Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.mft
File:                     ex-xujsOyMpeXBOuvPxuuo0g6qc.mft (raw, json)
Hash identifier:          inud2XxyL5T4WYVW3Wr/Va82c/Hm8EMU1qBimqFDoSw=
Subject key identifier:   E3:35:9A:A3:D8:89:3F:5D:75:E4:4C:D4:99:CB:76:34:5B:2F:86:A4
Authority key identifier: 7B:1F:B1:BA:3B:0E:C8:CA:5E:5C:13:AE:BC:FC:6E:BA:8D:20:EA:A7
Certificate issuer:       /CN=A913B4BE/serialNumber=7B1FB1BA3B0EC8CA5E5C13AEBCFC6EBA8D20EAA7
Certificate serial:       01A4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ex-xujsOyMpeXBOuvPxuuo0g6qc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.mft
Manifest number:          0198
Signing time:             Sun 05 Apr 2026 03:50:50 +0000
Manifest this update:     Sun 05 Apr 2026 03:50:50 +0000
Manifest next update:     Sun 12 Apr 2026 03:50:50 +0000
Files and hashes:         1: ex-xujsOyMpeXBOuvPxuuo0g6qc.crl (hash: f7gQwuMqLbSt25dMYE8q2BrOuQSsSuM0yafYsF+HeBE=)
                          2: AE9090F83B0F11F08D496424C4F9AE02.roa (hash: Pts4/fPo3wOrTStkErNlvelGiuZZrZuO6krUuiRdTok=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.crl
                          rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ex-xujsOyMpeXBOuvPxuuo0g6qc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 03:50:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 420 (0x1a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B4BE, serialNumber=7B1FB1BA3B0EC8CA5E5C13AEBCFC6EBA8D20EAA7
        Validity
            Not Before: Apr  5 03:50:50 2026 GMT
            Not After : Apr 12 03:50:50 2026 GMT
        Subject: CN=69d1dc1a-3908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e7:bb:7e:42:5a:c5:82:3e:2d:bc:c8:a5:f8:
                    9c:df:2c:51:16:3d:96:47:19:bc:65:b1:fb:2a:1c:
                    74:4d:1a:29:b2:87:9e:ba:13:fa:b7:cf:5b:34:d1:
                    7a:50:01:82:55:4c:74:de:cc:27:99:2a:0f:8a:da:
                    63:97:9e:49:c6:fe:28:a3:97:82:18:1b:2c:08:34:
                    6f:93:f9:12:05:e5:9f:de:54:2c:29:fb:24:88:59:
                    20:8e:ea:fd:e7:31:19:fc:5c:68:6e:10:29:f8:33:
                    f8:c7:59:87:e5:01:b7:17:e3:7e:92:12:1d:b1:8b:
                    54:da:01:02:73:68:32:7f:23:41:8a:bc:be:50:7b:
                    a3:2f:29:bc:ba:d4:f8:95:a9:3f:5d:9b:c8:24:20:
                    22:f5:49:bf:8a:34:1b:e0:c8:7f:01:8a:0a:45:0c:
                    91:2b:bc:16:9c:01:32:ed:ea:01:38:69:a1:f0:69:
                    4d:e3:65:4a:bb:0d:34:ff:34:13:90:89:08:da:34:
                    30:90:d7:1c:ff:69:90:0d:d5:d4:6e:18:cf:6c:ab:
                    de:96:9b:8d:49:9d:72:0b:3b:a8:32:b2:a5:89:d8:
                    1e:10:7c:c7:17:91:d5:92:2b:b8:d7:48:de:01:13:
                    ca:9c:4f:0c:96:3e:23:d7:d6:f4:d1:b1:eb:1f:1c:
                    ee:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:35:9A:A3:D8:89:3F:5D:75:E4:4C:D4:99:CB:76:34:5B:2F:86:A4
            X509v3 Authority Key Identifier:
                keyid:7B:1F:B1:BA:3B:0E:C8:CA:5E:5C:13:AE:BC:FC:6E:BA:8D:20:EA:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ex-xujsOyMpeXBOuvPxuuo0g6qc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:cb:5e:ef:f8:6b:40:d7:04:b1:cd:a6:31:a1:b7:b6:9e:d2:
         b3:88:c2:4e:65:06:3d:6d:89:36:5e:6a:b5:4a:2e:e5:d1:ff:
         0c:0e:60:a3:15:6b:0f:00:7a:e3:ea:fb:57:36:c4:f7:0d:17:
         88:d7:be:94:b4:16:ae:e6:4a:c6:10:9e:f1:f1:69:7f:e2:e1:
         cf:84:77:e2:f8:e4:ff:62:18:dd:79:08:dd:66:60:63:65:21:
         ed:55:d1:5d:bb:7a:67:dd:90:af:e6:43:94:c2:ca:d2:91:14:
         0f:6e:0f:ab:2f:19:b2:9c:ce:b6:e4:e2:14:75:c4:51:e6:7f:
         53:77:ad:4b:66:2e:88:f0:9a:a0:68:ae:a1:57:31:fb:36:af:
         b7:45:0a:57:bc:b2:e0:5c:02:37:c4:41:b8:4a:3e:dd:ab:6d:
         dc:36:5a:30:b3:00:94:de:be:fd:b7:61:5f:a2:62:27:d3:44:
         d5:62:38:73:ba:74:24:87:41:95:ca:d0:15:a9:04:15:96:c4:
         0e:3a:b3:b7:72:2c:a9:09:4c:21:7a:6d:33:29:a2:ce:0c:86:
         1c:71:77:16:4e:a4:8f:25:ed:69:23:c1:69:c5:ae:8d:40:bb:
         96:9a:09:ee:2a:03:8f:06:aa:43:c5:31:e3:91:34:05:20:76:
         5d:c3:91:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:39:33 2026 by rpki-client