Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft
File:                     xvo-z74pzTYwaQdi6zKIEDptCKA.mft (raw, json)
Hash identifier:          8CQ3zCfY84Kfy6n8qvx9JYNvdD+Y4skt5v++7bIestc=
Subject key identifier:   90:9B:DE:B1:29:DF:12:82:50:34:EF:35:97:CB:A6:81:2F:F4:91:F7
Authority key identifier: C6:FA:3E:CF:BE:29:CD:36:30:69:07:62:EB:32:88:10:3A:6D:08:A0
Certificate issuer:       /CN=A91D9A6D/serialNumber=C6FA3ECFBE29CD3630690762EB3288103A6D08A0
Certificate serial:       0DCC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft
Manifest number:          0DC0
Signing time:             Thu 16 Apr 2026 17:49:18 +0000
Manifest this update:     Thu 16 Apr 2026 17:49:17 +0000
Manifest next update:     Thu 23 Apr 2026 17:49:17 +0000
Files and hashes:         1: xvo-z74pzTYwaQdi6zKIEDptCKA.crl (hash: zCRAko9MvoRXcUpB1V9Co9fr9rKRBYEs1doh/GXDEJs=)
                          2: 959C0ABE93EA11EE91A46031C4F9AE02.roa (hash: o03RGCe0M4Rcb7aja2eQGJ8mh/lLVGkF7+Q0rj78MZA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.crl
                          rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 17:49:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3532 (0xdcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9A6D, serialNumber=C6FA3ECFBE29CD3630690762EB3288103A6D08A0
        Validity
            Not Before: Apr 16 17:49:17 2026 GMT
            Not After : Apr 23 17:49:17 2026 GMT
        Subject: CN=69e1211e-b71a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:04:68:05:25:cb:aa:62:e9:42:ea:75:2c:ee:
                    a3:48:1b:92:a6:3d:a3:a9:ee:43:e7:6a:0e:87:c6:
                    13:66:7a:d1:d2:f5:0b:fe:90:1e:41:5b:56:8b:08:
                    b0:4a:a5:1c:d1:72:c8:07:5b:1d:fa:04:f2:02:6e:
                    d8:ac:c9:57:f5:23:a0:20:f9:0f:b6:49:8d:5f:91:
                    41:01:1e:3b:96:84:fb:65:72:28:60:f3:fd:9f:ac:
                    9a:b3:f0:30:3c:c1:82:8e:6d:de:99:c6:b6:94:d3:
                    49:bf:ba:52:cf:8a:b1:19:e7:bb:00:c9:41:53:fc:
                    b0:62:93:5e:2d:6d:71:c7:21:58:03:16:61:ff:8c:
                    92:62:d6:b3:ff:4f:37:d6:96:b2:5a:65:3b:e9:84:
                    d3:af:24:72:37:96:d6:c0:19:66:2f:fb:e9:6d:ae:
                    f9:9c:0c:ad:cf:48:45:3f:c3:8f:1d:ee:15:25:7a:
                    b2:4b:dc:27:aa:7a:2d:1c:3d:ae:bb:fa:20:58:eb:
                    e0:4a:6e:eb:2f:33:ee:3d:ed:d0:c9:de:0c:69:af:
                    52:97:72:c3:71:a0:1d:56:a8:f9:82:74:de:b1:12:
                    5a:28:a2:5c:90:fb:fb:92:7b:1b:b6:13:23:f1:76:
                    b7:40:fc:e6:3c:e3:ab:67:ec:bf:ef:a5:ba:d2:d7:
                    60:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:9B:DE:B1:29:DF:12:82:50:34:EF:35:97:CB:A6:81:2F:F4:91:F7
            X509v3 Authority Key Identifier:
                keyid:C6:FA:3E:CF:BE:29:CD:36:30:69:07:62:EB:32:88:10:3A:6D:08:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:a7:bf:5d:92:38:c7:f4:44:eb:26:16:c5:cf:01:7b:08:bc:
         dd:1d:96:9e:f2:a7:e1:24:2e:08:50:2b:60:8e:c8:15:ba:a4:
         25:fe:23:70:49:57:21:d5:86:2a:38:8d:b9:30:ff:01:66:6c:
         57:df:28:59:4e:71:49:4a:f5:fc:b6:80:9e:2a:25:1b:1f:7c:
         bd:89:96:79:d5:95:22:e1:a8:50:d0:d4:7a:a2:e2:49:a6:5b:
         65:75:d8:5c:bb:dc:ef:eb:32:61:94:85:06:d4:8d:43:78:e8:
         73:1b:78:21:a9:fd:4e:61:4e:8a:14:05:d2:29:37:86:38:81:
         32:87:07:59:cb:36:de:eb:f3:8b:ae:f7:2e:f2:b6:5e:25:dc:
         85:82:e2:ed:72:7c:8c:0b:d3:e2:16:da:25:06:ee:18:71:58:
         8d:0e:b5:5f:ee:90:2f:70:89:c4:5d:5a:32:5b:b0:f7:8d:89:
         72:74:17:99:e7:56:47:77:a3:fe:7a:97:ff:29:4b:08:ea:e9:
         21:0a:ce:6d:42:d5:cf:10:57:11:fb:40:92:2b:6d:f0:94:95:
         19:a0:72:e5:c6:87:70:bf:6d:ae:76:1d:95:91:94:ba:c8:f1:
         ea:5f:b2:23:d7:72:58:b9:ae:5a:0e:8b:50:df:a8:dc:63:ba:
         5d:fa:d4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:14:45 2026 by rpki-client