Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft
File:                     xiZYMphXjR1K9yc-vXkccjCjdEk.mft (raw, json)
Hash identifier:          jy3cJPkdA7fOKtYgR721iEw4esGPZWMQ6xFUr8KXW3A=
Subject key identifier:   2B:1C:8C:33:B3:84:C7:CE:E5:C4:16:56:71:BD:2E:90:5D:55:CB:95
Authority key identifier: C6:26:58:32:98:57:8D:1D:4A:F7:27:3E:BD:79:1C:72:30:A3:74:49
Certificate issuer:       /CN=A91186C2/serialNumber=C626583298578D1D4AF7273EBD791C7230A37449
Certificate serial:       DF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiZYMphXjR1K9yc-vXkccjCjdEk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft
Manifest number:          D7
Signing time:             Tue 03 Mar 2026 06:14:27 +0000
Manifest this update:     Tue 03 Mar 2026 06:14:27 +0000
Manifest next update:     Tue 10 Mar 2026 06:14:27 +0000
Files and hashes:         1: xiZYMphXjR1K9yc-vXkccjCjdEk.crl (hash: i83jstxbQbuxNeLBrVLCTYepkCD2nzyEsVlJRlr8yU4=)
                          2: 7DFFCDA4D17F11EF8FAE452BC4F9AE02.roa (hash: 88RG+IBp3+3IKje/6h9nyZS5YfSLYuAiRdPmohXdymE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.crl
                          rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiZYMphXjR1K9yc-vXkccjCjdEk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 06:14:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 223 (0xdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91186C2, serialNumber=C626583298578D1D4AF7273EBD791C7230A37449
        Validity
            Not Before: Mar  3 06:14:27 2026 GMT
            Not After : Mar 10 06:14:27 2026 GMT
        Subject: CN=69a67c43-38f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:50:b6:c4:de:1d:26:6b:7f:47:ba:34:25:91:
                    84:dc:f6:67:57:59:c9:2c:36:a3:90:83:e0:b2:01:
                    77:4f:b7:7f:f8:0e:17:84:8b:8b:00:f5:84:c6:16:
                    c9:ff:b9:10:25:1e:65:da:3d:28:e9:53:f1:fd:19:
                    aa:6f:37:f3:de:e8:9c:b9:77:78:fd:17:a8:b3:06:
                    30:6d:b0:d5:49:c6:1d:19:e4:cf:36:36:44:8c:19:
                    be:df:0f:98:66:d4:f4:68:34:21:a3:3e:36:13:cf:
                    0a:5d:0d:19:cb:aa:51:ed:db:b7:07:f1:e5:c2:70:
                    a3:cc:3f:e4:3e:51:1c:73:92:1a:39:5b:c4:41:e9:
                    d4:50:0c:2b:81:cc:20:6c:da:d1:94:6b:6a:9d:e7:
                    f9:7c:7f:71:f0:0b:6a:0a:3b:4a:1b:cf:68:f1:ab:
                    fe:2c:71:db:98:51:65:c5:1a:f9:00:37:35:3c:63:
                    73:7d:0e:ef:bf:e0:6f:4a:dd:75:94:6a:1f:3c:0a:
                    37:68:13:1c:34:dc:19:e6:a4:74:5a:eb:5c:f7:0c:
                    69:7d:28:06:2d:57:21:5c:cd:05:60:71:c3:6d:77:
                    35:cb:57:3e:09:ad:1c:6d:ac:33:a9:f1:28:d7:f3:
                    8e:fc:5e:07:7f:db:d5:73:d8:f6:85:aa:07:0f:3f:
                    25:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:1C:8C:33:B3:84:C7:CE:E5:C4:16:56:71:BD:2E:90:5D:55:CB:95
            X509v3 Authority Key Identifier:
                keyid:C6:26:58:32:98:57:8D:1D:4A:F7:27:3E:BD:79:1C:72:30:A3:74:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiZYMphXjR1K9yc-vXkccjCjdEk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:49:d5:be:2e:60:04:43:57:35:8e:db:91:03:3a:96:67:cd:
         c2:ca:b3:d2:10:ca:c6:76:c6:b2:83:9d:61:16:87:0f:44:47:
         f3:1c:7a:27:7b:5d:cb:7c:90:1b:e4:c7:c6:64:6a:43:bc:e4:
         eb:a8:63:68:47:1e:0b:4d:ad:c0:cc:c6:67:b8:7e:92:dc:78:
         36:ca:a8:2d:88:d5:e4:5a:67:0b:ee:b0:20:f3:53:73:b5:a8:
         1f:b5:0c:11:62:32:c2:a7:31:c4:86:ff:27:e1:6f:9e:bf:5b:
         e5:ac:3a:66:a5:0c:eb:88:09:fe:6c:24:76:7f:09:2c:ff:71:
         8a:0a:b3:fa:ec:fd:55:d7:7d:0a:04:74:62:1e:46:98:df:fd:
         58:c8:14:64:38:a0:d0:da:6c:ac:18:5c:80:b4:64:7a:b3:2b:
         e5:56:20:36:25:e5:97:0f:af:7b:7c:64:bf:42:90:ee:53:61:
         18:64:c1:4a:b2:57:e0:c6:4a:55:25:68:8a:b0:57:ad:94:84:
         24:eb:9a:ae:81:da:f0:8f:e8:f4:fc:44:9b:4b:17:fc:10:0a:
         da:dc:d4:7a:a0:eb:c9:47:93:e5:4b:98:95:3e:93:ab:dc:54:
         3d:41:41:01:ca:ee:85:5b:ac:7f:4c:af:a3:dc:4e:d8:08:64:
         b4:03:02:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:38:30 2026 by rpki-client