Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft
File:                     xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft (raw, json)
Hash identifier:          1+Qer2/+htSvmkHakYaH9SBfjMg5EpkZwuVJI1jKe9I=
Subject key identifier:   AD:BD:35:8A:11:38:44:39:DC:C0:5A:2E:0B:53:92:7F:ED:FD:4C:E5
Authority key identifier: C6:38:92:FD:AD:94:3F:25:FA:39:68:41:BB:77:3D:A1:5F:70:06:84
Certificate issuer:       /CN=A91308E4/serialNumber=C63892FDAD943F25FA396841BB773DA15F700684
Certificate serial:       0774
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft
Manifest number:          075F
Signing time:             Thu 16 Apr 2026 21:36:57 +0000
Manifest this update:     Thu 16 Apr 2026 21:36:56 +0000
Manifest next update:     Thu 23 Apr 2026 21:36:56 +0000
Files and hashes:         1: xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl (hash: ZYuV6U37RaWsmI6Xh7b/6rAbNyBk3avIqEsGBm+i8Rs=)
                          2: 801F61DCC1E111EBB27A0812C4F9AE02.roa (hash: FGwdEm0SPNy0TpBINVzEc/flFNni0xPCsSoqxUh+Nr0=)
                          3: 79520888650611EBA9BB2882C4F9AE02.roa (hash: /W4EDzCJO28OAsl3pdvhn80k2j9lIQ5KcY8vtvKyWxM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl
                          rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:36:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1908 (0x774)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91308E4, serialNumber=C63892FDAD943F25FA396841BB773DA15F700684
        Validity
            Not Before: Apr 16 21:36:56 2026 GMT
            Not After : Apr 23 21:36:56 2026 GMT
        Subject: CN=69e15679-a9c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:67:1c:eb:49:d7:96:cd:1a:cd:f6:ad:41:b7:
                    63:96:d4:48:4b:02:22:75:75:e1:b3:bb:cc:ea:5c:
                    2c:c5:ef:4d:cc:36:91:7d:75:d5:2e:f9:36:48:02:
                    fe:76:06:6d:73:dd:49:ee:b1:d4:28:d4:d9:94:37:
                    62:a9:69:b1:d5:b7:61:0a:e5:79:55:44:71:99:05:
                    b6:4f:3b:ac:65:44:7c:4d:74:40:f4:3c:85:4f:60:
                    87:df:8d:73:91:69:78:7c:ee:cc:43:be:71:5d:42:
                    3a:2a:de:d2:b4:8d:02:87:62:f5:65:ac:f4:5d:8b:
                    85:05:7a:07:ac:49:fd:c6:0f:86:99:0c:dd:98:94:
                    74:b0:f8:a7:f1:fe:c1:8d:d9:d5:a8:16:d9:60:14:
                    72:8b:aa:b4:47:86:9a:55:0f:fc:f7:5b:58:29:74:
                    5a:73:3a:4a:dc:ee:cd:ab:c3:d0:ff:8e:dd:e3:e9:
                    98:8f:a4:ca:8c:1b:83:72:dd:bc:9c:dd:c6:4e:d7:
                    f3:ef:e5:7d:4c:ba:9f:55:95:88:c7:cd:a9:ea:2e:
                    5c:89:7c:fd:42:94:7d:fe:25:ca:fa:ca:2d:89:7d:
                    37:3a:6e:d5:9e:c3:aa:67:7a:96:06:22:08:f1:85:
                    d7:53:92:3c:95:3e:5e:32:4c:b8:3d:1f:7f:c8:59:
                    52:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:BD:35:8A:11:38:44:39:DC:C0:5A:2E:0B:53:92:7F:ED:FD:4C:E5
            X509v3 Authority Key Identifier:
                keyid:C6:38:92:FD:AD:94:3F:25:FA:39:68:41:BB:77:3D:A1:5F:70:06:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:fc:02:64:93:50:94:c9:00:a1:43:d4:96:c2:a2:91:93:15:
         5a:ee:90:f8:8d:b2:70:7e:23:a6:09:bb:55:1a:ed:78:18:61:
         05:7d:e7:db:79:ba:93:f3:0b:61:86:d6:56:37:76:06:44:f9:
         7b:bb:65:36:c6:ea:68:48:6b:6a:f7:d5:aa:d4:ba:cc:dc:53:
         74:43:70:53:64:4f:71:9e:7e:01:53:20:a8:77:1b:1f:07:91:
         52:6e:89:5c:6c:b6:6f:41:23:99:98:c5:32:2e:67:a3:0f:af:
         a5:bd:eb:c2:39:06:40:8a:7d:a5:51:1c:c4:b9:23:5f:42:d7:
         c5:a5:2e:2b:ff:bf:d9:57:44:70:eb:ab:fc:bd:75:e9:2e:fb:
         e7:0a:7e:c3:f2:83:9d:13:4d:76:bc:98:db:5d:cc:60:37:87:
         bb:86:0f:72:f3:6d:fe:2f:13:f0:be:f3:22:25:a8:75:99:6d:
         7f:f9:5e:8b:e2:48:a0:f5:51:8d:a1:62:49:e1:62:2d:36:2e:
         a9:97:c4:6c:a1:f1:01:dc:b6:3f:12:57:4a:b8:cb:7d:fb:dc:
         cf:96:49:52:25:1b:fa:0c:2f:51:5e:08:20:ca:8f:fd:a4:2e:
         eb:99:b6:bf:40:26:e4:3b:c0:3a:b7:ac:f4:00:8e:c5:e5:cd:
         81:46:81:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:12:18 2026 by rpki-client