Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft
File:                     xGxDuid9LBDufR7_PfDi78iFGh0.mft (raw, json)
Hash identifier:          s0zlDBxCJegNx52aJNjTh2DdUonJwSlL6ndGbA3+NH0=
Subject key identifier:   BF:78:5F:27:41:8C:99:2F:5E:26:A7:74:D4:C3:56:C7:A4:5F:DE:37
Authority key identifier: C4:6C:43:BA:27:7D:2C:10:EE:7D:1E:FF:3D:F0:E2:EF:C8:85:1A:1D
Certificate issuer:       /CN=A913638A/serialNumber=C46C43BA277D2C10EE7D1EFF3DF0E2EFC8851A1D
Certificate serial:       011A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft
Manifest number:          0111
Signing time:             Sun 05 Apr 2026 05:22:33 +0000
Manifest this update:     Sun 05 Apr 2026 05:22:32 +0000
Manifest next update:     Sun 12 Apr 2026 05:22:32 +0000
Files and hashes:         1: xGxDuid9LBDufR7_PfDi78iFGh0.crl (hash: +Xo8ONB8HG5pa6tHq4S4Q5ZIAz4mI948MIpFUVC3dFQ=)
                          2: 9D7ED59A954711EF9830412DC4F9AE02.roa (hash: ekvUghltwWP4FQ66hV4j9tf5nEe4NKO+RhKkAq+FQXQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.crl
                          rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:22:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 282 (0x11a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913638A, serialNumber=C46C43BA277D2C10EE7D1EFF3DF0E2EFC8851A1D
        Validity
            Not Before: Apr  5 05:22:32 2026 GMT
            Not After : Apr 12 05:22:32 2026 GMT
        Subject: CN=69d1f199-f42e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:76:c7:a6:37:fa:41:70:bd:1e:21:45:e4:63:
                    81:39:87:dc:9f:47:15:0f:06:23:98:2a:76:c9:2e:
                    e5:5a:84:49:65:4b:15:81:ff:4b:8f:bc:4f:87:60:
                    49:a7:d4:72:93:9b:11:ca:e5:bb:2c:40:a4:f3:5f:
                    7d:2a:4e:9a:1a:4c:28:24:41:78:d7:6b:7f:1c:74:
                    a5:f3:eb:37:0b:39:a1:95:2e:24:be:3c:cf:8a:84:
                    0b:44:5a:56:a2:d1:30:6a:cd:f7:72:f8:a7:ad:d1:
                    51:8a:33:18:df:a7:bd:15:51:be:d2:61:ef:7b:7c:
                    fc:0f:a7:0c:ed:1f:9e:15:73:05:b2:a2:59:e8:79:
                    0e:93:cd:71:10:a3:a7:db:35:46:8d:45:6e:b1:31:
                    05:a0:34:ea:63:96:c1:dc:16:cc:2f:63:c7:29:ed:
                    2e:85:8d:b9:d3:35:ca:85:7f:75:43:47:93:6f:c5:
                    2e:32:ff:06:59:78:2e:89:e7:55:6b:73:fe:e9:a0:
                    11:db:2a:49:67:b6:7f:9f:24:80:57:2e:6e:d3:18:
                    b3:ae:22:68:b2:ec:6c:79:e6:cb:f6:b0:01:57:af:
                    d8:9c:72:a7:6e:96:a5:3a:bd:57:fb:2a:9c:a4:96:
                    ea:6e:94:9b:77:22:83:d7:00:29:5a:d5:69:04:d2:
                    dc:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:78:5F:27:41:8C:99:2F:5E:26:A7:74:D4:C3:56:C7:A4:5F:DE:37
            X509v3 Authority Key Identifier:
                keyid:C4:6C:43:BA:27:7D:2C:10:EE:7D:1E:FF:3D:F0:E2:EF:C8:85:1A:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:bc:2a:d7:54:56:b7:46:4e:04:03:e4:41:25:c4:e2:95:b0:
         25:86:80:fa:c1:b5:08:a9:7b:b6:40:89:94:66:76:7c:28:f4:
         1e:48:6e:e3:7b:ae:d4:a0:5d:02:e8:29:81:c1:ac:ac:8b:fd:
         0a:37:7a:13:93:d0:04:9b:10:8d:3d:65:a9:c5:9f:36:2c:03:
         31:18:ad:5b:96:96:6d:b2:d4:20:0c:41:0a:b4:a0:4d:36:20:
         2c:4a:30:36:bd:69:61:98:9a:df:c8:2e:e3:b3:ae:85:7d:18:
         9e:c6:c4:25:8e:22:88:3b:e9:a4:3d:86:03:c3:6b:7e:0f:40:
         d8:28:57:b5:6e:9b:02:d2:ed:10:4b:b2:21:b0:23:b1:f0:c8:
         b4:e2:7d:f6:7e:9a:4a:27:5b:03:64:9b:9b:92:f9:44:a0:f9:
         72:e8:31:1e:49:ee:46:63:6a:e4:bd:9f:b9:2e:e5:5e:0f:bc:
         fc:7c:ba:fe:44:0e:f2:56:1c:8a:96:46:3f:59:5a:dc:61:6f:
         a0:03:3d:08:62:10:69:63:ea:d9:a1:1a:a0:20:d8:53:cd:51:
         2a:f7:3f:24:bf:0e:59:1f:ba:99:90:8a:60:6d:2f:6c:b2:4a:
         d6:76:43:e4:94:a6:cb:66:96:b1:cf:97:d3:f5:0e:e1:a1:45:
         20:60:81:ed
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzYzOEExMTAvBgNVBAUTKEM0NkM0M0JBMjc3RDJDMTBFRTdEMUVGRjNERjBFMkVG
Qzg4NTFBMUQwHhcNMjYwNDA1MDUyMjMyWhcNMjYwNDEyMDUyMjMyWjAYMRYwFAYD
VQQDEw02OWQxZjE5OS1mNDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyXbHpjf6QXC9HiFF5GOBOYfcn0cVDwYjmCp2yS7lWoRJZUsVgf9Lj7xPh2BJ
p9Ryk5sRyuW7LECk8199Kk6aGkwoJEF412t/HHSl8+s3CzmhlS4kvjzPioQLRFpW
otEwas33cvinrdFRijMY36e9FVG+0mHve3z8D6cM7R+eFXMFsqJZ6HkOk81xEKOn
2zVGjUVusTEFoDTqY5bB3BbML2PHKe0uhY250zXKhX91Q0eTb8UuMv8GWXguiedV
a3P+6aAR2ypJZ7Z/nySAVy5u0xizriJosuxseebL9rABV6/YnHKnbpalOr1X+yqc
pJbqbpSbdyKD1wApWtVpBNLcQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL94XydB
jJkvXiandNTDVsekX943MB8GA1UdIwQYMBaAFMRsQ7onfSwQ7n0e/z3w4u/IhRod
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjM4QS81QkREMkNBRTk1
NDcxMUVGOTY4MDhGMkNDNEY5QUUwMi94R3hEdWlkOUxCRHVmUjdfUGZEaTc4aUZH
aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hHeER1aWQ5TEJEdWZSN19QZkRpNzhpRkdoMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NjM4QS81QkREMkNBRTk1NDcxMUVGOTY4MDhGMkNDNEY5QUUwMi94R3hEdWlkOUxC
RHVmUjdfUGZEaTc4aUZHaDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAP7wq11RWt0ZOBAPkQSXE4pWwJYaA+sG1CKl7tkCJlGZ2fCj0Hkhu43uu1KBd
AugpgcGsrIv9Cjd6E5PQBJsQjT1lqcWfNiwDMRitW5aWbbLUIAxBCrSgTTYgLEow
Nr1pYZia38gu47OuhX0YnsbEJY4iiDvppD2GA8Nrfg9A2ChXtW6bAtLtEEuyIbAj
sfDItOJ99n6aSidbA2Sbm5L5RKD5cugxHknuRmNq5L2fuS7lXg+8/Hy6/kQO8lYc
ipZGP1la3GFvoAM9CGIQaWPq2aEaoCDYU81RKvc/JL8OWR+6mZCKYG0vbLJK1nZD
5JSmy2aWsc+X0/UO4aFFIGCB7Q==
-----END CERTIFICATE-----
Generated at Mon Apr 6 09:55:06 2026 by rpki-client