Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145CB7/7A555E02082A11F1B456BEDF353D8C67/rXVQArP_DnYnxKnah3pQV1LgFvY.mft
File:                     rXVQArP_DnYnxKnah3pQV1LgFvY.mft (raw, json)
Hash identifier:          c1m0ZN/q/lrmrWc5uB3rgrPR5NtLwwnnxMp5FICMCas=
Subject key identifier:   07:EE:35:70:95:2F:FF:06:CC:7D:B1:72:67:3A:50:65:70:74:61:0C
Authority key identifier: AD:75:50:02:B3:FF:0E:76:27:C4:A9:DA:87:7A:50:57:52:E0:16:F6
Certificate issuer:       /CN=A9145CB7/serialNumber=AD755002B3FF0E7627C4A9DA877A505752E016F6
Certificate serial:       26
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rXVQArP_DnYnxKnah3pQV1LgFvY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145CB7/7A555E02082A11F1B456BEDF353D8C67/rXVQArP_DnYnxKnah3pQV1LgFvY.mft
Manifest number:          24
Signing time:             Fri 17 Apr 2026 08:32:37 +0000
Manifest this update:     Fri 17 Apr 2026 08:32:36 +0000
Manifest next update:     Fri 24 Apr 2026 08:32:36 +0000
Files and hashes:         1: rXVQArP_DnYnxKnah3pQV1LgFvY.crl (hash: JWPlTKfXGu2r7iIHHZVk/3Ar5qWJAaedzQC8y97Bsbs=)
                          2: E3565366082A11F19BFE93E8353D8C67.roa (hash: /aCKUkFizA70YgvpSSlO/F5nZ+3741gcJyJ2Mit8OBQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145CB7/7A555E02082A11F1B456BEDF353D8C67/rXVQArP_DnYnxKnah3pQV1LgFvY.crl
                          rsync://rpki.apnic.net/member_repository/A9145CB7/7A555E02082A11F1B456BEDF353D8C67/rXVQArP_DnYnxKnah3pQV1LgFvY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rXVQArP_DnYnxKnah3pQV1LgFvY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:32:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145CB7, serialNumber=AD755002B3FF0E7627C4A9DA877A505752E016F6
        Validity
            Not Before: Apr 17 08:32:36 2026 GMT
            Not After : Apr 24 08:32:36 2026 GMT
        Subject: CN=69e1f025-2276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f6:72:9f:e6:2a:16:b2:95:1e:4c:2d:e5:79:
                    f6:27:65:0d:50:e1:f4:45:9e:b7:a4:d5:79:65:5a:
                    98:ff:31:a3:07:a1:88:69:72:d9:ef:99:36:fd:c2:
                    19:23:da:9c:94:b5:29:71:41:e0:48:49:67:a8:73:
                    61:b0:cb:26:f6:de:8a:74:08:c9:04:96:71:27:6c:
                    dc:2a:bf:64:a9:2f:6b:cd:17:76:a5:84:4b:fe:a0:
                    10:b7:58:02:ec:7e:b9:30:f2:a1:56:b9:cb:37:22:
                    7a:03:de:0e:2a:ff:ee:71:02:41:23:c0:ae:6a:21:
                    f4:7e:82:1f:92:06:b2:c9:de:a0:6d:97:9a:41:36:
                    95:6c:d5:9a:29:5a:56:23:c0:30:5a:04:31:15:2b:
                    db:83:fe:93:11:5d:dd:c5:e4:1e:29:35:f7:78:92:
                    56:e6:a4:29:00:9f:7a:c8:9d:38:9f:c6:0c:d5:c4:
                    c6:36:fb:7e:24:b2:57:f0:89:ec:9d:ac:6b:92:cd:
                    3d:04:92:06:13:ef:0c:a8:35:d3:92:ad:1a:53:ec:
                    d4:bf:3b:30:64:03:9d:fa:87:b0:3c:7d:1f:5e:7d:
                    bb:49:a3:80:4d:1e:10:6e:1f:6c:56:49:c6:34:e2:
                    2b:cd:0e:a1:28:30:4e:7f:14:2c:f0:c0:79:08:da:
                    94:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:EE:35:70:95:2F:FF:06:CC:7D:B1:72:67:3A:50:65:70:74:61:0C
            X509v3 Authority Key Identifier:
                keyid:AD:75:50:02:B3:FF:0E:76:27:C4:A9:DA:87:7A:50:57:52:E0:16:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145CB7/7A555E02082A11F1B456BEDF353D8C67/rXVQArP_DnYnxKnah3pQV1LgFvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rXVQArP_DnYnxKnah3pQV1LgFvY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145CB7/7A555E02082A11F1B456BEDF353D8C67/rXVQArP_DnYnxKnah3pQV1LgFvY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:57:16:f4:d6:0f:62:cf:41:46:97:2e:d5:5a:00:c8:f6:d5:
         91:20:87:ba:cb:2c:aa:e1:19:46:6e:33:2d:e3:13:33:6c:c1:
         53:99:79:69:94:49:6d:71:0f:99:72:57:ac:1c:a1:a5:48:a3:
         2e:05:c4:19:11:51:11:2d:de:18:34:da:ad:f5:85:93:ea:e8:
         58:01:9f:5f:5b:35:c6:6e:ae:ec:04:b2:7e:01:0c:ba:31:de:
         3b:c7:41:2d:2a:7e:ca:a3:ad:ab:0f:da:06:70:7e:55:ed:94:
         3a:64:41:2c:fa:26:22:e1:33:33:a1:52:18:55:c9:95:3f:76:
         59:cc:eb:6b:d0:b1:72:ec:9f:95:7a:59:a4:88:dc:28:1e:20:
         39:7e:9c:89:d1:6f:72:29:df:9d:3e:cd:0a:b1:42:49:44:29:
         ae:8f:0c:6a:99:3a:85:64:0f:11:fb:01:4c:70:51:45:49:d1:
         4c:cc:8e:d6:0c:49:2d:8f:0a:23:be:74:70:87:42:01:75:af:
         d3:ff:35:c0:03:00:19:bb:01:90:59:16:fe:82:be:2c:90:62:
         fa:6c:e7:e4:20:c9:26:76:a6:29:26:3d:a3:28:0c:57:89:e6:
         23:f0:8c:49:55:8d:0c:49:b8:4c:b8:44:47:d7:0a:94:a9:e8:
         13:10:36:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:33:12 2026 by rpki-client