Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft
File:                     XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft (raw, json)
Hash identifier:          9DBF1haGMu4zz6cHL/rtEKr8QunW1qCoZxx6sn/2cFI=
Subject key identifier:   9D:E1:2B:B5:9A:3C:12:8C:95:FD:94:01:9B:D9:D9:1C:4C:E6:23:21
Authority key identifier: 5D:55:F1:50:9B:6F:03:42:4D:29:44:F8:11:F8:69:93:80:99:BB:BC
Certificate issuer:       /CN=A914F870/serialNumber=5D55F1509B6F03424D2944F811F869938099BBBC
Certificate serial:       F2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XVXxUJtvA0JNKUT4Efhpk4CZu7w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft
Manifest number:          EA
Signing time:             Fri 17 Apr 2026 06:09:37 +0000
Manifest this update:     Fri 17 Apr 2026 06:09:37 +0000
Manifest next update:     Fri 24 Apr 2026 06:09:37 +0000
Files and hashes:         1: XVXxUJtvA0JNKUT4Efhpk4CZu7w.crl (hash: xOa4KHOMRMMlyYmtUcBCGyXKlge4SPWSSDhukIuTj0U=)
                          2: 212A832AD7E311EF86266212C4F9AE02.roa (hash: y/d4ENW45K+wLuEcJR7g6U0WWFs54zradi3gAEB43Fg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.crl
                          rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XVXxUJtvA0JNKUT4Efhpk4CZu7w.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:09:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 242 (0xf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914F870, serialNumber=5D55F1509B6F03424D2944F811F869938099BBBC
        Validity
            Not Before: Apr 17 06:09:37 2026 GMT
            Not After : Apr 24 06:09:37 2026 GMT
        Subject: CN=69e1cea1-f1ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:bf:51:20:9e:8b:f1:fc:59:4c:fd:53:87:c4:
                    85:db:b4:81:26:f4:3e:5a:7c:2b:12:cd:60:70:4f:
                    5a:84:d0:43:38:a2:b8:13:2b:8c:2e:d9:d8:f3:b6:
                    ab:dc:89:a3:81:6e:0e:f4:dd:1d:46:6c:4f:a3:7e:
                    b7:ec:21:b8:30:55:e8:f4:b5:28:bb:a0:4c:9c:04:
                    01:14:5e:77:e7:97:a0:39:01:6c:68:dd:f3:91:3e:
                    ed:72:ee:6f:3a:1c:9c:80:2a:4d:fb:17:87:f1:b3:
                    6c:1e:20:10:9f:7c:c3:3b:d7:5a:17:25:10:82:f6:
                    c1:86:80:35:fa:36:e8:53:d3:c7:64:b1:94:97:bd:
                    30:5d:d3:ab:71:cb:f8:af:2f:e1:de:9a:24:0f:ed:
                    e3:38:a1:1a:7b:a6:88:54:38:c7:6a:01:9c:e9:b8:
                    9d:7f:69:59:18:f9:3a:7e:e0:54:52:b8:88:35:32:
                    e0:46:5e:4f:57:09:e5:ea:d1:f4:c3:60:34:7e:69:
                    90:11:f8:da:e4:e9:fa:8b:01:0c:7c:f2:94:b6:93:
                    b1:11:4f:e0:c0:11:69:85:96:df:3a:2f:07:8d:b5:
                    28:ae:51:ee:20:56:46:43:68:f7:01:c3:fc:60:ff:
                    db:90:96:a7:5c:f5:bb:fb:0b:76:90:e3:1a:e8:dc:
                    55:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:E1:2B:B5:9A:3C:12:8C:95:FD:94:01:9B:D9:D9:1C:4C:E6:23:21
            X509v3 Authority Key Identifier:
                keyid:5D:55:F1:50:9B:6F:03:42:4D:29:44:F8:11:F8:69:93:80:99:BB:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XVXxUJtvA0JNKUT4Efhpk4CZu7w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:cc:61:59:24:f6:47:e8:37:eb:15:6b:af:9b:cb:74:5f:c5:
         f7:17:2f:ac:58:a3:de:7c:d0:43:e5:e1:18:da:39:e1:95:5c:
         71:e0:73:86:1c:20:fe:ff:b3:7d:7c:7e:38:ac:17:4c:98:c1:
         f2:ea:d4:01:d7:01:ad:f2:b8:de:85:e9:82:8f:41:aa:eb:ae:
         cb:30:06:1b:6a:69:58:d4:ca:60:cb:9d:72:4e:99:4d:4a:7a:
         d9:4e:d5:34:04:2e:e8:31:36:20:d4:64:3a:ce:89:0a:28:4f:
         e5:e1:6f:9a:70:6e:9d:45:d7:f4:27:72:f3:ad:60:ad:0d:e1:
         e3:c7:7b:7c:66:0b:b2:2b:6e:56:0a:04:d5:a5:20:32:fd:6a:
         05:a9:f7:74:05:55:56:ae:6b:01:f6:ff:ab:de:df:69:53:d8:
         f6:a2:2b:3a:48:b3:49:32:95:12:7a:6d:73:fa:c1:36:31:c3:
         34:ec:b5:d1:a0:25:99:ba:70:6f:31:33:19:03:89:fc:79:a7:
         39:de:8d:2d:aa:17:78:5c:ee:42:c1:3b:b9:59:ca:30:2a:cd:
         cb:04:b5:ae:78:8c:89:5d:c5:ef:58:3b:91:9a:31:49:91:10:
         aa:40:77:91:7d:d0:13:41:86:5c:d8:83:6f:d5:09:8e:4f:f5:
         2e:cb:57:04
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEY4NzAxMTAvBgNVBAUTKDVENTVGMTUwOUI2RjAzNDI0RDI5NDRGODExRjg2OTkz
ODA5OUJCQkMwHhcNMjYwNDE3MDYwOTM3WhcNMjYwNDI0MDYwOTM3WjAYMRYwFAYD
VQQDEw02OWUxY2VhMS1mMWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoL9RIJ6L8fxZTP1Th8SF27SBJvQ+WnwrEs1gcE9ahNBDOKK4EyuMLtnY87ar
3ImjgW4O9N0dRmxPo3637CG4MFXo9LUou6BMnAQBFF5355egOQFsaN3zkT7tcu5v
OhycgCpN+xeH8bNsHiAQn3zDO9daFyUQgvbBhoA1+jboU9PHZLGUl70wXdOrccv4
ry/h3pokD+3jOKEae6aIVDjHagGc6bidf2lZGPk6fuBUUriINTLgRl5PVwnl6tH0
w2A0fmmQEfja5On6iwEMfPKUtpOxEU/gwBFphZbfOi8HjbUorlHuIFZGQ2j3AcP8
YP/bkJanXPW7+wt2kOMa6NxV8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ3hK7Wa
PBKMlf2UAZvZ2RxM5iMhMB8GA1UdIwQYMBaAFF1V8VCbbwNCTSlE+BH4aZOAmbu8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Rjg3MC9DOTI0MjQ2QUQ3
RTIxMUVGQUYwQjNCN0RDNEY5QUUwMi9YVlh4VUp0dkEwSk5LVVQ0RWZocGs0Q1p1
N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1hWWHhVSnR2QTBKTktVVDRFZmhwazRDWnU3dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
Rjg3MC9DOTI0MjQ2QUQ3RTIxMUVGQUYwQjNCN0RDNEY5QUUwMi9YVlh4VUp0dkEw
Sk5LVVQ0RWZocGs0Q1p1N3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAv8xhWST2R+g36xVrr5vLdF/F9xcvrFij3nzQQ+XhGNo54ZVcceBzhhwg/v+z
fXx+OKwXTJjB8urUAdcBrfK43oXpgo9BquuuyzAGG2ppWNTKYMudck6ZTUp62U7V
NAQu6DE2INRkOs6JCihP5eFvmnBunUXX9Cdy861grQ3h48d7fGYLsituVgoE1aUg
Mv1qBan3dAVVVq5rAfb/q97faVPY9qIrOkizSTKVEnptc/rBNjHDNOy10aAlmbpw
bzEzGQOJ/HmnOd6NLaoXeFzuQsE7uVnKMCrNywS1rniMiV3F71g7kZoxSZEQqkB3
kX3QE0GGXNiDb9UJjk/1LstXBA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:04:56 2026 by rpki-client