Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft
File:                     XCJQF8zJYrDnOQswzwpWIvfN-u0.mft (raw, json)
Hash identifier:          CL234/D5regIec9DVq8uLpQgk5VrJq6/Q9U9lG9HKRQ=
Subject key identifier:   B7:AB:56:14:CD:CF:61:60:3A:FD:AC:EE:DC:E7:22:88:62:97:0E:90
Authority key identifier: 5C:22:50:17:CC:C9:62:B0:E7:39:0B:30:CF:0A:56:22:F7:CD:FA:ED
Certificate issuer:       /CN=A9154330/serialNumber=5C225017CCC962B0E7390B30CF0A5622F7CDFAED
Certificate serial:       1356
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCJQF8zJYrDnOQswzwpWIvfN-u0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft
Manifest number:          1354
Signing time:             Sat 04 Apr 2026 16:52:53 +0000
Manifest this update:     Sat 04 Apr 2026 16:52:52 +0000
Manifest next update:     Sat 11 Apr 2026 16:52:52 +0000
Files and hashes:         1: XCJQF8zJYrDnOQswzwpWIvfN-u0.crl (hash: 5BMTzjOMcwrZ8EyD06x8ZUivm2vDgwpC6uDwlv5MH5Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.crl
                          rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCJQF8zJYrDnOQswzwpWIvfN-u0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 16:52:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4950 (0x1356)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154330, serialNumber=5C225017CCC962B0E7390B30CF0A5622F7CDFAED
        Validity
            Not Before: Apr  4 16:52:52 2026 GMT
            Not After : Apr 11 16:52:52 2026 GMT
        Subject: CN=69d141e5-826b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:40:b6:f7:93:86:ec:84:c5:68:7e:70:59:7d:
                    71:c8:25:a8:32:d7:15:e3:cc:61:ac:16:23:17:ac:
                    cf:4b:73:8d:cc:d3:67:6c:ab:b5:22:07:38:27:a6:
                    3f:08:e6:b1:ba:46:5d:f3:29:46:7e:04:8e:85:22:
                    53:a9:2c:00:35:85:bf:f8:b4:b3:ef:83:c6:3d:c3:
                    b9:2d:d8:fd:be:d2:62:85:ff:ed:3f:2b:f4:f9:86:
                    38:15:9c:4d:c1:a0:26:ff:41:e1:18:23:b9:f0:5c:
                    fa:67:85:1b:72:1e:ee:7c:ee:ff:bb:46:b9:15:43:
                    c9:58:89:ef:72:4f:3e:36:b1:8a:c2:e1:4c:26:71:
                    c9:b6:1b:b3:60:04:7f:0b:5f:22:e5:5b:55:bb:7d:
                    d3:3b:98:21:43:c4:25:9d:e9:22:63:10:5f:2e:98:
                    e0:f6:99:c1:8e:c8:be:51:4c:a3:e2:eb:4c:88:aa:
                    cb:a8:2a:d4:93:2a:93:00:3c:9f:b7:5c:83:aa:bd:
                    29:e8:11:2c:60:0b:58:c7:87:6d:f3:ca:a2:7b:f9:
                    71:c6:f5:34:0b:4d:78:84:2f:19:85:30:30:37:02:
                    c8:79:dd:34:59:0d:94:e1:e1:f4:15:9f:f3:fe:51:
                    c9:7f:cb:6d:07:d2:ac:83:0b:ec:d1:62:aa:92:22:
                    85:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:AB:56:14:CD:CF:61:60:3A:FD:AC:EE:DC:E7:22:88:62:97:0E:90
            X509v3 Authority Key Identifier:
                keyid:5C:22:50:17:CC:C9:62:B0:E7:39:0B:30:CF:0A:56:22:F7:CD:FA:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCJQF8zJYrDnOQswzwpWIvfN-u0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:35:24:58:16:68:fc:0f:c0:54:d4:27:ec:22:c3:94:88:cb:
         d8:33:6c:01:9e:16:5e:19:16:50:0b:d9:e0:ba:f8:22:67:eb:
         49:88:23:e3:5b:25:d4:58:b3:3f:44:f8:78:46:73:2c:45:42:
         5a:5a:ab:30:c7:54:e7:ad:63:d5:31:12:22:e4:2e:6c:9e:5a:
         1d:6b:36:1c:49:e1:7d:47:75:0b:de:14:53:8a:7e:d0:72:54:
         e5:ab:73:5b:3f:c5:ff:ca:70:9e:6e:47:8b:4c:d5:8e:71:05:
         27:7a:88:ea:e7:d5:b3:f3:0b:4b:ad:22:96:c9:5b:8e:9a:33:
         12:4f:af:f7:34:6a:e7:31:a6:16:8c:e6:98:77:4b:20:5b:d2:
         57:8b:79:23:a7:d3:43:33:3c:35:68:00:8f:79:9f:c0:15:fd:
         87:75:93:20:81:f4:78:d8:dd:4c:ed:5f:03:38:1b:42:96:b9:
         c1:4e:ee:19:13:71:e5:f8:81:4e:4e:a7:12:e5:ae:61:0f:05:
         96:73:c6:ba:df:c8:0a:62:d5:1f:4c:58:17:df:b1:01:69:e0:
         3b:c8:09:37:fc:7e:25:94:72:d6:b5:0b:f7:51:38:98:23:88:
         55:29:36:21:ee:ea:75:91:66:f4:bc:11:48:df:44:16:41:6c:
         19:3a:e4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:57:10 2026 by rpki-client