Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft
File:                     xhVwDXyIi-a6dQrezZTYhkaC42E.mft (raw, json)
Hash identifier:          YFEgsDGhTPmeQhtZCNrkR2erDuJiR8aESCPYL9diJlA=
Subject key identifier:   53:AC:46:91:3D:3E:A0:D0:71:D8:B8:35:B5:1F:C1:58:4E:1C:17:36
Authority key identifier: C6:15:70:0D:7C:88:8B:E6:BA:75:0A:DE:CD:94:D8:86:46:82:E3:61
Certificate issuer:       /CN=A91D0C14/serialNumber=C615700D7C888BE6BA750ADECD94D8864682E361
Certificate serial:       0154
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xhVwDXyIi-a6dQrezZTYhkaC42E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft
Manifest number:          0150
Signing time:             Mon 01 Jun 2026 02:12:48 +0000
Manifest this update:     Mon 01 Jun 2026 02:12:47 +0000
Manifest next update:     Mon 08 Jun 2026 02:12:47 +0000
Files and hashes:         1: xhVwDXyIi-a6dQrezZTYhkaC42E.crl (hash: pkGH6DG5TW/WkjEucGaYjEy5AOKbkvu5L8NqiwrgaXM=)
                          2: 6C3911AC316A11F090B23283C4F9AE02.roa (hash: 6lO6h2G77UVb/TYYp/IKbTb/elPRTlBLimPdGpXo2iE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.crl
                          rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xhVwDXyIi-a6dQrezZTYhkaC42E.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 02:12:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 340 (0x154)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0C14, serialNumber=C615700D7C888BE6BA750ADECD94D8864682E361
        Validity
            Not Before: Jun  1 02:12:47 2026 GMT
            Not After : Jun  8 02:12:47 2026 GMT
        Subject: CN=6a1ceaa0-39bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:39:69:d0:df:0b:ee:b8:81:6f:89:96:ae:d9:
                    43:cb:04:0e:c4:e4:6b:8d:aa:57:55:da:25:3f:41:
                    6c:5d:20:c9:24:fc:8e:4c:c1:ab:bb:0e:7b:2d:4b:
                    3b:82:3e:9a:e4:e8:a5:32:5c:6c:e5:63:f7:a1:b1:
                    1e:83:44:a3:25:8e:8e:c4:93:8b:a0:ff:48:1e:d5:
                    e3:eb:61:b0:39:f3:c3:56:a9:17:fa:39:9c:f9:37:
                    d6:c5:ce:d6:c7:c0:75:92:16:3a:15:70:a9:52:aa:
                    91:6d:38:58:66:48:ad:0e:cc:9b:c9:cb:3f:b6:2c:
                    4d:64:41:95:52:39:19:9a:dc:1a:25:f9:88:4b:28:
                    55:31:c4:1a:49:4c:78:1d:5d:11:b1:68:2e:de:20:
                    4f:6e:6f:c4:a0:1c:97:69:db:2f:40:6a:29:91:e3:
                    38:14:45:bd:ef:a5:d9:29:71:be:51:6d:f8:b5:24:
                    40:7c:e9:04:41:61:d8:29:6b:79:c4:33:ea:24:f1:
                    55:07:7b:0e:41:3b:c9:6a:2c:be:9f:0f:22:d4:5c:
                    e6:e6:59:fa:ca:c9:3c:dd:af:19:16:9c:74:29:2e:
                    01:51:a5:3b:d6:77:ce:b3:d6:b2:81:e7:6b:42:8b:
                    dd:89:fc:cd:36:f5:1f:fa:c9:a8:cb:9c:7c:05:a8:
                    0a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:AC:46:91:3D:3E:A0:D0:71:D8:B8:35:B5:1F:C1:58:4E:1C:17:36
            X509v3 Authority Key Identifier:
                keyid:C6:15:70:0D:7C:88:8B:E6:BA:75:0A:DE:CD:94:D8:86:46:82:E3:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xhVwDXyIi-a6dQrezZTYhkaC42E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:79:2c:86:40:ec:0d:ba:34:fd:aa:de:e1:08:ac:8f:0f:ff:
         bd:05:a8:3d:ed:39:6e:94:49:5c:2c:4b:8b:a6:59:0b:35:8f:
         62:4f:da:2d:2f:23:32:8a:42:dc:3a:d9:ae:b3:ee:57:5c:8a:
         62:7e:1f:b5:5e:88:ea:19:87:e6:1b:e1:cc:e9:56:b2:75:b6:
         4a:e3:82:be:29:1f:74:24:66:76:55:56:81:18:e1:ec:13:7f:
         a8:7d:0e:f2:ad:81:96:da:7d:fc:f6:22:0e:27:f8:fc:47:4c:
         ba:7d:65:1d:bc:a1:78:cf:a6:76:21:72:a2:d4:43:e4:bc:e1:
         2f:46:28:3f:bf:51:f6:02:fe:c1:bb:b3:cf:51:3a:a0:21:fb:
         94:d1:72:49:15:5a:b9:af:15:81:22:cd:ca:a9:ab:d3:0b:a9:
         a8:e9:cc:8b:5e:c0:4f:3b:1b:ec:68:35:cc:fb:fd:49:b0:ba:
         df:f2:cc:f9:d1:b6:63:b3:93:19:36:78:d1:0c:ea:5b:98:28:
         be:71:22:85:c8:c0:7a:5a:e5:f3:7f:82:b2:c2:49:86:2f:55:
         51:92:d4:51:84:7b:66:06:88:65:ca:c7:24:ba:d0:d4:1b:e2:
         6d:26:1d:a1:78:48:ed:a5:f1:55:2e:d6:2d:93:31:3d:b5:5b:
         7e:7d:f5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:20:01 2026 by rpki-client