Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft
File:                     Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft (raw, json)
Hash identifier:          azOrzo7EM3YrXGEnJgmJdLNK8tUNwykkuyLcfc5GLyU=
Subject key identifier:   7B:32:60:09:60:3F:A7:D2:9C:1F:C6:76:E7:93:73:83:85:05:9E:67
Authority key identifier: 5E:FD:E9:8C:4F:BF:8D:11:87:B6:85:8E:BC:81:F0:62:5B:29:31:60
Certificate issuer:       /CN=A9199CFF/serialNumber=5EFDE98C4FBF8D1187B6858EBC81F0625B293160
Certificate serial:       EE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft
Manifest number:          E9
Signing time:             Sun 05 Apr 2026 05:54:51 +0000
Manifest this update:     Sun 05 Apr 2026 05:54:51 +0000
Manifest next update:     Sun 12 Apr 2026 05:54:51 +0000
Files and hashes:         1: Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl (hash: Nu4Sn0LmiDgezbP2eXljnmRXnCU1be/Z5Y5bXuhyUXc=)
                          2: 8A941156D7E211EFBF26DA72C4F9AE02.roa (hash: UZCERNruPtgrrK+OYbHFA8i9cAcCHqIOlldjCtyuoQo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl
                          rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:54:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 238 (0xee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199CFF, serialNumber=5EFDE98C4FBF8D1187B6858EBC81F0625B293160
        Validity
            Not Before: Apr  5 05:54:51 2026 GMT
            Not After : Apr 12 05:54:51 2026 GMT
        Subject: CN=69d1f92b-b7d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:12:bd:33:ee:a9:49:72:7f:4b:f2:d9:eb:9e:
                    ea:1b:25:d2:1c:dc:14:b7:92:14:27:af:89:49:31:
                    90:a3:8d:ed:69:2f:c2:90:2a:f0:a7:f2:40:90:7e:
                    2b:da:52:3a:1b:dd:75:c1:ef:8d:33:d3:e2:dd:57:
                    04:1e:91:60:d0:cb:cd:41:41:25:94:c7:be:24:9e:
                    c2:e7:0a:72:33:a9:4e:81:7c:b9:d5:66:d6:7f:a2:
                    62:a7:30:d1:dd:76:21:b7:43:e3:9d:65:82:6e:1a:
                    86:88:5b:bd:60:92:2e:06:a5:ef:12:9d:20:66:99:
                    12:4b:76:89:a9:3e:1d:5f:5a:63:56:b4:6c:bd:36:
                    65:79:4c:0e:71:c6:43:e4:e1:1d:fa:58:c3:68:ee:
                    fd:48:cd:38:14:67:48:55:fc:7f:56:40:4e:39:18:
                    22:e4:e9:b0:e8:cf:1e:1c:42:54:14:b0:59:28:16:
                    72:5d:46:e7:7e:b1:1d:f6:7d:75:e6:c7:df:df:29:
                    90:9d:ba:ac:ec:c2:24:18:6b:f1:2c:84:65:8c:d9:
                    7e:dd:4c:d6:96:30:2f:81:a4:8f:5c:d2:d4:6e:4c:
                    39:9d:09:e4:74:ba:d8:57:02:c6:ba:b6:59:85:64:
                    56:56:48:62:6a:f9:ff:59:58:f0:d9:4a:40:ad:fa:
                    17:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:32:60:09:60:3F:A7:D2:9C:1F:C6:76:E7:93:73:83:85:05:9E:67
            X509v3 Authority Key Identifier:
                keyid:5E:FD:E9:8C:4F:BF:8D:11:87:B6:85:8E:BC:81:F0:62:5B:29:31:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:a4:0e:1d:15:c9:cf:7e:a7:1b:c4:12:c8:3e:2a:87:1d:52:
         51:f1:db:ad:73:9d:d9:32:79:c7:6e:91:6c:a8:e2:84:12:c4:
         3d:6f:84:76:a7:77:4f:b0:28:34:ab:02:72:52:12:a5:f4:8b:
         51:b7:ba:bc:2f:02:4a:30:09:f0:53:9b:b7:38:90:24:87:a8:
         16:25:45:ff:67:34:ae:51:fe:63:29:7a:fb:3a:81:a8:a2:a1:
         53:26:29:7c:64:27:74:01:f7:de:0f:f3:d2:44:2c:5b:d0:f2:
         41:26:14:89:80:29:0a:e3:2a:06:fa:b7:fc:c4:0c:92:da:0b:
         2f:90:b6:56:4c:77:54:3f:7b:4e:99:43:16:35:5d:56:3a:fd:
         8d:72:a1:c1:e5:64:c8:05:6d:f4:36:26:b7:e3:f2:ed:8f:1b:
         9c:49:46:4b:fb:b3:28:f9:fc:1b:6a:15:bd:34:40:79:29:bc:
         a3:5d:7e:71:5b:63:02:01:6b:40:64:10:ab:f8:8a:3e:80:de:
         f0:66:4c:b9:84:ac:40:8a:b1:39:7d:e2:ff:98:9e:00:41:a2:
         09:b1:14:1e:61:e0:70:34:7f:33:e4:5c:7c:6b:9f:aa:92:75:
         78:09:ac:63:17:e2:b7:0f:41:82:eb:64:75:c7:e2:3a:90:ca:
         75:ad:87:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 16:37:17 2026 by rpki-client