Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft
File:                     XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft (raw, json)
Hash identifier:          M/LLt4L7LHr2pHYLkXzs8pIg7z2OFCSwk26+MD9AdWQ=
Subject key identifier:   F7:64:F1:62:EE:C7:47:1A:0A:34:5A:45:A6:77:AA:5F:7A:D6:53:56
Authority key identifier: 5E:C5:FB:33:4E:E5:2B:90:09:CB:92:3C:69:3B:D2:0F:04:78:A1:44
Certificate issuer:       /CN=A918EF87/serialNumber=5EC5FB334EE52B9009CB923C693BD20F0478A144
Certificate serial:       AA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft
Manifest number:          A8
Signing time:             Fri 17 Apr 2026 06:55:04 +0000
Manifest this update:     Fri 17 Apr 2026 06:55:03 +0000
Manifest next update:     Fri 24 Apr 2026 06:55:03 +0000
Files and hashes:         1: XsX7M07lK5AJy5I8aTvSDwR4oUQ.crl (hash: xaVJjJwa0ffORLNA1PXNMyF0hfp0DJ8fygLq57Ijns4=)
                          2: C053613E38B311F08DB63209C4F9AE02.roa (hash: XGziVhW7bV6WTpnAO5hHSMS6E/tbFN56AbeKUPYhFNI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.crl
                          rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 170 (0xaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EF87, serialNumber=5EC5FB334EE52B9009CB923C693BD20F0478A144
        Validity
            Not Before: Apr 17 06:55:03 2026 GMT
            Not After : Apr 24 06:55:03 2026 GMT
        Subject: CN=69e1d947-60a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:80:08:25:fc:9f:a2:40:0b:23:02:75:8b:c4:
                    e7:46:36:e8:56:9b:9c:ca:0d:b7:4c:ce:1b:2c:59:
                    47:0c:5d:8f:46:e6:e2:ef:7d:09:4d:71:dc:5d:96:
                    a3:52:d9:39:d5:3e:67:c0:ff:21:f7:18:c1:3d:f0:
                    57:f2:78:f0:d4:96:11:ad:2d:a0:c6:b3:9a:1f:b7:
                    18:ea:19:08:46:b9:20:ae:ab:0c:e3:08:aa:ba:f6:
                    74:1d:49:e1:0d:8d:1d:2a:5c:bf:92:6d:74:e2:6a:
                    49:ef:0f:f9:02:8d:53:75:b9:a7:d1:b7:2b:53:44:
                    2d:de:6a:6f:6e:74:2f:4a:d8:ff:79:a6:7f:7d:9e:
                    73:93:16:42:93:99:35:4e:de:69:53:6c:d9:a4:a9:
                    a7:84:d5:23:71:9a:20:49:60:1c:3c:58:d2:f3:16:
                    6d:1d:fa:19:bc:34:0a:f0:d5:4a:b7:6d:6e:a2:e8:
                    cd:98:74:39:fc:58:49:37:e1:e8:84:ab:1a:23:d9:
                    45:8d:82:3f:83:53:ec:69:8d:49:e3:a0:4e:ce:10:
                    e1:a2:85:95:27:0f:1c:55:0d:1c:cf:91:fa:af:b0:
                    27:42:ba:7e:3a:39:29:a4:c3:30:d1:8d:cf:53:23:
                    23:c6:58:9d:43:95:63:ec:20:80:64:ca:a0:1c:1e:
                    2c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:64:F1:62:EE:C7:47:1A:0A:34:5A:45:A6:77:AA:5F:7A:D6:53:56
            X509v3 Authority Key Identifier:
                keyid:5E:C5:FB:33:4E:E5:2B:90:09:CB:92:3C:69:3B:D2:0F:04:78:A1:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:c6:c0:89:86:e1:5d:a8:ca:78:32:97:59:05:16:a8:49:0a:
         d0:96:c0:d2:1c:52:da:bd:b7:00:32:97:01:64:3c:e6:ac:eb:
         89:9c:44:c1:41:36:fa:7a:cc:c4:18:63:07:f3:e0:9e:75:a6:
         76:55:6b:62:83:08:12:24:55:69:ba:a4:9e:3d:4c:a5:b9:97:
         55:5e:b2:d4:f6:77:59:c4:19:37:ce:a9:3e:ae:8e:39:fc:75:
         71:d9:4f:5d:8a:97:9f:2c:07:3c:9c:db:48:51:a9:46:f2:cf:
         55:94:8a:51:b7:f4:dc:6b:4a:ed:ef:24:9e:ad:bf:85:ee:b1:
         a9:2d:96:d0:85:2c:33:e3:16:5c:f9:cc:64:d8:ce:03:c8:33:
         f0:e7:97:ee:3c:83:0b:21:95:c0:86:9b:d1:23:f1:53:75:89:
         9c:48:3a:e8:fb:42:ca:23:f0:69:93:f8:70:6d:78:0c:a3:5a:
         57:40:61:1f:ea:07:94:09:dc:33:2e:b4:a2:2a:bc:ec:89:80:
         b2:57:8f:20:e2:08:1e:7c:9a:a3:2b:52:43:7a:90:74:6f:7a:
         f4:75:7a:f4:7d:9e:cf:b5:fa:8f:06:27:b7:3a:11:aa:f0:6d:
         1d:8a:02:2f:db:d1:c6:1e:76:93:89:a6:b6:28:42:29:c7:28:
         81:e7:3f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:47:20 2026 by rpki-client