Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft
File:                     Xtho2ocq-NaWpcGp-ngp9lJzynk.mft (raw, json)
Hash identifier:          k4F1lDEXuq0IUcPXZgi6IOcy5BTMdnouHTi8VWNgYjE=
Subject key identifier:   CD:7A:02:F3:1A:5B:A6:55:5E:61:34:73:CD:23:E0:22:1F:6C:49:21
Authority key identifier: 5E:D8:68:DA:87:2A:F8:D6:96:A5:C1:A9:FA:78:29:F6:52:73:CA:79
Certificate issuer:       /CN=A9119B43/serialNumber=5ED868DA872AF8D696A5C1A9FA7829F65273CA79
Certificate serial:       051A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xtho2ocq-NaWpcGp-ngp9lJzynk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft
Manifest number:          050F
Signing time:             Sat 04 Apr 2026 23:25:14 +0000
Manifest this update:     Sat 04 Apr 2026 23:25:13 +0000
Manifest next update:     Sat 11 Apr 2026 23:25:13 +0000
Files and hashes:         1: Xtho2ocq-NaWpcGp-ngp9lJzynk.crl (hash: Cw8Ix9wf4Q9dlgx2l4n4knhfoZRt9XYM53TUB+5qjTU=)
                          2: 6C27C19E4BFA11ECA6797F6DC4F9AE02.roa (hash: d542I90WWDGGQbicaXbMdjG+yHM90agVdnOM5BcvIy0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.crl
                          rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xtho2ocq-NaWpcGp-ngp9lJzynk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 23:25:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1306 (0x51a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119B43, serialNumber=5ED868DA872AF8D696A5C1A9FA7829F65273CA79
        Validity
            Not Before: Apr  4 23:25:13 2026 GMT
            Not After : Apr 11 23:25:13 2026 GMT
        Subject: CN=69d19dda-d557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b1:46:a8:0d:df:ea:58:7e:4b:31:c3:0a:30:
                    ec:37:7e:dd:6e:dd:7a:92:f8:84:0f:2e:21:e1:55:
                    b9:54:15:53:78:13:46:ab:15:a2:40:47:77:c1:22:
                    84:6b:96:84:74:24:87:89:a6:a4:1b:c6:da:53:ec:
                    34:b5:76:30:b6:2f:88:78:61:dd:09:d7:04:bd:70:
                    1d:96:af:f3:4e:c3:4d:ee:24:7f:e3:e8:e2:6b:fa:
                    ef:72:80:b8:d4:d7:27:78:6b:f6:fe:85:96:e1:68:
                    e0:9f:ae:33:88:35:3d:e5:00:01:d3:51:4f:52:72:
                    55:6d:a8:b7:db:07:d2:06:7a:de:11:61:b0:30:ba:
                    77:54:28:d1:35:8b:80:3a:c2:ac:f7:6e:f4:8e:df:
                    46:bf:68:10:9b:ab:84:34:89:d6:fa:64:4a:ac:b6:
                    d9:e4:0b:e3:0b:9b:6e:72:f7:8e:45:c6:6b:9f:39:
                    f2:4d:65:78:89:3c:a1:d8:38:e5:c8:c4:ac:8c:96:
                    d1:c5:90:93:99:df:bb:f6:72:52:30:e1:ad:a7:24:
                    8c:bb:85:9d:7e:51:36:c8:10:17:27:72:a4:a7:3a:
                    fb:fc:43:de:b6:07:28:a0:ac:b6:8a:6c:a4:46:f2:
                    a6:85:a8:68:6a:4e:ef:2a:7e:b1:46:7e:70:45:ed:
                    12:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:7A:02:F3:1A:5B:A6:55:5E:61:34:73:CD:23:E0:22:1F:6C:49:21
            X509v3 Authority Key Identifier:
                keyid:5E:D8:68:DA:87:2A:F8:D6:96:A5:C1:A9:FA:78:29:F6:52:73:CA:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xtho2ocq-NaWpcGp-ngp9lJzynk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:48:50:0e:40:9f:80:eb:f7:e0:93:db:99:bc:42:7c:fe:6b:
         4a:93:c3:e5:31:9f:d3:07:33:c2:3f:28:55:3f:29:94:14:6b:
         2d:93:d0:0e:1b:90:c2:4f:5e:23:85:65:13:58:b0:af:a4:b2:
         1c:e9:40:05:42:5a:4a:ea:3e:3c:2f:89:44:87:db:81:cc:0f:
         59:26:b8:b1:aa:9a:10:02:1c:a3:5c:41:0f:40:96:75:0c:f3:
         3f:04:82:47:eb:03:c0:58:13:6f:61:ea:55:25:c5:e8:9b:b7:
         ca:c3:1e:b9:26:8e:3a:19:84:62:5b:72:59:5e:a9:36:2e:75:
         5c:76:c6:ed:d2:73:7d:0e:b6:8e:52:55:05:e4:ef:7c:f7:7c:
         15:e1:30:f8:d5:ac:94:05:26:ca:63:a1:ea:df:53:36:d2:d1:
         9e:66:56:4f:bb:e7:26:38:09:7f:de:e4:88:14:54:11:a7:9b:
         85:80:04:ed:65:2e:f7:4a:44:c1:e4:b0:50:5d:f3:44:bf:13:
         6d:a9:19:23:05:20:c8:ab:48:02:92:15:00:a1:17:00:62:28:
         d7:7f:5b:e6:c6:6d:ba:c3:05:25:0f:56:cb:0e:2d:83:c2:b8:
         63:a0:75:af:a8:ef:8d:03:c7:0c:9b:89:fb:86:5e:aa:d4:ec:
         b8:57:e2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:53:19 2026 by rpki-client