Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.mft
File:                     XEFCLE7PHfpomnDePAORsdR-Vew.mft (raw, json)
Hash identifier:          n9i3hSYRMfsxLPzTOZdqf7NkhCPwpCCyO6bLQcNE+do=
Subject key identifier:   D9:70:85:D3:D6:A5:8E:AB:A6:25:FE:5D:53:45:E3:1A:C5:05:28:92
Authority key identifier: 5C:41:42:2C:4E:CF:1D:FA:68:9A:70:DE:3C:03:91:B1:D4:7E:55:EC
Certificate issuer:       /CN=A916B19D/serialNumber=5C41422C4ECF1DFA689A70DE3C0391B1D47E55EC
Certificate serial:       031F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEFCLE7PHfpomnDePAORsdR-Vew.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.mft
Manifest number:          0317
Signing time:             Fri 17 Apr 2026 01:05:07 +0000
Manifest this update:     Fri 17 Apr 2026 01:05:07 +0000
Manifest next update:     Fri 24 Apr 2026 01:05:07 +0000
Files and hashes:         1: XEFCLE7PHfpomnDePAORsdR-Vew.crl (hash: xgwdNOEMeyqbT4wP5pEPLQjO8cgfE6Rro3vPRrJ+nRU=)
                          2: D11B9044112011EDAC1D3B15C4F9AE02.roa (hash: kypD0HNpdZMUft2CKjrM9l4+dpJKPDYyDTu1PYOEbrs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.crl
                          rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEFCLE7PHfpomnDePAORsdR-Vew.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 799 (0x31f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B19D, serialNumber=5C41422C4ECF1DFA689A70DE3C0391B1D47E55EC
        Validity
            Not Before: Apr 17 01:05:07 2026 GMT
            Not After : Apr 24 01:05:07 2026 GMT
        Subject: CN=69e18743-0d57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:19:94:7c:5c:c2:a3:61:2f:ee:23:35:22:c4:
                    a2:e8:ed:c9:74:86:d2:b3:fc:11:7e:df:c4:73:af:
                    04:26:16:f6:6d:b1:ff:80:08:c6:bb:49:b3:9c:fd:
                    02:33:7b:5c:50:71:ed:3a:23:0f:59:1d:55:f5:eb:
                    73:a2:d3:6e:39:52:1b:45:9d:12:43:dc:d6:31:3e:
                    03:fd:19:71:96:5b:a7:84:1c:d2:02:0b:45:29:ad:
                    8f:91:f3:08:97:2f:57:1d:84:9d:3e:64:55:4b:a0:
                    0d:25:09:45:94:e3:a4:c9:23:7d:28:eb:d6:84:da:
                    43:a7:42:3c:54:b4:83:0f:33:3c:f0:76:c2:8e:4e:
                    2d:60:fa:74:b7:32:73:f6:34:91:e0:38:3a:9f:5e:
                    e3:4e:b2:35:32:f3:1d:ff:7b:d1:e5:b3:cf:dc:d4:
                    e8:59:20:7c:10:e0:b6:34:40:fe:e8:f1:f9:8b:46:
                    45:d5:3f:35:a2:a9:f0:c0:e2:71:49:51:f9:35:26:
                    a2:f0:d7:6b:13:ac:1d:29:4f:0f:18:90:bb:d0:da:
                    32:ef:cc:25:b2:c5:6e:e7:2f:b7:9e:fe:71:8d:96:
                    eb:66:ce:b8:64:4d:6d:a6:49:fb:a5:95:64:12:90:
                    7e:27:6f:23:15:ce:3a:65:ed:00:e7:04:ad:9f:55:
                    32:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:70:85:D3:D6:A5:8E:AB:A6:25:FE:5D:53:45:E3:1A:C5:05:28:92
            X509v3 Authority Key Identifier:
                keyid:5C:41:42:2C:4E:CF:1D:FA:68:9A:70:DE:3C:03:91:B1:D4:7E:55:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEFCLE7PHfpomnDePAORsdR-Vew.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:aa:83:41:f6:09:70:59:6e:b3:cb:25:5b:9b:77:df:d4:64:
         a5:04:08:99:7a:aa:59:27:d0:d4:0c:3d:8b:23:72:ae:aa:13:
         bf:ba:04:dc:97:3b:b8:7b:c2:c9:59:8d:5b:b9:c8:c1:6f:e6:
         b0:c7:68:8c:05:53:63:01:24:3b:dc:70:21:47:6a:f3:97:b2:
         16:1d:44:62:80:62:96:42:4a:cb:ab:82:39:d7:93:98:da:4c:
         52:3c:c3:20:e7:96:6a:17:c3:e8:e8:39:b1:6b:5c:a6:f0:75:
         e1:0f:31:f7:9a:24:08:0d:59:c9:7a:8a:d8:44:9d:60:57:15:
         84:72:51:97:ce:ee:94:fa:fd:a0:26:ee:24:d7:ab:3a:6b:1e:
         ed:33:67:30:55:01:9a:51:7e:c9:09:0c:af:88:40:15:4c:8e:
         f7:85:eb:15:5a:c6:05:26:62:02:bf:5a:b0:f0:43:e3:e8:aa:
         55:93:ea:12:cb:c3:9f:df:96:39:be:cb:43:b9:12:e4:48:42:
         64:43:cd:c9:3a:80:fc:d5:6c:1d:cb:ed:14:7d:56:82:02:b7:
         4e:a5:80:fe:3d:62:c9:78:79:3f:48:9f:db:79:5a:8e:ee:88:
         bf:66:12:07:9a:57:e1:c9:65:15:64:99:bf:7a:a1:fe:4c:b0:
         43:0a:02:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:48:29 2026 by rpki-client