Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.mft
File:                     xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.mft (raw, json)
Hash identifier:          X0H62/R0FXwND8cSBXKiBDU+TC0+q66IOvUayM+mq/k=
Subject key identifier:   0F:41:76:89:6B:61:68:0D:0D:59:F0:7F:7E:61:68:33:D7:F9:B4:BA
Authority key identifier: C4:43:9D:C0:1E:20:D1:6C:C5:A0:EF:98:17:D4:1B:F6:28:97:65:24
Certificate issuer:       /CN=A913EF9C/serialNumber=C4439DC01E20D16CC5A0EF9817D41BF628976524
Certificate serial:       ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.mft
Manifest number:          ED
Signing time:             Fri 17 Apr 2026 06:07:07 +0000
Manifest this update:     Fri 17 Apr 2026 06:07:07 +0000
Manifest next update:     Fri 24 Apr 2026 06:07:07 +0000
Files and hashes:         1: xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.crl (hash: 8yUOQLWDoeWjvhjuySak4txwdiwbsThuyrOB1Udniyw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.crl
                          rsync://rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 237 (0xed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913EF9C, serialNumber=C4439DC01E20D16CC5A0EF9817D41BF628976524
        Validity
            Not Before: Apr 17 06:07:07 2026 GMT
            Not After : Apr 24 06:07:07 2026 GMT
        Subject: CN=69e1ce0b-75ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:41:87:4a:83:de:fc:52:b1:3b:68:34:f5:88:
                    0b:64:83:bf:75:ea:31:d0:df:dc:3f:88:35:1a:5c:
                    e7:21:29:a1:e6:0a:dd:d3:fd:56:b0:94:05:a1:5a:
                    be:d4:46:ee:cc:65:d4:b2:a7:c3:bd:72:52:26:83:
                    27:86:b8:e8:68:5e:aa:24:1e:6a:cd:d2:98:b0:1a:
                    99:2f:78:e6:6b:66:9a:07:55:6f:9f:92:7c:0d:12:
                    c4:ff:da:31:39:16:52:5a:60:ff:25:99:8a:4b:9f:
                    43:ab:88:b4:a2:ff:1c:b3:d6:6e:e2:b5:76:02:5d:
                    d4:52:fb:16:ac:5a:f3:3d:1e:c6:9f:a9:7a:ac:fd:
                    30:86:84:5b:78:1d:91:f9:ae:b8:c2:60:2d:66:71:
                    14:50:d4:d9:91:f9:87:bc:79:8b:97:5f:e8:07:7d:
                    09:7b:51:fe:18:cd:65:9f:ed:d7:dd:e7:05:fa:34:
                    dd:5b:ec:8f:27:a2:2f:27:3d:e4:82:9a:4b:12:28:
                    ba:41:1f:69:77:d1:ed:2c:5f:c5:89:a7:c8:fa:b0:
                    1c:66:f5:c4:a3:ba:8d:bd:d7:26:76:05:d2:78:26:
                    d3:d8:0b:e1:32:46:7b:69:74:69:8f:79:97:e0:ae:
                    af:34:cd:70:1b:25:b3:34:04:82:4a:d4:6a:8d:83:
                    7b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:41:76:89:6B:61:68:0D:0D:59:F0:7F:7E:61:68:33:D7:F9:B4:BA
            X509v3 Authority Key Identifier:
                keyid:C4:43:9D:C0:1E:20:D1:6C:C5:A0:EF:98:17:D4:1B:F6:28:97:65:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:3c:38:48:93:49:fb:b5:5d:b8:ca:0b:b3:3b:82:4e:c1:82:
         69:f1:27:d0:e8:0c:21:bd:63:67:c9:fb:eb:40:9a:33:80:8f:
         8e:5f:6b:cf:e7:4a:fc:1e:d0:8a:6d:63:d0:6e:39:57:29:ac:
         fd:e5:0f:53:28:a7:5b:93:3b:cb:45:16:e3:3a:ed:5f:b0:e3:
         c5:e9:4e:6b:8f:b3:d4:48:db:25:f4:c8:50:ad:56:c4:81:67:
         df:fa:92:71:5a:f6:98:5b:25:51:83:b9:5e:d5:39:f8:fa:cc:
         11:92:f9:e2:d3:1b:da:bb:16:b0:dd:a1:d5:80:33:c8:14:c7:
         fc:6b:a1:6c:92:9c:34:9a:51:f6:87:59:d6:80:98:5b:b0:39:
         f2:ab:e6:1d:9f:9b:78:46:ad:8f:86:5d:90:50:0b:95:67:8f:
         71:af:6a:95:9e:00:df:50:c3:db:50:ea:d4:8d:78:3d:57:25:
         29:e1:74:6a:0b:cc:ec:9b:33:06:00:c4:c7:d3:7b:84:76:c5:
         f2:83:f0:65:7d:24:b1:93:b4:f4:5d:39:ae:12:e9:a7:d7:e1:
         61:5b:18:8e:86:ef:bd:3c:55:b0:33:97:38:cf:3b:ce:fa:30:
         e3:fb:20:63:21:76:41:8e:5d:5b:3d:dc:10:48:8f:32:5e:7d:
         fd:7d:fc:fd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0VGOUMxMTAvBgNVBAUTKEM0NDM5REMwMUUyMEQxNkNDNUEwRUY5ODE3RDQxQkY2
Mjg5NzY1MjQwHhcNMjYwNDE3MDYwNzA3WhcNMjYwNDI0MDYwNzA3WjAYMRYwFAYD
VQQDEw02OWUxY2UwYi03NWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlUGHSoPe/FKxO2g09YgLZIO/deox0N/cP4g1GlznISmh5grd0/1WsJQFoVq+
1EbuzGXUsqfDvXJSJoMnhrjoaF6qJB5qzdKYsBqZL3jma2aaB1Vvn5J8DRLE/9ox
ORZSWmD/JZmKS59Dq4i0ov8cs9Zu4rV2Al3UUvsWrFrzPR7Gn6l6rP0whoRbeB2R
+a64wmAtZnEUUNTZkfmHvHmLl1/oB30Je1H+GM1ln+3X3ecF+jTdW+yPJ6IvJz3k
gppLEii6QR9pd9HtLF/FiafI+rAcZvXEo7qNvdcmdgXSeCbT2AvhMkZ7aXRpj3mX
4K6vNM1wGyWzNASCStRqjYN7NQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA9Bdolr
YWgNDVnwf35haDPX+bS6MB8GA1UdIwQYMBaAFMRDncAeINFsxaDvmBfUG/Yol2Uk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUY5Qy9DRDJDQThGOEQz
RUExMUVGQTY2QzQ3NjBDNEY5QUUwMi94RU9kd0I0ZzBXekZvTy1ZRjlRYjlpaVha
U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hFT2R3QjRnMFd6Rm9PLVlGOVFiOWlpWFpTUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RUY5Qy9DRDJDQThGOEQzRUExMUVGQTY2QzQ3NjBDNEY5QUUwMi94RU9kd0I0ZzBX
ekZvTy1ZRjlRYjlpaVhaU1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJjw4SJNJ+7VduMoLszuCTsGCafEn0OgMIb1jZ8n760CaM4CPjl9rz+dK/B7Q
im1j0G45Vyms/eUPUyinW5M7y0UW4zrtX7DjxelOa4+z1EjbJfTIUK1WxIFn3/qS
cVr2mFslUYO5XtU5+PrMEZL54tMb2rsWsN2h1YAzyBTH/GuhbJKcNJpR9odZ1oCY
W7A58qvmHZ+beEatj4ZdkFALlWePca9qlZ4A31DD21Dq1I14PVclKeF0agvM7Jsz
BgDEx9N7hHbF8oPwZX0ksZO09F05rhLpp9fhYVsYjobvvTxVsDOXOM87zvow4/sg
YyF2QY5dWz3cEEiPMl59/X38/Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:49:53 2026 by rpki-client