Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft
File:                     CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft (raw, json)
Hash identifier:          JVAcrzAlvWCI6Bh0ywnmac70EqW0ccBC/W4aFd+B558=
Subject key identifier:   20:47:96:ED:5D:41:94:EC:A7:13:3F:E9:74:BF:9C:FB:61:7A:C9:4B
Authority key identifier: 0B:10:E5:EF:EF:30:F8:CE:04:ED:4C:5B:8F:48:A9:CD:24:BC:BA:14
Certificate issuer:       /CN=A91886CC/serialNumber=0B10E5EFEF30F8CE04ED4C5B8F48A9CD24BCBA14
Certificate serial:       01A2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft
Manifest number:          019B
Signing time:             Sun 19 Apr 2026 02:23:20 +0000
Manifest this update:     Sun 19 Apr 2026 02:23:20 +0000
Manifest next update:     Sun 26 Apr 2026 02:23:20 +0000
Files and hashes:         1: CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl (hash: LBBy7LeXQQJBxsrON8YZmHFc+/iPdIQ7XGqMiRuGdoA=)
                          2: 6DAC44BAA91E11F0B822717EC4F9AE02.roa (hash: hMU+At17l1ZNCxKQ6DnMUhV3CzOxLfbG9qx0kdLMQj0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl
                          rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 02:23:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 418 (0x1a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91886CC, serialNumber=0B10E5EFEF30F8CE04ED4C5B8F48A9CD24BCBA14
        Validity
            Not Before: Apr 19 02:23:20 2026 GMT
            Not After : Apr 26 02:23:20 2026 GMT
        Subject: CN=69e43c98-c3b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:da:80:d9:df:15:4c:8f:9e:54:1c:7b:60:d9:
                    1a:84:73:eb:0d:af:49:64:ae:8d:3f:cc:c9:23:f9:
                    00:8e:65:78:2a:ad:fb:c7:2b:a9:f7:52:04:07:a0:
                    ee:d1:f5:6f:f5:60:18:9a:9c:e0:20:d5:27:84:bb:
                    1c:43:b7:4e:7c:65:4e:ae:99:4d:9d:af:59:55:4b:
                    cc:50:04:83:45:28:02:e3:15:0b:52:ec:50:7d:28:
                    80:9d:a8:83:1f:61:11:23:fa:bc:ad:c8:82:ce:12:
                    20:0c:8e:22:2c:8b:70:a5:55:60:ae:21:1b:c4:c8:
                    47:3a:6c:ce:6c:67:59:a1:db:4a:4f:0a:c0:7e:c1:
                    ba:a9:b2:06:81:3b:c3:e5:b4:46:50:c0:08:4a:d9:
                    20:bc:b2:cf:97:30:51:f2:2d:d8:90:88:17:f6:30:
                    11:f3:46:68:9f:81:6d:49:d7:40:f0:73:ef:4f:43:
                    f7:2d:27:d4:65:52:10:11:43:e7:ae:ab:b0:0b:c4:
                    9c:a6:ea:bf:c5:e5:aa:b1:2b:9f:ff:5b:02:90:4b:
                    78:39:3e:73:d4:f0:11:6d:ac:9b:aa:46:d2:0c:8b:
                    aa:53:91:53:ac:62:6d:52:b0:e7:ce:c2:ae:9f:1f:
                    64:3d:89:98:8f:2a:0e:aa:21:0e:de:45:9c:11:96:
                    09:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:47:96:ED:5D:41:94:EC:A7:13:3F:E9:74:BF:9C:FB:61:7A:C9:4B
            X509v3 Authority Key Identifier:
                keyid:0B:10:E5:EF:EF:30:F8:CE:04:ED:4C:5B:8F:48:A9:CD:24:BC:BA:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:6b:5f:9a:8d:79:79:eb:d1:65:73:60:3f:8a:d0:f2:0f:f3:
         e4:dc:18:b0:0f:63:4d:28:2a:93:88:e4:29:bf:4b:5e:5a:f1:
         83:10:9a:cd:29:03:eb:75:93:98:7c:49:cc:a7:06:85:03:54:
         96:50:75:27:e1:ae:3e:79:34:e0:e4:86:3c:74:cd:11:81:be:
         2b:db:b6:8b:ad:7f:99:03:bd:52:11:67:00:f6:29:3e:21:5d:
         99:36:72:aa:13:97:84:50:ca:60:5c:a4:b4:f7:8c:70:e6:fa:
         09:e2:e7:31:2d:fe:2e:3c:a4:82:ff:c6:e3:08:90:4e:3c:ee:
         87:40:44:3b:9a:f7:28:bc:58:4c:af:19:ca:cd:33:ab:fe:6a:
         7f:1e:41:99:89:4e:61:d3:fc:1d:ee:e1:63:da:1c:0b:8d:d4:
         55:78:b2:f6:71:5a:14:fc:65:3a:3d:38:e0:9f:4a:7a:9f:97:
         2f:b5:6b:34:46:68:61:3e:be:61:fd:85:91:92:2d:33:79:64:
         bf:8f:f0:61:58:c7:30:6d:c1:4e:7a:6c:58:30:b3:2b:40:87:
         fd:1a:36:c3:b3:6f:4a:1b:68:20:e6:9f:ec:ab:64:6c:72:19:
         b0:47:32:78:36:50:19:b9:56:4c:76:d8:d0:d8:fb:34:f4:83:
         19:ff:60:46
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODg2Q0MxMTAvBgNVBAUTKDBCMTBFNUVGRUYzMEY4Q0UwNEVENEM1QjhGNDhBOUNE
MjRCQ0JBMTQwHhcNMjYwNDE5MDIyMzIwWhcNMjYwNDI2MDIyMzIwWjAYMRYwFAYD
VQQDEw02OWU0M2M5OC1jM2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqNqA2d8VTI+eVBx7YNkahHPrDa9JZK6NP8zJI/kAjmV4Kq37xyup91IEB6Du
0fVv9WAYmpzgINUnhLscQ7dOfGVOrplNna9ZVUvMUASDRSgC4xULUuxQfSiAnaiD
H2ERI/q8rciCzhIgDI4iLItwpVVgriEbxMhHOmzObGdZodtKTwrAfsG6qbIGgTvD
5bRGUMAIStkgvLLPlzBR8i3YkIgX9jAR80Zon4FtSddA8HPvT0P3LSfUZVIQEUPn
rquwC8Scpuq/xeWqsSuf/1sCkEt4OT5z1PARbaybqkbSDIuqU5FTrGJtUrDnzsKu
nx9kPYmYjyoOqiEO3kWcEZYJtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCBHlu1d
QZTspxM/6XS/nPtheslLMB8GA1UdIwQYMBaAFAsQ5e/vMPjOBO1MW49Iqc0kvLoU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODZDQy81MTIxNDE1RUQ1
RjUxMUVFQjBGQTYwNUJDNEY5QUUwMi9DeERsNy04dy1NNEU3VXhiajBpcHpTUzh1
aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0N4RGw3LTh3LU00RTdVeGJqMGlwelNTOHVoUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
ODZDQy81MTIxNDE1RUQ1RjUxMUVFQjBGQTYwNUJDNEY5QUUwMi9DeERsNy04dy1N
NEU3VXhiajBpcHpTUzh1aFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAg2tfmo15eevRZXNgP4rQ8g/z5NwYsA9jTSgqk4jkKb9LXlrxgxCazSkD63WT
mHxJzKcGhQNUllB1J+GuPnk04OSGPHTNEYG+K9u2i61/mQO9UhFnAPYpPiFdmTZy
qhOXhFDKYFyktPeMcOb6CeLnMS3+Ljykgv/G4wiQTjzuh0BEO5r3KLxYTK8Zys0z
q/5qfx5BmYlOYdP8He7hY9ocC43UVXiy9nFaFPxlOj044J9Kep+XL7VrNEZoYT6+
Yf2FkZItM3lkv4/wYVjHMG3BTnpsWDCzK0CH/Ro2w7NvShtoIOaf7KtkbHIZsEcy
eDZQGblWTHbY0Nj7NPSDGf9gRg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:55:20 2026 by rpki-client