Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/XoJBeVOzWp-LWaQuyUb00CTYd2s.mft
File:                     XoJBeVOzWp-LWaQuyUb00CTYd2s.mft (raw, json)
Hash identifier:          1SzuGEZGtuV9UQdFcMHXhUsmyeBe19su+Z6MFgXrTgw=
Subject key identifier:   2E:61:5F:A6:C4:6E:5C:EA:EB:62:1F:D6:71:20:71:C1:27:E5:B3:2E
Authority key identifier: 5E:82:41:79:53:B3:5A:9F:8B:59:A4:2E:C9:46:F4:D0:24:D8:77:6B
Certificate issuer:       /CN=A915B2F1/serialNumber=5E82417953B35A9F8B59A42EC946F4D024D8776B
Certificate serial:       06F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoJBeVOzWp-LWaQuyUb00CTYd2s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/XoJBeVOzWp-LWaQuyUb00CTYd2s.mft
Manifest number:          06EB
Signing time:             Thu 16 Apr 2026 22:02:41 +0000
Manifest this update:     Thu 16 Apr 2026 22:02:41 +0000
Manifest next update:     Thu 23 Apr 2026 22:02:41 +0000
Files and hashes:         1: XoJBeVOzWp-LWaQuyUb00CTYd2s.crl (hash: YeSaGOWCXsZuJP84o2zWq5duaKkCcPav4KZ9qugY1zc=)
                          2: 9378220A8DF211EBADEDD212C4F9AE02.roa (hash: JzK+J3RZUskrLiXzKh3st2e9p5vwshKaKjNscdIfWCc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/XoJBeVOzWp-LWaQuyUb00CTYd2s.crl
                          rsync://rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/XoJBeVOzWp-LWaQuyUb00CTYd2s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoJBeVOzWp-LWaQuyUb00CTYd2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:02:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1779 (0x6f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B2F1, serialNumber=5E82417953B35A9F8B59A42EC946F4D024D8776B
        Validity
            Not Before: Apr 16 22:02:41 2026 GMT
            Not After : Apr 23 22:02:41 2026 GMT
        Subject: CN=69e15c81-49b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ea:36:4c:81:65:63:eb:c6:ce:bc:83:9b:f4:
                    7e:e1:5d:0c:70:7e:2e:d6:ce:8d:6b:c9:22:58:62:
                    74:36:9f:72:e8:1f:55:a1:bd:db:34:7c:1f:0f:4d:
                    eb:a9:42:38:ac:b8:26:40:03:9b:41:96:3f:6f:9f:
                    98:6c:0e:c5:52:06:d1:bd:0a:48:78:a6:0a:b5:71:
                    c2:1b:d4:a3:f4:90:cf:02:7a:64:ec:53:80:49:ce:
                    1a:bf:eb:19:fd:48:f3:02:60:b7:9c:d8:8b:e0:b7:
                    70:6a:e2:f8:50:ee:a8:14:21:87:6a:7d:d7:26:f3:
                    78:ac:ed:df:f2:2d:1d:84:bb:22:5b:05:40:e2:08:
                    c3:4b:5d:1a:89:32:87:b8:8a:12:5e:59:c5:0d:8d:
                    11:f8:75:48:7a:36:c9:39:a4:f3:89:60:09:23:3e:
                    9c:98:b1:97:5c:a8:5b:2d:e9:80:b8:73:20:8a:75:
                    95:e9:ff:e3:52:f1:b8:9c:fb:61:f2:ed:5c:47:0c:
                    f2:32:4a:02:38:0b:40:18:90:54:25:b8:44:f4:76:
                    d6:fc:fd:07:4c:7a:ca:ea:c0:c6:21:2b:01:4c:c3:
                    83:9f:ad:d9:9a:9a:7f:b3:95:f3:75:2e:5c:46:06:
                    7e:f9:fe:c2:79:37:bc:ac:87:7f:1e:c5:99:f3:f0:
                    ed:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:61:5F:A6:C4:6E:5C:EA:EB:62:1F:D6:71:20:71:C1:27:E5:B3:2E
            X509v3 Authority Key Identifier:
                keyid:5E:82:41:79:53:B3:5A:9F:8B:59:A4:2E:C9:46:F4:D0:24:D8:77:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/XoJBeVOzWp-LWaQuyUb00CTYd2s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoJBeVOzWp-LWaQuyUb00CTYd2s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/XoJBeVOzWp-LWaQuyUb00CTYd2s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:2b:6f:82:01:f4:de:dd:c4:85:99:15:87:bc:5d:d4:5f:a4:
         c0:fd:d1:77:cd:5c:bf:17:76:69:41:4d:f4:28:ab:c0:10:4c:
         01:ba:e9:7e:e9:a3:e5:7e:cb:82:3d:89:1a:59:87:17:74:72:
         29:74:77:50:e6:d6:80:91:e4:cf:67:65:7e:59:85:28:1d:df:
         de:37:9a:a8:6f:d1:e1:35:e3:82:e2:e6:ee:b4:47:ba:81:b8:
         41:09:cc:17:7a:d1:b2:7e:df:97:99:a6:46:85:9b:bd:cc:97:
         a2:ad:a0:08:1c:34:1a:6a:f2:fe:49:ef:4e:a1:fa:3a:96:2a:
         20:5d:3c:54:1c:b9:07:cd:d8:7a:04:17:65:0d:50:4d:a5:67:
         9b:61:9f:81:f5:d0:16:5b:08:bb:ae:e3:ef:c3:1b:b1:49:ce:
         59:b9:0e:3b:a1:93:e0:a6:d1:ec:62:9a:09:07:61:b0:1a:06:
         2f:22:82:42:dd:78:9b:78:a3:84:ca:79:cd:32:7f:61:21:3f:
         c4:e0:7c:06:bb:dd:2b:1c:41:6a:4a:ff:bc:ff:85:d1:76:4e:
         8d:1a:79:32:9d:5e:60:09:bd:3b:92:3c:0c:da:88:90:67:d8:
         6f:94:47:6e:45:95:85:05:d7:71:d4:f3:7f:01:d1:8d:81:1d:
         a5:50:1f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:04:22 2026 by rpki-client