Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft
File:                     4XcstdOWUnbPTpjTdmtjDX4_gXg.mft (raw, json)
Hash identifier:          XO5F6Cn8lR3+tNCyFfeywgTbm3Dtg2Du6F3yjWSRz0c=
Subject key identifier:   51:2D:28:3D:14:81:AC:6B:03:75:66:C8:81:77:0C:04:28:00:7C:D5
Authority key identifier: E1:77:2C:B5:D3:96:52:76:CF:4E:98:D3:76:6B:63:0D:7E:3F:81:78
Certificate issuer:       /CN=A9175027/serialNumber=E1772CB5D3965276CF4E98D3766B630D7E3F8178
Certificate serial:       084A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft
Manifest number:          0826
Signing time:             Wed 20 May 2026 21:12:23 +0000
Manifest this update:     Wed 20 May 2026 21:12:22 +0000
Manifest next update:     Wed 27 May 2026 21:12:22 +0000
Files and hashes:         1: 4XcstdOWUnbPTpjTdmtjDX4_gXg.crl (hash: M+5EDtuLXxtSCGwB0MbNsFvZPAQTC/XVUeIcklGwgW0=)
                          2: 12DBAD3CDAFF11ECA67DA10BC4F9AE02.roa (hash: 9WkU0MG65lqjQrS/cbUMSYyvQ66+hlJyNvzSbxcBRt0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.crl
                          rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 21:12:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2122 (0x84a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175027, serialNumber=E1772CB5D3965276CF4E98D3766B630D7E3F8178
        Validity
            Not Before: May 20 21:12:22 2026 GMT
            Not After : May 27 21:12:22 2026 GMT
        Subject: CN=6a0e23b7-7adf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:23:a3:58:3a:ef:16:3e:7e:51:f3:47:5c:86:
                    38:98:90:cd:40:6b:00:11:af:90:be:ef:77:e1:bc:
                    38:fc:1d:ee:4a:41:bc:52:72:c4:bb:3a:08:61:a8:
                    04:2e:f6:d4:3c:8c:aa:52:86:53:ed:76:ad:ee:74:
                    6c:bc:13:75:6e:bf:dd:60:80:66:11:2b:dd:93:83:
                    d6:d8:c8:59:3c:a7:ad:97:fd:29:66:99:58:7b:cf:
                    3b:22:7c:20:22:96:7b:60:c7:b6:5e:ad:d1:3e:53:
                    27:a1:04:e8:1c:b0:cc:eb:46:5e:7d:aa:f2:00:b2:
                    dd:2c:e8:d7:6e:54:c9:37:75:d6:32:1d:af:cc:0d:
                    4c:e1:04:63:64:44:8c:83:5d:39:77:d3:b9:3f:96:
                    74:c5:f4:89:ef:2a:3e:1a:bd:bc:50:02:9b:d9:f4:
                    4f:5c:93:d6:24:60:de:0e:3a:10:b6:69:b1:50:c3:
                    8c:cc:5b:bb:a4:e5:c9:45:78:0c:d3:b2:38:62:0e:
                    8d:c7:fe:84:23:62:2f:1b:96:a7:f6:49:da:cf:bf:
                    18:bc:23:0f:d9:c2:40:f0:f1:f6:ae:e4:cb:be:a7:
                    6a:9c:3c:f9:e7:4b:8f:64:7d:20:bc:63:d1:b3:6c:
                    3f:48:87:30:a1:ae:2c:7a:ee:bb:b1:f2:5a:07:fc:
                    93:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:2D:28:3D:14:81:AC:6B:03:75:66:C8:81:77:0C:04:28:00:7C:D5
            X509v3 Authority Key Identifier:
                keyid:E1:77:2C:B5:D3:96:52:76:CF:4E:98:D3:76:6B:63:0D:7E:3F:81:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:ae:bc:c7:23:b4:cd:5e:3d:c3:8e:ac:14:22:5b:f5:c3:19:
         5c:f0:c8:32:f9:6b:df:48:ba:72:e3:88:2c:64:be:07:09:c5:
         83:4d:6a:66:7d:37:09:39:a2:b4:f2:8b:32:ef:ec:9f:25:cc:
         d8:67:a2:77:b3:8e:7f:1b:64:4b:d5:f4:3e:a2:e2:06:c3:60:
         36:82:e5:d6:fb:cc:54:f9:43:01:87:ce:57:41:f8:91:42:6e:
         64:fd:53:75:74:11:06:80:55:93:69:38:1c:1d:1e:77:86:c7:
         be:09:ac:b7:f8:e7:60:37:d3:67:56:53:1e:20:96:c4:67:d4:
         7b:58:24:49:31:24:cb:0a:48:f2:00:25:06:20:0d:98:33:09:
         cd:3e:3a:28:3c:a7:b6:e4:ec:7f:19:f0:20:f1:cc:71:2c:d2:
         b1:3f:07:af:4f:5d:9e:f1:b0:d3:5e:b4:94:f0:00:04:7e:f3:
         24:15:9f:12:f3:99:d3:7f:62:43:e5:62:4a:c1:c0:7d:0a:e4:
         12:6d:5b:94:f0:33:26:35:0c:5e:5e:2a:68:cc:bb:96:a0:a5:
         ad:42:12:0a:8a:e9:00:75:41:da:72:83:c1:b1:9c:ce:b0:20:
         2a:a8:ee:54:e0:ba:bc:dc:15:2d:52:77:6a:0f:9f:01:43:82:
         d9:2d:a3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:13:43 2026 by rpki-client