Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft
File:                     XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft (raw, json)
Hash identifier:          3IjO9nQIDLu6hz89Vsor8TJ/+APk8TKGM9m2qZTCvx4=
Subject key identifier:   CC:A7:E4:4F:46:92:3B:32:E0:5F:3D:9A:79:15:D7:93:16:BB:46:6F
Authority key identifier: 5E:E7:CF:43:9A:42:23:23:29:82:A2:CB:4D:E5:4F:37:C7:20:5A:A9
Certificate issuer:       /CN=A913AE78/serialNumber=5EE7CF439A4223232982A2CB4DE54F37C7205AA9
Certificate serial:       07F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XufPQ5pCIyMpgqLLTeVPN8cgWqk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft
Manifest number:          07EE
Signing time:             Thu 16 Apr 2026 21:08:52 +0000
Manifest this update:     Thu 16 Apr 2026 21:08:52 +0000
Manifest next update:     Thu 23 Apr 2026 21:08:52 +0000
Files and hashes:         1: XufPQ5pCIyMpgqLLTeVPN8cgWqk.crl (hash: 9X6u9Zd5tEycnkdsyNLeJN8j13gzFTmdl3pam3jaOPE=)
                          2: D6138A3C292A11EB9CEDCC26C4F9AE02.roa (hash: A+lqHHILRck/15Y7Xtw67As0ESAMbuZbfeWoqwALbWQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.crl
                          rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XufPQ5pCIyMpgqLLTeVPN8cgWqk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:08:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2039 (0x7f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913AE78, serialNumber=5EE7CF439A4223232982A2CB4DE54F37C7205AA9
        Validity
            Not Before: Apr 16 21:08:52 2026 GMT
            Not After : Apr 23 21:08:52 2026 GMT
        Subject: CN=69e14fe4-6c38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f9:05:b8:9f:69:d4:0a:b4:89:9c:3b:48:ea:
                    2f:d7:fd:c2:ef:54:75:1b:2e:c2:13:a3:a2:fe:58:
                    92:3c:c5:c9:27:99:c5:46:ca:f1:e0:3e:ec:e8:57:
                    ee:1d:aa:bb:4a:2a:d8:7a:8c:f4:f6:a5:9d:6d:22:
                    25:ed:c1:92:b7:19:6e:a4:d1:61:1e:6c:ab:1d:09:
                    ab:3e:af:24:be:6b:b0:68:23:6f:de:8e:48:46:a2:
                    a0:fa:1e:27:33:e0:dd:2c:10:17:12:72:67:20:53:
                    0d:15:07:40:95:f2:1a:49:ae:b4:2e:57:db:23:c7:
                    fd:94:33:4e:18:91:6c:d9:56:ee:52:fc:6c:dd:a0:
                    cd:0e:ea:0a:f8:fd:16:86:a7:2e:75:fc:7a:38:b9:
                    6e:02:17:74:5d:2a:a5:45:20:5c:c5:f6:05:7d:4c:
                    42:9d:f6:a1:e6:a4:2a:64:d6:9c:11:e5:53:60:b0:
                    35:84:56:27:38:76:4a:2c:ef:66:32:61:0a:02:4f:
                    2f:cd:aa:7b:27:41:4a:62:e6:70:14:1b:4c:4b:23:
                    06:30:b5:05:82:f0:ae:0c:2e:98:1c:24:b9:1b:21:
                    55:ef:06:06:12:03:0c:56:cb:0c:76:77:9a:c9:22:
                    bc:c6:c5:c7:1a:d5:13:bb:0f:50:95:eb:62:18:09:
                    28:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A7:E4:4F:46:92:3B:32:E0:5F:3D:9A:79:15:D7:93:16:BB:46:6F
            X509v3 Authority Key Identifier:
                keyid:5E:E7:CF:43:9A:42:23:23:29:82:A2:CB:4D:E5:4F:37:C7:20:5A:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XufPQ5pCIyMpgqLLTeVPN8cgWqk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:0e:0e:c5:f1:6c:52:2c:f6:68:f8:ee:a3:e7:1a:c5:2d:b8:
         4f:81:6e:15:7d:30:68:68:16:39:0f:19:e2:97:da:78:14:7d:
         c8:77:c7:03:6d:78:7e:21:82:a4:2d:d6:55:d6:1f:f6:22:79:
         34:9d:06:00:83:4f:0b:66:b5:6a:70:47:67:51:09:67:6e:cf:
         eb:71:a5:82:f1:9e:cb:21:9a:60:20:7a:c2:d0:eb:2e:3b:e6:
         4b:b7:ca:55:c8:e7:4c:22:e1:28:23:4a:5c:cf:83:49:6c:2c:
         e0:bf:a7:f8:8e:0c:18:82:90:0d:24:dc:2d:b9:f1:f5:89:fa:
         1f:66:d6:10:a2:a2:46:95:81:61:86:be:f0:1e:f7:5b:39:c2:
         b5:88:cb:71:31:18:a5:06:93:38:47:99:02:df:61:c7:f1:63:
         10:4a:36:e7:ee:b6:cb:bd:c7:80:e5:45:85:09:de:ac:64:61:
         4e:40:b7:59:a9:a3:37:96:3a:4b:11:08:fa:60:d5:e4:5c:4c:
         fa:53:ba:67:f2:39:2d:4d:f3:11:29:9a:63:ca:87:3d:9b:49:
         a6:5c:3b:66:2a:e3:7f:cd:ad:e9:75:15:29:50:b3:fd:b0:3b:
         8a:a6:b4:83:e6:c0:cc:7e:49:de:fd:88:a8:db:3f:8c:47:5e:
         10:9d:1c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:53:46 2026 by rpki-client