Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft
File:                     xIqs603a7jxgQuZiFq15FQe0fGs.mft (raw, json)
Hash identifier:          e0NXbmiy5ZAtE24DHFr+tcUDm0EEv81lL8CNcpTJF64=
Subject key identifier:   EA:70:DF:15:B9:A1:3C:F6:9E:D5:E8:01:E7:F9:25:63:E3:C6:6E:79
Authority key identifier: C4:8A:AC:EB:4D:DA:EE:3C:60:42:E6:62:16:AD:79:15:07:B4:7C:6B
Certificate issuer:       /CN=A918EF61/serialNumber=C48AACEB4DDAEE3C6042E66216AD791507B47C6B
Certificate serial:       19B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft
Manifest number:          19A8
Signing time:             Thu 16 Apr 2026 16:20:23 +0000
Manifest this update:     Thu 16 Apr 2026 16:20:22 +0000
Manifest next update:     Thu 23 Apr 2026 16:20:22 +0000
Files and hashes:         1: xIqs603a7jxgQuZiFq15FQe0fGs.crl (hash: pzxg5lPgwsf4J4AAVVKTLuEw4vg+D9q87AgTPtRMO54=)
                          2: C44B0ADA83DA11E7AD4F156CC4F9AE02.roa (hash: 0nLp1OlV0LLPyBtXTqJ9vts/gXbJ/cJqsL/wcTsmJpg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.crl
                          rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 16:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6580 (0x19b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EF61, serialNumber=C48AACEB4DDAEE3C6042E66216AD791507B47C6B
        Validity
            Not Before: Apr 16 16:20:22 2026 GMT
            Not After : Apr 23 16:20:22 2026 GMT
        Subject: CN=69e10c46-db8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:09:ef:dc:d3:67:91:06:5d:0e:48:9f:52:21:
                    c3:f2:db:39:6a:a6:62:ea:c5:2d:25:1d:83:76:16:
                    09:9e:db:4b:75:8f:ec:35:42:d0:11:89:13:80:43:
                    64:36:90:a0:4c:48:9b:c2:15:14:86:9a:f1:ff:25:
                    39:08:b7:04:8a:47:bd:5a:46:46:b9:47:48:02:e4:
                    18:00:b4:20:e9:ec:db:27:9d:69:18:ad:8c:3a:34:
                    6d:5e:44:55:2d:2c:1c:29:fd:38:ac:6b:7f:34:66:
                    ac:43:92:58:67:36:de:0f:0b:dc:a3:11:9d:16:a3:
                    0e:4d:10:3a:83:a1:e1:a1:2b:56:7e:27:75:ad:84:
                    77:09:31:00:eb:3f:19:0c:ad:9d:62:30:87:ec:ba:
                    e1:69:81:c4:dd:be:1b:d6:c8:da:48:e0:fa:c7:3a:
                    1f:00:c8:2b:5b:21:14:7b:2b:e8:35:87:2a:ce:f1:
                    1f:7d:7b:d9:99:ea:89:84:7d:4b:b2:66:dc:c5:21:
                    83:9c:91:15:ab:d6:54:f1:df:f0:29:0e:8e:25:34:
                    e9:c5:ad:16:93:ce:0c:b4:f7:3b:f2:1f:fa:4c:b0:
                    d0:c7:e7:dc:e5:be:fb:40:ff:ca:43:4c:66:d8:35:
                    e7:ab:25:11:05:ae:82:63:63:2a:a7:ca:33:d0:86:
                    17:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:70:DF:15:B9:A1:3C:F6:9E:D5:E8:01:E7:F9:25:63:E3:C6:6E:79
            X509v3 Authority Key Identifier:
                keyid:C4:8A:AC:EB:4D:DA:EE:3C:60:42:E6:62:16:AD:79:15:07:B4:7C:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:5a:a7:c2:8c:d0:d8:3f:3a:57:b0:d0:ea:ed:63:bf:71:b9:
         e8:c0:9d:8a:27:b4:dc:40:fe:30:74:ed:e0:87:d0:1d:b5:c3:
         5a:e1:23:cf:b4:a6:1d:aa:31:44:4b:be:b5:f9:ca:a9:06:03:
         1d:46:e0:ff:d5:3c:0b:16:3e:f6:04:38:23:65:3f:75:a4:73:
         e4:eb:ed:79:dd:30:19:1a:39:e2:b4:4b:28:03:9b:8c:e5:da:
         dd:a2:2d:5d:cc:08:21:ef:37:a0:16:27:f5:f8:39:80:90:c1:
         df:28:78:29:51:d4:8d:52:26:7c:80:da:c9:10:f7:2a:1c:62:
         d2:27:07:24:2d:43:2b:20:df:0f:ae:6d:5d:3f:15:84:51:2a:
         44:77:34:0d:31:df:ab:c4:37:55:50:e8:39:cd:1f:1b:46:d3:
         42:8b:b1:79:b5:cb:c4:85:19:7e:59:0f:af:63:63:b9:a8:c9:
         6c:34:ec:0a:18:24:13:56:81:98:0f:b8:a0:4e:b8:a6:36:f6:
         7b:8f:88:d3:6e:ca:e3:45:a0:14:ba:31:07:03:e6:d9:d6:d3:
         50:e2:0b:a7:9a:f8:26:50:90:6d:38:e0:e0:54:68:f6:bb:f8:
         e7:81:57:07:7a:b9:ab:73:8f:7c:1b:3a:3b:6c:94:fa:2e:e1:
         3d:9f:0c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:14:11 2026 by rpki-client