Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.mft
File:                     RxkmQvqTOGbRd55eOPq_Vscx-6c.mft (raw, json)
Hash identifier:          9Q1bPKFZeulWaAYCzKJeSxx9lBS9K32QbySjEqHVsH8=
Subject key identifier:   E9:97:96:AE:25:AA:30:EB:E3:4C:17:A8:78:11:29:10:03:52:0E:A1
Authority key identifier: 47:19:26:42:FA:93:38:66:D1:77:9E:5E:38:FA:BF:56:C7:31:FB:A7
Certificate issuer:       /CN=A91284F0/serialNumber=47192642FA933866D1779E5E38FABF56C731FBA7
Certificate serial:       0AEA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxkmQvqTOGbRd55eOPq_Vscx-6c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.mft
Manifest number:          0AC5
Signing time:             Thu 16 Apr 2026 19:22:37 +0000
Manifest this update:     Thu 16 Apr 2026 19:22:37 +0000
Manifest next update:     Thu 23 Apr 2026 19:22:37 +0000
Files and hashes:         1: RxkmQvqTOGbRd55eOPq_Vscx-6c.crl (hash: rjV7ekA0W0r2GtVyPTMd7+Ml3dELsZWzPPmMz8SLFIs=)
                          2: 426DB414718E11EA9F6FA85CC4F9AE02.roa (hash: uc2qcNB8l7xT1ZuFXX3eceO3rKMlz70tmK0IYsPapEk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.crl
                          rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxkmQvqTOGbRd55eOPq_Vscx-6c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2794 (0xaea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91284F0, serialNumber=47192642FA933866D1779E5E38FABF56C731FBA7
        Validity
            Not Before: Apr 16 19:22:37 2026 GMT
            Not After : Apr 23 19:22:37 2026 GMT
        Subject: CN=69e136fd-a1d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:59:bb:be:06:dd:c2:fb:81:af:02:c0:fc:98:
                    63:38:4a:25:1a:f6:fd:41:d3:18:ff:d4:49:d4:a7:
                    6f:76:35:73:81:e6:61:ba:b3:15:93:02:f9:ee:08:
                    56:24:e1:ba:1d:99:52:c9:18:ed:61:7e:f7:30:c5:
                    09:bb:99:59:65:78:de:e1:ff:5f:f2:fc:62:b3:d0:
                    5e:80:5b:27:d8:2d:a9:ae:8f:00:dd:52:95:2d:55:
                    07:1b:af:57:f6:68:6e:69:3a:10:81:51:c1:f3:f1:
                    92:ba:84:ff:02:a2:da:1d:6a:37:12:e5:83:09:b8:
                    27:d4:3b:e3:61:53:03:e4:9e:eb:c0:b2:a5:dc:f8:
                    7c:5d:12:f9:46:cf:7b:bd:8c:39:3f:cf:7d:7a:d5:
                    1e:f6:5a:78:ea:ee:ad:71:06:9e:d8:2f:ce:29:22:
                    0f:16:23:f3:27:6e:83:18:ee:16:66:f5:31:0c:8a:
                    02:36:61:aa:fd:1b:5e:b2:da:88:dc:23:78:f3:8c:
                    95:49:58:54:45:04:8f:7d:bf:1e:6e:de:ea:dc:51:
                    9e:36:0f:04:a4:a0:7f:25:31:e8:c5:6f:e7:41:01:
                    fe:51:be:ec:c4:cf:41:18:d3:c8:26:52:43:02:5e:
                    41:91:6c:98:13:3d:3a:d3:d9:56:48:f3:ed:63:22:
                    0a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:97:96:AE:25:AA:30:EB:E3:4C:17:A8:78:11:29:10:03:52:0E:A1
            X509v3 Authority Key Identifier:
                keyid:47:19:26:42:FA:93:38:66:D1:77:9E:5E:38:FA:BF:56:C7:31:FB:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxkmQvqTOGbRd55eOPq_Vscx-6c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:5d:0f:8b:37:4d:68:47:19:68:13:53:8d:57:e6:2a:90:2f:
         ec:b4:5b:30:60:ba:dd:db:1c:67:90:ee:e2:34:b1:74:2f:26:
         2e:25:82:36:d8:7e:e7:fc:ee:83:48:d3:45:9f:7a:53:8d:b6:
         20:e8:f3:7b:8a:f2:ee:1b:10:ec:91:10:56:f6:50:10:aa:05:
         a2:11:f6:82:f7:9f:6f:ef:12:83:77:da:7b:60:79:28:bd:d6:
         1d:92:5e:f8:35:b5:fc:77:9c:cd:96:de:1b:44:1d:08:da:5a:
         2a:74:05:3a:48:2c:a7:ba:0d:9f:3a:ac:50:3b:fa:53:ee:7e:
         05:3d:9e:05:eb:a0:1d:e3:91:82:33:9e:b9:9b:7d:af:42:f8:
         6e:4e:af:e7:6b:09:04:97:ac:d6:7a:c6:7e:28:32:eb:ac:2a:
         44:d5:4c:57:ab:d9:bf:5c:1d:7d:eb:b2:89:0a:de:1c:5e:cf:
         2c:f0:28:1b:7b:6d:47:26:d7:53:51:76:55:ee:b3:bb:77:cd:
         e0:3d:ff:2c:fc:1b:65:43:e5:9e:bc:8f:9c:78:57:34:09:6d:
         20:a0:19:c5:d4:41:7b:c2:c8:e1:46:b5:12:c0:b8:cc:5b:76:
         d0:17:f2:dd:0e:7c:90:0b:30:11:97:e1:ad:3f:82:6a:f7:47:
         5b:29:37:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:47:41 2026 by rpki-client