Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft
File:                     xQRWVXeumfYZHJeDPdvdYk7CTpI.mft (raw, json)
Hash identifier:          5gkGZzPtwvGdqjZLVe4NcxfdYR+SnNdJpA8f5sVpHuw=
Subject key identifier:   BB:BD:57:8C:03:05:8D:5F:75:4C:A9:58:92:A3:26:0C:BC:D1:64:16
Authority key identifier: C5:04:56:55:77:AE:99:F6:19:1C:97:83:3D:DB:DD:62:4E:C2:4E:92
Certificate issuer:       /CN=A916D128/serialNumber=C504565577AE99F6191C97833DDBDD624EC24E92
Certificate serial:       07F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft
Manifest number:          07BE
Signing time:             Sat 04 Apr 2026 21:15:06 +0000
Manifest this update:     Sat 04 Apr 2026 21:15:06 +0000
Manifest next update:     Sat 11 Apr 2026 21:15:06 +0000
Files and hashes:         1: xQRWVXeumfYZHJeDPdvdYk7CTpI.crl (hash: /ilgFfzVV0zHakRgdSNJezh6aL5QkZplL/1lQ26YSLo=)
                          2: 19D427BA6AFD11EEA4AF1A0FC4F9AE02.roa (hash: 8wPCikKi+MQL34SMZFG04z7KedSfiNcxZCrwRnt7vrA=)
                          3: B38547D6EDB611EEB49CEE2CC4F9AE02.roa (hash: wOEYlAAobb9nCZWU7ILmmI4WtLWkbwGu6k9TfmwOgrw=)
                          4: A2272F186E1D11EEB6A10A0CC4F9AE02.roa (hash: pdKfh0rHk6MsKSq/P/C5bZ/12KI4D++yBlGSjUNlgck=)
                          5: 8342D87641AC11ECACD65E18C4F9AE02.roa (hash: Z9Aj+lSx9qfZY/JZ1gYb96BwZ7DAL++xryjqUPWEopY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.crl
                          rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 21:15:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2033 (0x7f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D128, serialNumber=C504565577AE99F6191C97833DDBDD624EC24E92
        Validity
            Not Before: Apr  4 21:15:06 2026 GMT
            Not After : Apr 11 21:15:06 2026 GMT
        Subject: CN=69d17f5a-a5bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:cb:4e:4f:df:8e:89:8e:4c:a1:82:93:48:fa:
                    40:38:ec:ec:5c:b8:63:29:77:3b:d6:34:a0:fb:37:
                    9a:13:13:e2:bd:34:5f:88:8f:17:88:cc:c0:2f:41:
                    60:dc:a0:e7:61:f6:b6:22:e3:f9:12:cc:a8:cc:1f:
                    52:c6:2f:6e:1e:42:b1:e5:ae:8d:ca:06:4d:f5:cb:
                    01:74:19:86:7e:93:8c:ee:6d:ce:88:28:6c:37:e3:
                    9c:66:21:9f:c8:c9:7f:e8:11:45:20:c7:f4:2f:cb:
                    b3:b8:64:c8:22:10:56:88:a8:1c:24:91:e1:64:5b:
                    30:c0:98:ad:fb:98:fc:19:1a:57:a8:54:60:0e:6d:
                    d7:41:50:bc:5c:de:53:7c:7d:0d:77:f5:6f:aa:68:
                    3f:95:a6:24:5c:2b:af:ab:ea:1c:a4:05:dc:d8:59:
                    7a:71:0a:1b:1b:34:82:1a:82:91:38:86:29:b2:56:
                    47:83:35:16:a0:ed:d0:83:6b:62:22:11:ad:8b:f5:
                    e2:3f:f8:be:bd:a9:b9:43:e8:a0:05:e0:d4:ee:f1:
                    a4:27:05:63:54:21:e9:b7:19:5b:90:a9:da:90:e4:
                    57:38:e6:db:6a:09:cb:38:5d:8a:68:f0:19:cb:57:
                    ee:6a:da:4e:8d:db:2c:57:1c:52:57:44:33:77:77:
                    73:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:BD:57:8C:03:05:8D:5F:75:4C:A9:58:92:A3:26:0C:BC:D1:64:16
            X509v3 Authority Key Identifier:
                keyid:C5:04:56:55:77:AE:99:F6:19:1C:97:83:3D:DB:DD:62:4E:C2:4E:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:0d:51:2c:20:da:43:86:c5:5c:44:ad:ef:48:26:a3:32:f8:
         5b:45:d5:01:9c:4d:bb:2e:8b:40:ae:e3:02:a6:84:26:1e:9e:
         9c:4b:4b:15:e8:70:9a:08:df:0e:3e:45:87:54:c4:6d:e7:08:
         9f:c2:1c:c5:9a:22:a8:9c:42:4f:bc:be:80:44:e3:87:b0:25:
         4c:16:7d:49:07:d0:47:61:fa:33:2c:50:ef:5a:5e:9b:96:6c:
         fc:87:51:c7:21:49:c4:a4:19:57:de:a2:c8:4b:51:ca:5f:ef:
         1c:cc:30:8d:b2:d8:fe:15:7d:ab:4f:63:3c:fa:bd:df:cb:66:
         86:2b:e9:a9:15:c3:d9:da:fa:3b:3d:39:ed:20:22:a4:ee:7d:
         0b:3b:c8:90:a2:c8:13:47:f5:09:0b:8e:70:06:ba:00:b9:11:
         4a:99:c6:5a:54:0a:70:31:26:04:50:21:af:32:1c:0b:12:05:
         fb:4c:98:da:36:21:5d:2a:7b:08:54:90:ba:ff:43:23:5e:dc:
         23:e3:f5:54:ea:37:fd:4c:9c:b5:7d:69:07:d0:3f:f3:d7:85:
         8e:a7:71:21:e0:bf:2e:60:1a:29:ad:8c:ac:93:18:c7:6a:ed:
         cd:5e:51:57:64:70:08:1b:25:a8:8d:26:27:56:40:ab:b4:d9:
         3f:62:7f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:51:05 2026 by rpki-client