Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft
File:                     xA63gWRRh1SG2mQ_j5Nht337IaM.mft (raw, json)
Hash identifier:          sK7rVo1hTGuGKVtRCwAflmgVOiprO5uzIN2miDk9jt8=
Subject key identifier:   30:95:E7:F8:DF:75:99:B9:55:2A:35:75:80:7E:56:7B:99:84:C2:9B
Authority key identifier: C4:0E:B7:81:64:51:87:54:86:DA:64:3F:8F:93:61:B7:7D:FB:21:A3
Certificate issuer:       /CN=A9125590/serialNumber=C40EB7816451875486DA643F8F9361B77DFB21A3
Certificate serial:       3566
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft
Manifest number:          354B
Signing time:             Thu 16 Apr 2026 14:19:28 +0000
Manifest this update:     Thu 16 Apr 2026 14:19:28 +0000
Manifest next update:     Thu 23 Apr 2026 14:19:28 +0000
Files and hashes:         1: xA63gWRRh1SG2mQ_j5Nht337IaM.crl (hash: yRdamqH04/whB5Z3OpI/AKTIIfIHnp5vOhO0VpzKDYE=)
                          2: 26E02598562F11EB94FD0463C4F9AE02.roa (hash: w327Pi+TEmh3026Kes4gzOM+DtAPkeVB2eFJdQaVwbI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.crl
                          rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 14:19:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13670 (0x3566)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125590, serialNumber=C40EB7816451875486DA643F8F9361B77DFB21A3
        Validity
            Not Before: Apr 16 14:19:28 2026 GMT
            Not After : Apr 23 14:19:28 2026 GMT
        Subject: CN=69e0eff0-94c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bb:b7:d0:59:d3:5f:ee:bd:5b:b1:ef:ec:d4:
                    58:cf:ed:1c:95:3e:aa:ae:c9:b1:c4:5a:16:31:38:
                    26:1e:65:ee:60:46:fa:03:bc:44:12:03:f9:b9:25:
                    02:12:26:c7:de:47:30:03:96:95:16:fe:e6:5d:83:
                    7d:c2:37:ff:b6:99:a0:a8:31:58:18:db:74:8a:03:
                    d2:0a:a6:fa:13:cc:16:c1:85:49:0f:58:7b:6c:f7:
                    81:b9:d2:20:cb:6e:ae:90:4a:4e:38:91:7c:1a:97:
                    e0:33:26:d3:57:ad:d5:d4:12:d2:6a:0c:68:73:50:
                    15:e4:13:2f:dc:8d:e6:83:c2:d2:12:03:58:48:84:
                    95:0b:8a:cf:a9:07:bb:e8:e3:f7:e7:6b:37:49:4d:
                    a5:7e:16:54:90:d7:e5:0a:2d:ba:30:e5:81:ce:29:
                    9b:3d:a1:2a:ab:d2:d3:65:e1:ce:13:de:44:be:a2:
                    4a:06:12:a5:92:40:04:bf:9c:7c:8f:5b:ec:cd:6d:
                    52:40:6f:30:38:ee:91:47:50:ca:49:cf:9b:f3:2b:
                    5c:a5:cf:9f:c6:4d:f9:25:f0:dc:ff:44:f9:14:42:
                    60:43:23:49:75:eb:07:65:7d:35:39:44:af:e1:39:
                    64:11:4a:81:a3:7e:d0:95:aa:48:3d:40:b1:50:8e:
                    b2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:95:E7:F8:DF:75:99:B9:55:2A:35:75:80:7E:56:7B:99:84:C2:9B
            X509v3 Authority Key Identifier:
                keyid:C4:0E:B7:81:64:51:87:54:86:DA:64:3F:8F:93:61:B7:7D:FB:21:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:16:ca:fd:53:b5:52:42:85:9f:fe:82:7a:d6:8b:da:8d:b3:
         99:92:a4:77:e9:79:71:99:c3:04:18:00:61:f4:32:c1:61:b2:
         c5:60:c0:0d:59:a4:ef:bb:70:2d:48:5b:f2:0f:08:6b:53:c8:
         5d:05:c7:ed:04:02:c0:b7:e5:a7:41:11:a9:1c:53:a9:9d:15:
         bf:dc:c6:ea:96:58:11:f5:7b:3e:35:05:90:13:0a:c7:7f:cf:
         51:21:13:f0:bd:c3:5c:4f:e6:bb:a9:f4:2a:5a:2b:2d:c8:0b:
         2d:32:88:14:8c:51:85:83:57:d6:02:e0:41:78:ee:83:11:52:
         22:c2:9d:a8:33:35:f3:56:2f:be:3f:8a:5f:14:89:e4:40:8c:
         a0:d9:b5:a1:8d:7c:3a:01:65:ec:c0:db:02:57:c1:da:33:12:
         36:87:00:fb:57:7e:a1:06:54:31:fe:46:f0:7c:8f:10:e3:dd:
         a9:2a:0e:eb:a7:74:c4:6a:ec:62:b0:39:b1:fa:9d:d5:0d:92:
         9c:c9:a7:eb:dd:5d:d3:d3:38:3b:4f:86:50:fe:5b:46:18:dd:
         f7:2d:a8:3f:5d:86:34:3d:7d:63:df:27:8e:43:47:63:12:bc:
         67:ef:cd:9a:87:1c:06:40:59:a2:a5:38:cf:b4:bb:9e:67:6d:
         7c:35:19:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:17:28 2026 by rpki-client