Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft
File:                     XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft (raw, json)
Hash identifier:          YZBKDlh7LkhRXB/QjAQNn34CgIbzJJ5XMQFMdhwIuyU=
Subject key identifier:   20:79:DF:DF:C2:7F:EA:6F:37:41:8D:0C:1F:41:63:62:8E:F0:7B:70
Authority key identifier: 5C:32:7B:4A:23:5B:F8:90:FD:26:91:FB:03:E9:4A:6F:16:CB:F2:3C
Certificate issuer:       /CN=A91FBD89/serialNumber=5C327B4A235BF890FD2691FB03E94A6F16CBF23C
Certificate serial:       026A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft
Manifest number:          026A
Signing time:             Sun 31 May 2026 23:44:42 +0000
Manifest this update:     Sun 31 May 2026 23:44:42 +0000
Manifest next update:     Sun 07 Jun 2026 23:44:42 +0000
Files and hashes:         1: XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl (hash: pcTgJfGXDyx7XleBqV2kRYyZ9tj85lnIfjWQcrZ87Ik=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl
                          rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Jun 2026 23:44:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 618 (0x26a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FBD89, serialNumber=5C327B4A235BF890FD2691FB03E94A6F16CBF23C
        Validity
            Not Before: May 31 23:44:42 2026 GMT
            Not After : Jun  7 23:44:42 2026 GMT
        Subject: CN=6a1cc7ea-4747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:42:14:f1:92:02:7a:fa:23:9e:03:f8:92:b5:
                    0a:a8:d6:97:a6:38:7a:fc:33:41:5a:89:30:6b:74:
                    a7:1b:3e:78:9c:69:af:d7:4d:2a:e7:fe:a4:6a:17:
                    7e:1b:e6:4d:9e:79:e2:36:cf:39:1f:d5:30:d5:9a:
                    a8:25:11:3b:3e:ed:3b:5b:60:28:35:d8:41:1a:82:
                    2f:88:c4:fb:04:a5:53:dd:dd:06:ff:cd:f4:df:3e:
                    c2:43:4f:ea:e8:89:0f:38:72:b7:d9:8a:84:57:eb:
                    e2:dd:b6:86:17:38:ec:7f:0f:7c:0a:3c:98:e7:63:
                    0c:bf:2f:39:df:d7:2c:41:43:d0:80:1f:43:24:e4:
                    f4:7a:76:db:bd:0f:23:d7:c1:35:a9:a9:07:c5:42:
                    24:7b:62:4b:cf:00:7f:97:47:dd:ba:4a:83:db:f4:
                    7b:e9:2d:28:fb:ef:ab:8d:df:bb:64:d6:ee:ab:6c:
                    e5:ed:9f:81:29:66:94:23:32:52:45:a7:a5:2f:7e:
                    15:c9:da:d7:6c:44:a1:d2:11:f5:7b:f2:a6:85:6b:
                    28:2f:04:88:26:fe:25:f6:a5:9e:0d:2c:c8:a7:90:
                    ca:bd:30:b5:36:f3:89:bf:05:34:a8:d8:fa:cd:ff:
                    81:5c:a4:08:1b:90:7e:2f:fa:e6:b7:6a:39:d6:34:
                    ac:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:79:DF:DF:C2:7F:EA:6F:37:41:8D:0C:1F:41:63:62:8E:F0:7B:70
            X509v3 Authority Key Identifier:
                keyid:5C:32:7B:4A:23:5B:F8:90:FD:26:91:FB:03:E9:4A:6F:16:CB:F2:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:8e:3e:39:74:03:7f:ac:65:06:c7:0d:d6:9f:44:68:74:11:
         56:5c:ec:8d:80:c0:c7:48:ac:61:29:88:5d:a2:ee:96:13:89:
         23:5a:15:62:bb:9a:81:3f:bd:23:45:25:6e:c5:dd:80:f5:13:
         22:48:c0:f4:3b:17:6c:a8:a7:52:80:d0:b9:29:b6:69:62:49:
         ac:42:09:0e:12:bf:97:e4:c6:dc:15:1a:e9:a8:91:28:6c:ea:
         7a:5b:97:f3:19:d9:87:95:49:49:33:f1:e9:90:15:e6:02:64:
         b9:e9:80:68:4f:aa:36:9e:59:64:27:49:7c:dc:57:5f:14:d0:
         15:d2:21:9a:48:e7:1c:66:9c:a3:cd:1a:a4:e6:67:18:9c:3e:
         76:fa:79:3c:c9:5d:a4:a0:c0:70:cc:ff:1a:2d:b4:f4:1f:c5:
         24:8c:29:2e:6d:fb:f2:f3:4f:bf:56:a3:e8:97:c8:d8:5f:1a:
         78:cc:16:1d:fc:66:ff:b4:89:80:42:f1:d7:69:a7:b3:3b:da:
         4e:41:b8:b1:ca:e1:7f:e6:2c:eb:99:0b:e3:44:ec:d9:a4:63:
         91:0a:92:4f:78:ee:57:e6:f2:91:53:3e:57:07:b0:45:02:1c:
         fb:6a:9d:4b:b1:5f:25:43:de:80:5f:c2:29:02:69:7d:96:df:
         6d:35:51:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:24:11 2026 by rpki-client