Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft
File:                     xPprur_RmXzI8dIP5qVXTe6bMlY.mft (raw, json)
Hash identifier:          opbmMKzZ6J/yTt8Gz3Q+OQcpJbqbM8mnzMOZeeVvwF8=
Subject key identifier:   8A:80:CA:92:E1:EF:5F:F9:4E:8E:57:0D:7C:4E:06:68:33:91:7C:D8
Authority key identifier: C4:FA:6B:BA:BF:D1:99:7C:C8:F1:D2:0F:E6:A5:57:4D:EE:9B:32:56
Certificate issuer:       /CN=A9187532/serialNumber=C4FA6BBABFD1997CC8F1D20FE6A5574DEE9B3256
Certificate serial:       022A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPprur_RmXzI8dIP5qVXTe6bMlY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft
Manifest number:          0224
Signing time:             Fri 17 Apr 2026 02:29:50 +0000
Manifest this update:     Fri 17 Apr 2026 02:29:50 +0000
Manifest next update:     Fri 24 Apr 2026 02:29:50 +0000
Files and hashes:         1: xPprur_RmXzI8dIP5qVXTe6bMlY.crl (hash: J8Y8+HvNhjTBbMiCIGJHDIDQCFu5iMrpLw8plE0+ujE=)
                          2: 8D176BFAF65011ED90F79C33C4F9AE02.roa (hash: aajUanjdNrNtkjhupeIjAdiXMn4aEREZ53JBb0jvqlQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.crl
                          rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPprur_RmXzI8dIP5qVXTe6bMlY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:29:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 554 (0x22a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187532, serialNumber=C4FA6BBABFD1997CC8F1D20FE6A5574DEE9B3256
        Validity
            Not Before: Apr 17 02:29:50 2026 GMT
            Not After : Apr 24 02:29:50 2026 GMT
        Subject: CN=69e19b1e-a6ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:84:34:ca:be:3e:39:fe:5f:b3:15:e2:4b:ee:
                    cf:47:f6:c1:5d:1b:f4:22:ec:74:98:ab:53:3c:f8:
                    bb:61:03:cc:05:6e:08:8d:c6:b6:8e:a0:a0:9a:7c:
                    a0:80:74:fe:91:dc:44:d0:1a:56:a0:ef:7a:58:a6:
                    5d:75:70:e8:a4:a8:ec:ea:ce:d9:9c:11:fc:1a:ca:
                    38:41:92:58:8a:44:98:3d:6b:47:f6:65:04:3d:d3:
                    02:0d:26:8e:93:23:15:69:55:a2:74:8a:26:5d:df:
                    83:e6:87:0f:ee:de:6e:b4:d0:0f:93:5a:41:b2:0f:
                    7f:7a:0a:88:a7:de:8a:44:94:e5:40:78:84:62:e2:
                    cc:6e:c3:99:d0:38:62:4a:d9:ad:3c:ab:d7:94:ed:
                    9e:c2:f5:cd:2c:54:86:b9:80:0d:32:46:87:87:55:
                    e0:12:7f:71:fe:90:f5:33:c8:4f:36:cd:80:35:8a:
                    6c:45:70:37:2f:c6:92:5f:58:e1:57:68:52:bc:d8:
                    54:38:66:c1:88:eb:ec:f9:12:36:8f:80:a3:a2:7f:
                    0d:2f:97:3e:67:b4:48:12:b8:ad:c7:40:45:58:bf:
                    75:43:dd:63:cc:bb:0d:8a:06:48:4a:d6:6b:00:d1:
                    fb:6c:2c:45:4a:51:76:ef:0f:2c:b8:98:42:a3:84:
                    36:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:80:CA:92:E1:EF:5F:F9:4E:8E:57:0D:7C:4E:06:68:33:91:7C:D8
            X509v3 Authority Key Identifier:
                keyid:C4:FA:6B:BA:BF:D1:99:7C:C8:F1:D2:0F:E6:A5:57:4D:EE:9B:32:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPprur_RmXzI8dIP5qVXTe6bMlY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:20:db:f1:58:48:93:28:d0:1f:cc:77:0b:4c:10:31:24:a9:
         26:79:c6:0e:d7:f8:e8:fd:55:8a:a1:bd:f4:1a:ce:cc:d4:9f:
         8b:7c:1e:3f:ae:46:5b:b5:e8:69:bb:a3:be:67:f0:07:44:ba:
         b6:02:90:3e:31:c1:2f:37:29:1a:35:7f:30:df:b9:36:6b:d9:
         95:b6:07:ee:ab:ca:98:1e:78:46:f6:57:3c:ee:92:9f:a1:21:
         6c:81:24:ba:00:b9:36:78:99:44:70:f5:4f:af:2b:b3:22:4b:
         ac:4e:47:ba:b1:ab:c1:d9:cc:65:90:1e:09:f7:a0:2f:b9:55:
         47:fd:5e:c3:44:77:1d:c0:56:68:f9:b4:f1:bc:0a:73:f4:d0:
         a4:ae:53:f3:20:5c:9a:bf:6e:c8:0f:58:87:8b:5e:3f:ab:01:
         51:a3:f8:f4:62:4d:34:64:ef:3c:c2:f8:1c:87:cd:c3:ea:5d:
         19:49:ab:19:db:66:a9:75:33:09:22:48:2b:6f:d1:0c:63:2d:
         d5:f9:b3:8a:0b:b3:0f:11:55:05:a1:0f:37:58:6f:41:44:94:
         65:d7:f9:73:46:2b:05:8a:24:71:fe:9a:c0:aa:8e:d4:cf:0d:
         7a:a7:c5:00:dd:82:9d:75:02:3e:78:a5:96:a1:92:43:04:c2:
         fb:6d:75:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:07:05 2026 by rpki-client