Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft
File:                     Cr_XemhpLv60MkAP_d3XrhsjvCc.mft (raw, json)
Hash identifier:          jeGtm0dGWAb7Ze8rvBEkr5aSjDN8L+CqtwrDmwr3GwU=
Subject key identifier:   72:05:F8:19:0C:4D:00:BB:B8:3B:9A:92:5F:A3:8B:20:AC:FE:71:24
Authority key identifier: 0A:BF:D7:7A:68:69:2E:FE:B4:32:40:0F:FD:DD:D7:AE:1B:23:BC:27
Certificate issuer:       /CN=A9194A8C/serialNumber=0ABFD77A68692EFEB432400FFDDDD7AE1B23BC27
Certificate serial:       0566
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cr_XemhpLv60MkAP_d3XrhsjvCc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft
Manifest number:          0761
Signing time:             Thu 16 Apr 2026 23:15:58 +0000
Manifest this update:     Thu 16 Apr 2026 23:15:58 +0000
Manifest next update:     Thu 23 Apr 2026 23:15:58 +0000
Files and hashes:         1: Cr_XemhpLv60MkAP_d3XrhsjvCc.crl (hash: iBx3ngudjhUssxIlOTDPAQBcOV3Ov2mvuOHgXwh/+z8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.crl
                          rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cr_XemhpLv60MkAP_d3XrhsjvCc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:15:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1382 (0x566)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194A8C, serialNumber=0ABFD77A68692EFEB432400FFDDDD7AE1B23BC27
        Validity
            Not Before: Apr 16 23:15:58 2026 GMT
            Not After : Apr 23 23:15:58 2026 GMT
        Subject: CN=69e16dae-a9b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:49:01:b0:86:52:2b:5c:dc:9e:b3:39:26:16:
                    65:ba:1b:ff:9c:35:e7:6b:e4:e6:5e:ab:3e:66:ef:
                    54:2d:35:24:76:fa:52:37:b1:87:45:72:ec:c8:82:
                    db:a0:ae:47:36:75:3f:10:a4:02:62:44:25:95:d2:
                    10:5c:ec:26:20:65:24:23:dd:15:cb:29:9c:51:9c:
                    fe:62:dc:86:b5:5f:eb:46:7a:3c:d6:8d:9a:dd:7e:
                    29:61:b8:41:73:07:e6:e3:3c:6c:76:87:2f:ec:33:
                    25:ce:7d:e6:0e:98:09:b8:f8:76:f4:9d:50:53:6c:
                    96:a5:66:ef:55:40:24:70:a7:b1:7e:42:6e:e1:6c:
                    c5:47:ad:c1:32:38:64:b4:7b:ee:93:b7:d5:ef:a2:
                    7e:93:de:e6:b0:d1:88:f0:d5:69:47:2a:60:a8:c0:
                    1b:ea:2a:a5:eb:05:6a:ba:e8:de:43:39:94:25:d2:
                    91:78:86:8f:4d:31:cc:20:30:3b:f3:c9:18:2f:0c:
                    e4:68:a6:e9:fe:93:82:1c:99:88:74:fb:db:b0:d4:
                    fb:f6:23:39:62:de:40:16:1e:71:70:b1:86:e2:51:
                    c4:1b:a4:b4:c3:2f:77:46:57:d3:6b:5a:bb:d2:73:
                    7b:84:48:d7:dc:29:9a:e8:c5:ec:58:80:84:f1:49:
                    30:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:05:F8:19:0C:4D:00:BB:B8:3B:9A:92:5F:A3:8B:20:AC:FE:71:24
            X509v3 Authority Key Identifier:
                keyid:0A:BF:D7:7A:68:69:2E:FE:B4:32:40:0F:FD:DD:D7:AE:1B:23:BC:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cr_XemhpLv60MkAP_d3XrhsjvCc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:67:c2:e8:fa:0d:6c:55:32:87:1e:06:f1:68:a8:99:3c:ae:
         1b:83:1f:3e:0b:5b:5b:e2:44:6c:e0:cd:a1:26:f5:ad:a6:c1:
         57:18:3e:64:b3:8c:1d:ca:cc:39:da:a1:b9:76:fe:d1:9e:ba:
         f1:59:f9:c5:97:e4:ae:df:ec:7d:0a:f8:c9:95:31:34:42:ae:
         38:6f:a2:9a:c0:e7:1d:9a:a9:37:88:1e:c3:6b:04:a5:57:6a:
         d3:aa:d6:15:61:1a:2c:fb:ff:7a:02:64:92:ae:a8:46:45:01:
         e0:77:33:c5:38:1a:19:2c:76:2d:b1:46:95:73:b0:50:07:e8:
         98:46:d1:5c:01:37:55:fc:b8:5f:5b:74:90:c0:d2:f6:53:ca:
         cc:e3:d6:41:d1:60:c9:b5:f0:16:d3:48:45:77:b7:c0:c5:74:
         e7:2c:c3:95:3e:51:f3:c9:0c:3f:9d:71:b3:a4:c2:44:f9:b3:
         48:2d:61:61:3a:b4:9e:70:3e:dc:49:05:b0:5c:bb:0c:a5:98:
         27:31:25:d2:1c:c2:6e:fb:4a:78:8b:02:44:5e:ac:84:6f:71:
         c1:a5:fd:e7:bc:b2:35:ce:c1:00:a6:20:ca:97:22:d7:3d:de:
         b8:52:3a:c4:f9:07:ec:90:58:c5:63:ae:c4:30:05:d9:37:77:
         b9:fa:5c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:51:54 2026 by rpki-client