Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft
File:                     -XxrnwabbALLPY6tWvc-UGwIyjg.mft (raw, json)
Hash identifier:          IM2zQVW12XRK0ajNZ7C3qEnPxgpGA7oiCZURONNHXwk=
Subject key identifier:   7B:E6:96:FA:54:20:29:0E:3C:99:58:C9:63:96:FF:FA:6C:DC:D4:1A
Authority key identifier: F9:7C:6B:9F:06:9B:6C:02:CB:3D:8E:AD:5A:F7:3E:50:6C:08:CA:38
Certificate issuer:       /CN=A914DB69/serialNumber=F97C6B9F069B6C02CB3D8EAD5AF73E506C08CA38
Certificate serial:       01DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft
Manifest number:          01D8
Signing time:             Fri 17 Apr 2026 03:19:31 +0000
Manifest this update:     Fri 17 Apr 2026 03:19:31 +0000
Manifest next update:     Fri 24 Apr 2026 03:19:31 +0000
Files and hashes:         1: -XxrnwabbALLPY6tWvc-UGwIyjg.crl (hash: NEKri82jQ/slvH5fIZHrXJBQdKClzfE4mPBu1rjPV3g=)
                          2: C4AA7A3A6E5F11EE9F66E967C4F9AE02.roa (hash: kdzwoZAMh51JZsHZZa0HJnczi1+crw9wnyc8mMxvPFw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.crl
                          rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:19:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 479 (0x1df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DB69, serialNumber=F97C6B9F069B6C02CB3D8EAD5AF73E506C08CA38
        Validity
            Not Before: Apr 17 03:19:31 2026 GMT
            Not After : Apr 24 03:19:31 2026 GMT
        Subject: CN=69e1a6c3-6355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c8:62:84:a0:7a:80:cb:dc:1a:45:25:87:71:
                    15:c1:e4:15:50:b7:ae:f9:7a:55:bc:3e:1a:99:47:
                    36:52:20:b1:0c:69:5d:23:a1:af:99:0f:f3:ff:d4:
                    8f:e0:6d:8e:69:1a:8f:0e:31:23:07:60:e5:d5:0e:
                    e7:09:64:8b:b4:fa:12:97:b3:97:6a:64:fc:2f:40:
                    02:8e:26:23:35:40:61:7a:86:87:c6:8b:d8:4e:af:
                    8a:5d:7a:b4:c9:f9:44:87:ef:01:1d:2f:da:3a:2d:
                    10:6f:33:71:66:1a:e6:1e:21:aa:a6:61:b1:dd:59:
                    b6:52:68:e4:ef:04:f7:4a:b5:7a:ab:a7:a5:d0:21:
                    66:3f:ad:99:cb:99:93:f9:b5:01:78:9a:33:8e:1d:
                    53:72:13:4f:5a:c2:cc:0f:87:3e:53:9a:ae:61:07:
                    27:05:67:38:ae:e2:f5:91:bb:89:bb:86:c6:0d:c6:
                    d9:49:46:b3:c5:92:c2:d5:da:4c:51:4d:b0:fb:c7:
                    fb:e4:56:86:5c:1c:7c:8b:90:83:18:c1:62:72:67:
                    09:d0:ec:64:e3:0a:a2:e5:81:bf:aa:40:be:03:ef:
                    76:67:e0:45:5e:42:25:b8:df:77:ba:6e:39:e5:7d:
                    c5:ff:99:7b:12:52:0d:81:d8:2c:07:10:71:40:ef:
                    58:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E6:96:FA:54:20:29:0E:3C:99:58:C9:63:96:FF:FA:6C:DC:D4:1A
            X509v3 Authority Key Identifier:
                keyid:F9:7C:6B:9F:06:9B:6C:02:CB:3D:8E:AD:5A:F7:3E:50:6C:08:CA:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:cc:14:b3:69:99:26:0b:1e:2d:61:2e:8e:82:fc:b9:07:1f:
         be:b5:84:ac:bb:f5:22:7f:c4:16:fd:30:06:3b:2f:e1:ff:0e:
         98:6e:2b:96:14:53:1f:fe:23:2e:52:6d:ec:dd:e3:af:cc:3d:
         58:c2:67:72:25:75:e9:df:d3:64:46:02:79:06:68:70:06:26:
         12:5f:82:6f:bf:0e:47:51:7f:82:1c:62:ff:46:51:76:79:6b:
         f2:e5:75:91:95:15:59:ad:39:07:6b:5b:fb:54:4d:66:91:bc:
         f5:3b:d8:98:0d:57:91:a9:1f:9f:83:b8:a2:65:05:f8:9f:c7:
         15:b8:b3:c8:65:51:95:8f:3f:e6:7b:24:13:64:90:14:9c:db:
         4a:a8:e0:38:ef:b5:0b:4f:4b:e4:86:04:46:0b:88:d9:5f:23:
         35:bc:22:4d:90:51:a2:5c:8f:bc:57:db:15:82:33:3d:c4:49:
         69:de:e9:4e:36:9c:36:8f:80:72:85:89:ed:fa:a8:9c:71:c9:
         ec:0f:43:47:7d:38:ad:9b:1c:35:f8:ec:59:2c:c5:1d:16:2b:
         de:9a:63:ba:fe:d3:2b:55:e1:62:88:a9:d3:40:ae:01:1d:80:
         46:93:df:d3:77:03:35:8b:d5:15:d8:fd:0b:35:48:45:49:a1:
         0c:52:3d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:33:23 2026 by rpki-client