Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.mft
File:                     zXuGlWvtndYhW-SF8McVuSDJp3A.mft (raw, json)
Hash identifier:          AddFH9+kjEzIF2K/ldESlUIhebrmzTN5fBWayn6onXU=
Subject key identifier:   EE:44:6A:26:04:64:78:DA:5A:F1:A6:95:86:5A:6C:C3:B3:16:74:1A
Authority key identifier: CD:7B:86:95:6B:ED:9D:D6:21:5B:E4:85:F0:C7:15:B9:20:C9:A7:70
Certificate issuer:       /CN=A918B61E/serialNumber=CD7B86956BED9DD6215BE485F0C715B920C9A770
Certificate serial:       01A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zXuGlWvtndYhW-SF8McVuSDJp3A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.mft
Manifest number:          0191
Signing time:             Fri 17 Apr 2026 04:06:17 +0000
Manifest this update:     Fri 17 Apr 2026 04:06:16 +0000
Manifest next update:     Fri 24 Apr 2026 04:06:16 +0000
Files and hashes:         1: zXuGlWvtndYhW-SF8McVuSDJp3A.crl (hash: eQY/WS10nP5Ps0x63cBP+4ep5U/wyIM2e7DZufPyov8=)
                          2: 601B8CF6D54F11EE93ED1E3BC4F9AE02.roa (hash: XaSQUf21ebfeg5fi8gs+vpqt0VSgirtRpmEUkskZ/hY=)
                          3: 60DF983AD54F11EE93ED1E3BC4F9AE02.roa (hash: kdFRNXxjRgZGt+XKW4jgp2QykvKoS0+45SQN11kAp98=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.crl
                          rsync://rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zXuGlWvtndYhW-SF8McVuSDJp3A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:06:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 419 (0x1a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B61E, serialNumber=CD7B86956BED9DD6215BE485F0C715B920C9A770
        Validity
            Not Before: Apr 17 04:06:16 2026 GMT
            Not After : Apr 24 04:06:16 2026 GMT
        Subject: CN=69e1b1b9-0a07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5e:be:65:d8:92:b6:2f:f8:dd:f1:d4:94:8e:
                    73:55:f8:3c:f5:98:4c:e5:d3:09:d9:6e:c0:bf:d4:
                    ec:22:50:fe:63:39:ec:e8:76:5f:73:ca:0a:6e:69:
                    39:0d:a1:ca:80:ef:8c:87:e4:d8:63:6b:78:4b:03:
                    19:83:ac:92:a5:2e:c4:6c:d6:40:01:ed:1f:d6:e8:
                    8c:df:83:69:b1:73:53:63:b5:f9:fb:cd:9e:df:e8:
                    fa:b6:de:05:1a:43:81:d6:5f:1c:a4:6b:7a:7c:df:
                    91:b4:ca:cb:13:cf:49:9c:4b:59:4e:f3:7a:87:de:
                    bd:01:7f:21:7e:54:16:ec:17:36:00:33:cb:5c:39:
                    5e:21:bd:7b:67:21:eb:ce:37:8d:59:63:77:13:16:
                    72:90:1f:ee:19:94:c3:59:12:83:bb:d7:ae:e8:70:
                    84:81:91:ac:e2:f9:fd:f5:4c:2f:86:8c:3d:c3:a4:
                    41:7b:20:42:f3:44:5f:88:33:58:7f:c8:71:2f:b7:
                    58:d7:49:8e:f2:52:0d:f5:12:87:fb:5b:22:1f:eb:
                    ae:54:55:aa:5a:08:7c:b2:11:ca:05:e6:03:53:8d:
                    48:88:7b:17:2f:4e:e0:b2:89:7b:71:ce:fd:c2:13:
                    51:3f:63:7b:a8:70:9c:2d:60:09:22:f5:57:f5:d9:
                    ea:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:44:6A:26:04:64:78:DA:5A:F1:A6:95:86:5A:6C:C3:B3:16:74:1A
            X509v3 Authority Key Identifier:
                keyid:CD:7B:86:95:6B:ED:9D:D6:21:5B:E4:85:F0:C7:15:B9:20:C9:A7:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zXuGlWvtndYhW-SF8McVuSDJp3A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:db:80:3d:6f:4c:0d:59:46:f0:00:6d:7c:1b:dd:bb:3b:58:
         0c:4d:04:35:47:61:90:bd:9b:0a:52:f1:4a:0f:38:f6:29:57:
         04:3b:3f:0c:68:d7:eb:5b:9e:97:ea:93:fa:8a:26:37:bc:76:
         d0:73:b8:90:34:0c:09:da:45:f6:81:60:04:36:d1:2e:7c:be:
         43:17:f7:67:ad:78:8f:03:1b:97:a6:c3:63:e9:bc:79:6e:9b:
         0e:59:74:47:e3:40:56:e2:e4:94:b0:a8:57:5c:27:59:4d:96:
         e7:af:f4:c7:9d:36:7a:7a:1a:07:a9:11:43:34:ef:32:10:5c:
         aa:80:f3:3a:85:03:15:c5:e2:e9:32:2a:a3:08:a7:b3:61:f3:
         dc:c2:1c:eb:e5:38:3c:81:7c:9e:d4:e3:7b:03:3b:56:94:f0:
         3f:df:3b:6e:b7:38:da:32:80:a7:9a:da:dc:78:be:66:9f:25:
         f6:08:e6:57:fb:22:03:37:ac:9c:37:b5:7e:9f:97:b2:b6:d3:
         58:6b:54:19:20:b3:75:1b:7d:f3:a4:08:dd:d8:51:24:f7:85:
         0b:15:93:1f:e1:2d:cf:08:f8:2b:30:70:f8:7b:b9:b6:44:3f:
         ab:3b:2b:ef:e5:9e:94:ae:63:0b:f9:18:bc:7f:41:f0:31:dc:
         e3:ee:36:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:39:30 2026 by rpki-client