Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED73E/01B8210A898911E8B98BEC3AC4F9AE02/XK9B9ks3Umh5jipdqgwUAADNdHM.mft
File:                     XK9B9ks3Umh5jipdqgwUAADNdHM.mft (raw, json)
Hash identifier:          xLCcsjhZzX9/UQLqifQGf8Qf8lQlECoYP0TSPiUw0JM=
Subject key identifier:   09:E3:87:81:43:59:CE:C8:6B:D3:AA:8C:5A:C3:99:DA:96:1D:13:54
Authority key identifier: 5C:AF:41:F6:4B:37:52:68:79:8E:2A:5D:AA:0C:14:00:00:CD:74:73
Certificate issuer:       /CN=A91ED73E/serialNumber=5CAF41F64B375268798E2A5DAA0C140000CD7473
Certificate serial:       14BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK9B9ks3Umh5jipdqgwUAADNdHM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED73E/01B8210A898911E8B98BEC3AC4F9AE02/XK9B9ks3Umh5jipdqgwUAADNdHM.mft
Manifest number:          1493
Signing time:             Wed 20 May 2026 16:51:23 +0000
Manifest this update:     Wed 20 May 2026 16:51:22 +0000
Manifest next update:     Wed 27 May 2026 16:51:22 +0000
Files and hashes:         1: XK9B9ks3Umh5jipdqgwUAADNdHM.crl (hash: N7bh5c5QMn7L74eMPAN4ZuEAnws3WkT3m6dKyLsz8rQ=)
                          2: 1983150A3BB911EEB0CA4809C4F9AE02.roa (hash: 5RNyMR+3G/bk8qvZSiyds5uiwVr/sSQ5ExXQPxGSzo8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED73E/01B8210A898911E8B98BEC3AC4F9AE02/XK9B9ks3Umh5jipdqgwUAADNdHM.crl
                          rsync://rpki.apnic.net/member_repository/A91ED73E/01B8210A898911E8B98BEC3AC4F9AE02/XK9B9ks3Umh5jipdqgwUAADNdHM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK9B9ks3Umh5jipdqgwUAADNdHM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 16:51:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5309 (0x14bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED73E, serialNumber=5CAF41F64B375268798E2A5DAA0C140000CD7473
        Validity
            Not Before: May 20 16:51:22 2026 GMT
            Not After : May 27 16:51:22 2026 GMT
        Subject: CN=6a0de68a-0271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:36:1a:d5:ff:d2:59:7b:f7:54:94:d6:a0:25:
                    7b:d7:73:e2:06:53:3a:73:52:2e:a3:4b:17:4f:ad:
                    ce:12:b0:04:e6:c8:1a:c1:59:aa:78:17:14:4a:ae:
                    b4:df:2a:68:b6:4d:03:ac:8d:10:12:5c:cc:f9:8e:
                    b4:56:c4:8b:8e:71:21:0e:4b:f9:ad:c1:ab:e9:c9:
                    1e:22:22:e1:da:b6:84:bd:ce:1b:cb:64:07:cf:d4:
                    16:ad:ac:87:2a:27:cf:88:8e:12:5b:f5:ed:13:24:
                    4a:72:c3:51:37:09:46:ef:2e:03:fd:c9:7a:80:72:
                    6f:14:50:53:36:c7:85:5e:eb:2b:6b:5f:7e:44:c0:
                    64:ee:a7:5e:cd:71:c9:e4:f9:45:ce:84:41:74:72:
                    71:0a:4d:da:75:fb:65:e1:24:e3:43:b8:d9:e0:7a:
                    54:19:19:51:bf:fb:cb:09:d1:df:ec:86:68:bf:15:
                    e4:0c:38:4c:45:4a:96:f3:b0:55:b7:68:11:84:ac:
                    10:38:e5:35:fa:ef:fb:8e:ef:7e:69:9c:64:bc:ab:
                    8a:b3:19:28:c5:80:fd:28:80:41:27:dd:8f:6e:00:
                    97:ec:55:57:48:5e:08:f9:cd:2f:dd:4b:df:e3:16:
                    e4:a5:88:20:44:c2:06:7b:39:7a:66:9e:7d:f7:39:
                    6e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:E3:87:81:43:59:CE:C8:6B:D3:AA:8C:5A:C3:99:DA:96:1D:13:54
            X509v3 Authority Key Identifier:
                keyid:5C:AF:41:F6:4B:37:52:68:79:8E:2A:5D:AA:0C:14:00:00:CD:74:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED73E/01B8210A898911E8B98BEC3AC4F9AE02/XK9B9ks3Umh5jipdqgwUAADNdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK9B9ks3Umh5jipdqgwUAADNdHM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED73E/01B8210A898911E8B98BEC3AC4F9AE02/XK9B9ks3Umh5jipdqgwUAADNdHM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:9c:d8:46:75:b2:44:b4:0a:1a:fa:48:67:78:52:6e:fd:33:
         41:3d:36:66:f4:90:d9:b7:90:c0:4a:18:a7:17:f3:ae:bc:58:
         99:4b:40:04:b6:c4:bb:d0:6b:50:e6:00:d1:c9:85:e3:d6:ff:
         99:98:b5:8c:90:e0:13:81:e8:14:ae:5c:1a:6e:43:ff:53:b2:
         67:ef:60:bf:de:a4:02:db:f3:40:cb:88:ae:79:da:16:07:84:
         a4:38:6d:10:63:02:21:b2:10:7c:59:f8:53:35:65:01:20:91:
         4a:97:95:29:4d:61:f2:e2:d0:f0:58:54:aa:4e:c2:56:3b:a2:
         19:f4:39:fd:f5:c7:11:6d:42:a6:1a:dd:39:72:4a:24:04:4d:
         7d:ee:3f:e3:1b:0e:ac:ff:ba:98:69:fc:68:20:08:ee:88:0c:
         65:cd:bb:c0:4c:36:2b:a2:6c:2c:43:6e:c0:9a:77:e8:48:ec:
         de:cc:31:fc:f1:8f:ed:da:7f:18:0a:2d:ac:05:cf:85:63:16:
         c9:f6:98:4a:03:eb:de:0c:6c:e0:ab:40:b1:30:70:b1:41:92:
         cf:61:7b:37:bb:de:7f:46:0f:c7:56:19:fe:4c:80:2d:6b:3c:
         e9:99:de:ab:2e:ba:39:23:de:2c:4b:13:61:d5:69:83:b7:ed:
         4d:4b:41:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:04:49 2026 by rpki-client