Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft
File:                     XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft (raw, json)
Hash identifier:          uYY+2nRepUoIt1n9t1EW3Dxbn3FCHBPE5XL5rgMR6cE=
Subject key identifier:   24:70:B1:26:32:7D:3A:0F:D5:9C:03:8D:E1:E0:86:02:57:D6:58:0B
Authority key identifier: 5E:05:74:46:C4:96:1E:4D:26:C3:7F:FE:A8:AC:3F:7A:AD:D8:3B:32
Certificate issuer:       /CN=A91D83B3/serialNumber=5E057446C4961E4D26C37FFEA8AC3F7AADD83B32
Certificate serial:       0A6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft
Manifest number:          0A64
Signing time:             Tue 30 Jun 2026 20:13:18 +0000
Manifest this update:     Tue 30 Jun 2026 20:13:17 +0000
Manifest next update:     Tue 07 Jul 2026 20:13:17 +0000
Files and hashes:         1: XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl (hash: UJLxQl3Z/GtkshQ5hNg+vuUxT7fM3DF/JVANFEgFy/s=)
                          2: B01A5D448A0E11EAA8C40916C4F9AE02.roa (hash: uL14OpfP32+5y3tA0ivSjK4NgQZZVX7Ob3/KlBQRVf0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl
                          rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 07 Jul 2026 20:13:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2670 (0xa6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D83B3, serialNumber=5E057446C4961E4D26C37FFEA8AC3F7AADD83B32
        Validity
            Not Before: Jun 30 20:13:17 2026 GMT
            Not After : Jul  7 20:13:17 2026 GMT
        Subject: CN=6a44235e-c1d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:53:9d:71:f1:7b:1d:73:d2:46:f4:04:76:0d:
                    cc:7c:ea:d3:0a:a4:99:e4:80:3f:f2:02:60:f5:38:
                    05:de:73:be:cc:d0:33:08:82:b1:eb:44:6a:eb:81:
                    a8:ed:43:44:5e:15:14:f0:9a:e2:5e:bb:ce:a0:51:
                    6a:c5:a8:5a:78:44:52:52:87:10:12:58:6e:38:0c:
                    5a:d0:c5:df:64:d7:d0:89:65:42:fd:83:6c:65:ca:
                    91:03:3f:34:06:88:f4:90:39:3a:75:cd:e8:70:f1:
                    77:c2:60:7f:e3:8b:7d:66:96:e5:8a:56:df:b9:66:
                    2d:07:4f:af:ba:fa:5f:9c:aa:51:92:84:3f:65:e2:
                    0b:41:96:6e:85:25:8f:44:f9:6d:9d:6b:fd:3f:48:
                    f9:2b:f1:65:2d:0f:3d:0b:c7:32:b3:50:f0:1a:2a:
                    74:b5:8e:04:cb:63:7a:21:63:db:c7:62:0f:ec:82:
                    70:6b:61:d8:4f:06:fa:44:bf:87:b9:c5:57:5f:9f:
                    5a:e5:a0:f7:a0:a8:dd:20:84:b2:fe:62:cf:be:e4:
                    ec:fa:4b:d1:5b:0c:e3:1f:d2:41:50:fb:b5:92:fe:
                    24:15:6a:58:40:b2:37:6d:a8:0e:ce:fe:a2:7e:a1:
                    15:7d:ac:d9:ed:54:39:07:a9:af:d7:0d:ad:e8:a4:
                    f4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:70:B1:26:32:7D:3A:0F:D5:9C:03:8D:E1:E0:86:02:57:D6:58:0B
            X509v3 Authority Key Identifier:
                keyid:5E:05:74:46:C4:96:1E:4D:26:C3:7F:FE:A8:AC:3F:7A:AD:D8:3B:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:71:48:b5:c6:04:eb:47:54:74:91:5c:c2:4f:f0:b4:89:a8:
         39:25:c4:7a:82:93:89:9e:09:ea:b9:85:f3:e3:38:14:5b:86:
         56:d6:2d:fb:f8:1c:ea:89:70:b9:1d:16:d7:62:70:38:b8:34:
         8b:04:90:d1:da:01:53:ba:62:34:4a:56:5f:2e:f5:d1:3b:33:
         f1:14:bb:8b:ee:4a:44:87:ef:62:6d:39:7a:33:0c:07:5f:66:
         b4:a6:ee:40:89:ac:28:63:32:b1:49:8b:63:1d:5a:a9:95:2d:
         45:a1:36:d5:91:2d:88:f8:33:3e:e8:15:c9:f0:f9:c9:49:05:
         98:92:58:45:fe:11:5f:8c:a0:b7:7e:97:d1:39:a6:f3:53:db:
         86:8c:bd:c0:86:13:e5:33:0f:5d:18:a8:3f:06:83:cb:a3:c8:
         77:ee:c7:46:a6:9d:fb:bd:b0:7f:fc:f8:74:2a:23:4c:d5:a2:
         2d:a2:63:9d:fb:d6:94:15:cc:f1:ff:57:13:09:ff:c6:7b:72:
         d7:ea:05:c6:db:31:1c:d4:3e:ce:88:45:b3:47:0e:d7:65:9e:
         d6:e8:ae:99:dd:41:a7:2e:3d:8d:32:82:a7:0a:17:2b:e5:ce:
         3c:52:1c:87:09:b0:80:44:12:a6:dc:68:c1:68:ad:a7:20:b0:
         f1:f2:1d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 21:54:19 2026 by rpki-client