Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.mft
File:                     XTwWiWSSv8hwyKALZou_6VlF-No.mft (raw, json)
Hash identifier:          1BBG5lXMyLUiGR4bNDP/y/E7fFU4zMeEh+964sd0mJQ=
Subject key identifier:   4A:D2:4B:D3:1E:24:16:50:95:D9:D4:F0:77:93:78:13:DD:1E:1D:8C
Authority key identifier: 5D:3C:16:89:64:92:BF:C8:70:C8:A0:0B:66:8B:BF:E9:59:45:F8:DA
Certificate issuer:       /CN=A9136C7C/serialNumber=5D3C16896492BFC870C8A00B668BBFE95945F8DA
Certificate serial:       01F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTwWiWSSv8hwyKALZou_6VlF-No.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.mft
Manifest number:          01E0
Signing time:             Fri 17 Apr 2026 03:16:58 +0000
Manifest this update:     Fri 17 Apr 2026 03:16:58 +0000
Manifest next update:     Fri 24 Apr 2026 03:16:58 +0000
Files and hashes:         1: XTwWiWSSv8hwyKALZou_6VlF-No.crl (hash: X2VlsCf+qDXI+Bdm/sYBgX3hSF3sc7IFOrNSEVHAv6U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.crl
                          rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTwWiWSSv8hwyKALZou_6VlF-No.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:16:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 501 (0x1f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136C7C, serialNumber=5D3C16896492BFC870C8A00B668BBFE95945F8DA
        Validity
            Not Before: Apr 17 03:16:58 2026 GMT
            Not After : Apr 24 03:16:58 2026 GMT
        Subject: CN=69e1a62a-9c14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:64:78:8e:3c:99:f1:d1:39:9b:9d:77:4c:e9:
                    ba:2d:99:8d:4b:fe:e6:38:e7:8a:b6:59:72:cd:7f:
                    3d:64:d5:07:a4:2f:89:78:7a:8f:a6:14:e9:74:80:
                    7b:05:17:3e:1a:d5:a3:e2:45:51:dc:26:6e:e8:fb:
                    3e:81:d1:a9:32:6f:10:2b:17:52:d4:22:a8:68:0c:
                    d5:c5:4f:e5:d9:08:ca:72:df:b1:e0:50:b2:7a:6c:
                    9a:e5:6e:9d:f5:21:45:2e:6b:25:94:e3:15:c2:06:
                    09:06:b6:52:3f:5a:dc:c7:22:87:39:2c:2f:3b:6e:
                    1a:8a:f9:55:43:d8:93:c8:cb:4c:be:98:1a:f4:6d:
                    06:b3:9f:12:0f:fd:fb:a6:b5:e2:4a:43:91:10:98:
                    c9:78:63:61:ce:7c:c6:72:02:2d:8b:0c:c9:c5:e4:
                    8d:cd:f6:24:e5:49:03:2a:7d:f3:cf:df:c5:79:c7:
                    71:47:d4:79:ec:cd:32:7e:86:bd:2f:b1:35:bc:f7:
                    3d:e8:13:ac:31:23:fb:20:dd:8c:14:5a:9b:20:87:
                    2d:40:73:27:2a:ae:b6:de:79:a4:20:9f:d8:c8:7f:
                    bb:d3:94:0c:86:03:42:b3:94:97:0c:72:06:ac:f0:
                    2c:3a:d0:0c:64:4f:c8:28:c4:95:f8:51:08:af:eb:
                    84:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:D2:4B:D3:1E:24:16:50:95:D9:D4:F0:77:93:78:13:DD:1E:1D:8C
            X509v3 Authority Key Identifier:
                keyid:5D:3C:16:89:64:92:BF:C8:70:C8:A0:0B:66:8B:BF:E9:59:45:F8:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTwWiWSSv8hwyKALZou_6VlF-No.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:8d:9a:af:36:d5:96:a1:6c:23:8f:52:7d:32:7b:4a:4e:31:
         b7:f2:96:8f:58:56:00:62:42:58:27:8d:98:6a:3f:6c:14:07:
         23:bc:90:1d:4a:a4:f2:d2:7b:93:36:e6:f8:dd:c6:19:2b:86:
         d8:6c:b7:7d:c7:7c:45:04:4a:9d:35:58:be:16:4a:2d:78:de:
         b0:4a:0c:4a:4d:2b:2e:e9:91:1d:f5:9e:3c:b1:49:46:2e:01:
         55:15:44:f3:50:10:00:49:68:10:f3:e9:2c:fe:39:13:ec:b3:
         31:0c:82:0e:1f:3c:b7:b8:2f:4f:62:08:34:ce:7b:2f:51:54:
         97:22:cb:dd:5c:44:16:b3:11:e7:a6:ec:7c:01:f1:70:32:11:
         bf:2d:dc:3d:43:09:bc:67:16:7b:a8:46:72:41:80:f0:7f:10:
         87:4e:b3:da:8c:e1:80:4f:8c:bb:cc:ca:76:8a:7b:5a:ca:34:
         2c:3a:58:ae:5b:43:2f:be:ee:1b:16:b7:04:43:21:dc:e4:7e:
         41:f1:01:f6:28:d3:0d:bf:42:e1:ed:a8:85:5f:0a:8f:a0:5b:
         bd:b2:55:a1:ea:67:1a:a3:d1:d1:f0:ca:04:f7:3c:47:f4:7d:
         d7:08:52:5e:d1:89:62:48:8c:ed:a4:12:69:1e:92:53:85:9d:
         1b:08:da:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:01:03 2026 by rpki-client