Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft
File:                     2xinykRiG1ZTwgBDlHaz8qOAhT4.mft (raw, json)
Hash identifier:          F3O5Te7D3tiZw8bboQ1gP28eqekMmpv6yINjzAHmbN8=
Subject key identifier:   B8:3B:27:C9:F8:14:BC:C2:23:87:01:BD:77:BE:15:2A:4A:39:2A:B4
Authority key identifier: DB:18:A7:CA:44:62:1B:56:53:C2:00:43:94:76:B3:F2:A3:80:85:3E
Certificate issuer:       /CN=A918C774/serialNumber=DB18A7CA44621B5653C200439476B3F2A380853E
Certificate serial:       353C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xinykRiG1ZTwgBDlHaz8qOAhT4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft
Manifest number:          3533
Signing time:             Thu 16 Apr 2026 14:53:32 +0000
Manifest this update:     Thu 16 Apr 2026 14:53:32 +0000
Manifest next update:     Thu 23 Apr 2026 14:53:32 +0000
Files and hashes:         1: 2xinykRiG1ZTwgBDlHaz8qOAhT4.crl (hash: D12WxFYx1LzpAIlfAUbRCYsdcvzybSzm+nB87nGcQ9g=)
                          2: 0458A9A409FB11EA8742F60AC4F9AE02.roa (hash: LC97LkNyCch8PpadNtuDgtVq+g6dfVllu2MEvl1zkNM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.crl
                          rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xinykRiG1ZTwgBDlHaz8qOAhT4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 14:53:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13628 (0x353c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C774, serialNumber=DB18A7CA44621B5653C200439476B3F2A380853E
        Validity
            Not Before: Apr 16 14:53:32 2026 GMT
            Not After : Apr 23 14:53:32 2026 GMT
        Subject: CN=69e0f7ec-f7f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4e:76:f7:dc:16:ea:b6:a2:df:e4:50:5c:a0:
                    63:42:23:0a:60:87:f8:b8:d6:f0:98:22:7d:26:c4:
                    da:06:b8:2a:5b:a2:8f:3f:f9:fb:7e:04:b6:68:0e:
                    a4:07:0a:aa:bd:2f:3b:0c:ec:36:f5:2c:77:0a:71:
                    39:3d:83:f6:3f:18:d2:e9:1a:05:ec:0a:b4:02:10:
                    82:5e:a4:81:46:4d:0f:a5:fb:70:b4:85:24:7d:1b:
                    31:39:57:a7:a0:18:c4:46:81:f7:35:51:67:87:10:
                    63:dd:42:17:1e:7b:07:7b:46:17:cd:92:5c:22:7f:
                    29:ee:83:cf:1f:94:f9:84:3c:ea:5b:a2:4d:14:4e:
                    42:95:5a:9c:ae:d0:3f:0b:44:02:ad:09:d2:74:9b:
                    ad:e2:53:2d:c1:7c:c4:65:d0:bd:e3:77:2c:44:79:
                    ee:d5:3b:19:34:b4:90:ec:b5:8a:98:df:b2:50:de:
                    6d:1f:a2:aa:2b:ab:f9:70:81:da:7e:87:14:d3:4b:
                    b3:5f:af:6a:c7:dd:ed:97:5a:61:f6:fc:39:26:53:
                    52:7e:cd:22:d6:0d:a8:fc:4a:65:72:d5:6b:0f:9f:
                    62:2d:5f:85:d2:95:a0:15:b9:ba:87:7b:6c:96:00:
                    d7:fa:d2:af:25:38:8c:7e:1c:04:ad:51:d6:e2:52:
                    25:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:3B:27:C9:F8:14:BC:C2:23:87:01:BD:77:BE:15:2A:4A:39:2A:B4
            X509v3 Authority Key Identifier:
                keyid:DB:18:A7:CA:44:62:1B:56:53:C2:00:43:94:76:B3:F2:A3:80:85:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xinykRiG1ZTwgBDlHaz8qOAhT4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:cd:9d:a3:6f:5e:3d:71:d1:0d:d0:bf:1c:fa:6b:6e:01:ae:
         f9:f0:f2:ad:03:52:32:c7:b0:65:16:83:b2:21:07:e5:63:74:
         52:e0:e0:6a:f4:d3:22:83:33:1c:00:e5:7f:3f:7a:f8:0e:52:
         11:4d:80:f3:12:ba:73:6e:1e:01:f0:37:56:95:e4:07:35:5a:
         9b:fe:b0:27:43:cd:25:04:19:f6:5a:3c:49:9a:da:00:b1:e8:
         37:3b:9b:73:27:8b:8d:61:39:9c:b6:a5:63:27:e9:a2:2d:3b:
         18:a4:e6:0a:71:79:79:e5:bb:ca:a0:23:20:c0:38:0c:a6:ac:
         7f:7c:ae:20:84:bd:65:a4:7c:a1:4e:b5:13:79:3d:6a:ce:e9:
         8a:5f:b8:ad:bf:53:04:db:8b:2b:01:55:7d:2d:68:af:12:fa:
         c6:ab:0b:67:1f:9e:65:21:a0:69:89:56:71:40:dd:25:a2:e7:
         91:ea:7c:08:4e:51:7d:f2:a3:c4:c4:91:aa:ca:93:fb:90:c2:
         ac:68:22:bf:fa:eb:d7:b9:67:a6:24:87:06:26:f9:41:95:cb:
         f4:d4:09:0c:88:bf:b7:da:4f:da:b0:43:70:e3:45:c1:50:87:
         35:bd:4b:d3:b4:5e:ee:0a:cf:e0:97:15:ca:86:63:02:36:e7:
         47:1f:ad:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:30:58 2026 by rpki-client