Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.mft
File:                     xv9_8XAyqWoLIW8LwszDXwIgwnI.mft (raw, json)
Hash identifier:          jx4Hhqds2jMePyTqhDsei9Od3brOV/3FNB8TfaOxw2c=
Subject key identifier:   A2:0E:F3:90:82:B6:89:EB:F2:55:A6:7D:D8:0D:79:75:D1:4F:CA:C1
Authority key identifier: C6:FF:7F:F1:70:32:A9:6A:0B:21:6F:0B:C2:CC:C3:5F:02:20:C2:72
Certificate issuer:       /CN=A91B7929/serialNumber=C6FF7FF17032A96A0B216F0BC2CCC35F0220C272
Certificate serial:       63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xv9_8XAyqWoLIW8LwszDXwIgwnI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.mft
Manifest number:          61
Signing time:             Mon 01 Jun 2026 08:51:06 +0000
Manifest this update:     Mon 01 Jun 2026 08:51:06 +0000
Manifest next update:     Mon 08 Jun 2026 08:51:06 +0000
Files and hashes:         1: xv9_8XAyqWoLIW8LwszDXwIgwnI.crl (hash: 3uikqx0gPFUqKD2VXcLm2QstQdB0DGnALPlUMbY8+i4=)
                          2: 8709BBD4DB2011F0B6C890B887D3641D.roa (hash: EpL7U0XS/RThjCfzf6MnDPKqtdekXvQOYsOhN2Yrndg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.crl
                          rsync://rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xv9_8XAyqWoLIW8LwszDXwIgwnI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 08:51:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7929, serialNumber=C6FF7FF17032A96A0B216F0BC2CCC35F0220C272
        Validity
            Not Before: Jun  1 08:51:06 2026 GMT
            Not After : Jun  8 08:51:06 2026 GMT
        Subject: CN=6a1d47fa-f630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0b:dd:cd:c4:35:a0:9f:20:9a:c5:9c:b9:54:
                    46:05:5b:35:c4:11:f5:71:03:6e:9a:68:e5:dc:df:
                    06:68:9e:a9:49:96:bd:a6:b4:4e:c7:ff:c8:c1:cd:
                    24:53:92:af:e6:9c:7b:6e:ed:a8:d0:d8:ef:15:22:
                    68:2c:30:73:1c:ff:bd:f1:2d:6c:3f:b0:fe:e8:24:
                    e9:a2:da:14:d0:ea:29:04:f7:b3:d9:b5:aa:dc:e7:
                    01:18:e1:89:4b:c2:a1:72:ae:65:b2:9e:6f:6e:d8:
                    ef:20:90:43:49:a2:7b:c6:1d:6b:0b:da:32:e7:4b:
                    21:fb:92:12:7c:6c:6e:d9:1f:19:c2:2d:61:5c:56:
                    e8:21:2d:16:70:e0:b9:ad:31:8a:ba:c0:6f:a2:da:
                    dc:80:81:7f:76:26:2c:82:f9:d6:42:0c:d6:db:0a:
                    1d:3a:f0:24:06:ed:12:70:0f:a6:18:00:dc:39:9e:
                    1e:3f:1b:a3:8b:e4:07:44:2e:de:5c:79:45:73:bf:
                    2c:44:b6:eb:da:cf:60:88:77:d3:1b:59:62:72:70:
                    bf:4f:47:f2:11:ee:f0:be:64:08:a1:b4:40:91:90:
                    c2:3b:a4:70:0c:e0:56:7e:a6:2c:72:8b:16:11:26:
                    27:b1:c5:df:70:9d:0f:20:78:a5:08:47:1d:19:15:
                    99:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:0E:F3:90:82:B6:89:EB:F2:55:A6:7D:D8:0D:79:75:D1:4F:CA:C1
            X509v3 Authority Key Identifier:
                keyid:C6:FF:7F:F1:70:32:A9:6A:0B:21:6F:0B:C2:CC:C3:5F:02:20:C2:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xv9_8XAyqWoLIW8LwszDXwIgwnI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:a0:a4:74:ac:b5:37:0d:1f:05:c1:a6:73:74:fb:b1:8f:93:
         ae:7c:c6:62:50:40:0f:23:c4:b2:d5:44:f0:2b:dd:99:99:2b:
         1f:c4:5b:2c:9e:b5:8f:2d:fe:b8:90:ae:1b:69:b2:16:cc:44:
         f3:1e:2f:82:fd:27:5c:fa:ac:e5:62:7f:28:56:7e:04:3e:e7:
         db:3c:72:f6:65:f4:0a:74:a8:ae:60:76:b2:71:92:c8:5c:62:
         c8:46:b8:52:1a:4b:1b:d6:02:ce:e6:41:5d:93:85:86:25:9c:
         2a:37:b5:ad:d8:45:fa:0d:cd:27:5e:4d:66:c5:c1:aa:a8:c3:
         d2:62:f4:b0:27:ff:52:a9:b8:e2:ca:e9:10:9f:7d:c5:64:e7:
         05:53:70:14:37:28:4f:9a:a8:81:5d:72:02:3c:2b:56:07:b9:
         ec:2a:aa:83:e8:47:e6:17:53:39:22:a8:36:d3:9a:8e:55:c8:
         dd:fb:4e:17:a1:51:8a:ca:1f:9c:ee:db:f8:d0:a5:d1:39:e1:
         b5:79:9a:80:2c:82:33:11:e9:cd:aa:47:69:b4:f1:bb:c1:64:
         73:15:5f:b2:f6:b9:35:03:ec:4d:b4:0a:dc:54:da:36:f3:c2:
         fd:7d:7f:46:80:90:3d:41:6a:a5:cf:48:aa:9e:4f:b0:4b:51:
         75:88:71:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:55:34 2026 by rpki-client