Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BD82/AE210ED809A211F19E5C68091C3D8C67/xjZVadKEkQKf5Efl8-v2jxMB1bs.mft
File:                     xjZVadKEkQKf5Efl8-v2jxMB1bs.mft (raw, json)
Hash identifier:          R64o1Cms3c0BhK01r58CjTi7VlTFi6IIcyLjYdVEdPM=
Subject key identifier:   AA:13:10:50:94:BB:63:65:9F:74:AF:6C:FB:56:12:E7:72:B3:33:23
Authority key identifier: C6:36:55:69:D2:84:91:02:9F:E4:47:E5:F3:EB:F6:8F:13:01:D5:BB
Certificate issuer:       /CN=A915BD82/serialNumber=C6365569D28491029FE447E5F3EBF68F1301D5BB
Certificate serial:       2C
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xjZVadKEkQKf5Efl8-v2jxMB1bs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BD82/AE210ED809A211F19E5C68091C3D8C67/xjZVadKEkQKf5Efl8-v2jxMB1bs.mft
Manifest number:          28
Signing time:             Fri 17 Apr 2026 08:33:28 +0000
Manifest this update:     Fri 17 Apr 2026 08:33:27 +0000
Manifest next update:     Fri 24 Apr 2026 08:33:27 +0000
Files and hashes:         1: xjZVadKEkQKf5Efl8-v2jxMB1bs.crl (hash: 7qqq+Zm9N45ZH893QJYAs3cdzqyMwoF9vDPnT7C1phc=)
                          2: 4167035C0B3B11F1969C9C36063D8C67.roa (hash: XxHQrpq2A4gp2n4mp6ShFZAo+USW06IQITe4p2NcCiY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BD82/AE210ED809A211F19E5C68091C3D8C67/xjZVadKEkQKf5Efl8-v2jxMB1bs.crl
                          rsync://rpki.apnic.net/member_repository/A915BD82/AE210ED809A211F19E5C68091C3D8C67/xjZVadKEkQKf5Efl8-v2jxMB1bs.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xjZVadKEkQKf5Efl8-v2jxMB1bs.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:33:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BD82, serialNumber=C6365569D28491029FE447E5F3EBF68F1301D5BB
        Validity
            Not Before: Apr 17 08:33:27 2026 GMT
            Not After : Apr 24 08:33:27 2026 GMT
        Subject: CN=69e1f058-ca85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:da:92:89:5d:c6:07:77:e2:e7:08:12:63:33:
                    f2:e4:45:02:a9:52:1e:9c:b0:67:65:6c:02:3e:d3:
                    82:37:45:cb:1f:35:f6:fb:50:fd:a4:fe:72:c0:f5:
                    47:48:68:44:a5:f2:b9:b8:c9:15:90:a2:a9:d6:13:
                    f5:06:0e:90:0e:75:c4:10:0c:e0:2c:1b:8b:73:8e:
                    c3:8d:f8:9a:5b:1b:ad:e9:f5:d6:b1:b2:f2:7b:d6:
                    39:43:ee:84:a7:de:84:65:2b:8f:41:2c:ca:03:62:
                    ef:a3:62:00:4f:3d:17:56:f1:8f:34:cf:13:49:a8:
                    ea:d5:ff:76:d0:5b:08:ac:c5:40:01:e1:04:b3:1e:
                    d6:9d:74:c2:c9:32:af:fc:fe:d8:29:bd:db:34:8c:
                    44:07:2a:06:d6:3f:7f:3b:ba:94:6e:dd:49:df:05:
                    ec:0f:d0:1d:25:fd:dc:ae:a8:0a:d2:4d:45:6f:37:
                    be:60:fb:9c:a6:a6:f8:a8:23:6c:93:60:f0:f0:b4:
                    e1:58:70:1e:60:fb:f0:19:a9:88:da:21:e7:cd:0d:
                    f7:c5:46:31:c2:c2:1d:ef:34:24:66:61:1b:ed:a5:
                    be:80:29:ab:3d:af:f2:72:1c:41:b4:a3:c8:ed:bb:
                    2f:cd:dd:05:ad:21:40:7b:61:7b:78:db:ed:47:14:
                    8f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:13:10:50:94:BB:63:65:9F:74:AF:6C:FB:56:12:E7:72:B3:33:23
            X509v3 Authority Key Identifier:
                keyid:C6:36:55:69:D2:84:91:02:9F:E4:47:E5:F3:EB:F6:8F:13:01:D5:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BD82/AE210ED809A211F19E5C68091C3D8C67/xjZVadKEkQKf5Efl8-v2jxMB1bs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xjZVadKEkQKf5Efl8-v2jxMB1bs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BD82/AE210ED809A211F19E5C68091C3D8C67/xjZVadKEkQKf5Efl8-v2jxMB1bs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:46:0e:c4:22:dd:45:f6:b5:2e:35:2f:9e:f6:15:c4:67:2a:
         19:be:b0:6b:56:05:15:9f:6a:e6:e2:35:f3:59:0d:4f:40:42:
         eb:95:a5:7f:1a:de:10:70:20:50:8a:a7:4b:b8:60:8e:23:91:
         12:05:c8:7e:fe:99:55:78:0e:f3:aa:b6:48:8d:d6:c6:d8:e3:
         d7:69:ca:f5:fe:25:b4:92:fd:b1:91:38:18:a1:2e:86:b7:69:
         25:ec:ca:dc:ab:f3:9c:27:6d:8e:8f:3e:c4:a9:57:e9:0d:4f:
         95:ff:d5:b8:d7:56:84:9f:83:0c:23:4b:56:98:56:b1:49:3b:
         21:7f:36:8a:4d:04:21:5e:a1:3b:a7:53:04:d5:40:58:ad:87:
         9f:a6:c7:ca:a6:8d:4d:40:e3:ab:6e:72:db:0b:d3:66:45:29:
         d9:09:e0:a5:dd:b0:c6:2c:b2:8d:5c:cd:c4:83:c1:d9:94:22:
         24:f6:81:1d:e5:8f:77:ed:6b:6f:ca:55:9b:2f:9f:5c:24:75:
         a1:50:c1:71:95:ec:82:5c:be:c2:73:70:d1:9e:ca:c9:7b:7a:
         ea:eb:93:fb:9c:da:67:60:95:c1:fa:75:a0:e8:31:fb:f5:91:
         1b:6c:c9:b7:18:17:8b:ed:27:38:e2:b6:60:20:15:22:8f:a9:
         8f:f7:80:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:45:49 2026 by rpki-client