Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.mft
File:                     7xqW0RLeFiKxHIx-lK6wQO3WqwA.mft (raw, json)
Hash identifier:          Anfe9qYn3GJBGhaTEnSd50uyRVItPrq1ubB3Rp+u4tY=
Subject key identifier:   EB:58:04:4B:4F:F3:04:40:14:E2:00:A8:FC:C0:6E:C1:40:66:4F:9A
Authority key identifier: EF:1A:96:D1:12:DE:16:22:B1:1C:8C:7E:94:AE:B0:40:ED:D6:AB:00
Certificate issuer:       /CN=A9136D8B/serialNumber=EF1A96D112DE1622B11C8C7E94AEB040EDD6AB00
Certificate serial:       087F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7xqW0RLeFiKxHIx-lK6wQO3WqwA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.mft
Manifest number:          0876
Signing time:             Thu 16 Apr 2026 20:35:10 +0000
Manifest this update:     Thu 16 Apr 2026 20:35:09 +0000
Manifest next update:     Thu 23 Apr 2026 20:35:09 +0000
Files and hashes:         1: 7xqW0RLeFiKxHIx-lK6wQO3WqwA.crl (hash: xatskf+hbJmQ0JuEDqgREJOoRzkgWU4PsheQAeFGuew=)
                          2: D3EE2024F42211EA8FE7AE53C4F9AE02.roa (hash: Sm8cDlO+Bn4wmHjiuhnBl2Ebz4v6i98Fbv6/A7UD98o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.crl
                          rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7xqW0RLeFiKxHIx-lK6wQO3WqwA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:35:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2175 (0x87f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136D8B, serialNumber=EF1A96D112DE1622B11C8C7E94AEB040EDD6AB00
        Validity
            Not Before: Apr 16 20:35:09 2026 GMT
            Not After : Apr 23 20:35:09 2026 GMT
        Subject: CN=69e147fe-4101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:86:50:53:32:cb:f3:2a:d0:a0:ac:5e:58:8b:
                    fb:e0:8f:b2:f7:6a:62:82:fd:bb:86:12:ca:bb:1d:
                    d5:f8:84:1b:f3:7b:8b:74:5f:f1:37:92:36:46:d5:
                    fa:b6:5d:60:4b:a7:96:23:63:2e:e0:45:e6:f1:f9:
                    92:ed:3a:a8:0f:fb:42:10:f1:e0:ab:8b:ea:8c:54:
                    46:aa:0e:14:80:fc:45:d0:64:e6:c5:61:dd:91:ba:
                    fb:b3:09:8a:fd:82:e5:6b:61:73:4a:f9:4c:13:3e:
                    7f:24:7b:b3:ff:9c:8f:d0:02:9a:e7:d7:cc:e2:32:
                    cd:1d:45:ae:e2:7c:9f:3b:2b:28:40:45:8a:bf:4b:
                    73:13:98:d8:0e:95:fb:13:28:c6:30:41:6b:a8:56:
                    2e:97:20:cc:92:e0:3d:cd:63:16:b3:23:9c:97:5d:
                    bb:73:80:a6:93:20:e1:01:60:8e:fe:9a:51:ed:61:
                    4f:5f:9d:fd:51:a6:15:56:48:41:63:4f:08:a0:66:
                    0a:17:ec:52:a7:bd:4e:76:81:b3:a7:3c:51:f8:ff:
                    b0:1f:36:03:11:04:9e:54:45:42:bf:84:9b:5d:89:
                    e9:8f:4e:1c:fd:17:46:77:35:30:03:3a:9f:f2:e5:
                    59:56:fe:07:71:bc:a9:6c:e0:66:c5:a2:2f:e7:cb:
                    53:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:58:04:4B:4F:F3:04:40:14:E2:00:A8:FC:C0:6E:C1:40:66:4F:9A
            X509v3 Authority Key Identifier:
                keyid:EF:1A:96:D1:12:DE:16:22:B1:1C:8C:7E:94:AE:B0:40:ED:D6:AB:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7xqW0RLeFiKxHIx-lK6wQO3WqwA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:f9:2d:50:82:fa:c7:d3:44:b1:91:a2:dd:72:34:a5:4c:3d:
         0d:81:d6:bf:27:4f:d4:4e:1d:d8:c1:01:72:31:81:b0:a8:9c:
         e0:76:02:b4:ce:74:88:f0:83:f4:47:cf:1c:39:f8:ba:f1:4f:
         e2:9c:45:20:ab:47:44:f9:59:e3:29:ae:56:12:f6:ff:1f:5d:
         27:91:3e:fe:e1:cc:fe:8c:ac:e0:4e:0d:6f:3d:26:f9:e0:c9:
         9c:53:d0:b5:5d:25:e5:be:3c:0f:b6:40:1d:51:c5:05:97:5c:
         f0:09:a1:2d:67:d5:86:b9:7d:0e:9a:8c:c5:59:f1:44:e6:34:
         f4:f9:a3:8c:2a:95:af:e3:71:ae:ee:94:6c:70:36:35:27:fb:
         d4:e1:ee:70:14:95:04:b6:54:d4:1b:40:d6:6f:fe:fa:19:8b:
         49:24:58:89:ad:76:27:cd:5e:54:8e:4f:3a:15:b2:7d:20:dc:
         b1:a0:e8:a4:c5:3d:4c:f6:2e:9a:ce:e0:84:a2:75:8a:2d:37:
         84:e3:47:e3:58:32:ca:93:bf:ee:e1:f3:a7:05:00:1f:1b:43:
         f8:9f:45:96:c8:80:f9:19:b0:56:84:7c:3a:87:57:48:cd:67:
         35:89:8d:0c:86:49:06:6a:8c:54:db:d8:64:1e:c7:ca:e4:2f:
         ee:2a:b6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:10:55 2026 by rpki-client