Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/xoquBsigaPIiEjEzLc1N8a8vB5Q.mft
File:                     xoquBsigaPIiEjEzLc1N8a8vB5Q.mft (raw, json)
Hash identifier:          qI3Xwztg54MzQvIB3zKq7sx+VTSmy3lmvDeVzSCJ/hQ=
Subject key identifier:   0A:36:00:F0:50:77:5F:1A:97:46:68:42:B7:30:EB:01:90:DC:95:D1
Authority key identifier: C6:8A:AE:06:C8:A0:68:F2:22:12:31:33:2D:CD:4D:F1:AF:2F:07:94
Certificate issuer:       /CN=A915CC16/serialNumber=C68AAE06C8A068F2221231332DCD4DF1AF2F0794
Certificate serial:       70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xoquBsigaPIiEjEzLc1N8a8vB5Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/xoquBsigaPIiEjEzLc1N8a8vB5Q.mft
Manifest number:          08F4
Signing time:             Sat 04 Apr 2026 20:24:41 +0000
Manifest this update:     Sat 04 Apr 2026 20:24:40 +0000
Manifest next update:     Sat 11 Apr 2026 20:24:40 +0000
Files and hashes:         1: xoquBsigaPIiEjEzLc1N8a8vB5Q.crl (hash: jz1/mQ2bPu1eqBFvJXewoLe4DA2Z3mkO1Ru8Ew+L4io=)
                          2: 38A2CBB88DEE11F0B9918D1FC4F9AE02.roa (hash: xgSF3MSg+ECbX1HYJEOkVDxrn/8L3wJeiao34PywgRk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/xoquBsigaPIiEjEzLc1N8a8vB5Q.crl
                          rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/xoquBsigaPIiEjEzLc1N8a8vB5Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xoquBsigaPIiEjEzLc1N8a8vB5Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 20:24:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112 (0x70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915CC16, serialNumber=C68AAE06C8A068F2221231332DCD4DF1AF2F0794
        Validity
            Not Before: Apr  4 20:24:40 2026 GMT
            Not After : Apr 11 20:24:40 2026 GMT
        Subject: CN=69d17389-7677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c8:39:94:04:a9:a6:e7:91:ad:4e:40:d4:30:
                    62:cf:2e:1e:35:ed:17:30:6f:11:62:d7:42:5e:ba:
                    c4:5f:d0:76:03:93:10:69:2a:c3:4e:c3:a6:a3:d9:
                    ce:19:24:b1:37:52:8f:2e:5e:75:b6:9e:87:1c:51:
                    1a:86:1d:cf:7c:05:08:70:8a:03:5f:4a:22:10:cb:
                    ed:1d:b9:60:78:ae:e3:c1:54:42:85:22:b7:b2:cf:
                    2c:50:1c:ab:08:e0:28:61:13:69:ee:2d:45:f5:ce:
                    d0:f5:9b:c4:d5:d2:84:7f:63:e2:91:76:59:d7:62:
                    29:62:b1:54:82:19:cb:61:b6:1f:84:94:c6:c6:2c:
                    0b:f5:ed:9c:1c:37:9b:ca:73:f3:9d:7b:d3:45:57:
                    95:e2:6b:28:71:4e:77:ec:98:02:89:17:d2:ec:0e:
                    1b:97:99:b4:5d:ba:1f:95:92:22:9c:ec:d3:c4:f5:
                    fd:36:30:36:4f:4f:82:d1:4c:b2:a1:bc:10:35:d1:
                    05:2f:21:35:b2:e6:c5:5c:a5:bf:ce:35:b3:2e:14:
                    2e:27:10:57:db:7b:2c:70:4a:96:1c:e1:c9:76:9a:
                    e9:bc:23:20:08:fe:10:66:9d:b2:93:21:1f:d1:21:
                    ca:4d:56:e2:ac:ad:3c:6d:4d:e1:97:3a:4a:aa:2a:
                    6d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:36:00:F0:50:77:5F:1A:97:46:68:42:B7:30:EB:01:90:DC:95:D1
            X509v3 Authority Key Identifier:
                keyid:C6:8A:AE:06:C8:A0:68:F2:22:12:31:33:2D:CD:4D:F1:AF:2F:07:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/xoquBsigaPIiEjEzLc1N8a8vB5Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xoquBsigaPIiEjEzLc1N8a8vB5Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/xoquBsigaPIiEjEzLc1N8a8vB5Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:05:6e:92:a0:6f:11:bc:65:4b:71:b7:69:12:3b:6a:9c:ee:
         2c:14:d8:5e:25:42:6a:9c:4c:18:84:a9:eb:ac:3b:60:1c:f1:
         ec:5d:88:fd:4a:5b:20:83:a1:12:5b:e8:9a:bb:67:c1:5f:4b:
         a0:77:bc:23:37:c3:d7:d8:bf:70:0a:c0:b3:1b:23:5b:85:2f:
         d5:2d:e9:f4:f3:9a:a7:97:f9:e5:79:2b:e4:b8:b1:6e:80:92:
         f8:e4:ac:33:fe:5d:f4:ee:d6:2c:94:a9:03:c4:2a:2f:a4:5f:
         76:81:56:ee:e2:4f:90:87:07:7a:cb:bf:df:21:29:d3:f1:3b:
         0d:eb:8f:04:4a:3f:cf:f0:e2:8c:78:fa:28:2b:59:b8:6a:53:
         88:f3:24:1e:6c:11:04:4a:67:2d:42:13:5c:c2:fd:e8:5d:68:
         34:40:30:4b:c2:04:71:92:56:18:a8:63:45:5e:31:84:07:64:
         93:97:1d:91:8e:af:4f:76:66:2b:1c:e7:e4:63:ce:a8:b9:9a:
         5e:f6:11:4d:76:99:d6:38:81:52:f2:50:4c:f1:38:c3:0f:57:
         2a:ba:2f:fe:74:6d:dd:a9:f6:4e:d2:26:79:40:d2:26:a7:e0:
         b7:4b:9b:cc:df:71:6e:55:bd:37:3c:75:90:ec:fc:8f:2a:77:
         17:bf:3e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:31:44 2026 by rpki-client