Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft
File:                     cXLtDPRHBezrGWHROgV-z_MHyG8.mft (raw, json)
Hash identifier:          z/dQxo1Z/PzIjX+2ZWLo1EyYYDgGGy+/3CIM80tccHE=
Subject key identifier:   F3:FA:A7:67:27:98:F9:9F:EB:FC:D9:A3:3A:E2:46:86:03:26:F9:D8
Authority key identifier: 71:72:ED:0C:F4:47:05:EC:EB:19:61:D1:3A:05:7E:CF:F3:07:C8:6F
Certificate issuer:       /CN=A913B7C7/serialNumber=7172ED0CF44705ECEB1961D13A057ECFF307C86F
Certificate serial:       011B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft
Manifest number:          010B
Signing time:             Sun 05 Apr 2026 05:26:21 +0000
Manifest this update:     Sun 05 Apr 2026 05:26:21 +0000
Manifest next update:     Sun 12 Apr 2026 05:26:21 +0000
Files and hashes:         1: cXLtDPRHBezrGWHROgV-z_MHyG8.crl (hash: mhJhjAlLWbPvQWV8HywEzy3oU122XKeD5yi+KlPsIZo=)
                          2: 1A1C5AF89D9C11EFAAA9FA6AC4F9AE02.roa (hash: A90aJCYjIr3J34Qclm1ssR9ehYnkyd4nyWXLA2mBndw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.crl
                          rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:26:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 283 (0x11b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B7C7, serialNumber=7172ED0CF44705ECEB1961D13A057ECFF307C86F
        Validity
            Not Before: Apr  5 05:26:21 2026 GMT
            Not After : Apr 12 05:26:21 2026 GMT
        Subject: CN=69d1f27d-a65a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7e:d2:19:05:84:2d:6e:17:f3:c1:a8:2d:48:
                    a0:97:f9:7d:3d:0e:2f:0b:7f:a0:f1:67:3e:ed:47:
                    47:66:29:3b:7a:2e:ef:6b:05:33:c2:61:28:3d:c2:
                    fb:e5:c1:e0:97:89:a8:dd:14:19:55:27:95:7e:89:
                    63:da:53:3b:7b:1e:53:90:24:91:65:da:fc:b1:d4:
                    a4:8f:da:79:8f:2f:23:32:65:a0:69:24:36:a9:aa:
                    29:63:da:29:b3:dc:45:68:aa:b6:48:27:59:70:bf:
                    41:61:c3:0f:00:83:1d:9a:70:91:da:dd:ea:f4:23:
                    46:b6:94:c7:9b:8f:04:e2:19:1b:eb:24:a7:c5:a8:
                    73:12:b4:54:94:87:b6:7e:07:c0:31:52:2b:fa:15:
                    54:57:28:8e:f0:bc:8c:f1:8d:ee:7c:87:7a:9e:a8:
                    31:e6:13:1e:1a:23:d7:cd:6e:e0:a3:51:ff:b3:2a:
                    9d:46:a7:e5:86:15:8d:ea:13:d9:a5:e7:ed:6c:5a:
                    23:33:a5:64:82:37:f2:bd:8b:1f:dd:8f:94:0b:a5:
                    3f:c6:97:e5:db:5e:f5:a1:33:40:3a:7a:fa:22:87:
                    6e:82:b0:cb:70:41:c1:b9:ff:18:1a:de:5e:e6:a5:
                    77:73:dd:ea:5c:88:a5:c9:0d:99:ae:8c:1b:57:a4:
                    5c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:FA:A7:67:27:98:F9:9F:EB:FC:D9:A3:3A:E2:46:86:03:26:F9:D8
            X509v3 Authority Key Identifier:
                keyid:71:72:ED:0C:F4:47:05:EC:EB:19:61:D1:3A:05:7E:CF:F3:07:C8:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:63:f0:6a:a0:27:eb:ef:9b:b0:b1:69:d5:21:42:43:8d:cd:
         0c:72:95:1e:3f:7f:78:10:24:54:81:90:8f:a6:3d:fa:be:d7:
         4d:69:bc:77:68:52:df:f9:6f:4e:ac:12:bc:4d:88:3d:dc:82:
         73:fe:6c:db:e3:24:8a:fe:3d:63:38:59:19:13:e5:31:9b:e7:
         bc:43:eb:a7:0b:7f:dd:03:42:c3:ed:d3:75:de:f5:c2:d4:91:
         bd:c6:38:78:16:65:c2:27:29:6f:84:ba:8f:82:b2:8e:c5:71:
         99:c7:29:93:af:47:16:29:a3:d1:3a:ab:d8:33:b0:53:31:eb:
         d7:fb:75:f3:6e:d3:3d:98:93:9b:da:2b:ce:d8:b8:77:42:c0:
         65:da:39:80:bb:c3:d3:b0:65:d2:27:b0:29:bd:e9:c8:9e:f9:
         71:ee:79:96:9e:d6:ea:ea:48:4a:0b:66:c6:4b:97:65:79:2a:
         90:7d:1b:1c:a0:e4:9e:f9:7f:91:3c:4f:52:e8:70:07:fb:72:
         99:5a:bc:70:d5:42:64:07:09:07:9d:c1:84:56:98:42:c9:cb:
         9b:6e:1c:6d:2d:7b:c4:9d:d7:69:5c:93:0c:5b:d3:ff:bd:c4:
         78:de:6b:31:f2:8b:22:07:c9:fc:01:c1:8b:5f:67:2e:f3:a0:
         e1:20:ee:8e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0I3QzcxMTAvBgNVBAUTKDcxNzJFRDBDRjQ0NzA1RUNFQjE5NjFEMTNBMDU3RUNG
RjMwN0M4NkYwHhcNMjYwNDA1MDUyNjIxWhcNMjYwNDEyMDUyNjIxWjAYMRYwFAYD
VQQDEw02OWQxZjI3ZC1hNjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvn7SGQWELW4X88GoLUigl/l9PQ4vC3+g8Wc+7UdHZik7ei7vawUzwmEoPcL7
5cHgl4mo3RQZVSeVfolj2lM7ex5TkCSRZdr8sdSkj9p5jy8jMmWgaSQ2qaopY9op
s9xFaKq2SCdZcL9BYcMPAIMdmnCR2t3q9CNGtpTHm48E4hkb6ySnxahzErRUlIe2
fgfAMVIr+hVUVyiO8LyM8Y3ufId6nqgx5hMeGiPXzW7go1H/syqdRqflhhWN6hPZ
peftbFojM6VkgjfyvYsf3Y+UC6U/xpfl2171oTNAOnr6IodugrDLcEHBuf8YGt5e
5qV3c93qXIilyQ2ZrowbV6RcZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPP6p2cn
mPmf6/zZozriRoYDJvnYMB8GA1UdIwQYMBaAFHFy7Qz0RwXs6xlh0ToFfs/zB8hv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjdDNy9BQTJBNzg0QzlE
OUIxMUVGODYwNTA0NjlDNEY5QUUwMi9jWEx0RFBSSEJlenJHV0hST2dWLXpfTUh5
RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NYTHREUFJIQmV6ckdXSFJPZ1Ytel9NSHlHOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QjdDNy9BQTJBNzg0QzlEOUIxMUVGODYwNTA0NjlDNEY5QUUwMi9jWEx0RFBSSEJl
enJHV0hST2dWLXpfTUh5RzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjmPwaqAn6++bsLFp1SFCQ43NDHKVHj9/eBAkVIGQj6Y9+r7XTWm8d2hS3/lv
TqwSvE2IPdyCc/5s2+Mkiv49YzhZGRPlMZvnvEPrpwt/3QNCw+3Tdd71wtSRvcY4
eBZlwicpb4S6j4KyjsVxmccpk69HFimj0Tqr2DOwUzHr1/t1827TPZiTm9orzti4
d0LAZdo5gLvD07Bl0iewKb3pyJ75ce55lp7W6upISgtmxkuXZXkqkH0bHKDknvl/
kTxPUuhwB/tymVq8cNVCZAcJB53BhFaYQsnLm24cbS17xJ3XaVyTDFvT/73EeN5r
MfKLIgfJ/AHBi19nLvOg4SDujg==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:32:21 2026 by rpki-client