Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft
File:                     X8Poba5DUxWI6wFdUB4xcSBfCFE.mft (raw, json)
Hash identifier:          jgsWz7JJfelejDeN53jxkn416VtjAFHPthyHuZn1sng=
Subject key identifier:   8C:56:98:FE:61:D8:07:6E:E7:4D:27:A5:0C:DE:17:D5:6A:1C:95:30
Authority key identifier: 5F:C3:E8:6D:AE:43:53:15:88:EB:01:5D:50:1E:31:71:20:5F:08:51
Certificate issuer:       /CN=A9190491/serialNumber=5FC3E86DAE43531588EB015D501E3171205F0851
Certificate serial:       07D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Poba5DUxWI6wFdUB4xcSBfCFE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft
Manifest number:          07C8
Signing time:             Thu 16 Apr 2026 21:17:40 +0000
Manifest this update:     Thu 16 Apr 2026 21:17:39 +0000
Manifest next update:     Thu 23 Apr 2026 21:17:39 +0000
Files and hashes:         1: X8Poba5DUxWI6wFdUB4xcSBfCFE.crl (hash: EMXgQDzentchodcB1p/YNJT2cB1pfoxZxLzW+zS0x/o=)
                          2: 59C3EE36683611EBAF38B01FC4F9AE02.roa (hash: FiJS4cFwnxf/JxN138pQZVaNHd2K178xuIIaltslIoU=)
                          3: FA93793637C011EB97405947C4F9AE02.roa (hash: ldXQuS9J+x+tniCGZo6XJVyJ4zu+DPyHUrx89zjZ/Vc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.crl
                          rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Poba5DUxWI6wFdUB4xcSBfCFE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:17:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2009 (0x7d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190491, serialNumber=5FC3E86DAE43531588EB015D501E3171205F0851
        Validity
            Not Before: Apr 16 21:17:39 2026 GMT
            Not After : Apr 23 21:17:39 2026 GMT
        Subject: CN=69e151f4-1038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:04:7a:4e:6c:b1:66:03:35:d6:18:18:84:55:
                    26:6f:11:f0:27:51:d9:0c:3f:65:2b:ee:11:3d:85:
                    9a:26:c8:c6:8e:68:b9:c7:23:67:a5:e4:73:90:27:
                    e9:5a:e4:09:6f:a9:27:2a:65:37:1b:ba:01:ca:e0:
                    09:2c:db:ef:47:5f:5f:c1:5c:67:05:50:79:42:ed:
                    9a:d1:22:38:c8:07:23:db:77:46:5d:c0:b6:98:4e:
                    e0:c4:fb:07:24:0f:f3:4e:45:8c:8e:4e:66:57:43:
                    f1:6b:14:10:fa:bc:3b:eb:35:45:6c:5e:0d:a3:3c:
                    7d:d5:f0:a4:f5:19:25:5e:61:96:72:ce:2b:91:26:
                    6d:a9:09:36:52:72:84:03:50:7b:6f:2d:ba:55:23:
                    36:9d:b8:0a:7f:37:2a:9c:82:8c:73:c6:9d:40:64:
                    3b:48:d2:c9:34:c4:d8:20:d9:1e:7d:da:e9:1f:50:
                    2f:89:86:a8:44:c6:2f:d4:91:bc:ee:6d:f9:1e:20:
                    f5:39:80:67:01:b3:33:e7:ba:47:69:46:c4:0c:8a:
                    5b:e4:31:7b:ef:d3:38:3e:2d:1f:5f:d1:5e:c5:ca:
                    8d:9c:f9:c9:df:b7:85:1d:e2:f5:0f:ab:91:e2:c0:
                    0f:80:51:a6:34:c1:93:cd:44:39:24:25:ba:a0:4a:
                    62:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:56:98:FE:61:D8:07:6E:E7:4D:27:A5:0C:DE:17:D5:6A:1C:95:30
            X509v3 Authority Key Identifier:
                keyid:5F:C3:E8:6D:AE:43:53:15:88:EB:01:5D:50:1E:31:71:20:5F:08:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Poba5DUxWI6wFdUB4xcSBfCFE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:50:92:90:b4:6a:8f:b4:bb:ed:44:ab:8b:b4:7b:08:c1:22:
         71:54:76:49:27:fa:3c:b2:3a:19:27:72:ad:6f:85:93:be:44:
         27:60:31:05:59:c1:3f:43:d6:a9:26:45:5a:db:bb:fe:f8:d1:
         07:fb:07:63:75:f4:6a:f3:35:d8:1e:8a:f9:a0:79:e0:28:bb:
         39:c8:71:60:9e:ed:3c:9f:59:81:0c:a9:36:5e:7a:e3:12:01:
         a1:af:7f:b0:62:6d:58:0f:93:b9:cd:97:c8:05:c3:a3:01:fa:
         16:47:94:bb:f6:46:a6:ba:20:50:3b:56:e4:90:0e:00:55:84:
         6f:26:3a:74:34:7b:e9:98:d0:c1:60:77:b8:b8:b4:c8:a6:71:
         73:6d:14:8d:6e:ad:f1:e7:25:38:a5:9f:70:8e:7b:a4:e2:1b:
         01:71:9a:f8:8a:94:ba:be:db:bb:f2:6b:df:12:4b:76:97:fe:
         63:7c:fe:46:4a:2d:43:ee:21:43:9e:51:a1:63:82:78:82:50:
         a8:df:d0:d2:af:32:6b:94:58:c0:d9:bb:f7:f7:e9:3a:2b:68:
         9e:ab:04:a5:b0:e2:c6:61:a6:fe:c0:1a:3b:93:83:6e:60:8c:
         bd:dc:99:e1:c4:44:85:ce:56:f3:6d:44:c5:21:77:7d:11:11:
         84:56:00:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:28:18 2026 by rpki-client