Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.mft
File:                     xv9_8XAyqWoLIW8LwszDXwIgwnI.mft (raw, json)
Hash identifier:          wbzEhLNd32m1CnSTHFkM/E/SA3N+cVeGlmG7UROPDgw=
Subject key identifier:   C9:4C:F7:68:9A:C3:4E:39:C5:75:61:08:10:15:2C:94:BF:21:13:5A
Authority key identifier: C6:FF:7F:F1:70:32:A9:6A:0B:21:6F:0B:C2:CC:C3:5F:02:20:C2:72
Certificate issuer:       /CN=A91B7929/serialNumber=C6FF7FF17032A96A0B216F0BC2CCC35F0220C272
Certificate serial:       4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xv9_8XAyqWoLIW8LwszDXwIgwnI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.mft
Manifest number:          4A
Signing time:             Fri 17 Apr 2026 08:02:33 +0000
Manifest this update:     Fri 17 Apr 2026 08:02:32 +0000
Manifest next update:     Fri 24 Apr 2026 08:02:32 +0000
Files and hashes:         1: xv9_8XAyqWoLIW8LwszDXwIgwnI.crl (hash: Muy8ZzYmf0Ka535TOtIx7zNg+6ihFpd0TtCOn0RaEVo=)
                          2: 8709BBD4DB2011F0B6C890B887D3641D.roa (hash: EpL7U0XS/RThjCfzf6MnDPKqtdekXvQOYsOhN2Yrndg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.crl
                          rsync://rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xv9_8XAyqWoLIW8LwszDXwIgwnI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:02:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7929, serialNumber=C6FF7FF17032A96A0B216F0BC2CCC35F0220C272
        Validity
            Not Before: Apr 17 08:02:32 2026 GMT
            Not After : Apr 24 08:02:32 2026 GMT
        Subject: CN=69e1e919-40c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f2:e1:bb:89:64:ec:c0:08:db:26:be:74:b8:
                    90:67:8e:46:16:01:bf:56:3c:b9:0a:f4:fe:e7:db:
                    4b:9a:30:89:4f:d8:63:37:52:65:e9:e8:62:46:f4:
                    5d:85:1c:04:48:ee:1b:5c:8e:11:fe:56:a7:aa:e8:
                    e2:90:24:23:e2:76:88:8c:a7:03:a2:08:3c:85:a8:
                    44:da:44:00:e2:78:90:26:b0:68:0b:2f:69:80:54:
                    bb:af:74:76:52:ff:99:69:c9:9f:7d:c6:64:4f:44:
                    8a:5a:45:7b:33:78:ed:09:05:61:f8:dd:9e:b1:17:
                    ad:80:ba:da:13:f3:07:54:7f:09:33:5a:fd:fb:79:
                    71:a1:75:8f:06:db:98:f4:f5:cc:8d:3c:be:c7:0e:
                    07:71:71:8a:a8:e4:d5:21:a6:cc:5b:eb:8f:72:fb:
                    c3:f8:6d:b1:60:90:15:8e:23:61:79:e2:6b:28:4e:
                    7b:be:5b:69:ed:56:b1:3f:c5:60:3a:46:15:92:21:
                    7f:a7:ac:f7:eb:4b:0b:0a:90:15:38:c3:81:d3:22:
                    70:68:31:68:33:df:fb:d9:22:58:e3:7f:b4:1c:1d:
                    29:a6:13:56:9d:e3:58:93:87:86:98:6d:f7:4c:df:
                    7d:84:a7:a9:30:4c:a2:43:90:ed:cc:96:82:c5:0f:
                    2d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:4C:F7:68:9A:C3:4E:39:C5:75:61:08:10:15:2C:94:BF:21:13:5A
            X509v3 Authority Key Identifier:
                keyid:C6:FF:7F:F1:70:32:A9:6A:0B:21:6F:0B:C2:CC:C3:5F:02:20:C2:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xv9_8XAyqWoLIW8LwszDXwIgwnI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:4e:45:70:3e:64:4b:4d:9d:f0:1d:57:a4:16:a2:a0:92:7c:
         c1:66:dd:30:e4:b9:4e:34:38:19:d8:64:69:6e:7b:6b:f3:41:
         50:ef:5c:78:8e:2b:79:71:77:b4:14:aa:16:05:79:06:8d:6e:
         90:00:2f:b0:2b:dd:af:ec:14:6c:1c:3f:fc:2e:d4:50:a8:ae:
         ef:5b:84:29:ab:5c:fc:ad:fc:cd:94:02:0d:ac:dd:e5:ab:ca:
         54:ef:f7:ff:1b:c2:b2:87:e9:63:c5:02:c8:dd:3c:fa:9e:c0:
         5e:44:ce:a4:ec:95:9b:24:8a:62:d4:9b:38:92:d3:02:35:0d:
         f5:43:39:d9:02:f1:06:16:87:4a:b6:c8:97:f4:dc:29:a1:6a:
         ee:3c:e8:05:38:5a:39:09:0f:7d:98:16:6f:d9:4f:69:e3:77:
         74:62:ac:03:7d:89:36:13:1e:6e:9c:b5:c8:dd:cd:9a:3e:13:
         a2:bd:22:d8:c1:b3:ef:31:fe:ba:6d:77:03:cf:4e:6e:05:2b:
         1b:f6:b0:6a:e5:2b:c5:c5:1e:76:8e:bb:88:44:b1:48:de:97:
         d1:56:dd:b6:9a:f1:cd:2d:40:a2:a4:00:c1:31:89:4b:12:7a:
         36:25:9c:a2:5c:9f:b1:21:4a:f7:bd:f3:94:e9:08:72:28:4b:
         e4:00:43:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:58:53 2026 by rpki-client