91:35:b2:ff:fe:00:0c:7e:5e:30:a3:
         bf:9a:3b:44:16:0d:d9:b3:cb:cd:fe:24:65:29:e8:cc:67:dd:
         12:ce:f6:41:ef:31:ee:08:8d:33:8d:8f:0a:e0:b5:17:39:53:
         c1:f0:4f:6a:e3:e2:f1:da:56:1d:8b:49:7f:06:8f:68:bd:70:
         4b:bb:15:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:39:17 2026 by rpki-client