Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.mft
File:                     xDfVjxI6auBXxgjiFrtr_WWER2o.mft (raw, json)
Hash identifier:          H0U7NLH/Hj09pXf/r3py4Twu6OSCoFtsnEEWoMvJB4Y=
Subject key identifier:   A8:38:A7:34:DB:CE:42:98:CC:36:D8:88:AB:AB:1C:5C:3C:0B:D0:C6
Authority key identifier: C4:37:D5:8F:12:3A:6A:E0:57:C6:08:E2:16:BB:6B:FD:65:84:47:6A
Certificate issuer:       /CN=A9169903/serialNumber=C437D58F123A6AE057C608E216BB6BFD6584476A
Certificate serial:       0675
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDfVjxI6auBXxgjiFrtr_WWER2o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.mft
Manifest number:          066D
Signing time:             Wed 20 May 2026 22:38:34 +0000
Manifest this update:     Wed 20 May 2026 22:38:33 +0000
Manifest next update:     Wed 27 May 2026 22:38:33 +0000
Files and hashes:         1: xDfVjxI6auBXxgjiFrtr_WWER2o.crl (hash: TCBcVOm8gGsWAMuVavmW9wZHg34Z69UCR2euVEpTHFs=)
                          2: ED31D84EC81D11EBA4C0E321C4F9AE02.roa (hash: qAEw4cfCPVqW7FS+d2/zPSE0MsVbQiymPW0bXvjNNYM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.crl
                          rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDfVjxI6auBXxgjiFrtr_WWER2o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 22:38:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1653 (0x675)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169903, serialNumber=C437D58F123A6AE057C608E216BB6BFD6584476A
        Validity
            Not Before: May 20 22:38:33 2026 GMT
            Not After : May 27 22:38:33 2026 GMT
        Subject: CN=6a0e37ea-bc87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e9:4f:3a:8b:d7:a3:a6:8e:2f:8e:2c:94:95:
                    7f:69:97:6c:22:92:6b:03:ee:71:f4:0b:8b:2b:86:
                    11:7b:b7:37:b1:d9:dc:e6:c0:76:01:30:69:df:d3:
                    0e:13:09:a1:e6:25:e0:51:95:bb:34:9b:05:14:e4:
                    88:58:7e:bb:92:33:23:b3:5b:c5:32:d7:70:c1:6c:
                    5e:37:ad:43:6e:40:5b:13:d5:e3:dc:7b:b4:3e:08:
                    d7:fb:aa:9f:fa:85:69:b0:bc:c9:e6:9f:fd:f5:ee:
                    f1:83:fd:44:b0:ba:d1:cd:1b:3f:2b:6d:72:4b:52:
                    c6:6a:fa:c3:1a:d3:c2:98:4a:79:4b:6f:e7:4b:b7:
                    71:85:b3:fc:38:96:c1:6a:bf:26:2f:69:1c:6e:8c:
                    27:92:4f:3a:1c:b2:29:da:e2:bf:65:4e:cc:8d:9a:
                    91:7f:55:9d:c9:34:7c:0f:81:63:af:b0:c9:19:a2:
                    e8:13:da:b7:02:b7:7e:77:fe:36:58:6f:ba:fd:ab:
                    47:aa:59:7f:40:93:fa:16:ba:b9:9a:89:34:2d:cc:
                    ff:b2:a2:6f:7a:f7:0c:d1:80:f0:6a:ac:2b:4c:c5:
                    d9:09:7a:d7:50:70:48:48:0e:f6:96:7b:b7:a8:e7:
                    1e:e2:c2:78:13:ec:16:c8:0c:c2:f1:6b:7a:b1:20:
                    02:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:38:A7:34:DB:CE:42:98:CC:36:D8:88:AB:AB:1C:5C:3C:0B:D0:C6
            X509v3 Authority Key Identifier:
                keyid:C4:37:D5:8F:12:3A:6A:E0:57:C6:08:E2:16:BB:6B:FD:65:84:47:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDfVjxI6auBXxgjiFrtr_WWER2o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:15:36:12:31:f3:cb:42:e7:19:d4:3f:de:1c:72:3c:f4:7a:
         ec:40:f8:ab:78:9b:96:03:d4:82:61:b7:4d:c3:2e:ba:fc:e3:
         78:d4:c3:c9:81:27:aa:73:91:b0:df:c7:68:5e:b4:9f:a1:66:
         52:22:e0:d3:fb:f3:bd:76:2e:17:4f:c8:84:79:d5:27:30:a9:
         19:ef:23:33:0d:67:13:77:c3:d5:06:0a:e4:ef:7d:b0:ed:d5:
         05:89:cc:68:e0:fa:af:91:81:44:8a:48:b7:fd:03:b0:55:22:
         a6:67:ab:87:99:be:52:e9:13:4c:df:10:37:15:ba:25:c4:8d:
         5f:34:2f:05:9d:67:ab:57:3a:2e:e9:59:31:80:c4:58:d4:d7:
         3e:33:94:a8:4f:3d:06:1c:5b:32:d7:5e:7a:c0:72:51:9a:fd:
         35:3b:71:a0:24:80:34:74:48:c1:bf:5b:a6:9b:55:7a:a0:12:
         df:eb:a8:5c:bb:24:cc:61:80:ba:97:0c:e3:cc:02:00:4d:75:
         18:b5:35:fe:30:26:b5:e2:ba:f5:02:1b:05:66:64:ea:78:36:
         97:36:20:13:51:92:81:13:f1:17:c0:62:90:14:67:35:c7:74:
         61:8d:88:b2:30:4b:08:ee:ee:1d:da:53:a0:81:ee:4c:08:ee:
         c9:80:de:07
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njk5MDMxMTAvBgNVBAUTKEM0MzdENThGMTIzQTZBRTA1N0M2MDhFMjE2QkI2QkZE
NjU4NDQ3NkEwHhcNMjYwNTIwMjIzODMzWhcNMjYwNTI3MjIzODMzWjAYMRYwFAYD
VQQDEw02YTBlMzdlYS1iYzg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5+lPOovXo6aOL44slJV/aZdsIpJrA+5x9AuLK4YRe7c3sdnc5sB2ATBp39MO
Ewmh5iXgUZW7NJsFFOSIWH67kjMjs1vFMtdwwWxeN61DbkBbE9Xj3Hu0PgjX+6qf
+oVpsLzJ5p/99e7xg/1EsLrRzRs/K21yS1LGavrDGtPCmEp5S2/nS7dxhbP8OJbB
ar8mL2kcbownkk86HLIp2uK/ZU7MjZqRf1WdyTR8D4Fjr7DJGaLoE9q3Ard+d/42
WG+6/atHqll/QJP6Frq5mok0Lcz/sqJvevcM0YDwaqwrTMXZCXrXUHBISA72lnu3
qOce4sJ4E+wWyAzC8Wt6sSACEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKg4pzTb
zkKYzDbYiKurHFw8C9DGMB8GA1UdIwQYMBaAFMQ31Y8SOmrgV8YI4ha7a/1lhEdq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTkwMy9FRTZCNzQxOEM4
MTgxMUVCODNDRUVCNEFDNEY5QUUwMi94RGZWanhJNmF1Qlh4Z2ppRnJ0cl9XV0VS
Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hEZlZqeEk2YXVCWHhnamlGcnRyX1dXRVIyby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
OTkwMy9FRTZCNzQxOEM4MTgxMUVCODNDRUVCNEFDNEY5QUUwMi94RGZWanhJNmF1
Qlh4Z2ppRnJ0cl9XV0VSMm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOxU2EjHzy0LnGdQ/3hxyPPR67ED4q3iblgPUgmG3TcMuuvzjeNTDyYEnqnOR
sN/HaF60n6FmUiLg0/vzvXYuF0/IhHnVJzCpGe8jMw1nE3fD1QYK5O99sO3VBYnM
aOD6r5GBRIpIt/0DsFUipmerh5m+UukTTN8QNxW6JcSNXzQvBZ1nq1c6LulZMYDE
WNTXPjOUqE89BhxbMtdeesByUZr9NTtxoCSANHRIwb9bpptVeqAS3+uoXLskzGGA
upcM48wCAE11GLU1/jAmteK69QIbBWZk6ng2lzYgE1GSgRPxF8BikBRnNcd0YY2I
sjBLCO7uHdpToIHuTAjuyYDeBw==
-----END CERTIFICATE-----
Generated at Thu May 21 09:37:49 2026 by rpki-client