Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft
File:                     xt42pOReepkfxET4yxtFXxdGLI0.mft (raw, json)
Hash identifier:          cuiMmR60BjSMfGTekFtGQMety+QwkrDTfmDLQbHDYgQ=
Subject key identifier:   A1:66:49:2D:62:8B:D6:BA:8F:A3:BD:71:2E:3E:9E:95:49:85:67:4F
Authority key identifier: C6:DE:36:A4:E4:5E:7A:99:1F:C4:44:F8:CB:1B:45:5F:17:46:2C:8D
Certificate issuer:       /CN=A913C311/serialNumber=C6DE36A4E45E7A991FC444F8CB1B455F17462C8D
Certificate serial:       AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xt42pOReepkfxET4yxtFXxdGLI0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft
Manifest number:          AD
Signing time:             Wed 15 Apr 2026 06:42:43 +0000
Manifest this update:     Wed 15 Apr 2026 06:42:42 +0000
Manifest next update:     Wed 22 Apr 2026 06:42:42 +0000
Files and hashes:         1: xt42pOReepkfxET4yxtFXxdGLI0.crl (hash: nwaeMbjC7vF9LbZMKCx0MsGWflSS2WyXfu0G+AN7hDY=)
                          2: AEE8CD702FCC11F09626645EC4F9AE02.roa (hash: ApjR/yfbHiS6jXTPW7Xd9Kqd62irjzHpZs9KCs6VuZM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.crl
                          rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xt42pOReepkfxET4yxtFXxdGLI0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 06:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175 (0xaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C311, serialNumber=C6DE36A4E45E7A991FC444F8CB1B455F17462C8D
        Validity
            Not Before: Apr 15 06:42:42 2026 GMT
            Not After : Apr 22 06:42:42 2026 GMT
        Subject: CN=69df3363-53db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ca:da:9b:c3:77:48:54:e0:af:fd:6e:32:3f:
                    eb:3a:57:d9:16:f7:3d:01:4d:43:af:b3:f2:b7:73:
                    19:30:15:c1:a4:a5:bf:43:aa:16:14:4e:b2:7f:ce:
                    cc:67:60:3e:54:b5:fe:ce:5f:ce:d5:a3:96:5d:99:
                    da:63:82:f7:f2:79:f2:1e:ca:6c:95:97:46:dd:94:
                    58:e3:3f:a3:2c:ea:32:30:90:41:47:c1:9f:8d:71:
                    13:ed:e3:72:56:ee:49:c0:09:13:1f:9d:08:b8:a8:
                    bc:ae:06:42:4d:83:d6:63:b8:1a:9c:b3:dc:c1:74:
                    46:62:b2:2b:81:19:83:9c:d8:eb:99:54:fc:60:3b:
                    4a:0b:c1:02:ef:a2:73:87:9c:68:dc:78:b9:69:e7:
                    95:0a:7b:3c:8f:ea:24:e7:85:20:60:b0:8f:f1:77:
                    ce:da:1f:68:57:f6:26:25:9d:70:db:da:d7:5a:55:
                    77:ff:e8:bb:aa:2c:84:2a:c3:67:aa:26:ad:e0:ac:
                    f2:d8:33:b9:2c:39:3b:27:23:61:ef:c9:98:fb:36:
                    7a:eb:d1:19:3f:5d:bb:f3:12:63:5e:1f:25:64:14:
                    8d:e8:a7:d3:b1:44:30:ef:71:d4:e1:56:e2:82:a9:
                    82:65:66:61:b0:1e:91:c8:d7:b7:70:15:83:49:1c:
                    00:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:66:49:2D:62:8B:D6:BA:8F:A3:BD:71:2E:3E:9E:95:49:85:67:4F
            X509v3 Authority Key Identifier:
                keyid:C6:DE:36:A4:E4:5E:7A:99:1F:C4:44:F8:CB:1B:45:5F:17:46:2C:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xt42pOReepkfxET4yxtFXxdGLI0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:9a:72:22:a9:8f:5f:70:96:c5:c8:19:17:72:91:33:df:40:
         a8:70:70:37:51:88:76:aa:d9:02:76:c7:eb:50:fe:bf:0b:2b:
         71:ce:cb:d2:ab:f2:4e:db:59:c5:0a:ac:2e:2b:88:21:fa:5a:
         82:64:f8:c4:4d:72:1a:80:32:50:9a:ee:a4:b1:5a:0e:ae:3a:
         c0:a1:c4:12:77:df:27:3f:ff:68:29:21:22:8e:f9:70:01:1d:
         27:7a:4f:fa:82:f1:04:52:c1:61:4f:02:20:da:8d:f1:de:6f:
         d0:bb:9a:64:aa:4a:9c:1d:30:62:b7:2a:cc:16:03:ea:d4:6a:
         81:c7:66:3a:62:c1:1a:eb:e0:da:07:10:8d:ee:42:bb:57:bb:
         a3:72:5a:ce:63:39:13:f7:42:0a:eb:6a:44:0d:52:fd:eb:b8:
         a6:d4:f9:08:2d:26:d5:13:ed:29:7d:02:84:1a:13:d5:0a:ab:
         d4:f2:ba:cb:a0:b0:3d:4a:07:88:d6:11:17:ff:69:cb:2e:88:
         85:29:a0:38:03:2c:ae:33:4b:36:30:62:53:8c:ea:00:74:c7:
         83:39:e0:80:76:b2:a7:96:fc:47:5b:8a:26:b4:80:c4:06:7c:
         8f:88:2f:d8:2f:0e:52:a3:1f:51:dc:3f:4e:68:b9:d9:58:95:
         49:24:f1:cc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0MzMTExMTAvBgNVBAUTKEM2REUzNkE0RTQ1RTdBOTkxRkM0NDRGOENCMUI0NTVG
MTc0NjJDOEQwHhcNMjYwNDE1MDY0MjQyWhcNMjYwNDIyMDY0MjQyWjAYMRYwFAYD
VQQDEw02OWRmMzM2My01M2RiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzcram8N3SFTgr/1uMj/rOlfZFvc9AU1Dr7Pyt3MZMBXBpKW/Q6oWFE6yf87M
Z2A+VLX+zl/O1aOWXZnaY4L38nnyHspslZdG3ZRY4z+jLOoyMJBBR8GfjXET7eNy
Vu5JwAkTH50IuKi8rgZCTYPWY7ganLPcwXRGYrIrgRmDnNjrmVT8YDtKC8EC76Jz
h5xo3Hi5aeeVCns8j+ok54UgYLCP8XfO2h9oV/YmJZ1w29rXWlV3/+i7qiyEKsNn
qiat4Kzy2DO5LDk7JyNh78mY+zZ669EZP1278xJjXh8lZBSN6KfTsUQw73HU4Vbi
gqmCZWZhsB6RyNe3cBWDSRwApwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKFmSS1i
i9a6j6O9cS4+npVJhWdPMB8GA1UdIwQYMBaAFMbeNqTkXnqZH8RE+MsbRV8XRiyN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzMxMS9GMUY3QUYyNjJG
QkYxMUYwOUE5MzYwNTdDNEY5QUUwMi94dDQycE9SZWVwa2Z4RVQ0eXh0Rlh4ZEdM
STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3h0NDJwT1JlZXBrZnhFVDR5eHRGWHhkR0xJMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QzMxMS9GMUY3QUYyNjJGQkYxMUYwOUE5MzYwNTdDNEY5QUUwMi94dDQycE9SZWVw
a2Z4RVQ0eXh0Rlh4ZEdMSTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABppyIqmPX3CWxcgZF3KRM99AqHBwN1GIdqrZAnbH61D+vwsrcc7L0qvyTttZ
xQqsLiuIIfpagmT4xE1yGoAyUJrupLFaDq46wKHEEnffJz//aCkhIo75cAEdJ3pP
+oLxBFLBYU8CINqN8d5v0LuaZKpKnB0wYrcqzBYD6tRqgcdmOmLBGuvg2gcQje5C
u1e7o3JazmM5E/dCCutqRA1S/eu4ptT5CC0m1RPtKX0ChBoT1Qqr1PK6y6CwPUoH
iNYRF/9pyy6IhSmgOAMsrjNLNjBiU4zqAHTHgznggHayp5b8R1uKJrSAxAZ8j4gv
2C8OUqMfUdw/Tmi52ViVSSTxzA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:24:28 2026 by rpki-client