Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft
File:                     xGxDuid9LBDufR7_PfDi78iFGh0.mft (raw, json)
Hash identifier:          dLUJ3Acg2ao2x4pj7uvyivTm0HnP1nDQAr5Jpy0QD24=
Subject key identifier:   6D:D5:6D:F1:A6:2A:91:DB:DB:32:D1:F4:FE:A3:B7:24:C7:49:C1:C2
Authority key identifier: C4:6C:43:BA:27:7D:2C:10:EE:7D:1E:FF:3D:F0:E2:EF:C8:85:1A:1D
Certificate issuer:       /CN=A913638A/serialNumber=C46C43BA277D2C10EE7D1EFF3DF0E2EFC8851A1D
Certificate serial:       0120
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft
Manifest number:          0117
Signing time:             Fri 17 Apr 2026 05:35:36 +0000
Manifest this update:     Fri 17 Apr 2026 05:35:35 +0000
Manifest next update:     Fri 24 Apr 2026 05:35:35 +0000
Files and hashes:         1: xGxDuid9LBDufR7_PfDi78iFGh0.crl (hash: Ty12elx9ERHn2LKXOmpC48tGTqPMknkvUqsnjZGJCcs=)
                          2: 9D7ED59A954711EF9830412DC4F9AE02.roa (hash: ekvUghltwWP4FQ66hV4j9tf5nEe4NKO+RhKkAq+FQXQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.crl
                          rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 288 (0x120)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913638A, serialNumber=C46C43BA277D2C10EE7D1EFF3DF0E2EFC8851A1D
        Validity
            Not Before: Apr 17 05:35:35 2026 GMT
            Not After : Apr 24 05:35:35 2026 GMT
        Subject: CN=69e1c6a8-8ba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b7:10:d2:80:da:de:80:2f:aa:25:aa:75:52:
                    20:96:75:ca:ff:c9:96:f7:64:fd:49:67:fc:3d:bf:
                    6f:61:ab:e5:8d:09:0c:34:23:52:35:c6:fd:e2:8e:
                    d8:71:dd:3e:45:05:da:ba:18:39:e4:21:a1:7d:51:
                    97:93:97:e6:e0:df:b9:f0:5b:24:ff:1b:27:b5:4d:
                    12:ec:23:cd:95:cc:d4:f5:04:96:7e:51:6c:0f:c2:
                    2e:b3:3f:57:a1:6b:b6:bd:0e:d7:07:9c:5b:7b:1f:
                    80:67:a1:0c:c0:52:24:d9:58:fc:55:9b:b8:37:50:
                    62:b4:b8:7a:ab:74:b5:2f:7b:c8:9a:35:76:e7:25:
                    38:cb:12:15:f2:2f:1f:6a:e0:d9:02:7d:8d:ac:db:
                    d9:05:d0:2c:ed:c3:cd:d2:0f:d4:fe:68:7d:9e:a0:
                    5b:91:05:9b:f9:2f:83:45:98:0f:3f:a4:d4:c0:81:
                    09:df:bf:2a:a9:56:ce:1b:d5:6d:96:5d:f1:e0:97:
                    d6:ee:2f:fe:d4:bf:79:8d:9d:a9:58:45:30:5f:df:
                    73:a9:1a:5d:9c:18:4a:5a:d1:f4:73:e4:68:40:8d:
                    d3:7d:53:13:6b:d7:31:f2:d1:af:11:fc:65:8a:ba:
                    ef:6d:4d:b5:0d:cf:79:e6:79:c3:0b:27:ab:f3:d9:
                    db:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D5:6D:F1:A6:2A:91:DB:DB:32:D1:F4:FE:A3:B7:24:C7:49:C1:C2
            X509v3 Authority Key Identifier:
                keyid:C4:6C:43:BA:27:7D:2C:10:EE:7D:1E:FF:3D:F0:E2:EF:C8:85:1A:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:12:a9:96:b2:22:53:2a:17:e9:65:0a:c8:a0:f8:ae:c5:f8:
         ea:5c:6c:23:9b:b9:05:78:25:1c:40:d4:e0:d4:6d:3c:bc:13:
         2b:4f:2c:62:8a:3c:e2:b9:ea:e2:22:aa:cf:88:6d:1a:c2:5a:
         72:f2:9c:75:5f:e3:b3:70:6a:37:cf:94:64:b0:be:ce:09:55:
         be:4d:11:49:66:77:72:6e:73:0c:c0:f5:f4:81:dd:78:67:92:
         bf:8d:4e:1d:fd:92:eb:c5:10:e6:08:37:b2:3c:81:4c:a8:af:
         79:44:b7:e8:50:d1:85:c5:76:e9:0d:8c:4d:ad:5f:75:3a:53:
         ed:31:ee:b5:d7:ee:cf:d9:00:44:e3:8b:5e:9a:e1:87:c5:3d:
         ba:b7:5c:e3:87:8c:b5:c2:64:25:4e:fa:c5:ee:1d:50:28:92:
         b5:10:75:39:34:9f:f0:c7:c1:67:25:ab:56:16:e5:df:64:a6:
         c7:1d:a1:70:4a:96:4a:ba:c5:11:de:0f:ef:b7:4a:ea:24:0a:
         55:c2:97:05:68:ee:4b:47:44:98:98:86:21:38:e9:cf:30:10:
         85:94:30:92:0b:89:b2:81:4f:5a:ab:f5:d0:6a:c6:48:96:e6:
         11:f3:07:51:fd:bd:99:d1:27:82:aa:2b:67:47:85:69:f9:8f:
         6b:ff:f4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:33:13 2026 by rpki-client