Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
File:                     xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft (raw, json)
Hash identifier:          nKL3/XvSEq8eV9bVeiUSWIuyPMrbO+dDUBtYxVOk1XM=
Subject key identifier:   A1:DC:84:2F:42:D1:53:C3:1A:B7:5F:84:88:5D:18:48:E3:F1:25:FE
Authority key identifier: C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39
Certificate issuer:       /CN=A91D51A0/serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539
Certificate serial:       0512
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
Manifest number:          04C9
Signing time:             Fri 05 Jun 2026 00:01:06 +0000
Manifest this update:     Fri 05 Jun 2026 00:01:06 +0000
Manifest next update:     Fri 12 Jun 2026 00:01:06 +0000
Files and hashes:         1: xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl (hash: hcFFENEztigTpiouDdBv6rfKQ2rt/29qUZ6IcrV/pf0=)
                          2: F179A39E0F0011F1AA61A6530E3D8C67.roa (hash: z5YNw9oqROxQNw3poTnbGicNOXVgbGeLROsEVEcC0k8=)
                          3: 8FD0B12E400311EEBF5A8B52C4F9AE02.roa (hash: Fu109TGeOUOlOrI2XIFdihyRA7Fr+8/prz/x7VcBoCE=)
                          4: D46B2C087F8711EC81E76A59C4F9AE02.roa (hash: hUayntDdKbP8YD8KFW+2g7hE9d13fe7KDzMZQmXs21I=)
                          5: 350FEB88D40611EDADEE3D1EC4F9AE02.roa (hash: D9z3NJUY8YNFb7cpJMaWfb8axb5uXCoUzET824J42QI=)
                          6: C3261EF826DF11ED94E18118C4F9AE02.roa (hash: hTS0InVz4oILVGeujjlkHVbEAsw1NZRZHIk3vW8oIWw=)
                          7: 5CA964A68AC111EC91D19A11C4F9AE02.roa (hash: gvK8maqGxYp4lJeyX+W8kif65fkOj90NEZevEg0iRXM=)
                          8: 86131D8AEA5D11ED80641166C4F9AE02.roa (hash: 4zgXlz4lhWhr5EJp9fYE8JRkFNuqjMzkEZkN69QI13A=)
                          9: 874B6EBC0F6E11F190C9BD30293D8C67.roa (hash: HqtrqO9wtp4Bw9to/IZBSTc+H4UcScxKGJWTDnLTim8=)
                          10: D83192B0152B11EE85ED4B1DC4F9AE02.roa (hash: EMlA3Q/StxXuEEyaCIdkb3FX9P3Rrmoemgp7n81D5+4=)
                          11: F0259B5AC4BF11F0B2402975C4F9AE02.roa (hash: Sro4OLk/DSMCZn4K0Wy038cX6/xvomXtZ3z40SAC7Vo=)
                          12: 6F8A81CCF30C11ED94750772C4F9AE02.roa (hash: +lysYAiE7tAFh6WIuGOmgLYRebmV1ikcUzBVaS8mik0=)
                          13: C5B45CA014F411F180EDEBBD193D8C67.roa (hash: 1jcExNuLyHWYrWjBJRhFw6fSw8L5FWvGvk7sIxrsGAg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl
                          rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 00:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1298 (0x512)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D51A0, serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539
        Validity
            Not Before: Jun  5 00:01:06 2026 GMT
            Not After : Jun 12 00:01:06 2026 GMT
        Subject: CN=6a2211c2-43f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3a:a3:5e:f8:06:c5:07:ea:dd:52:f6:51:72:
                    ca:c4:d0:c6:f4:f0:2d:8a:cc:41:12:dc:d3:11:18:
                    b5:87:ef:34:44:5c:3f:d1:b3:69:74:59:6f:2b:34:
                    23:bb:7b:77:ab:cd:f7:f5:ba:6f:fc:9e:20:e9:1d:
                    d0:15:0e:09:b8:ce:b0:84:c8:3c:82:89:ca:b8:dc:
                    8a:86:5c:f7:5b:48:81:f9:99:a4:ea:b0:20:3e:ad:
                    fc:fb:c4:24:0a:5c:94:23:42:ec:cb:c3:69:d7:32:
                    f6:e3:68:bb:17:0f:f6:e0:37:20:7c:d8:2f:84:b8:
                    1d:01:f0:27:19:d1:a0:46:2d:e7:61:22:c0:5b:5c:
                    66:f2:b8:fb:a8:be:9d:89:6c:57:8e:22:72:3a:e1:
                    00:77:41:b1:bf:d4:4a:24:f4:18:81:12:35:c1:b1:
                    3e:4a:9c:7e:e3:a1:7c:8c:e7:5f:a7:d9:14:8a:f3:
                    9c:5c:58:bb:6e:c2:03:19:c6:bd:22:97:4a:5e:e9:
                    84:55:e8:bd:c8:67:4d:7c:bc:65:fa:ce:86:20:fd:
                    bd:a3:61:2a:f4:65:f2:46:5a:68:e3:0d:16:b0:a7:
                    2b:12:a4:35:71:33:0a:aa:f5:8e:12:b3:48:0a:6e:
                    4b:cc:69:cb:0e:67:09:f5:eb:5c:37:b9:42:58:3f:
                    1c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:DC:84:2F:42:D1:53:C3:1A:B7:5F:84:88:5D:18:48:E3:F1:25:FE
            X509v3 Authority Key Identifier:
                keyid:C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:0c:d2:63:01:ae:1f:cd:4f:57:57:23:72:3a:de:58:d4:07:
         3b:e6:9b:67:ad:c5:d2:ce:07:fc:2c:ee:e7:87:95:8b:41:b8:
         4b:71:e0:7c:a0:19:98:43:8a:55:a2:c5:a3:aa:ea:5b:33:6c:
         35:bf:3d:28:b2:eb:35:15:b1:17:91:2c:73:cd:aa:7b:ef:b1:
         8b:06:a0:e4:b7:d3:f5:ae:fa:38:5c:5f:4b:f7:0c:7a:d6:f5:
         14:5b:6a:45:2e:27:e3:c4:7e:ba:2f:37:cd:00:1f:26:f8:9a:
         b7:15:35:54:4e:bf:0d:06:cc:09:43:ad:3e:c8:7a:7e:18:b2:
         69:20:46:85:bf:04:45:52:ab:c9:94:74:5f:ca:2b:9d:cf:e2:
         49:27:31:31:4b:7d:ca:fd:55:66:82:19:d2:59:4c:1a:96:e0:
         db:fa:1f:43:18:22:90:5e:d3:4f:91:67:07:11:f6:73:cf:f1:
         1d:1b:6a:a2:a4:9e:9a:86:9a:1f:cc:e0:29:d8:54:31:4f:e0:
         8d:e7:e8:b2:e5:20:3f:63:6e:4b:95:15:01:03:b4:5b:f3:b1:
         59:9b:b1:d5:25:28:71:13:b9:39:ac:56:a1:76:08:19:98:7c:
         eb:85:60:e3:3d:36:ea:97:05:75:e9:ed:33:f4:9f:7e:dc:3a:
         36:6a:95:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:31:52 2026 by rpki-client