Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft
File:                     XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft (raw, json)
Hash identifier:          C4N9SazcK5PvGmajAHV+jxWip2YFoNMC2MHZB2pEKoM=
Subject key identifier:   F0:8E:AE:4E:4A:98:D0:15:63:C7:EC:25:CB:AA:CC:37:52:CB:16:BD
Authority key identifier: 5E:C5:FB:33:4E:E5:2B:90:09:CB:92:3C:69:3B:D2:0F:04:78:A1:44
Certificate issuer:       /CN=A918EF87/serialNumber=5EC5FB334EE52B9009CB923C693BD20F0478A144
Certificate serial:       C1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft
Manifest number:          BF
Signing time:             Mon 01 Jun 2026 07:43:10 +0000
Manifest this update:     Mon 01 Jun 2026 07:43:09 +0000
Manifest next update:     Mon 08 Jun 2026 07:43:09 +0000
Files and hashes:         1: XsX7M07lK5AJy5I8aTvSDwR4oUQ.crl (hash: bQpYPtgiyr4d1KEpaqg3IJqke6/K6glcgCDXtBDknPo=)
                          2: C053613E38B311F08DB63209C4F9AE02.roa (hash: XGziVhW7bV6WTpnAO5hHSMS6E/tbFN56AbeKUPYhFNI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.crl
                          rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 07:43:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 193 (0xc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EF87, serialNumber=5EC5FB334EE52B9009CB923C693BD20F0478A144
        Validity
            Not Before: Jun  1 07:43:09 2026 GMT
            Not After : Jun  8 07:43:09 2026 GMT
        Subject: CN=6a1d380e-5a92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8c:52:f0:54:c0:72:30:6a:20:ab:fe:cc:05:
                    8c:1f:f5:7d:d0:43:c4:df:eb:c6:7b:f2:3a:5f:85:
                    0d:7a:c2:c8:c7:88:3b:eb:cf:c9:fc:f4:e8:a5:c1:
                    b3:fb:eb:a1:a8:c6:f6:0e:cc:d3:4a:36:70:38:e2:
                    2c:76:99:e0:51:3b:46:45:82:62:48:14:40:8a:2a:
                    af:8e:4a:3b:2a:f8:13:fd:92:38:ab:00:6a:e8:3b:
                    11:e7:42:16:62:cf:8c:04:a6:4c:5c:2a:78:11:32:
                    fb:68:ef:a3:72:1b:e7:46:87:fd:6f:a1:44:df:53:
                    2d:06:86:8a:df:a8:05:c4:4a:78:15:7f:75:bb:30:
                    c7:da:ee:a4:c9:eb:2f:50:8e:8f:e6:d1:c6:74:87:
                    96:a1:ef:53:df:a7:5d:bc:17:25:98:9a:89:74:9e:
                    71:c8:7d:3d:0c:1f:01:8a:eb:64:6b:7d:7a:d7:2e:
                    47:44:cc:7a:77:ca:eb:bd:44:4d:ee:77:eb:40:7d:
                    3f:31:ab:f6:01:c9:af:aa:9d:23:3d:d3:2d:15:9f:
                    1d:f0:c4:a7:10:9f:7b:87:27:48:00:38:00:d8:b9:
                    08:3a:cd:1b:57:28:0d:18:60:67:d5:c5:4b:1b:90:
                    20:cf:48:d8:c2:96:cf:46:a5:a1:66:85:8f:83:56:
                    b0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:8E:AE:4E:4A:98:D0:15:63:C7:EC:25:CB:AA:CC:37:52:CB:16:BD
            X509v3 Authority Key Identifier:
                keyid:5E:C5:FB:33:4E:E5:2B:90:09:CB:92:3C:69:3B:D2:0F:04:78:A1:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:d9:de:9f:14:44:44:7e:38:e2:56:32:39:5a:78:78:75:1a:
         ad:14:17:2c:1e:e5:ba:2b:d0:ce:a5:f7:a6:79:98:b5:8d:51:
         ae:cd:cc:58:59:00:92:a4:3b:56:6a:9f:63:c6:1e:0a:7d:da:
         76:49:6d:58:44:90:f4:8b:6d:08:69:b7:83:e1:69:6d:3a:d4:
         f7:49:c7:94:ad:cc:cd:7e:7a:78:81:ea:e7:e6:c0:ff:ae:f6:
         ca:5e:12:8b:f8:b2:66:f1:c3:4c:ae:77:21:d2:9e:db:19:37:
         32:5b:89:02:d2:b8:76:a7:01:58:a3:14:9f:96:c3:01:80:58:
         94:7e:c8:78:80:dd:9f:59:b5:d9:53:29:e5:66:08:07:71:fb:
         eb:f1:b6:e0:75:a5:64:ff:23:dc:5f:66:ce:02:c9:1d:16:fd:
         14:04:22:7b:fb:aa:d2:e6:b9:04:3a:d8:5b:22:a8:3d:c8:6e:
         af:c8:23:29:f6:98:ee:fc:da:c3:b9:40:fe:ed:16:2a:f5:3a:
         6b:a2:d0:f9:99:93:c6:c3:0d:c4:0a:d6:f9:96:33:72:97:d8:
         7c:e7:7e:3d:aa:df:9e:70:dd:9c:de:5c:f9:d5:f0:70:4f:10:
         e0:65:d6:d8:1c:9e:83:2e:75:ae:9a:6a:c7:3e:6c:af:3c:ae:
         9c:b8:17:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:20:06 2026 by rpki-client