Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft
File:                     xsGRae6n0Ga8m8py3YgwvBg6EmY.mft (raw, json)
Hash identifier:          i5NyJm8RZhA7Ei/CsAYMvUGn11tofgVBXppVjDBNwT0=
Subject key identifier:   4B:7D:BB:EE:01:FB:A1:05:63:70:77:01:2D:B7:E5:9F:43:5F:3C:B7
Authority key identifier: C6:C1:91:69:EE:A7:D0:66:BC:9B:CA:72:DD:88:30:BC:18:3A:12:66
Certificate issuer:       /CN=A91F1C46/serialNumber=C6C19169EEA7D066BC9BCA72DD8830BC183A1266
Certificate serial:       0898
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xsGRae6n0Ga8m8py3YgwvBg6EmY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft
Manifest number:          088E
Signing time:             Wed 20 May 2026 20:36:56 +0000
Manifest this update:     Wed 20 May 2026 20:36:56 +0000
Manifest next update:     Wed 27 May 2026 20:36:56 +0000
Files and hashes:         1: xsGRae6n0Ga8m8py3YgwvBg6EmY.crl (hash: nNj10WH1olji/OREnH8GB8qM8uoqzdSR+J45nCyLBS4=)
                          2: D3EA977EF32D11EA8498822CC4F9AE02.roa (hash: 2KftQgjQucTB7mWe4Ghtn15fUs79qb57lhCbaWg6O8Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.crl
                          rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xsGRae6n0Ga8m8py3YgwvBg6EmY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 20:36:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2200 (0x898)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1C46, serialNumber=C6C19169EEA7D066BC9BCA72DD8830BC183A1266
        Validity
            Not Before: May 20 20:36:56 2026 GMT
            Not After : May 27 20:36:56 2026 GMT
        Subject: CN=6a0e1b68-3fe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:37:27:61:64:a7:cd:12:04:5b:57:cf:18:6c:
                    12:2e:59:79:14:d6:f9:46:92:f7:20:89:ac:b0:78:
                    b6:ce:16:50:07:c4:72:6c:82:d7:b0:c5:19:c8:c3:
                    40:0a:8f:15:cc:65:64:4f:b5:4f:c4:a8:c5:76:87:
                    e9:d0:aa:84:0d:d5:90:10:35:8e:a2:4d:4c:59:e2:
                    55:f4:15:c5:e5:2a:91:32:11:72:57:51:e1:e8:2d:
                    49:fb:d7:07:10:48:3a:65:6f:c9:24:c5:ea:70:e7:
                    d5:bf:db:2a:41:9c:7a:f5:82:00:38:0c:48:f1:51:
                    93:09:b1:a6:8a:69:d5:2c:f4:96:c1:37:a2:cc:e5:
                    03:47:1c:3b:b9:d9:af:8d:bd:2c:7b:78:e7:16:5e:
                    c2:36:44:81:79:d8:85:30:fc:f0:ce:65:45:5f:4f:
                    71:43:c8:86:6f:5f:4b:01:2f:37:0b:87:ee:10:92:
                    8d:56:16:85:04:63:bb:85:25:1d:a2:e3:76:ac:cd:
                    9a:7f:cb:17:a4:95:d2:0a:a8:0c:3e:9b:bb:7e:7b:
                    5f:0c:b1:67:e6:f0:4d:53:b8:85:19:ad:5f:c0:85:
                    a4:0b:05:f3:9e:70:bd:fb:33:f4:05:d6:4c:3a:49:
                    de:e9:dc:be:f0:94:a0:b8:21:8c:0e:38:e3:b3:36:
                    f6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:7D:BB:EE:01:FB:A1:05:63:70:77:01:2D:B7:E5:9F:43:5F:3C:B7
            X509v3 Authority Key Identifier:
                keyid:C6:C1:91:69:EE:A7:D0:66:BC:9B:CA:72:DD:88:30:BC:18:3A:12:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xsGRae6n0Ga8m8py3YgwvBg6EmY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:58:92:8a:7f:db:67:e7:7e:35:e2:0a:e5:da:96:44:24:0c:
         5d:d3:e3:3c:d5:3b:f2:9d:78:5c:ca:58:5c:5c:66:32:d5:7c:
         be:51:d6:77:9a:53:07:7c:57:7f:84:38:1b:34:8c:8e:a5:51:
         be:1b:68:c4:00:24:65:83:4b:d5:fa:b9:eb:a8:a3:34:31:f0:
         bd:6b:47:b2:2f:d1:94:f6:63:b2:04:f7:f3:9e:07:b5:1a:63:
         92:70:83:0d:16:ad:ae:a0:dd:3e:05:aa:47:6f:73:71:52:b3:
         c4:b5:98:56:27:f4:ab:af:96:f4:0c:b3:a0:0a:2c:e0:d1:22:
         1b:8a:d9:ce:9d:50:dc:03:ce:97:1b:62:a8:b7:db:9e:4f:5e:
         8f:35:cd:cf:e8:06:ab:34:73:f8:71:e4:af:10:57:d0:53:97:
         e1:83:0a:06:90:6f:bd:af:3e:e7:df:7b:17:67:3d:5e:f5:ed:
         78:e2:2b:2c:35:7c:a6:01:68:c7:19:f9:e8:35:fa:57:8a:d4:
         17:2e:d7:26:b4:16:d9:67:37:54:d4:e4:a8:0c:e2:35:22:77:
         00:32:c6:09:e0:f9:13:88:e9:c6:b2:f5:ad:2b:0b:27:ef:19:
         7b:49:b8:88:bc:35:4a:df:4c:60:05:29:f9:5d:c7:a7:df:69:
         8c:2c:0b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 13:23:45 2026 by rpki-client