Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/xI1E8RHZ9NyOPmStf5ZIZGHLn70.mft
File:                     xI1E8RHZ9NyOPmStf5ZIZGHLn70.mft (raw, json)
Hash identifier:          vrXdGonm+eAE/uUyAUd/zGDQBLE/SYB8hUsxpEcl2qc=
Subject key identifier:   D1:5B:F0:AA:DB:17:E6:13:FC:5D:05:B3:A6:E9:93:FD:67:6A:BC:AD
Authority key identifier: C4:8D:44:F1:11:D9:F4:DC:8E:3E:64:AD:7F:96:48:64:61:CB:9F:BD
Certificate issuer:       /CN=A9181CA2/serialNumber=C48D44F111D9F4DC8E3E64AD7F96486461CB9FBD
Certificate serial:       0467
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xI1E8RHZ9NyOPmStf5ZIZGHLn70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/xI1E8RHZ9NyOPmStf5ZIZGHLn70.mft
Manifest number:          0461
Signing time:             Fri 17 Apr 2026 00:03:27 +0000
Manifest this update:     Fri 17 Apr 2026 00:03:27 +0000
Manifest next update:     Fri 24 Apr 2026 00:03:27 +0000
Files and hashes:         1: xI1E8RHZ9NyOPmStf5ZIZGHLn70.crl (hash: YIrTTqqAGFEW6NIzhdZBd9YHFevWWIQQBc8KN7hQTlI=)
                          2: 76391AA6995311EC8EAA8C59C4F9AE02.roa (hash: hVWOem+pLii4MQTJ55oAfG4bFT1qvrHFyRRkJ/xs+Qs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/xI1E8RHZ9NyOPmStf5ZIZGHLn70.crl
                          rsync://rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/xI1E8RHZ9NyOPmStf5ZIZGHLn70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xI1E8RHZ9NyOPmStf5ZIZGHLn70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:03:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1127 (0x467)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181CA2, serialNumber=C48D44F111D9F4DC8E3E64AD7F96486461CB9FBD
        Validity
            Not Before: Apr 17 00:03:27 2026 GMT
            Not After : Apr 24 00:03:27 2026 GMT
        Subject: CN=69e178cf-bcaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:58:cf:08:58:0b:b4:28:0d:9a:94:e0:7e:39:
                    17:90:83:5a:3b:01:64:e4:7f:78:8f:b7:1e:93:71:
                    fa:f2:0f:13:33:43:cd:b1:9c:8e:bc:f9:3c:3d:12:
                    af:8c:c5:45:b1:db:4a:24:5c:16:7b:88:e5:27:3a:
                    42:e4:99:87:fa:5f:67:48:5d:da:2c:f2:27:cd:ba:
                    34:68:d2:28:d3:9d:ad:f8:aa:a1:ed:72:5b:59:53:
                    ad:26:3a:e4:fb:d5:64:bd:d2:ce:cd:e6:ad:e5:da:
                    06:0f:b5:e3:78:aa:58:99:e5:92:de:a7:8f:65:b3:
                    f0:6a:46:04:4a:1d:5b:87:a5:19:3e:62:c9:9a:f6:
                    21:e7:e2:6e:bf:38:6c:39:bb:f4:9b:f5:53:e2:f1:
                    49:3e:b8:b2:07:fa:9d:c1:e3:6e:3e:cc:88:6a:45:
                    4a:e2:a7:0c:63:43:69:c5:4f:67:a9:93:9a:a3:6a:
                    2c:1f:60:35:8f:18:e9:41:c0:45:dc:e6:e9:2c:e0:
                    b5:82:15:7a:e9:4c:0c:4a:77:78:7c:2c:80:16:83:
                    05:d5:6b:9d:9f:03:dc:6d:39:ce:77:3c:fc:ea:d2:
                    e4:0b:70:a5:8a:6a:9b:65:2d:83:ba:aa:4d:54:57:
                    ae:1b:b9:b2:50:12:55:1c:31:96:d9:6f:e3:2c:8f:
                    b1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:5B:F0:AA:DB:17:E6:13:FC:5D:05:B3:A6:E9:93:FD:67:6A:BC:AD
            X509v3 Authority Key Identifier:
                keyid:C4:8D:44:F1:11:D9:F4:DC:8E:3E:64:AD:7F:96:48:64:61:CB:9F:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/xI1E8RHZ9NyOPmStf5ZIZGHLn70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xI1E8RHZ9NyOPmStf5ZIZGHLn70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/xI1E8RHZ9NyOPmStf5ZIZGHLn70.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:d7:8e:b2:3f:a5:cf:53:ba:54:90:15:6b:b3:8f:ab:b8:92:
         28:20:c9:25:58:af:1f:46:c4:38:6d:be:95:ba:64:ed:84:27:
         f4:33:37:3d:a1:33:b2:f1:01:35:ff:ce:3e:4d:f1:00:b0:23:
         8b:9d:b2:aa:28:5b:36:4a:9c:ea:aa:f7:18:2c:5c:6d:38:f1:
         a4:92:24:e1:34:5e:22:3e:8f:27:8c:47:57:67:40:68:f5:7a:
         23:88:43:03:7f:75:d5:d3:05:c9:2b:93:20:28:91:ba:4e:57:
         75:a2:8a:ac:ec:e1:8b:fd:95:2a:dc:ba:aa:ab:ed:dd:06:da:
         1a:59:a5:e1:a2:d7:82:65:87:42:a7:ba:1d:64:62:57:c2:d1:
         96:93:0d:25:e4:45:83:f6:40:b8:64:6d:87:6b:30:0c:85:8d:
         77:1e:83:f3:76:1f:3e:65:78:88:36:00:b6:68:47:e7:6d:85:
         f5:c9:75:ed:74:d3:c7:68:1d:0c:69:49:79:cf:e0:dd:63:ae:
         f4:c1:2d:4e:04:f0:a0:8a:6e:ec:09:24:17:a6:78:fe:67:d0:
         d4:f8:d9:cb:77:db:aa:4e:5b:14:47:b2:be:46:78:ac:f6:4a:
         ba:42:21:86:f1:99:8d:f5:61:54:bf:77:d7:97:70:ef:21:f3:
         39:ea:0a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:23:23 2026 by rpki-client