Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/XQ11AElW7cyrm4QnGnNA5jhV_4o.mft
File:                     XQ11AElW7cyrm4QnGnNA5jhV_4o.mft (raw, json)
Hash identifier:          mHUwB/4fWvnwwV2+SKe47vP/qJ3HYVw1JIIPzy0kxSk=
Subject key identifier:   0B:93:2C:78:FB:37:15:B5:3D:74:19:5F:69:C4:A4:C3:F0:EC:11:89
Authority key identifier: 5D:0D:75:00:49:56:ED:CC:AB:9B:84:27:1A:73:40:E6:38:55:FF:8A
Certificate issuer:       /CN=A912BC39/serialNumber=5D0D75004956EDCCAB9B84271A7340E63855FF8A
Certificate serial:       07C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XQ11AElW7cyrm4QnGnNA5jhV_4o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/XQ11AElW7cyrm4QnGnNA5jhV_4o.mft
Manifest number:          07B7
Signing time:             Thu 16 Apr 2026 21:21:34 +0000
Manifest this update:     Thu 16 Apr 2026 21:21:34 +0000
Manifest next update:     Thu 23 Apr 2026 21:21:34 +0000
Files and hashes:         1: XQ11AElW7cyrm4QnGnNA5jhV_4o.crl (hash: QxmmqRlf7wfReCSc25n/mp3BSe9JH7L3haqzA3NYS0A=)
                          2: 8EBA772E3F2B11EB87759716C4F9AE02.roa (hash: rRI5YNBN8BFJj5LVMQ9i0QefTh7uLQfpdIvxJ+hQ5Wc=)
                          3: 688EAE1E8A1911EC94921D85C4F9AE02.roa (hash: PSZyKZNLeC+ynTVNPefbaajpAUQPkgVzephvNIxcZqc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/XQ11AElW7cyrm4QnGnNA5jhV_4o.crl
                          rsync://rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/XQ11AElW7cyrm4QnGnNA5jhV_4o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XQ11AElW7cyrm4QnGnNA5jhV_4o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:21:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1993 (0x7c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BC39, serialNumber=5D0D75004956EDCCAB9B84271A7340E63855FF8A
        Validity
            Not Before: Apr 16 21:21:34 2026 GMT
            Not After : Apr 23 21:21:34 2026 GMT
        Subject: CN=69e152de-bc44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2d:e2:3c:97:4c:35:f5:46:8e:7d:5c:3f:4f:
                    3c:ce:09:d4:ee:81:1c:cb:c9:c0:c5:40:b8:bb:17:
                    4a:14:4c:31:d4:6c:a1:bf:35:6f:67:fe:e9:73:c1:
                    a9:a2:97:1b:74:f3:06:01:52:82:5b:eb:fe:3a:e7:
                    d9:1f:2f:5f:25:f2:7c:52:96:44:1c:c0:73:28:94:
                    1a:b6:88:bc:11:2f:1f:4f:a8:da:30:e3:a7:93:4a:
                    a1:1c:0b:60:75:20:90:2b:6e:60:5f:b4:5b:7b:53:
                    67:eb:c2:e9:37:26:12:a1:fe:71:39:42:3e:e3:f5:
                    84:03:ad:6c:6c:d8:9f:a3:83:41:f8:56:74:7f:80:
                    24:67:62:d1:f3:e7:d5:43:a4:49:36:92:41:c8:55:
                    e4:cc:ed:5f:08:94:f2:d0:76:b1:1d:8f:bc:65:4d:
                    5b:0b:5b:95:17:1e:48:79:30:30:41:8b:99:99:4b:
                    4d:91:fd:e8:ad:a5:97:d9:a1:c0:0d:38:c5:23:ee:
                    fb:f4:ee:f1:7c:0f:59:0b:97:5d:03:57:73:1e:f2:
                    56:c7:39:b2:45:34:da:ef:88:43:00:d3:25:92:7e:
                    c9:3a:88:41:39:09:0c:5a:e3:18:58:5b:32:94:09:
                    43:b2:1d:19:24:31:2b:c1:3a:2d:54:f5:7d:5f:d0:
                    84:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:93:2C:78:FB:37:15:B5:3D:74:19:5F:69:C4:A4:C3:F0:EC:11:89
            X509v3 Authority Key Identifier:
                keyid:5D:0D:75:00:49:56:ED:CC:AB:9B:84:27:1A:73:40:E6:38:55:FF:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/XQ11AElW7cyrm4QnGnNA5jhV_4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XQ11AElW7cyrm4QnGnNA5jhV_4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/XQ11AElW7cyrm4QnGnNA5jhV_4o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:59:fe:01:1f:3f:80:86:c3:8e:33:39:5d:97:e6:2e:da:fd:
         ff:d8:a9:b0:4b:e7:7e:42:f3:fa:d4:76:44:db:b5:09:15:c1:
         6a:fb:04:6a:74:9b:e3:06:90:f2:3d:0e:02:9d:a5:2b:ae:d0:
         bf:0c:15:39:f0:a2:f2:78:d5:19:f7:27:eb:4b:bd:10:6f:ff:
         f7:ab:db:60:7a:cf:85:cc:32:3e:0e:f2:b5:b2:6f:14:e7:f7:
         02:02:e1:c9:f6:70:f2:a3:2f:6b:64:34:19:dd:75:e9:ad:6e:
         8c:0d:8e:79:b5:bd:60:ac:26:e5:a6:9f:cc:31:cc:60:eb:17:
         81:c5:ad:3c:11:54:e2:08:43:19:ff:bd:08:4e:64:f0:a4:fb:
         4b:9f:0d:99:cd:df:91:3f:47:16:3c:58:03:07:95:45:f5:e4:
         17:68:58:68:45:b4:83:dd:cc:9d:22:e1:48:f1:6d:cd:8f:c6:
         7f:bc:a3:8e:4c:ec:cc:e1:11:ac:23:ef:34:c1:76:5c:14:cd:
         d0:99:9c:e8:f3:f8:04:fc:f6:7a:c1:55:58:5c:d4:fd:af:bd:
         06:43:3a:64:9d:8b:ec:92:5a:e4:1e:6f:a6:2f:91:fe:04:3e:
         39:c4:98:ca:5a:f5:53:32:59:2f:92:47:02:0b:e3:ac:98:9f:
         ed:93:5a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:48:05 2026 by rpki-client