Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft
File:                     CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft (raw, json)
Hash identifier:          tlBMaJBkCM0j6HRPa33Ilqja/EluMEMWNeEJMBec8fs=
Subject key identifier:   58:05:5C:98:F8:22:FB:B7:EE:00:29:3F:06:2C:86:25:72:6F:3E:3D
Authority key identifier: 0B:10:E5:EF:EF:30:F8:CE:04:ED:4C:5B:8F:48:A9:CD:24:BC:BA:14
Certificate issuer:       /CN=A91886CC/serialNumber=0B10E5EFEF30F8CE04ED4C5B8F48A9CD24BCBA14
Certificate serial:       01A1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft
Manifest number:          019A
Signing time:             Fri 17 Apr 2026 02:24:32 +0000
Manifest this update:     Fri 17 Apr 2026 02:24:32 +0000
Manifest next update:     Fri 24 Apr 2026 02:24:32 +0000
Files and hashes:         1: CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl (hash: 39WVKEi6rIMZu9+ELT1zCM1Ybwh6nLT688BZhBPdlrU=)
                          2: 6DAC44BAA91E11F0B822717EC4F9AE02.roa (hash: hMU+At17l1ZNCxKQ6DnMUhV3CzOxLfbG9qx0kdLMQj0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl
                          rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:24:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 417 (0x1a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91886CC, serialNumber=0B10E5EFEF30F8CE04ED4C5B8F48A9CD24BCBA14
        Validity
            Not Before: Apr 17 02:24:32 2026 GMT
            Not After : Apr 24 02:24:32 2026 GMT
        Subject: CN=69e199e0-dcc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6b:77:88:0b:cc:c6:2b:94:4c:99:71:68:f9:
                    a3:78:bd:42:24:0e:34:7f:da:6e:2e:2b:c4:1c:b2:
                    1d:bd:a2:25:80:2a:ae:2b:19:3b:d1:44:49:4b:e4:
                    8e:bf:5a:8e:2e:f9:6b:b1:64:0b:a3:25:82:cb:f5:
                    a6:fa:8a:ee:3f:de:44:80:ef:65:7e:a6:a3:57:a0:
                    f0:43:a1:e5:d6:0f:4b:99:98:dd:ae:1e:39:4a:84:
                    8c:df:35:3c:eb:9e:0d:d4:cc:af:43:58:9b:16:bf:
                    14:c2:50:f1:da:c1:61:bd:4d:8d:4b:e7:fd:e5:ed:
                    14:e9:e7:97:90:ea:dd:9e:0f:a2:e6:64:17:a4:43:
                    43:a5:0f:cd:cd:79:49:07:76:39:64:72:90:7d:43:
                    ed:23:79:82:74:b3:54:89:df:01:64:63:fa:42:d7:
                    48:cc:f1:ab:09:92:ac:4f:16:89:b6:8f:b3:0f:7f:
                    80:a1:aa:33:7c:19:08:90:87:47:1c:ef:16:50:f7:
                    b8:23:69:e0:38:39:57:37:59:45:e3:38:51:77:3d:
                    4c:cc:4a:50:e8:09:e3:e3:d9:1c:ba:44:49:86:9d:
                    e3:76:d1:99:65:c9:f5:9d:83:7c:d5:fd:15:a2:af:
                    e9:1a:27:f8:ca:82:3e:49:9a:69:0e:28:45:0b:4f:
                    56:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:05:5C:98:F8:22:FB:B7:EE:00:29:3F:06:2C:86:25:72:6F:3E:3D
            X509v3 Authority Key Identifier:
                keyid:0B:10:E5:EF:EF:30:F8:CE:04:ED:4C:5B:8F:48:A9:CD:24:BC:BA:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:ef:5a:60:69:61:04:d2:b7:21:af:05:ae:23:cd:1b:44:11:
         5e:cc:1e:67:8f:05:40:fb:39:7f:6d:f0:1e:c7:bb:f2:00:b6:
         0a:a7:9e:83:3c:77:b6:e9:9c:29:04:fd:05:51:ec:ea:0d:df:
         38:8d:6f:53:e3:38:cf:cc:d1:d1:e6:4b:04:9e:27:42:e5:9d:
         85:0f:45:46:82:80:4e:09:95:36:15:d5:26:fc:64:bc:48:00:
         0a:e7:67:d9:65:3f:9c:63:ef:7e:4b:90:6f:bd:0b:d8:c5:71:
         8d:36:f7:c4:67:20:07:31:2f:6e:ab:a2:c1:ac:ea:0c:bf:16:
         ed:17:a2:38:0e:6a:76:94:5e:84:1e:ac:6f:38:10:17:e8:cd:
         a8:f2:3f:c6:39:7d:79:e2:e3:09:a4:f8:72:a3:f1:29:12:4e:
         76:27:28:71:82:ba:4c:97:5e:7d:86:7b:f8:04:d8:19:22:86:
         e0:71:db:24:b2:36:a3:7f:69:dc:25:bd:c6:6c:b5:16:5a:7b:
         26:68:5b:03:d6:f2:15:f4:f4:76:a3:4f:c9:7b:d9:79:3e:2b:
         28:30:d5:f6:46:af:4b:3a:76:19:df:9e:36:cf:9d:da:4d:97:
         d9:92:4b:75:35:00:b1:30:27:12:2a:f9:e7:7d:20:58:cf:6f:
         70:e5:d2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:05:55 2026 by rpki-client