Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.mft
File:                     xEWgBPxE11F5WpGduE8UoWBFOJE.mft (raw, json)
Hash identifier:          DQ2I9kaVzi3xA23b8TlDc/4uEONZvsmpNQv3o5vpHo8=
Subject key identifier:   ED:70:D9:A7:17:0A:09:75:00:4F:55:BC:27:42:49:E7:14:62:0D:04
Authority key identifier: C4:45:A0:04:FC:44:D7:51:79:5A:91:9D:B8:4F:14:A1:60:45:38:91
Certificate issuer:       /CN=A91A7F3D/serialNumber=C445A004FC44D751795A919DB84F14A160453891
Certificate serial:       50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEWgBPxE11F5WpGduE8UoWBFOJE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.mft
Manifest number:          50
Signing time:             Fri 17 Apr 2026 07:57:25 +0000
Manifest this update:     Fri 17 Apr 2026 07:57:24 +0000
Manifest next update:     Fri 24 Apr 2026 07:57:24 +0000
Files and hashes:         1: xEWgBPxE11F5WpGduE8UoWBFOJE.crl (hash: JhpnP6qwwY7OGPMK/sw3ktuZf8KVhcwkc11/XF5ISQk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.crl
                          rsync://rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEWgBPxE11F5WpGduE8UoWBFOJE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7F3D, serialNumber=C445A004FC44D751795A919DB84F14A160453891
        Validity
            Not Before: Apr 17 07:57:24 2026 GMT
            Not After : Apr 24 07:57:24 2026 GMT
        Subject: CN=69e1e7e5-338b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e3:99:da:64:2c:24:ce:b7:cd:84:f8:9f:af:
                    4e:76:21:46:5a:5a:02:6e:6d:ec:14:6b:0c:d7:a6:
                    08:59:e4:3d:1b:a0:12:92:e7:5d:fe:fc:eb:c4:f5:
                    ce:c1:e0:27:5b:1f:66:47:13:c3:4d:2a:2e:30:81:
                    f4:89:b3:68:48:bc:98:3e:6b:86:68:de:5b:a5:e4:
                    fa:8a:6f:e5:e0:9f:30:db:90:a9:9e:0e:9f:cf:21:
                    c0:5d:96:60:57:f1:57:96:97:74:76:c9:d0:f4:e4:
                    1d:23:c2:2b:e4:b1:cb:c9:9b:cc:99:b2:84:2b:1c:
                    89:da:f7:10:56:9e:b6:cd:53:f9:ff:80:c3:67:21:
                    76:5a:04:55:f2:4f:01:83:a3:68:92:ff:cc:4a:a6:
                    88:f2:f7:45:f1:07:80:8b:5a:b7:f1:60:76:24:5b:
                    82:5a:35:15:9e:d0:de:67:7b:29:45:f7:85:7d:ed:
                    4d:3d:13:a5:52:4c:c0:a6:39:55:89:4f:a4:83:8c:
                    8b:7f:ae:78:99:fe:11:68:64:44:6f:50:de:99:37:
                    86:8e:f4:ca:0d:f3:94:11:7b:b0:13:e8:ce:56:9f:
                    e9:33:b3:e2:87:53:e9:fb:c9:1d:c9:11:49:a9:fe:
                    ef:96:86:7a:27:4b:91:e3:07:45:4e:c1:e7:0c:6d:
                    cb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:70:D9:A7:17:0A:09:75:00:4F:55:BC:27:42:49:E7:14:62:0D:04
            X509v3 Authority Key Identifier:
                keyid:C4:45:A0:04:FC:44:D7:51:79:5A:91:9D:B8:4F:14:A1:60:45:38:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEWgBPxE11F5WpGduE8UoWBFOJE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:7a:e8:6d:1b:b1:52:b4:b1:d8:66:14:c5:48:5e:00:48:e9:
         8e:bb:26:b2:74:0b:24:ff:3f:d8:10:ac:ab:1c:d6:5f:f7:b4:
         a6:2d:f5:4f:10:a7:54:b8:45:bc:70:bd:21:d7:f2:90:82:f0:
         52:f2:e2:fe:eb:a2:93:ab:17:b9:31:bf:80:2a:ae:c2:1d:f6:
         d7:f7:50:5a:c5:ef:a8:82:dd:96:85:a2:d5:fc:7f:8a:12:1f:
         26:ef:81:77:da:c7:15:5c:99:1d:f5:02:9a:a1:df:2f:12:9d:
         59:7f:09:2b:79:1e:b5:3f:46:c0:6e:d5:d9:20:19:4d:94:5d:
         0c:af:86:97:60:ba:86:e8:24:1d:72:5e:74:1b:1c:8f:a0:9f:
         6b:66:65:1f:f4:0c:b1:8e:31:33:a1:97:3b:40:d1:04:1f:ca:
         b5:e9:89:9f:41:92:36:8f:7f:d4:74:e8:b7:82:3b:ff:84:dc:
         4e:68:49:81:fc:c9:c7:6f:c2:86:b1:94:8f:e3:60:ce:bb:15:
         e5:67:6f:eb:c9:0e:fc:95:07:86:65:aa:ba:15:64:a4:7b:7c:
         8f:f6:1f:d6:5f:53:78:91:0b:94:2d:12:00:7c:83:c2:9b:41:
         cf:fa:1d:a3:79:e2:cd:ab:69:9b:d5:06:19:51:85:21:09:06:
         d1:c1:91:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:32:41 2026 by rpki-client