Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.mft
File:                     XiM50eqvU0mhOKR5fagtDrTfqew.mft (raw, json)
Hash identifier:          QqmO4xWPYmzdIADMezh8Tg+QEJ4o5gIACWlAgGnaCHk=
Subject key identifier:   C8:3F:87:91:D7:BC:B2:8C:9C:5B:DE:68:1D:C8:65:82:83:78:E9:73
Authority key identifier: 5E:23:39:D1:EA:AF:53:49:A1:38:A4:79:7D:A8:2D:0E:B4:DF:A9:EC
Certificate issuer:       /CN=A918CFAD/serialNumber=5E2339D1EAAF5349A138A4797DA82D0EB4DFA9EC
Certificate serial:       0186
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XiM50eqvU0mhOKR5fagtDrTfqew.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.mft
Manifest number:          0181
Signing time:             Fri 17 Apr 2026 04:14:50 +0000
Manifest this update:     Fri 17 Apr 2026 04:14:50 +0000
Manifest next update:     Fri 24 Apr 2026 04:14:50 +0000
Files and hashes:         1: XiM50eqvU0mhOKR5fagtDrTfqew.crl (hash: cghsjot5uhpCjephFnGeSr98X5/GAzpGrAc470O/VUY=)
                          2: D161B1F0EA0411EE98A86A13C4F9AE02.roa (hash: DKo1dNSY0/MC6eYJVV90BVwNV83Azf/Byd1oG5pYyiY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.crl
                          rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XiM50eqvU0mhOKR5fagtDrTfqew.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 390 (0x186)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918CFAD, serialNumber=5E2339D1EAAF5349A138A4797DA82D0EB4DFA9EC
        Validity
            Not Before: Apr 17 04:14:50 2026 GMT
            Not After : Apr 24 04:14:50 2026 GMT
        Subject: CN=69e1b3ba-cb93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:04:ad:e5:61:27:03:c9:35:cc:42:78:87:e1:
                    6f:21:af:02:c0:31:03:62:43:93:fa:89:1d:e1:99:
                    92:9b:e3:1e:f3:f4:e6:8e:20:b9:c4:51:91:27:d3:
                    43:6d:98:34:75:30:94:ea:91:cf:4a:86:60:29:f8:
                    47:47:b0:86:04:bb:f3:f1:26:77:52:16:3e:f2:94:
                    1f:44:4e:60:4d:3e:f3:3f:cd:c9:52:f7:d4:ea:7f:
                    da:a9:ce:36:eb:ea:56:e9:e6:08:93:10:16:c7:6f:
                    26:72:5b:a1:bd:46:6e:8a:43:9e:4c:19:be:22:8b:
                    9f:f8:9f:92:6a:b0:e9:f4:93:33:b2:94:cf:7d:72:
                    f8:da:04:1c:26:60:25:e5:0c:69:82:fd:57:60:0b:
                    ad:bc:29:c8:44:3a:b8:8c:db:2d:71:e5:32:e7:02:
                    f7:df:e7:e9:72:4e:ad:b9:46:b5:1d:7e:d8:f6:d7:
                    0b:22:bc:4b:45:e2:61:88:cd:8b:11:de:16:33:f3:
                    a3:c7:83:3e:d5:ff:22:28:74:16:20:8b:b6:fc:00:
                    4f:66:d4:a0:a5:19:68:3e:9a:75:eb:01:ef:77:ab:
                    af:e7:e4:5d:f3:e6:52:8d:96:67:ab:66:2f:15:a0:
                    dd:4b:b2:40:30:b5:78:bf:44:d8:93:ab:e1:b8:2d:
                    3e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:3F:87:91:D7:BC:B2:8C:9C:5B:DE:68:1D:C8:65:82:83:78:E9:73
            X509v3 Authority Key Identifier:
                keyid:5E:23:39:D1:EA:AF:53:49:A1:38:A4:79:7D:A8:2D:0E:B4:DF:A9:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XiM50eqvU0mhOKR5fagtDrTfqew.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:6f:6c:60:bd:69:58:09:a6:c5:65:36:de:3a:f3:e3:19:07:
         4e:25:39:93:8e:2b:f5:12:81:87:aa:16:b4:39:24:6f:51:45:
         e2:f4:e3:a6:b5:ad:c3:39:a4:37:48:2d:bc:d5:64:b2:fa:16:
         fe:a1:3a:e3:73:14:8e:25:b5:d7:25:b2:55:6a:17:ac:98:99:
         43:c3:5b:23:10:07:b6:90:12:d8:ca:c7:e0:2a:d8:e8:75:08:
         05:42:17:8f:2a:df:fc:d4:46:c2:d5:5e:16:ea:06:e4:9c:f6:
         a7:e4:eb:0c:7b:36:88:ea:9c:06:ab:97:4c:6b:b9:f0:62:20:
         4e:36:e5:85:4a:45:d8:49:81:dc:36:9b:71:fc:7e:21:97:6a:
         97:81:95:eb:2d:a3:c9:d7:87:df:9f:9c:fb:d0:62:af:5d:05:
         ce:2c:0f:63:49:d8:d5:45:ec:88:0f:ce:5d:15:94:a0:b1:fe:
         13:ee:e5:ea:98:e3:46:e4:53:4a:d9:04:24:03:ed:e9:5f:cc:
         4b:2d:a2:bc:2c:33:1a:07:6a:41:77:0f:1d:ba:5d:ff:7f:42:
         c2:3d:9d:cc:3c:c4:1a:e2:9a:10:10:c4:aa:b4:19:0e:07:1f:
         1d:94:d6:81:b0:b0:57:ad:ad:32:2e:78:0c:af:7e:6b:20:c7:
         16:fd:21:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:16:52 2026 by rpki-client