Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft
File:                     XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft (raw, json)
Hash identifier:          OPT4Hhd1XIB4PJ6ZIh3wUBh1txuNUqJYcHgv22Cy8Vk=
Subject key identifier:   C7:F4:47:9E:CD:C1:8E:98:A0:DA:8C:3F:BE:45:5F:87:0C:28:82:1C
Authority key identifier: 5E:C5:FB:33:4E:E5:2B:90:09:CB:92:3C:69:3B:D2:0F:04:78:A1:44
Certificate issuer:       /CN=A918EF87/serialNumber=5EC5FB334EE52B9009CB923C693BD20F0478A144
Certificate serial:       93
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft
Manifest number:          91
Signing time:             Tue 03 Mar 2026 07:04:29 +0000
Manifest this update:     Tue 03 Mar 2026 07:04:28 +0000
Manifest next update:     Tue 10 Mar 2026 07:04:28 +0000
Files and hashes:         1: XsX7M07lK5AJy5I8aTvSDwR4oUQ.crl (hash: nBRhxS1o2zrlpGpXhGxL8cVpIq/K+2xzRfz7sXvp0gk=)
                          2: C053613E38B311F08DB63209C4F9AE02.roa (hash: XGziVhW7bV6WTpnAO5hHSMS6E/tbFN56AbeKUPYhFNI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.crl
                          rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 07:04:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147 (0x93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EF87, serialNumber=5EC5FB334EE52B9009CB923C693BD20F0478A144
        Validity
            Not Before: Mar  3 07:04:28 2026 GMT
            Not After : Mar 10 07:04:28 2026 GMT
        Subject: CN=69a687fc-04b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:52:43:cf:dd:6b:95:e1:34:b8:e4:0c:56:29:
                    cb:13:20:8a:a7:d4:f3:80:d6:69:0f:58:d4:7c:f3:
                    e4:ab:ab:86:3d:f4:1f:bc:89:b1:9d:f2:af:f9:3f:
                    b6:16:e8:42:13:7b:ee:97:1b:7b:d2:9d:49:ba:7d:
                    fb:04:85:6f:24:76:5b:c6:96:92:40:1a:73:ac:7c:
                    b6:cf:41:47:ee:2d:aa:c5:2d:ac:2d:8c:22:3c:12:
                    bc:06:21:80:ba:f3:ca:95:bd:fd:0b:92:64:5f:32:
                    de:88:29:b1:88:e9:6e:f1:9e:49:3c:cd:01:21:6a:
                    04:6c:3b:40:3c:d7:fb:3a:20:c0:7d:ec:94:62:c3:
                    71:a4:b8:67:25:9d:ca:a6:78:18:3b:87:0e:71:80:
                    16:ed:79:62:e3:f5:7b:1f:b0:bc:a6:ff:44:ae:0c:
                    22:1d:c5:3a:0b:df:d1:0c:09:68:94:97:9b:21:63:
                    63:c6:67:19:b7:79:44:79:31:a4:11:99:83:71:ec:
                    ea:a4:f9:d9:8c:59:bf:37:74:66:24:a9:92:a7:80:
                    ce:b4:66:64:af:ef:81:d9:49:6c:7e:96:18:40:3e:
                    45:df:c3:9f:c9:4e:27:13:07:96:87:9e:ad:47:c7:
                    e1:0f:5b:21:6e:28:80:ef:5e:88:8c:cd:e4:b6:ba:
                    ee:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F4:47:9E:CD:C1:8E:98:A0:DA:8C:3F:BE:45:5F:87:0C:28:82:1C
            X509v3 Authority Key Identifier:
                keyid:5E:C5:FB:33:4E:E5:2B:90:09:CB:92:3C:69:3B:D2:0F:04:78:A1:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:93:6a:a0:a7:69:5b:75:84:3b:44:5a:11:66:01:0a:2f:f6:
         d8:0a:3f:62:48:f2:d9:c1:76:e2:23:93:c1:a3:3b:7e:42:be:
         b6:f1:ed:8f:fa:a1:2a:84:8f:e0:d3:70:5d:be:a7:e4:bb:32:
         26:a7:ef:11:c5:6c:b0:35:2d:f9:82:0a:c0:a5:ec:97:62:3c:
         af:bd:7d:32:1c:cd:b6:1a:35:ba:75:30:13:19:fc:25:2e:f6:
         32:d7:42:a2:61:06:4e:7f:bf:d6:d1:ae:a7:f8:05:9d:15:79:
         41:f4:04:69:b6:fe:31:34:23:9d:79:ea:a4:9e:f5:c4:01:35:
         23:bb:47:cb:64:fb:a0:34:00:03:d9:b1:22:aa:89:29:ea:30:
         82:b7:37:72:00:0c:4c:14:a8:81:bd:8c:c3:b1:2f:52:ea:c4:
         35:fb:7a:c6:b4:4d:3a:c4:9b:38:9f:e0:ab:d1:6c:a7:52:25:
         8f:25:f5:a3:7b:0e:b4:56:02:a2:5a:d4:2b:9b:40:22:e0:45:
         30:fb:1d:a0:86:94:61:4a:24:ea:b7:7f:fa:ce:b3:34:03:d1:
         e6:62:a9:5e:cb:00:4a:94:71:c4:b5:d2:34:17:9c:70:70:1b:
         f2:53:b8:31:4e:d9:e7:7f:e7:e8:8b:9e:76:a9:e2:47:6c:cc:
         48:57:52:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:39:58 2026 by rpki-client