Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft
File:                     xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft (raw, json)
Hash identifier:          M7Q8BlaibwIGzsP6S2wr5FUTQvLxrEo74yQhfgV0SAY=
Subject key identifier:   38:21:C4:60:E7:28:36:DA:6A:98:AF:5A:EE:35:A5:88:2E:81:A5:A2
Authority key identifier: C4:9E:51:83:EA:2F:C4:9B:8A:83:C9:20:52:BC:E2:A8:B6:57:6C:70
Certificate issuer:       /CN=A91DF937/serialNumber=C49E5183EA2FC49B8A83C92052BCE2A8B6576C70
Certificate serial:       1FDA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft
Manifest number:          1FCB
Signing time:             Wed 20 May 2026 15:58:55 +0000
Manifest this update:     Wed 20 May 2026 15:58:54 +0000
Manifest next update:     Wed 27 May 2026 15:58:54 +0000
Files and hashes:         1: xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl (hash: RLISoBZgQ31RI2B3ZXSVFov5sP8QqXVUKeqgTlw6Wi4=)
                          2: E723101E553D11E7B552CE31C4F9AE02.roa (hash: W76e9AIVTyaTFBKFcxkBKNy/Y9c3O96EbBTxmYrNiiE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl
                          rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 15:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8154 (0x1fda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF937, serialNumber=C49E5183EA2FC49B8A83C92052BCE2A8B6576C70
        Validity
            Not Before: May 20 15:58:54 2026 GMT
            Not After : May 27 15:58:54 2026 GMT
        Subject: CN=6a0dda3f-fe39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:72:f9:db:2f:9f:65:5b:05:f9:51:92:2d:6c:
                    31:7f:98:d4:22:e6:4a:fe:16:93:f9:cd:46:b8:3d:
                    71:d8:79:5f:3c:24:45:1c:c4:7d:d3:7e:18:72:bf:
                    d3:ca:be:61:be:0d:e0:2c:09:12:20:b2:fd:37:d3:
                    9c:61:16:8e:fb:9b:8d:4a:00:74:e5:ca:0e:7a:a4:
                    f9:37:5d:b1:ec:85:df:6a:26:70:8b:3b:0b:3d:9e:
                    c0:75:4a:d2:17:8d:cc:bc:9f:d5:76:cb:ae:67:2e:
                    fa:ee:16:75:31:08:a2:05:b5:be:f6:4f:9e:20:0a:
                    92:de:cb:e1:af:65:0b:90:bd:8c:f5:dc:91:7c:c9:
                    8a:c4:74:e0:04:86:df:f0:11:74:6d:b8:6a:16:2c:
                    f8:98:07:57:a7:92:f4:00:49:f0:86:19:01:47:0c:
                    7c:3d:21:5a:5f:08:65:28:2e:a0:2a:d0:fb:6c:80:
                    50:37:21:6a:99:16:95:a5:dd:60:b4:f2:d4:fe:9e:
                    23:37:42:bd:63:7d:6a:de:65:ff:0d:42:eb:0a:59:
                    40:22:8e:ad:27:d3:05:52:4c:c1:1d:42:d0:23:d3:
                    bb:fd:3e:e6:04:c8:e7:53:de:06:58:54:71:57:96:
                    39:83:82:45:f0:e6:4f:a2:0c:a2:66:b1:ec:28:cc:
                    fb:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:21:C4:60:E7:28:36:DA:6A:98:AF:5A:EE:35:A5:88:2E:81:A5:A2
            X509v3 Authority Key Identifier:
                keyid:C4:9E:51:83:EA:2F:C4:9B:8A:83:C9:20:52:BC:E2:A8:B6:57:6C:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:bd:e5:26:ce:81:3d:80:40:b3:32:05:08:f4:ce:fb:4c:18:
         fe:17:e1:e3:1f:8e:f7:0d:a5:4d:8a:c9:d0:2a:ef:fe:83:1c:
         db:ad:40:56:d7:c3:04:e0:31:f1:d8:6e:9b:a9:00:73:9a:2a:
         14:0d:53:c3:29:d2:d0:44:3a:7f:6d:0b:c9:e8:f3:c4:82:b2:
         28:12:4b:20:be:2b:d1:3d:61:44:99:dc:3d:88:6f:0f:fe:05:
         e9:8f:75:16:61:b7:37:5a:e0:53:a8:af:96:72:c3:61:aa:17:
         d1:c7:b3:4d:59:e9:01:e7:2f:58:b0:e2:26:3b:a6:59:5d:f1:
         34:84:52:c4:59:5c:e2:d1:6d:e8:ed:7b:8d:44:76:cf:19:cb:
         7e:0f:19:64:2b:08:4d:52:d4:c9:9c:27:65:4c:8b:88:5d:2c:
         c5:93:8d:de:7b:1d:c2:5b:4e:ce:be:f4:00:dd:54:33:a7:57:
         ba:68:21:90:16:74:9a:80:14:ef:af:7b:48:b7:c0:c9:9a:e5:
         9c:d0:07:1e:64:98:4b:6f:2b:7a:88:cb:11:84:cd:22:c7:13:
         2f:d0:b5:ab:d6:51:66:1c:5f:17:a1:e1:7e:e6:fb:b1:54:15:
         01:24:04:48:b6:27:ce:9e:49:ed:07:e5:4b:6d:13:ff:ef:f1:
         c7:63:72:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:37:52 2026 by rpki-client