Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft
File:                     Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft (raw, json)
Hash identifier:          LmKYc3O05SnuJSfB5g1TVuoK2vu7sMGctaeUBXH6228=
Subject key identifier:   58:0A:C5:64:54:EC:2C:2E:C4:F1:71:E9:B3:2B:06:5A:8E:85:13:48
Authority key identifier: 5F:38:F4:19:51:61:62:BD:88:6E:40:BD:A9:27:F5:5D:C6:FF:3E:62
Certificate issuer:       /CN=A91F8119/serialNumber=5F38F419516162BD886E40BDA927F55DC6FF3E62
Certificate serial:       2655
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft
Manifest number:          2639
Signing time:             Thu 16 Apr 2026 15:40:35 +0000
Manifest this update:     Thu 16 Apr 2026 15:40:34 +0000
Manifest next update:     Thu 23 Apr 2026 15:40:34 +0000
Files and hashes:         1: Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl (hash: mb9o33iVcGWUlIHWKyilE3L/8xCsUuwenbvw0ICbgvM=)
                          2: 171130AE15F011EC805A0A2FC4F9AE02.roa (hash: OkYL9yCBMETHaZgdXd4jZyNgPnKLNw6+6FHJVPhZs8k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl
                          rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:40:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9813 (0x2655)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8119, serialNumber=5F38F419516162BD886E40BDA927F55DC6FF3E62
        Validity
            Not Before: Apr 16 15:40:34 2026 GMT
            Not After : Apr 23 15:40:34 2026 GMT
        Subject: CN=69e102f3-44d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d5:a7:44:b4:a0:3a:f1:f0:72:83:eb:ff:fc:
                    05:62:9b:42:5c:b0:f4:2d:58:9f:33:a1:ce:e0:48:
                    e7:fb:ef:17:70:26:ec:94:fd:d2:c0:89:08:b1:f7:
                    38:12:57:8d:04:71:f9:c3:57:d1:d7:71:85:a2:a0:
                    60:0c:fd:40:2e:9d:e5:41:8a:e1:fe:3d:92:85:04:
                    92:05:47:2c:58:7a:55:62:4c:97:90:87:17:80:af:
                    36:c9:45:5e:f3:9e:7d:6e:c1:b0:51:bc:7a:82:98:
                    43:80:d7:b3:40:77:28:e6:7a:09:5b:b3:ea:dd:3e:
                    d5:e9:41:f1:8a:95:92:b9:01:4b:e3:b7:ce:f7:05:
                    37:5f:b0:9e:e4:8b:37:cd:56:c4:bb:7c:b5:8f:45:
                    c1:a2:4b:b0:d7:f0:01:e9:45:d1:59:87:ac:b6:c9:
                    20:e1:28:01:9d:88:d6:52:7f:d8:17:d3:92:e3:42:
                    19:f3:14:d7:dc:78:d3:4f:ea:d6:90:8a:b7:7f:dc:
                    2c:7a:d3:88:25:85:55:ef:77:bb:9d:73:a8:e2:45:
                    1a:6a:5e:8b:db:43:42:b3:f1:94:ed:da:ff:f9:ee:
                    df:35:19:c5:b8:c9:7f:1a:4c:33:08:45:70:36:2f:
                    6e:e0:40:8e:20:40:6c:6e:6b:e4:80:b0:7c:f1:c0:
                    e1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:0A:C5:64:54:EC:2C:2E:C4:F1:71:E9:B3:2B:06:5A:8E:85:13:48
            X509v3 Authority Key Identifier:
                keyid:5F:38:F4:19:51:61:62:BD:88:6E:40:BD:A9:27:F5:5D:C6:FF:3E:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:6a:51:4d:93:57:22:5e:6e:ca:77:4d:69:65:ef:cb:b2:90:
         9d:52:e5:b1:cc:f6:98:ba:41:0a:f2:22:fe:67:ce:79:34:e8:
         47:09:49:6f:a2:29:f6:fa:b8:15:77:4d:65:98:35:cd:19:29:
         95:1b:a7:23:d1:03:c2:39:d9:94:40:4a:5a:aa:4c:99:34:a5:
         c6:45:a1:f0:20:82:bd:f6:76:e1:c1:63:f6:50:fa:77:5c:33:
         83:bb:f8:43:15:57:71:0c:21:d8:9d:69:c4:e6:18:a4:80:89:
         8d:88:9d:03:da:1a:ab:f1:40:b7:71:f7:91:06:02:26:7b:dc:
         86:f8:65:d4:f7:10:1a:c6:9d:25:0e:43:a7:24:06:5c:61:6b:
         31:95:ff:70:b4:16:a1:c0:2a:8c:70:31:7f:6d:27:ff:03:b4:
         b4:d8:12:08:a4:b2:39:61:ca:32:75:62:68:f7:3c:f3:4a:0b:
         33:55:35:2f:ac:44:d8:d4:7d:40:5e:b4:3e:53:38:3a:5b:69:
         61:8d:2a:75:ec:be:60:db:d7:78:9d:21:2f:e7:fa:47:8a:44:
         3c:f5:b3:36:89:ba:8e:e5:89:85:e2:3b:bf:c4:6d:ba:75:3c:
         b9:24:58:59:0f:20:38:2e:70:12:53:81:79:a3:6a:e5:35:75:
         a0:45:b9:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:24:32 2026 by rpki-client