Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/XrCY701WVcxmtq-Bw83kBi2ALzs.mft
File:                     XrCY701WVcxmtq-Bw83kBi2ALzs.mft (raw, json)
Hash identifier:          h1U/GfcUaoQ78Dt3FUU8HqvltRvraVe7S50H+uIdr6s=
Subject key identifier:   7D:3B:BA:62:1D:54:E8:3E:6C:7E:3E:DA:DE:83:63:AE:14:0B:C2:AF
Authority key identifier: 5E:B0:98:EF:4D:56:55:CC:66:B6:AF:81:C3:CD:E4:06:2D:80:2F:3B
Certificate issuer:       /CN=A919E3FB/serialNumber=5EB098EF4D5655CC66B6AF81C3CDE4062D802F3B
Certificate serial:       055D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XrCY701WVcxmtq-Bw83kBi2ALzs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/XrCY701WVcxmtq-Bw83kBi2ALzs.mft
Manifest number:          0555
Signing time:             Mon 02 Mar 2026 03:11:12 +0000
Manifest this update:     Mon 02 Mar 2026 03:11:10 +0000
Manifest next update:     Mon 09 Mar 2026 03:11:10 +0000
Files and hashes:         1: XrCY701WVcxmtq-Bw83kBi2ALzs.crl (hash: rQL5SHss5rHLWh/Ab36GHybj1uj2gRBOHyS2xrtapgU=)
                          2: B4D8E692267111ECA0546981C4F9AE02.roa (hash: CMK57h7d3VJ8Y5Z6L2ancbIus6PT121u0oU6HX7o5tQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/XrCY701WVcxmtq-Bw83kBi2ALzs.crl
                          rsync://rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/XrCY701WVcxmtq-Bw83kBi2ALzs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XrCY701WVcxmtq-Bw83kBi2ALzs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:11:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1373 (0x55d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E3FB, serialNumber=5EB098EF4D5655CC66B6AF81C3CDE4062D802F3B
        Validity
            Not Before: Mar  2 03:11:10 2026 GMT
            Not After : Mar  9 03:11:10 2026 GMT
        Subject: CN=69a4ffd0-3a48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c1:ea:e8:9c:cf:84:0a:8e:54:d6:cb:38:19:
                    9e:86:a7:50:c8:87:b4:c9:2d:99:58:3a:18:17:fe:
                    f1:ee:e2:32:55:f8:bb:0b:90:25:31:85:6b:31:d1:
                    bc:96:bc:f3:98:f0:65:83:25:47:1e:4f:e0:c5:4a:
                    b0:f3:6d:bb:4c:b3:b7:91:5d:37:31:90:dd:2a:9c:
                    ee:b2:e5:e2:ec:7c:7c:2f:fd:e9:be:09:23:1c:74:
                    85:0f:89:a3:10:c1:b9:44:8d:2f:13:99:10:50:57:
                    9e:70:01:93:a1:b2:ab:a4:37:b5:70:7f:cb:61:0f:
                    ad:d0:a8:91:62:7a:38:d4:08:8d:5a:2f:2c:e8:c0:
                    22:12:c6:72:b4:44:98:4a:fe:ca:08:9a:d9:8f:24:
                    bf:6f:a7:3d:9d:7f:b1:7f:c0:10:c4:7b:45:b7:ac:
                    44:06:f4:9f:3d:a0:94:b1:b2:e0:be:27:f4:d2:f5:
                    99:56:cc:e2:9e:d7:76:a9:6b:ea:1a:a3:60:ea:8e:
                    69:0d:85:cc:cb:41:9a:64:b2:51:6e:64:db:43:91:
                    fc:46:a9:c4:88:0e:07:1a:ec:d3:89:09:51:c4:53:
                    66:65:d2:d6:f5:f4:26:ab:e4:03:8a:89:90:ff:e2:
                    af:f2:eb:9e:96:7d:24:48:1b:a2:dc:4e:76:ee:d1:
                    aa:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:3B:BA:62:1D:54:E8:3E:6C:7E:3E:DA:DE:83:63:AE:14:0B:C2:AF
            X509v3 Authority Key Identifier:
                keyid:5E:B0:98:EF:4D:56:55:CC:66:B6:AF:81:C3:CD:E4:06:2D:80:2F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/XrCY701WVcxmtq-Bw83kBi2ALzs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XrCY701WVcxmtq-Bw83kBi2ALzs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/XrCY701WVcxmtq-Bw83kBi2ALzs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:f9:71:30:0f:48:59:8d:14:a6:c8:71:37:15:85:78:50:a5:
         02:59:53:f9:68:85:27:91:58:94:9e:9d:7d:ef:28:31:01:a0:
         f7:e9:7f:07:03:7f:8f:0c:4b:93:14:2d:f8:1d:6b:bc:da:0d:
         ed:c4:04:b4:1e:fe:a3:91:df:94:8a:39:83:bd:7f:12:07:f4:
         9e:bb:27:d6:39:e5:75:51:a8:3a:00:04:4b:d4:7c:2d:ca:91:
         55:82:e5:82:b9:c7:6d:9b:20:e6:c3:aa:88:9f:0f:1e:0b:6d:
         60:9e:34:a1:6e:a2:f0:83:f0:32:67:b0:49:01:c3:e1:cd:14:
         fd:53:d7:d5:0c:03:cc:94:57:42:d4:62:59:46:52:0e:ed:20:
         99:9d:20:47:16:4d:72:bd:4e:53:6a:47:90:8b:63:91:5d:47:
         da:bf:ca:97:7e:8d:ed:63:c0:9e:06:7c:4f:ef:31:f6:81:f1:
         7e:32:1d:5f:e6:27:1a:c7:34:94:24:e5:9d:d2:df:a1:52:d7:
         3d:8f:6c:09:52:4a:5c:7d:d2:df:4f:8f:67:d7:a4:9b:6a:b6:
         87:6d:d9:26:02:42:9a:e2:7f:b3:f0:de:43:1b:55:38:f7:da:
         de:9f:60:11:38:db:dc:26:9f:da:a8:67:b9:f4:0e:00:2f:77:
         8d:f8:85:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:21:19 2026 by rpki-client