Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.mft
File:                     xFWwhrq4ZHzSUQyoMkHnABTNikQ.mft (raw, json)
Hash identifier:          9ACGDmvumla3yvnrQC/DJvUj3aL/0GQ6WcqsjG95jWg=
Subject key identifier:   5B:D4:32:BA:FC:41:07:A7:EF:26:7B:66:94:5C:02:48:4A:F1:90:36
Authority key identifier: C4:55:B0:86:BA:B8:64:7C:D2:51:0C:A8:32:41:E7:00:14:CD:8A:44
Certificate issuer:       /CN=A9157B66/serialNumber=C455B086BAB8647CD2510CA83241E70014CD8A44
Certificate serial:       06ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xFWwhrq4ZHzSUQyoMkHnABTNikQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.mft
Manifest number:          06E5
Signing time:             Thu 16 Apr 2026 22:03:23 +0000
Manifest this update:     Thu 16 Apr 2026 22:03:23 +0000
Manifest next update:     Thu 23 Apr 2026 22:03:23 +0000
Files and hashes:         1: xFWwhrq4ZHzSUQyoMkHnABTNikQ.crl (hash: AH4ijVAxd4p9y5k3lqGA1zVFGJY8owq+XHxITK5WtKw=)
                          2: 807CB298903A11EBA9783756C4F9AE02.roa (hash: kPCD0Fz7/O4ntMHiCFvRFjcWPT4ww4VjwAtUClsCkrU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.crl
                          rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xFWwhrq4ZHzSUQyoMkHnABTNikQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1773 (0x6ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157B66, serialNumber=C455B086BAB8647CD2510CA83241E70014CD8A44
        Validity
            Not Before: Apr 16 22:03:23 2026 GMT
            Not After : Apr 23 22:03:23 2026 GMT
        Subject: CN=69e15cab-7ab2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1f:95:8a:de:3c:14:4d:e4:42:f0:2d:3f:52:
                    80:c0:b8:75:c0:f1:26:72:ac:9b:87:5c:b1:9d:08:
                    0a:e3:e1:e6:75:bb:36:e8:64:0a:f3:45:55:3b:63:
                    0f:3f:67:c7:52:3d:8f:1c:ba:8f:43:d5:92:d6:64:
                    1d:a2:14:9f:8a:5a:0b:9d:03:d7:4a:22:ea:e2:fb:
                    28:72:0d:bb:4f:33:03:9d:19:98:97:6a:1a:1c:82:
                    0c:dd:67:09:98:54:5b:f5:97:03:ba:c3:22:02:ac:
                    95:b0:71:38:a4:c0:10:d9:5c:e1:d1:80:69:31:ab:
                    68:f8:65:85:4b:b2:ec:14:eb:b4:41:3b:c8:31:bc:
                    e9:de:16:e0:12:f6:58:10:3a:31:36:9c:6b:74:e5:
                    04:f6:52:ad:1a:63:13:6a:95:ac:ad:b4:9c:77:db:
                    6f:b7:74:24:0f:6f:54:95:8a:ad:af:e7:a6:05:d2:
                    b2:87:71:7a:1e:6b:6d:38:16:61:1d:9a:a6:69:e9:
                    d6:41:d6:cb:e7:0b:f6:25:0b:50:f6:82:f4:41:98:
                    1e:de:95:c4:2f:41:66:dc:2f:6e:0f:df:46:56:e3:
                    86:9d:0d:09:89:ed:8c:c5:cb:61:48:09:0c:a1:1d:
                    61:8e:c9:40:44:70:05:78:7e:97:2a:26:e7:f4:f3:
                    b4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:D4:32:BA:FC:41:07:A7:EF:26:7B:66:94:5C:02:48:4A:F1:90:36
            X509v3 Authority Key Identifier:
                keyid:C4:55:B0:86:BA:B8:64:7C:D2:51:0C:A8:32:41:E7:00:14:CD:8A:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xFWwhrq4ZHzSUQyoMkHnABTNikQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:7b:89:d5:f7:12:b7:d1:de:f7:18:66:04:f6:c5:0a:a3:78:
         29:5d:6d:ad:c2:1c:64:f6:76:94:38:26:c3:a8:64:ff:dd:92:
         9f:10:74:c3:57:c9:2e:93:e8:16:8b:bd:d6:c4:04:f1:a9:73:
         4a:63:e8:0f:43:3f:fd:20:5a:38:7e:f7:bb:69:e8:82:20:d2:
         58:ff:b3:32:1e:f5:98:45:ce:94:0d:5e:ef:8b:96:47:e9:f2:
         c8:9b:b1:f7:07:37:cc:02:a1:ee:7f:e1:b8:e1:d7:8a:f0:85:
         42:fd:dc:6d:6f:4b:69:30:a1:13:2a:26:de:40:a9:e3:9b:a2:
         cb:68:ac:ea:f7:bb:cf:bf:d5:c4:41:bf:5b:39:1f:c2:b7:a8:
         f1:ec:a8:06:ee:52:e3:6c:f3:fc:80:07:7f:99:1b:0f:a5:e4:
         cf:72:ef:8d:18:c8:18:eb:f3:94:29:ae:a2:e9:6d:16:ce:bf:
         0d:e0:cf:d6:e4:01:5b:56:ae:ba:98:db:a9:22:79:23:11:e4:
         a3:65:f7:56:3e:91:cf:06:89:ee:8d:bc:36:29:e3:09:91:05:
         46:e6:32:13:93:10:4b:cf:d5:5a:4f:00:f5:47:a1:3c:33:b5:
         43:0e:a9:fb:9b:eb:7e:c7:67:6a:43:0c:29:a0:38:f3:d6:08:
         d3:97:fc:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:42:04 2026 by rpki-client