Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.mft
File:                     XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.mft (raw, json)
Hash identifier:          vyDsj1+W+17xvfOkWeGeof4VBJmsHoQPhAO/QSvenB0=
Subject key identifier:   22:45:10:23:5F:AB:D3:B3:13:75:51:4B:D5:34:83:0E:B5:63:09:3B
Authority key identifier: 5E:60:B8:4D:B9:1B:6C:08:65:02:0C:E0:F2:06:C5:34:9E:4B:83:48
Certificate issuer:       /CN=A9116372/serialNumber=5E60B84DB91B6C0865020CE0F206C5349E4B8348
Certificate serial:       A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.mft
Manifest number:          9D
Signing time:             Tue 21 Apr 2026 07:12:27 +0000
Manifest this update:     Tue 21 Apr 2026 07:12:26 +0000
Manifest next update:     Tue 28 Apr 2026 07:12:26 +0000
Files and hashes:         1: XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.crl (hash: nBud0GFdbwgpDs1bJ2Bnfj0utXbVGMPDqEA2W9WN0hU=)
                          2: BD71164A59A211F09EC86C38C4F9AE02.roa (hash: tlq/2xG0yhdoKwT6Az/0eNkst0Iretd6YucgKMDqYag=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.crl
                          rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 07:12:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166 (0xa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116372, serialNumber=5E60B84DB91B6C0865020CE0F206C5349E4B8348
        Validity
            Not Before: Apr 21 07:12:26 2026 GMT
            Not After : Apr 28 07:12:26 2026 GMT
        Subject: CN=69e7235b-133f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3a:c5:67:11:e0:d9:54:d5:b8:0f:cb:b4:94:
                    20:3c:ff:9f:d2:14:fa:03:7a:53:bd:54:d2:7a:46:
                    d6:d9:4c:34:32:2f:7a:5c:72:ce:15:ef:a3:9c:05:
                    72:0c:06:3b:ea:a5:5e:d7:7d:c3:2c:e5:30:00:38:
                    8b:8a:95:ca:2c:15:57:26:e3:a2:34:df:3f:de:f5:
                    0d:b1:e9:32:ae:ca:2d:ec:3c:06:7b:92:fc:f0:0a:
                    32:a1:b8:43:75:67:cf:8b:4d:9c:0f:82:61:a8:bf:
                    0f:4f:44:f1:1a:9a:5b:c5:ab:d2:eb:79:ad:a9:44:
                    ff:90:2f:31:b7:33:9f:21:29:2c:89:d7:ea:2b:ba:
                    eb:23:9f:d8:85:07:eb:09:42:ef:e5:14:48:a1:6b:
                    bf:c9:72:ac:43:f1:2b:c8:33:f9:cc:62:e3:40:65:
                    44:51:b6:f2:e3:67:23:7d:2a:c0:5c:69:73:54:76:
                    71:84:67:d0:54:58:af:77:fb:90:4f:54:ca:4a:30:
                    61:c6:8a:a5:d8:4d:8a:2f:4b:a5:e6:f3:23:b3:0a:
                    e3:ee:e0:7c:c7:bf:54:c1:6a:a0:ea:9e:0f:a5:b3:
                    58:ed:f3:3a:bd:02:72:77:3d:f0:a8:d8:57:0b:f5:
                    13:78:1e:83:9a:ce:07:75:7a:cb:de:33:50:55:5c:
                    8c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:45:10:23:5F:AB:D3:B3:13:75:51:4B:D5:34:83:0E:B5:63:09:3B
            X509v3 Authority Key Identifier:
                keyid:5E:60:B8:4D:B9:1B:6C:08:65:02:0C:E0:F2:06:C5:34:9E:4B:83:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:36:3d:b4:ab:89:46:19:64:0b:60:67:ce:62:01:ae:3b:27:
         9e:6b:dc:d4:03:7b:f8:f5:87:ff:af:4c:3d:25:07:de:e2:2a:
         4f:55:1e:9e:ce:3a:b4:04:f1:c8:11:2c:51:a2:36:f1:71:de:
         e3:4f:2c:eb:e2:d2:92:73:59:64:44:9f:39:33:9e:24:f1:ac:
         31:d9:a9:53:da:c8:ad:5c:77:da:12:40:05:8a:e9:f2:54:f8:
         dc:be:3a:65:f0:0f:0b:96:0c:a8:79:c4:ca:9e:32:3d:13:d7:
         08:33:7f:78:60:56:ba:1a:b7:39:18:34:10:3d:73:f1:60:b2:
         d1:34:ff:87:21:98:7a:05:f3:2f:23:c1:5e:02:a2:d0:43:58:
         20:4e:a5:e3:fc:b1:e1:e2:bd:e6:fd:90:1b:04:09:93:b6:83:
         75:ca:66:4f:90:ce:59:13:26:00:b0:17:bf:1e:7c:10:ac:cf:
         d2:f6:c8:c4:25:65:c6:1b:25:61:e7:2b:44:53:99:72:30:11:
         7c:84:86:80:d6:6e:67:d6:f5:b3:7b:a9:cc:9e:5a:84:68:26:
         d9:3c:81:de:d1:35:ab:e0:d9:82:ff:b9:46:71:d6:89:fd:6e:
         62:c9:4e:4b:f4:99:c3:c2:da:d2:91:05:fb:c0:a3:d7:62:cb:
         02:49:7c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 05:44:35 2026 by rpki-client