Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft
File:                     xMZ-u2st3Gkku7llXn4PghhTDGU.mft (raw, json)
Hash identifier:          e52Z0n2U+YmkeMs+qBcpByOMuylPLrnaWYlRcmipOxw=
Subject key identifier:   EC:72:FA:F7:76:A9:CF:2C:BD:30:3A:46:EA:D9:59:2F:C7:1C:8C:EB
Authority key identifier: C4:C6:7E:BB:6B:2D:DC:69:24:BB:B9:65:5E:7E:0F:82:18:53:0C:65
Certificate issuer:       /CN=A9122D51/serialNumber=C4C67EBB6B2DDC6924BBB9655E7E0F8218530C65
Certificate serial:       0182
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xMZ-u2st3Gkku7llXn4PghhTDGU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft
Manifest number:          017B
Signing time:             Sun 05 Apr 2026 04:06:44 +0000
Manifest this update:     Sun 05 Apr 2026 04:06:43 +0000
Manifest next update:     Sun 12 Apr 2026 04:06:43 +0000
Files and hashes:         1: xMZ-u2st3Gkku7llXn4PghhTDGU.crl (hash: yIKOvwVDkP/jJRT6rGbJuI78fpNH6wr7I09I2Ml967g=)
                          2: 6D610A58F23711EEA11AA759C4F9AE02.roa (hash: CDh8LELSQpCINvTVnbkjWg6FuGY4yhT7jRqEhYdsypk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.crl
                          rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xMZ-u2st3Gkku7llXn4PghhTDGU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 04:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 386 (0x182)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122D51, serialNumber=C4C67EBB6B2DDC6924BBB9655E7E0F8218530C65
        Validity
            Not Before: Apr  5 04:06:43 2026 GMT
            Not After : Apr 12 04:06:43 2026 GMT
        Subject: CN=69d1dfd3-ec05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:72:77:b4:e7:ad:23:ee:9d:60:fd:d3:e1:94:
                    c5:4d:a3:76:52:a7:22:1b:11:e1:ad:fd:90:e9:e9:
                    3a:a1:88:81:c1:7d:a3:47:9e:f5:73:a5:e1:c7:d0:
                    f2:80:8d:8b:df:e8:7f:17:71:16:6a:b5:82:ff:0b:
                    c5:95:ec:ee:c7:f7:f7:be:ab:5e:7e:2d:c9:62:9c:
                    dc:5b:a0:16:9b:c8:b9:3e:ab:f4:c0:df:8c:1f:d1:
                    8f:65:e6:d4:de:7b:88:60:09:62:f8:f8:06:98:23:
                    91:fd:c2:e1:aa:36:a4:03:38:3e:41:09:fa:83:74:
                    2f:14:d0:03:df:5b:d4:15:d5:7c:48:48:78:91:10:
                    d4:19:11:c5:d6:bf:3e:3c:4f:aa:d9:b9:34:d6:9c:
                    4c:9c:36:f3:97:08:2b:a8:b8:91:eb:41:cc:c6:f6:
                    ae:f1:a8:59:de:72:2e:c1:3d:28:49:57:19:47:03:
                    a8:51:94:11:1f:6c:9b:57:45:da:d0:73:d4:d1:52:
                    92:1f:9c:25:ac:45:61:b0:0f:cd:bf:35:ec:ed:27:
                    6f:b1:66:aa:6f:09:9f:c9:51:97:dc:8e:b6:83:9a:
                    f8:fe:70:93:87:01:6a:6f:17:42:25:0d:c7:73:f3:
                    df:9e:89:c3:aa:2a:61:c7:9e:d1:2b:8c:da:45:08:
                    c6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:72:FA:F7:76:A9:CF:2C:BD:30:3A:46:EA:D9:59:2F:C7:1C:8C:EB
            X509v3 Authority Key Identifier:
                keyid:C4:C6:7E:BB:6B:2D:DC:69:24:BB:B9:65:5E:7E:0F:82:18:53:0C:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xMZ-u2st3Gkku7llXn4PghhTDGU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:42:3c:a6:01:d2:8c:4c:9a:2e:eb:7a:89:70:ea:59:41:60:
         a8:85:a9:69:85:c4:6f:32:03:dd:9d:d3:24:fa:17:4a:fc:77:
         72:6b:bb:b6:9a:85:25:68:bd:57:61:cc:e0:d6:6c:7e:44:b6:
         61:c4:2a:8a:89:50:fe:31:52:6e:a5:e0:ee:9b:98:8b:eb:1b:
         d9:4b:ec:04:40:da:f6:84:b2:b0:68:5c:55:8d:a8:8d:3c:02:
         ca:2d:9b:c8:25:5f:7b:28:5d:f1:d9:f5:0f:9a:d5:e1:33:41:
         a2:da:42:98:88:ed:34:7c:4a:95:e9:03:45:36:4d:5c:21:74:
         68:d7:e0:54:a3:9b:a0:23:da:58:bc:62:44:79:f4:d9:63:40:
         a7:6c:6a:59:1e:56:7a:ed:c7:b6:4f:11:24:b1:57:0e:69:45:
         ac:4f:c7:a3:fe:36:05:58:69:be:e2:92:ca:5c:37:25:21:41:
         0a:bb:34:e9:11:49:05:c3:90:34:ab:6d:73:e6:c0:6e:59:43:
         3d:63:c6:8a:84:2b:fe:78:6e:a1:ef:a8:48:ba:84:eb:0b:16:
         73:a2:6b:a7:54:21:f4:21:71:3a:78:cd:b3:8e:7f:c9:b4:aa:
         8c:53:33:47:05:71:20:d7:6a:2a:91:50:8e:91:87:6e:91:82:
         c7:74:b3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 14:40:16 2026 by rpki-client