Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft
File:                     xiZYMphXjR1K9yc-vXkccjCjdEk.mft (raw, json)
Hash identifier:          8cAIeGXyitGPAWFFB2QjcnXWQBOCkkzhYZAu19urLz8=
Subject key identifier:   DD:EB:59:A3:DA:91:B2:73:AC:60:35:36:B2:DD:E1:DB:ED:7F:74:25
Authority key identifier: C6:26:58:32:98:57:8D:1D:4A:F7:27:3E:BD:79:1C:72:30:A3:74:49
Certificate issuer:       /CN=A91186C2/serialNumber=C626583298578D1D4AF7273EBD791C7230A37449
Certificate serial:       F6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiZYMphXjR1K9yc-vXkccjCjdEk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft
Manifest number:          EE
Signing time:             Fri 17 Apr 2026 06:05:26 +0000
Manifest this update:     Fri 17 Apr 2026 06:05:25 +0000
Manifest next update:     Fri 24 Apr 2026 06:05:25 +0000
Files and hashes:         1: xiZYMphXjR1K9yc-vXkccjCjdEk.crl (hash: 6C0uqI/tsAMmNEUhcz+RkDY4wQ3/4JYB60gmAYWJkSU=)
                          2: 7DFFCDA4D17F11EF8FAE452BC4F9AE02.roa (hash: 88RG+IBp3+3IKje/6h9nyZS5YfSLYuAiRdPmohXdymE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.crl
                          rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiZYMphXjR1K9yc-vXkccjCjdEk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 246 (0xf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91186C2, serialNumber=C626583298578D1D4AF7273EBD791C7230A37449
        Validity
            Not Before: Apr 17 06:05:25 2026 GMT
            Not After : Apr 24 06:05:25 2026 GMT
        Subject: CN=69e1cda6-6c40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:11:50:6c:1c:f7:d1:a9:ea:01:44:6d:6f:65:
                    bb:1c:94:a4:00:c9:53:f1:39:27:a6:f1:89:e6:ed:
                    46:d3:bc:b4:92:81:47:e3:c5:0a:88:16:33:3c:0e:
                    9a:6a:35:03:2e:11:3e:47:f5:1c:fe:8d:ee:48:95:
                    85:50:c1:ec:6a:ed:c9:07:c9:27:9f:3c:46:06:b8:
                    a7:01:67:f0:31:29:43:b5:a2:3a:a0:c6:2a:6f:c3:
                    31:04:61:e1:22:c1:6e:3b:60:7c:7a:9f:89:b7:99:
                    e0:9f:f9:53:ef:b9:a0:ac:49:29:00:1c:d3:93:6a:
                    04:da:f5:27:a5:69:32:cf:1c:40:77:be:c5:b6:6a:
                    55:fa:c2:a1:ee:7a:87:65:b1:a3:24:0e:71:40:ec:
                    a2:96:d5:1c:31:d0:62:02:0e:5d:de:96:03:4a:f2:
                    37:72:90:c4:fe:1e:ec:3a:a5:72:61:62:7d:91:12:
                    a2:08:61:11:99:3e:07:8a:5e:2e:9f:58:3d:03:9c:
                    52:8b:1b:ab:f1:1c:0c:23:55:6d:a1:ab:a0:aa:c8:
                    45:cc:3d:7e:32:22:bf:e1:3b:87:1b:75:f3:92:6a:
                    74:b0:35:04:ca:9f:f6:09:16:52:40:7b:db:7e:ed:
                    3b:38:56:6e:b8:81:0a:e9:ae:73:7c:f5:14:6d:7e:
                    16:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:EB:59:A3:DA:91:B2:73:AC:60:35:36:B2:DD:E1:DB:ED:7F:74:25
            X509v3 Authority Key Identifier:
                keyid:C6:26:58:32:98:57:8D:1D:4A:F7:27:3E:BD:79:1C:72:30:A3:74:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiZYMphXjR1K9yc-vXkccjCjdEk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:88:b0:98:41:36:0a:a3:28:7c:21:c1:00:ec:14:e6:60:0c:
         6a:84:bf:e5:1d:03:4f:58:f8:f0:38:8a:24:25:ce:a0:8a:ad:
         72:bb:d7:af:58:ce:65:84:2b:85:be:64:c5:86:83:81:6b:07:
         ad:c5:bf:5b:06:63:81:01:39:f9:f5:3d:c9:3b:05:63:60:53:
         ea:45:7c:85:95:ad:a0:66:42:cf:db:1b:40:be:aa:dd:82:62:
         ac:a4:bc:c2:ac:cb:47:05:35:bd:fd:24:86:d3:d8:bc:68:17:
         a5:cb:ee:71:95:1a:bb:2a:62:98:6e:9e:da:f9:46:1e:7d:34:
         65:01:93:0f:c1:34:df:8a:8f:13:4b:7a:ec:88:52:67:45:db:
         69:69:a8:1a:c9:49:a5:32:e1:33:74:f4:16:54:c8:3d:76:be:
         e6:c6:ac:21:a5:09:b1:00:ea:68:95:b5:ab:4f:b3:ff:6a:4b:
         c5:f2:56:39:ae:ef:8a:87:52:74:cd:72:a1:93:f6:01:e9:d2:
         4b:f9:64:9e:35:f3:1c:a2:3c:54:59:57:77:c2:0c:3f:57:6c:
         d9:b0:49:5b:73:b5:a0:04:8e:fb:dc:13:78:0e:17:26:d0:4d:
         3b:c0:c7:ae:2b:ac:f2:36:36:3a:0e:6e:b7:a9:d9:b5:57:80:
         71:c7:35:3c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTg2QzIxMTAvBgNVBAUTKEM2MjY1ODMyOTg1NzhEMUQ0QUY3MjczRUJENzkxQzcy
MzBBMzc0NDkwHhcNMjYwNDE3MDYwNTI1WhcNMjYwNDI0MDYwNTI1WjAYMRYwFAYD
VQQDEw02OWUxY2RhNi02YzQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzxFQbBz30anqAURtb2W7HJSkAMlT8TknpvGJ5u1G07y0koFH48UKiBYzPA6a
ajUDLhE+R/Uc/o3uSJWFUMHsau3JB8knnzxGBrinAWfwMSlDtaI6oMYqb8MxBGHh
IsFuO2B8ep+Jt5ngn/lT77mgrEkpABzTk2oE2vUnpWkyzxxAd77FtmpV+sKh7nqH
ZbGjJA5xQOyiltUcMdBiAg5d3pYDSvI3cpDE/h7sOqVyYWJ9kRKiCGERmT4Hil4u
n1g9A5xSixur8RwMI1VtoaugqshFzD1+MiK/4TuHG3Xzkmp0sDUEyp/2CRZSQHvb
fu07OFZuuIEK6a5zfPUUbX4WeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN3rWaPa
kbJzrGA1NrLd4dvtf3QlMB8GA1UdIwQYMBaAFMYmWDKYV40dSvcnPr15HHIwo3RJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODZDMi8xRDJGMDcyNEQx
N0YxMUVGQjM4NDY5MjhDNEY5QUUwMi94aVpZTXBoWGpSMUs5eWMtdlhrY2NqQ2pk
RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3hpWllNcGhYalIxSzl5Yy12WGtjY2pDamRFay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
ODZDMi8xRDJGMDcyNEQxN0YxMUVGQjM4NDY5MjhDNEY5QUUwMi94aVpZTXBoWGpS
MUs5eWMtdlhrY2NqQ2pkRWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqIiwmEE2CqMofCHBAOwU5mAMaoS/5R0DT1j48DiKJCXOoIqtcrvXr1jOZYQr
hb5kxYaDgWsHrcW/WwZjgQE5+fU9yTsFY2BT6kV8hZWtoGZCz9sbQL6q3YJirKS8
wqzLRwU1vf0khtPYvGgXpcvucZUauypimG6e2vlGHn00ZQGTD8E034qPE0t67IhS
Z0XbaWmoGslJpTLhM3T0FlTIPXa+5sasIaUJsQDqaJW1q0+z/2pLxfJWOa7viodS
dM1yoZP2AenSS/lknjXzHKI8VFlXd8IMP1ds2bBJW3O1oASO+9wTeA4XJtBNO8DH
rius8jY2Og5ut6nZtVeAccc1PA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:42:33 2026 by rpki-client