Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.mft
File:                     xVznjEX0hWCLgkNgYAPYCooWzNY.mft (raw, json)
Hash identifier:          R2J78F+MF7jKe2phDSlKHIifaClZxju+C6j35kksV/4=
Subject key identifier:   78:12:74:DC:EF:FF:25:DC:5C:FD:03:0F:A0:B9:B0:26:44:64:FC:E6
Authority key identifier: C5:5C:E7:8C:45:F4:85:60:8B:82:43:60:60:03:D8:0A:8A:16:CC:D6
Certificate issuer:       /CN=A91E6E96/serialNumber=C55CE78C45F485608B8243606003D80A8A16CCD6
Certificate serial:       054B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVznjEX0hWCLgkNgYAPYCooWzNY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.mft
Manifest number:          0540
Signing time:             Thu 16 Apr 2026 23:23:49 +0000
Manifest this update:     Thu 16 Apr 2026 23:23:48 +0000
Manifest next update:     Thu 23 Apr 2026 23:23:48 +0000
Files and hashes:         1: xVznjEX0hWCLgkNgYAPYCooWzNY.crl (hash: 5eycxlZH/BQ/RXLcJmYUzU9bIE+vKtAp93Ms53LcrO4=)
                          2: 64DE26F6386011EC83DC2E23C4F9AE02.roa (hash: bVXZbXIetCBnuQjaSLYLUQur0ysTmVtMviP//NDBnCI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.crl
                          rsync://rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVznjEX0hWCLgkNgYAPYCooWzNY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:23:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1355 (0x54b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6E96, serialNumber=C55CE78C45F485608B8243606003D80A8A16CCD6
        Validity
            Not Before: Apr 16 23:23:48 2026 GMT
            Not After : Apr 23 23:23:48 2026 GMT
        Subject: CN=69e16f85-7dc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5e:39:0e:66:41:71:23:15:24:e3:37:1d:66:
                    9c:c8:71:56:8c:89:55:d5:d9:ff:35:3d:6d:38:ec:
                    10:8d:94:a5:dd:19:6b:89:a6:eb:df:f8:88:9a:37:
                    0b:fc:4b:74:f2:64:38:89:2c:62:53:19:a1:03:88:
                    9e:36:ff:86:f0:83:3d:6d:72:78:b1:4a:e1:c8:85:
                    08:84:8b:bf:4b:ab:8e:15:06:9c:09:03:30:73:80:
                    c0:64:7b:08:5a:1f:a4:2e:eb:86:ff:20:9e:d0:f3:
                    6a:29:ea:b6:f2:67:e6:bf:0f:01:f5:49:dd:38:4b:
                    c3:f5:62:e8:4d:25:92:3c:b5:e7:ea:b8:e5:bd:22:
                    2d:7b:2c:33:64:75:62:ca:95:b1:d4:78:47:d3:e3:
                    bd:c4:2a:a3:a1:d1:4f:66:75:3b:62:ee:bc:d3:d7:
                    eb:ff:a8:c9:85:c6:a1:b6:07:e3:e1:27:6e:35:77:
                    60:36:ac:0f:dd:d3:c5:3c:a8:7e:ca:cb:f9:f9:00:
                    4f:9a:60:7d:c4:69:a6:88:ea:7b:e3:8a:6d:df:24:
                    a2:3b:de:36:22:d8:ca:e8:85:f4:a8:0b:35:68:d0:
                    20:16:22:70:5f:e3:b3:77:cc:65:00:d2:c5:b9:68:
                    cf:04:ef:c0:17:b0:79:82:89:3e:e2:3f:05:0d:f9:
                    79:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:12:74:DC:EF:FF:25:DC:5C:FD:03:0F:A0:B9:B0:26:44:64:FC:E6
            X509v3 Authority Key Identifier:
                keyid:C5:5C:E7:8C:45:F4:85:60:8B:82:43:60:60:03:D8:0A:8A:16:CC:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVznjEX0hWCLgkNgYAPYCooWzNY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:02:1f:32:56:55:b2:96:50:cd:a9:a7:39:cd:15:3b:54:06:
         ce:f5:37:76:9e:0f:32:ad:5a:6a:c3:b0:cb:72:67:f6:d8:35:
         80:04:73:b1:16:86:a9:ac:ee:c8:cf:02:6b:5b:07:2d:e5:e5:
         0c:10:55:66:d2:96:47:f1:bc:11:64:07:bd:db:d8:8a:b8:65:
         77:c2:a2:9c:0d:a6:26:1f:56:5e:7c:96:9d:4b:46:e5:fe:da:
         a5:f4:e9:16:73:91:c4:81:b7:84:e1:c6:85:97:79:a9:ab:1d:
         08:8c:05:56:92:e9:1a:27:f5:c1:c9:10:dc:16:af:d4:ae:1d:
         63:31:c9:91:eb:84:43:7b:fb:25:f3:d8:df:54:b4:72:79:de:
         5f:37:48:69:cf:75:f8:bb:03:bb:0f:78:f1:aa:ce:be:47:be:
         32:d6:53:60:f6:74:c3:6d:c1:44:59:2b:e7:61:b4:ec:5f:ac:
         e0:02:a7:66:fe:d5:67:05:e9:54:4e:18:33:99:27:9a:1d:44:
         fd:b3:c0:6e:29:39:1f:f2:a0:ee:bd:99:2e:ea:4b:de:57:20:
         bc:d5:56:45:5c:05:d9:e0:fa:5b:5b:1d:77:61:ca:4e:6b:94:
         10:a8:61:fa:33:4f:e0:ae:dc:16:f7:ef:cd:1e:f3:da:3f:b2:
         13:a6:36:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:06:35 2026 by rpki-client