Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.mft
File:                     xwv3nojjEZrpa7dhopO7UaSGFzw.mft (raw, json)
Hash identifier:          fXIYidz2S5Qwdr1r2UOHYoddd9UoaG5MlxeJVuxgy4Y=
Subject key identifier:   99:3A:A0:29:83:AB:91:6E:A6:C2:A6:4A:F0:03:0D:26:B5:5E:1F:E5
Authority key identifier: C7:0B:F7:9E:88:E3:11:9A:E9:6B:B7:61:A2:93:BB:51:A4:86:17:3C
Certificate issuer:       /CN=A9170ADF/serialNumber=C70BF79E88E3119AE96BB761A293BB51A486173C
Certificate serial:       07DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwv3nojjEZrpa7dhopO7UaSGFzw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.mft
Manifest number:          07CC
Signing time:             Thu 16 Apr 2026 21:19:29 +0000
Manifest this update:     Thu 16 Apr 2026 21:19:28 +0000
Manifest next update:     Thu 23 Apr 2026 21:19:28 +0000
Files and hashes:         1: xwv3nojjEZrpa7dhopO7UaSGFzw.crl (hash: tP4zAxNLqyuCqgV3NTh1dYfrMRjEPAd+zDzNnzgV4Rg=)
                          2: AC53A55C7B3611EBB7C5F122C4F9AE02.roa (hash: cbziy5kL+sj+D8P7UhXxl7JFukexlK2Ww4yA68qkd2s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.crl
                          rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwv3nojjEZrpa7dhopO7UaSGFzw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:19:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2011 (0x7db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170ADF, serialNumber=C70BF79E88E3119AE96BB761A293BB51A486173C
        Validity
            Not Before: Apr 16 21:19:28 2026 GMT
            Not After : Apr 23 21:19:28 2026 GMT
        Subject: CN=69e15261-3b13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0b:ce:42:bb:9c:3e:54:e3:b6:a6:4b:6c:09:
                    1d:63:7d:20:a9:3d:81:20:99:5a:af:ec:4c:9a:29:
                    9d:2c:fa:cd:d5:f5:e6:b2:76:8b:0e:51:52:b5:69:
                    12:af:a8:16:91:57:31:00:2e:6e:bc:44:43:3f:e9:
                    0d:f0:ce:ee:d1:af:48:3b:b4:c8:75:4b:58:0e:5b:
                    d2:81:56:0f:c8:5a:83:c1:62:a7:41:1f:ba:96:fa:
                    71:17:89:8e:92:13:c8:b3:13:e9:52:44:e9:9b:76:
                    39:d7:ea:0d:5a:24:ae:8e:37:a8:02:be:9c:d0:fa:
                    7c:69:44:e1:ff:4e:41:0e:b4:d4:75:0a:ae:87:32:
                    c1:97:31:f4:fa:0c:46:31:92:ac:0c:07:b9:29:d5:
                    c6:55:de:6e:11:a6:e4:99:e1:cf:a6:69:0c:59:17:
                    a2:d0:0b:b7:28:2a:a5:d1:d0:e6:f2:63:26:a6:1c:
                    c9:65:1c:22:41:10:16:31:32:21:29:38:66:c7:47:
                    c4:b3:d1:69:2c:40:0e:88:69:af:06:36:14:34:47:
                    cc:4d:6d:04:40:ba:8c:a3:4c:e6:66:d6:56:fa:58:
                    4b:96:3f:54:dc:73:ef:93:b0:b4:5d:fc:21:d2:96:
                    81:7d:19:83:14:0c:24:38:25:7b:e6:4d:82:c8:d2:
                    46:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:3A:A0:29:83:AB:91:6E:A6:C2:A6:4A:F0:03:0D:26:B5:5E:1F:E5
            X509v3 Authority Key Identifier:
                keyid:C7:0B:F7:9E:88:E3:11:9A:E9:6B:B7:61:A2:93:BB:51:A4:86:17:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwv3nojjEZrpa7dhopO7UaSGFzw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:b6:09:eb:4a:c3:d1:ac:45:eb:48:56:45:16:21:08:44:ed:
         bd:26:c7:7f:82:d6:33:d9:cd:9f:46:75:d0:49:07:41:af:30:
         2d:0b:7d:93:5d:17:d3:ee:a1:8f:73:51:b2:0e:58:da:c3:45:
         b7:be:ab:8c:41:c5:66:73:7c:55:b0:ce:1e:4f:bb:65:28:c8:
         6d:a6:8c:92:dc:d0:82:55:57:e7:30:f6:da:04:54:61:5a:1f:
         cf:ec:9a:54:23:c4:e1:62:00:2d:a1:43:d9:14:50:12:a5:f5:
         52:ed:d4:b9:46:ab:8a:de:bc:c0:a6:c3:b4:36:ff:26:eb:7c:
         d7:64:0b:73:0e:09:c1:41:fc:a2:40:06:bc:c5:b6:f2:5c:7c:
         19:92:df:c7:e1:70:88:05:e1:cd:1e:55:64:2d:6b:87:83:dd:
         ec:1b:10:63:25:fc:a3:cd:d0:1a:43:eb:27:a5:10:4c:0d:0d:
         b3:a2:f2:a8:89:c4:66:3f:a7:de:0e:22:6f:ff:5e:17:90:ff:
         6d:16:80:9a:2f:00:22:49:9e:a7:48:81:73:d8:62:21:3b:7e:
         90:76:d0:ab:58:e1:34:e6:3d:8b:af:70:45:2d:d3:c2:39:bf:
         b5:e3:01:2a:88:8b:02:85:b7:34:10:92:31:fa:d0:fb:eb:99:
         3b:ea:3a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:49:12 2026 by rpki-client