Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.mft
File:                     75-XzrKSdlHWT6oC452-DaO3H5U.mft (raw, json)
Hash identifier:          c9PmmJCoEfhl2Jd1RQ5vfQwFfmnPbpuNijcSveaND48=
Subject key identifier:   64:F7:54:85:3F:03:87:98:82:95:33:B5:45:BD:BE:53:A1:F4:C3:75
Authority key identifier: EF:9F:97:CE:B2:92:76:51:D6:4F:AA:02:E3:9D:BE:0D:A3:B7:1F:95
Certificate issuer:       /CN=A9165588/serialNumber=EF9F97CEB2927651D64FAA02E39DBE0DA3B71F95
Certificate serial:       F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75-XzrKSdlHWT6oC452-DaO3H5U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.mft
Manifest number:          DD
Signing time:             Sun 19 Apr 2026 06:19:40 +0000
Manifest this update:     Sun 19 Apr 2026 06:19:40 +0000
Manifest next update:     Sun 26 Apr 2026 06:19:40 +0000
Files and hashes:         1: 75-XzrKSdlHWT6oC452-DaO3H5U.crl (hash: rMY38iEHdrzVLzSucziBdG4dag0mrgFZQti3ZgolUG8=)
                          2: C405E494FCBF11EF8E586B7AC4F9AE02.roa (hash: I5RNmIqvcOpxcYsZ/RBZZkGHMB0FustYJ5/0PyFoSSs=)
                          3: 2701A0D8769611F09C8ABC22C4F9AE02.roa (hash: ylX1gvF03kyHjRbbXfFHvaoFBE86ZYkEYG19AFvwdz8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.crl
                          rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75-XzrKSdlHWT6oC452-DaO3H5U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 243 (0xf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165588, serialNumber=EF9F97CEB2927651D64FAA02E39DBE0DA3B71F95
        Validity
            Not Before: Apr 19 06:19:40 2026 GMT
            Not After : Apr 26 06:19:40 2026 GMT
        Subject: CN=69e473fc-96b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:94:49:ae:1a:82:1a:5d:e3:db:e0:31:50:3e:
                    ae:d2:e7:77:21:47:fd:5d:1f:c8:d9:49:3b:93:55:
                    6d:eb:67:65:1e:54:05:38:3e:d3:39:c0:68:7a:9b:
                    39:c8:c8:40:72:10:80:0a:e1:a8:32:57:56:f5:a9:
                    b0:7c:9b:95:16:59:59:2e:b6:0d:a1:e9:59:7b:b6:
                    3a:12:7b:a5:dd:10:ce:80:ec:c5:a4:a3:59:d4:8a:
                    ac:a5:fb:11:c9:fd:23:22:c1:b4:b6:c3:9c:93:9a:
                    f5:9b:18:42:a2:bc:31:4f:81:92:bc:a5:f9:6a:20:
                    3a:47:33:19:94:6d:c3:a1:85:80:33:d0:67:2f:b6:
                    53:d8:e9:81:31:fa:72:4a:df:55:eb:bd:13:d3:05:
                    e6:b6:69:dd:fd:dc:1b:f2:35:29:8f:c1:55:b2:67:
                    f6:4b:b1:2b:69:61:0f:2c:52:85:f2:bd:77:b3:cb:
                    07:84:ac:97:f6:6b:fe:c4:ba:92:69:2d:4f:55:25:
                    24:13:fb:06:6f:98:47:9b:c9:0b:a1:24:30:d0:67:
                    36:9b:1f:dc:47:6b:fe:90:18:e7:44:85:0c:d7:81:
                    26:c2:f5:0f:76:ea:2e:b5:0e:83:c7:42:11:56:56:
                    5e:57:e2:21:44:e2:17:83:67:8d:56:48:05:ae:bb:
                    c1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:F7:54:85:3F:03:87:98:82:95:33:B5:45:BD:BE:53:A1:F4:C3:75
            X509v3 Authority Key Identifier:
                keyid:EF:9F:97:CE:B2:92:76:51:D6:4F:AA:02:E3:9D:BE:0D:A3:B7:1F:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75-XzrKSdlHWT6oC452-DaO3H5U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:3a:26:01:54:9d:7d:5d:14:b9:76:76:b5:4d:db:6e:af:1f:
         8e:95:21:17:7f:4c:ba:65:89:30:7a:cc:64:97:13:63:ee:42:
         40:25:6d:b5:ad:bd:c3:91:85:06:76:a0:68:6f:2e:bd:f5:7e:
         33:0f:e1:9a:73:a3:a8:77:29:a5:a3:cf:d2:ad:2e:04:53:f6:
         f5:b8:7f:a4:84:d2:cc:c1:c9:7a:0f:1a:39:f8:88:e3:f8:db:
         fe:9b:1b:cc:ca:c1:60:af:9a:54:4d:34:a0:f7:df:c9:96:bc:
         9d:0b:67:4f:27:f0:dc:42:62:92:a0:1a:c8:a5:9e:18:3c:e2:
         10:bd:f0:4a:08:c4:70:67:db:2d:88:65:76:6e:bb:0a:4a:59:
         fe:25:e6:69:dc:2c:aa:a7:b3:e9:d7:64:bb:f5:a8:9e:ed:72:
         a4:0c:03:79:ff:83:70:69:d4:4d:09:c9:f3:33:52:54:88:66:
         16:e6:fb:fa:d0:55:eb:48:ec:06:8b:96:31:57:46:2c:4e:f7:
         e8:66:0e:ba:64:1d:28:cd:2e:06:fb:70:68:c8:4b:14:29:9d:
         ca:e8:bc:38:da:2e:1a:39:45:8b:68:50:ab:5f:41:14:81:c3:
         68:f1:85:9b:fa:83:b0:a1:c2:8e:1b:39:9f:6d:15:ea:26:fd:
         a2:8a:f4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:35:39 2026 by rpki-client