Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BEA/F8320AA0280011F18E46364AB2833773/XMMwGYCNyWZ6vrfnNjnIyd8cxZQ.mft
File:                     XMMwGYCNyWZ6vrfnNjnIyd8cxZQ.mft (raw, json)
Hash identifier:          7KfTqKD5C/10/DEwF31LlEEy1h9ebm8EZAFgGKNB5eY=
Subject key identifier:   93:F3:A6:E8:C3:A4:D1:81:00:84:FC:DB:17:AC:62:F8:1D:DD:ED:42
Authority key identifier: 5C:C3:30:19:80:8D:C9:66:7A:BE:B7:E7:36:39:C8:C9:DF:1C:C5:94
Certificate issuer:       /CN=A9136BEA/serialNumber=5CC33019808DC9667ABEB7E73639C8C9DF1CC594
Certificate serial:       0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMMwGYCNyWZ6vrfnNjnIyd8cxZQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136BEA/F8320AA0280011F18E46364AB2833773/XMMwGYCNyWZ6vrfnNjnIyd8cxZQ.mft
Manifest number:          0E
Signing time:             Fri 17 Apr 2026 08:49:26 +0000
Manifest this update:     Fri 17 Apr 2026 08:49:25 +0000
Manifest next update:     Fri 24 Apr 2026 08:49:25 +0000
Files and hashes:         1: XMMwGYCNyWZ6vrfnNjnIyd8cxZQ.crl (hash: QAqr9B/uV2uJm6xoHkDPjB0tlC5aQoKmkkyXrgohMsg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136BEA/F8320AA0280011F18E46364AB2833773/XMMwGYCNyWZ6vrfnNjnIyd8cxZQ.crl
                          rsync://rpki.apnic.net/member_repository/A9136BEA/F8320AA0280011F18E46364AB2833773/XMMwGYCNyWZ6vrfnNjnIyd8cxZQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMMwGYCNyWZ6vrfnNjnIyd8cxZQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:49:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136BEA, serialNumber=5CC33019808DC9667ABEB7E73639C8C9DF1CC594
        Validity
            Not Before: Apr 17 08:49:25 2026 GMT
            Not After : Apr 24 08:49:25 2026 GMT
        Subject: CN=69e1f416-0f31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:33:53:cf:74:8f:f8:91:c4:41:73:9c:e2:34:
                    73:5f:49:5e:cc:f6:a7:17:5d:94:7e:f4:0e:82:d0:
                    04:97:36:30:e7:a9:84:dc:e4:55:40:be:7e:1b:a0:
                    e6:25:1a:6e:60:00:6a:02:ca:ea:a5:43:91:e5:96:
                    b7:a1:af:cd:6b:9e:25:3c:48:97:fd:40:a6:3f:74:
                    7b:4e:d3:0d:b0:7c:1b:51:28:7f:7c:7f:e7:a5:09:
                    e2:19:db:0a:83:1d:5c:60:b2:c6:02:34:34:bc:d9:
                    9b:44:e2:ef:02:77:51:a7:d9:d4:1c:24:35:dc:eb:
                    3d:82:63:ca:e1:02:0d:42:e6:d1:91:9d:d5:8d:bc:
                    51:9f:13:43:f8:da:e1:de:82:74:9b:8c:b2:f6:bb:
                    42:c7:ca:83:41:e1:07:ed:3a:db:2d:b7:59:9c:05:
                    c3:68:85:32:c0:ad:73:72:d6:7f:4a:bf:3c:04:1f:
                    4a:f2:84:8f:cb:1d:50:f2:49:8c:17:08:cc:d0:c6:
                    71:07:3b:e0:67:95:12:ea:21:bf:83:2b:a9:01:85:
                    16:73:36:81:7e:48:eb:41:da:6d:bf:d4:fd:7c:e3:
                    40:ac:81:7a:88:35:60:04:26:6d:f7:1a:95:c7:d1:
                    a1:b9:9c:7a:48:b9:50:b9:2a:98:db:6f:df:bb:96:
                    05:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:F3:A6:E8:C3:A4:D1:81:00:84:FC:DB:17:AC:62:F8:1D:DD:ED:42
            X509v3 Authority Key Identifier:
                keyid:5C:C3:30:19:80:8D:C9:66:7A:BE:B7:E7:36:39:C8:C9:DF:1C:C5:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136BEA/F8320AA0280011F18E46364AB2833773/XMMwGYCNyWZ6vrfnNjnIyd8cxZQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMMwGYCNyWZ6vrfnNjnIyd8cxZQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BEA/F8320AA0280011F18E46364AB2833773/XMMwGYCNyWZ6vrfnNjnIyd8cxZQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e5:3c:d7:ba:e1:a7:0b:b0:bf:ef:2d:62:86:46:92:b7:c6:a0:
         bc:88:c8:04:d4:b8:ea:fc:6f:fc:04:14:70:c9:51:41:75:35:
         cb:0e:bc:1f:3c:57:9e:3b:00:bc:48:96:90:83:12:44:0e:f0:
         66:71:af:80:c6:d1:e9:b3:dd:5e:15:de:7d:a6:51:2b:31:ce:
         34:e9:ee:f9:23:02:22:b5:64:e8:1c:d9:97:ec:42:43:b5:d9:
         4d:ac:08:f3:72:03:2d:8b:e6:8f:a2:9b:bf:8c:4c:01:3f:02:
         3d:11:72:12:59:58:bb:75:19:f2:55:1b:d3:f8:f0:4c:87:0f:
         dd:a8:c2:b0:d8:52:6c:23:b3:5d:4f:61:2f:15:92:26:7e:64:
         9b:08:51:15:25:d6:4f:52:01:5c:af:5e:27:0c:25:45:8f:79:
         99:f3:7f:89:31:bd:f8:4e:5f:16:e5:f7:90:a1:91:79:3d:aa:
         fa:a6:68:07:dd:f4:48:48:04:15:2e:db:6f:60:be:59:89:9b:
         cd:b0:5a:65:0c:10:59:00:90:a2:8f:96:49:ad:8d:3b:f3:d8:
         7f:64:d6:58:e7:80:5a:74:6a:ee:61:39:db:0a:ba:1e:66:46:
         86:0b:2d:ec:96:66:0e:05:77:ed:de:8e:ad:d0:90:09:48:52:
         95:36:26:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:09:41 2026 by rpki-client