Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft
File:                     -XxrnwabbALLPY6tWvc-UGwIyjg.mft (raw, json)
Hash identifier:          2HSgwRW2409SLlJCNNvtUFZ/fGFw2ljvgjSk8g1UY94=
Subject key identifier:   D2:08:3E:F9:F3:05:52:E4:A0:07:3D:3A:D4:F9:68:37:00:23:34:25
Authority key identifier: F9:7C:6B:9F:06:9B:6C:02:CB:3D:8E:AD:5A:F7:3E:50:6C:08:CA:38
Certificate issuer:       /CN=A914DB69/serialNumber=F97C6B9F069B6C02CB3D8EAD5AF73E506C08CA38
Certificate serial:       01D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft
Manifest number:          01D2
Signing time:             Sun 05 Apr 2026 03:10:05 +0000
Manifest this update:     Sun 05 Apr 2026 03:10:05 +0000
Manifest next update:     Sun 12 Apr 2026 03:10:05 +0000
Files and hashes:         1: -XxrnwabbALLPY6tWvc-UGwIyjg.crl (hash: ecS8+EDfC5NSwI3RPA+n+iN/2oq97booTRX2Du7WPQM=)
                          2: C4AA7A3A6E5F11EE9F66E967C4F9AE02.roa (hash: kdzwoZAMh51JZsHZZa0HJnczi1+crw9wnyc8mMxvPFw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.crl
                          rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 03:10:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 473 (0x1d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DB69, serialNumber=F97C6B9F069B6C02CB3D8EAD5AF73E506C08CA38
        Validity
            Not Before: Apr  5 03:10:05 2026 GMT
            Not After : Apr 12 03:10:05 2026 GMT
        Subject: CN=69d1d28d-d1d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:31:99:1c:87:78:db:ea:8a:4e:66:1c:b5:9a:
                    61:53:cc:f4:4c:9b:20:3e:c0:25:15:8b:e0:ff:98:
                    5e:65:cb:c4:8a:d3:2a:1f:27:d1:2f:bb:37:ca:e9:
                    65:81:99:9f:ae:80:33:bd:7a:23:70:62:ef:b5:54:
                    18:5b:2a:4b:51:e7:1d:c5:27:d7:bd:c2:b1:b6:26:
                    df:5a:40:8e:a5:cf:c6:08:84:38:db:a7:28:50:f1:
                    cb:dd:56:7d:9e:1d:70:bf:27:1a:c3:ff:3d:99:fc:
                    7f:67:42:c6:82:46:fd:dc:85:d3:b5:8e:28:8f:41:
                    62:db:71:08:9e:bc:60:ac:be:3b:72:29:d4:f0:fb:
                    1e:55:b0:20:c8:f8:2f:50:18:ca:dc:f7:fb:85:d0:
                    9a:e9:29:4c:62:16:a9:41:4a:cf:cc:da:18:8b:8e:
                    1c:11:7a:1c:07:93:28:2c:29:f5:f9:f1:c9:37:49:
                    d3:03:70:6c:cd:ed:6f:38:83:e7:ee:44:91:33:99:
                    72:c9:10:a9:aa:3d:a2:fa:37:35:f3:e6:4b:ba:60:
                    4a:50:73:60:f6:64:22:fe:56:dd:1d:16:7c:f2:0e:
                    d4:22:94:75:25:de:ca:30:40:7e:60:d8:6d:4a:df:
                    4f:22:65:6c:7c:30:6a:69:11:d1:3c:53:41:e5:a5:
                    8c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:08:3E:F9:F3:05:52:E4:A0:07:3D:3A:D4:F9:68:37:00:23:34:25
            X509v3 Authority Key Identifier:
                keyid:F9:7C:6B:9F:06:9B:6C:02:CB:3D:8E:AD:5A:F7:3E:50:6C:08:CA:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:2d:21:07:57:20:a3:2a:a4:ac:1a:fa:61:8c:31:05:e9:7f:
         be:2a:8b:96:f8:7f:f8:ad:07:f6:d6:e1:c0:61:be:a7:d7:57:
         48:0e:75:82:2e:b9:8c:c1:e4:22:c8:32:57:b4:d1:83:df:af:
         1f:7f:fc:4f:c3:9c:fd:76:28:41:10:11:fc:08:e5:d9:89:e7:
         17:0b:2a:ba:0a:ea:b5:48:67:fb:54:b4:fd:58:8a:7c:bd:f8:
         0e:1c:15:80:06:d2:76:3b:0f:97:95:8d:e3:50:6c:a5:a4:83:
         21:c9:0d:d2:b1:e0:f5:2d:a8:b6:33:68:67:09:de:62:78:55:
         6f:c6:62:37:55:67:18:f7:f9:9f:93:64:a9:a8:a4:b1:50:08:
         af:6e:14:73:a1:83:b5:c8:ff:22:b6:b1:4d:2f:89:ef:00:46:
         26:24:01:35:a3:50:72:7d:dc:da:c0:b1:c3:4b:77:0e:06:2e:
         01:06:99:e2:14:c4:32:11:c7:6f:e0:26:f2:36:a4:26:b5:97:
         69:31:47:6d:2f:86:d0:f6:09:fd:89:e5:e3:05:7f:b4:f9:c7:
         0c:89:76:28:80:5e:6f:a8:5f:89:f6:eb:79:0c:70:fb:b0:37:
         a4:a9:f7:8f:87:f4:d6:ef:94:2d:5e:41:66:cf:86:7a:74:43:
         6d:47:4c:f2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NERCNjkxMTAvBgNVBAUTKEY5N0M2QjlGMDY5QjZDMDJDQjNEOEVBRDVBRjczRTUw
NkMwOENBMzgwHhcNMjYwNDA1MDMxMDA1WhcNMjYwNDEyMDMxMDA1WjAYMRYwFAYD
VQQDEw02OWQxZDI4ZC1kMWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwDGZHId42+qKTmYctZphU8z0TJsgPsAlFYvg/5heZcvEitMqHyfRL7s3yull
gZmfroAzvXojcGLvtVQYWypLUecdxSfXvcKxtibfWkCOpc/GCIQ426coUPHL3VZ9
nh1wvycaw/89mfx/Z0LGgkb93IXTtY4oj0Fi23EInrxgrL47cinU8PseVbAgyPgv
UBjK3Pf7hdCa6SlMYhapQUrPzNoYi44cEXocB5MoLCn1+fHJN0nTA3Bsze1vOIPn
7kSRM5lyyRCpqj2i+jc18+ZLumBKUHNg9mQi/lbdHRZ88g7UIpR1Jd7KMEB+YNht
St9PImVsfDBqaRHRPFNB5aWMowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNIIPvnz
BVLkoAc9OtT5aDcAIzQlMB8GA1UdIwQYMBaAFPl8a58Gm2wCyz2OrVr3PlBsCMo4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REI2OS9EQTg2MENDODZF
NUMxMUVFOUMwMTMzNjFDNEY5QUUwMi8tWHhybndhYmJBTExQWTZ0V3ZjLVVHd0l5
amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1YeHJud2FiYkFMTFBZNnRXdmMtVUd3SXlqZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
REI2OS9EQTg2MENDODZFNUMxMUVFOUMwMTMzNjFDNEY5QUUwMi8tWHhybndhYmJB
TExQWTZ0V3ZjLVVHd0l5amcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdi0hB1cgoyqkrBr6YYwxBel/viqLlvh/+K0H9tbhwGG+p9dXSA51gi65jMHk
IsgyV7TRg9+vH3/8T8Oc/XYoQRAR/Ajl2YnnFwsqugrqtUhn+1S0/ViKfL34DhwV
gAbSdjsPl5WN41BspaSDIckN0rHg9S2otjNoZwneYnhVb8ZiN1VnGPf5n5Nkqaik
sVAIr24Uc6GDtcj/IraxTS+J7wBGJiQBNaNQcn3c2sCxw0t3DgYuAQaZ4hTEMhHH
b+Am8jakJrWXaTFHbS+G0PYJ/Ynl4wV/tPnHDIl2KIBeb6hfifbreQxw+7A3pKn3
j4f01u+ULV5BZs+GenRDbUdM8g==
-----END CERTIFICATE-----
Generated at Mon Apr 6 13:56:51 2026 by rpki-client