Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft
File:                     xPprur_RmXzI8dIP5qVXTe6bMlY.mft (raw, json)
Hash identifier:          QJ5Ez2qQBvKC7+zoB80LfcxlaKHnTUlLZ1NeZbFG85Q=
Subject key identifier:   02:CA:C6:C1:17:5B:AA:26:8A:20:C0:DC:93:E0:83:2D:28:A6:7D:23
Authority key identifier: C4:FA:6B:BA:BF:D1:99:7C:C8:F1:D2:0F:E6:A5:57:4D:EE:9B:32:56
Certificate issuer:       /CN=A9187532/serialNumber=C4FA6BBABFD1997CC8F1D20FE6A5574DEE9B3256
Certificate serial:       0212
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPprur_RmXzI8dIP5qVXTe6bMlY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft
Manifest number:          020C
Signing time:             Sun 01 Mar 2026 23:28:23 +0000
Manifest this update:     Sun 01 Mar 2026 23:28:22 +0000
Manifest next update:     Sun 08 Mar 2026 23:28:22 +0000
Files and hashes:         1: xPprur_RmXzI8dIP5qVXTe6bMlY.crl (hash: 7qcb4WjKZBuvI/SotD8dGmovrcffKsvXGaqakYSkIHA=)
                          2: 8D176BFAF65011ED90F79C33C4F9AE02.roa (hash: aajUanjdNrNtkjhupeIjAdiXMn4aEREZ53JBb0jvqlQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.crl
                          rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPprur_RmXzI8dIP5qVXTe6bMlY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 530 (0x212)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187532, serialNumber=C4FA6BBABFD1997CC8F1D20FE6A5574DEE9B3256
        Validity
            Not Before: Mar  1 23:28:22 2026 GMT
            Not After : Mar  8 23:28:22 2026 GMT
        Subject: CN=69a4cb97-5ce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:38:12:24:ce:08:5e:13:00:1a:ff:c1:7f:83:
                    b2:a8:ba:bc:f9:3a:e3:6d:4b:0a:e8:ca:32:ea:16:
                    2f:6f:ba:90:1d:0e:a5:fa:20:3a:1e:a8:b2:07:91:
                    fd:1f:67:b3:54:c8:ae:00:8a:a5:97:0c:28:ec:81:
                    6c:f9:5f:c8:80:9e:f3:5e:80:e4:78:4d:43:57:57:
                    3b:c8:cc:20:6f:8e:7e:6e:17:60:1e:4f:f0:f5:8b:
                    b5:a1:ca:19:e9:51:62:0c:14:dd:33:97:06:f6:0b:
                    12:8a:8f:88:b8:15:3d:9b:29:99:9a:01:2f:c0:55:
                    2c:9b:a5:9d:62:e2:83:b2:2f:04:64:44:03:46:56:
                    3f:d2:e5:7b:9d:41:15:73:ba:0c:f5:18:62:86:b9:
                    5b:33:fc:a0:f3:08:88:67:33:e5:8a:bb:20:88:0f:
                    a7:d5:09:4f:4d:a8:d2:f9:c3:18:ff:2c:c7:4a:52:
                    36:9f:2e:2c:cf:8f:96:48:f0:02:54:d0:5a:ff:7c:
                    69:cf:ab:93:a9:32:7b:8a:0e:88:a3:8d:c5:3e:74:
                    b7:e4:32:d7:f0:95:c6:cb:97:5c:ba:7e:a4:2d:61:
                    17:60:90:53:d3:81:4c:52:4e:45:d4:cf:f1:7b:ca:
                    43:9f:2d:42:73:76:c6:e5:d4:9d:5b:bb:69:2d:4e:
                    12:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:CA:C6:C1:17:5B:AA:26:8A:20:C0:DC:93:E0:83:2D:28:A6:7D:23
            X509v3 Authority Key Identifier:
                keyid:C4:FA:6B:BA:BF:D1:99:7C:C8:F1:D2:0F:E6:A5:57:4D:EE:9B:32:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPprur_RmXzI8dIP5qVXTe6bMlY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:bd:7f:c4:a9:f1:63:90:67:09:bb:66:0a:56:72:26:73:c9:
         70:ba:95:b0:41:d1:ab:61:fb:ba:b2:4a:88:f2:86:7e:ff:dc:
         8a:ae:1d:2f:0b:17:9b:78:0d:ea:44:ed:b0:80:1e:f6:81:49:
         52:cd:0e:e2:5e:74:a7:d5:13:4a:f2:d9:6a:a8:2d:51:0d:99:
         79:b7:9d:d5:54:23:06:98:0c:30:85:c0:02:54:f2:22:8d:aa:
         d7:98:e5:8f:03:c2:c6:a5:ab:4d:ec:78:f0:bd:8d:eb:3e:26:
         1d:36:e0:1e:17:7a:00:e1:59:75:b5:df:b5:b8:d8:76:c5:92:
         bf:86:35:00:fc:35:66:af:3f:49:ab:53:c9:1b:20:e7:46:a4:
         fb:ca:95:b4:19:01:ae:0d:4e:d7:a3:58:25:8b:7b:d2:03:5e:
         9e:b7:e5:37:a3:f0:ca:88:da:98:b9:e0:ad:90:2a:69:cf:59:
         64:da:35:f4:b4:8f:6d:de:49:67:b6:92:4f:0a:31:d2:d4:39:
         3c:e1:f7:03:d7:36:45:dc:56:06:10:3b:18:42:b7:54:11:ef:
         2d:62:8d:22:66:11:55:04:77:81:c8:90:17:ee:87:05:25:7e:
         a9:d8:5e:a3:f6:08:34:d7:3e:4b:b7:07:94:28:58:7c:2f:d1:
         5f:a0:8b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:24:38 2026 by rpki-client