Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft
File:                     XlEJvjS4HAy74OQ1mneBpGJLn80.mft (raw, json)
Hash identifier:          n+5wnLJ6rhsJywSIH8tMKc8h8CSHzuINkQzuOOlp7fI=
Subject key identifier:   6F:D2:7D:2F:28:CF:97:52:A7:AD:B0:B5:4A:D7:AC:8E:9B:C0:99:09
Authority key identifier: 5E:51:09:BE:34:B8:1C:0C:BB:E0:E4:35:9A:77:81:A4:62:4B:9F:CD
Certificate issuer:       /CN=A91E5D61/serialNumber=5E5109BE34B81C0CBBE0E4359A7781A4624B9FCD
Certificate serial:       13A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft
Manifest number:          4924
Signing time:             Sat 30 May 2026 14:21:04 +0000
Manifest this update:     Sat 30 May 2026 14:21:04 +0000
Manifest next update:     Sat 06 Jun 2026 14:21:04 +0000
Files and hashes:         1: XlEJvjS4HAy74OQ1mneBpGJLn80.crl (hash: rkUv14lsPys0mNt56HXflpBr85LAvNkfgVn4ocMO4bM=)
                          2: 12300E80ECD911EEB21F7B7FC4F9AE02.roa (hash: r6K9sT4xz4xltrfN6WopOwvbBDeZ2oXDfmgdeeL8nwY=)
                          3: 792023A8E0DD11EE86DB926AC4F9AE02.roa (hash: 8j8UggU/cOGDsFTMUgNVbsmPDrBcfc9iBtV2U1i4LIQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.crl
                          rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Jun 2026 14:21:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5028 (0x13a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D61, serialNumber=5E5109BE34B81C0CBBE0E4359A7781A4624B9FCD
        Validity
            Not Before: May 30 14:21:04 2026 GMT
            Not After : Jun  6 14:21:04 2026 GMT
        Subject: CN=6a1af250-f118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ee:2f:08:25:78:2e:74:99:ab:5c:27:14:a1:
                    28:55:0b:e1:1c:6e:50:77:4b:80:9c:42:ec:9b:46:
                    2d:b0:f6:74:b2:2d:3d:e3:07:3a:1e:67:f5:a5:cf:
                    10:27:6d:4e:63:61:94:12:0c:64:48:56:95:4b:c5:
                    3b:c3:e6:dd:67:de:8f:12:6b:ba:72:8a:ab:fe:2a:
                    2d:74:15:1e:8d:41:71:fe:6b:fb:5a:60:c5:42:7e:
                    21:3d:19:a2:d1:a5:2e:ed:8e:45:4e:35:d9:c0:e2:
                    bf:e1:90:f0:92:25:64:2b:0b:8d:5c:91:80:92:41:
                    6b:c3:56:7d:17:66:29:bf:5e:bf:64:8f:3f:6b:7c:
                    17:e2:85:b9:5a:54:ab:39:26:8a:be:30:ef:77:84:
                    ec:80:65:b1:ff:92:e3:0b:87:96:87:53:fb:75:c5:
                    14:c6:52:30:60:c0:e4:98:08:11:47:b1:44:3e:ad:
                    a2:68:15:ab:c2:ff:b3:a5:80:9c:b6:55:b1:3a:dc:
                    6e:1c:a8:57:e5:eb:78:1e:be:83:f9:08:32:37:d3:
                    ee:be:a5:89:b5:98:4c:eb:f3:b6:d2:0f:70:29:f4:
                    f0:ee:fa:c0:ba:45:d0:5c:70:a7:b6:5f:bd:57:ac:
                    0d:59:da:76:31:a8:e8:b7:72:13:bf:3c:69:25:2d:
                    39:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:D2:7D:2F:28:CF:97:52:A7:AD:B0:B5:4A:D7:AC:8E:9B:C0:99:09
            X509v3 Authority Key Identifier:
                keyid:5E:51:09:BE:34:B8:1C:0C:BB:E0:E4:35:9A:77:81:A4:62:4B:9F:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:08:86:5a:42:b1:3e:68:7e:19:79:f1:34:43:1b:04:e5:96:
         ab:ed:51:19:7d:7c:7c:79:1e:f8:8c:61:f9:c2:2c:7e:ad:63:
         87:65:1d:3f:b4:4f:54:bc:fc:d8:6c:89:a5:30:59:8c:32:b5:
         56:79:6f:32:48:6b:9a:15:20:a8:2e:53:5e:12:b3:ac:f4:76:
         3d:c8:c4:20:ee:a3:1f:6e:b7:83:72:13:c1:c7:a7:97:29:90:
         22:a5:de:08:d2:dd:cf:97:a2:9d:44:02:95:fa:bb:13:34:cc:
         10:03:a2:2b:ad:86:15:83:d1:4e:0b:66:aa:7d:41:13:42:48:
         48:95:ee:2d:4e:0b:b4:59:9d:e0:63:d6:6c:a4:95:17:cb:ac:
         53:c8:a0:d3:70:41:8a:a2:12:72:40:b5:15:b8:30:20:d5:45:
         bf:1e:fb:fa:69:d2:c4:75:51:af:8c:49:41:94:0b:15:2f:b1:
         14:78:bd:43:cf:ad:e0:8e:0c:88:98:ed:31:18:04:64:96:b9:
         bf:f7:8f:33:b2:43:9e:29:5f:08:82:f0:84:81:23:d8:0b:6e:
         16:ea:c9:a6:7d:30:75:43:85:b3:dc:74:14:85:0d:d0:cd:19:
         a4:44:dc:ec:8b:1b:16:f0:17:e1:0e:12:e6:0a:91:28:ee:6c:
         1d:83:aa:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 10:50:09 2026 by rpki-client