Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.mft
File:                     XAo1I_02RadjWvJRmtzQAuEy-84.mft (raw, json)
Hash identifier:          zFg7BEpFU8RJTYP+GdWXH/DzrZX5rryeDDgMyD/1z9s=
Subject key identifier:   8B:8C:8B:4A:C3:77:03:78:1C:E1:AC:0D:7D:23:A8:EA:DA:71:8C:68
Authority key identifier: 5C:0A:35:23:FD:36:45:A7:63:5A:F2:51:9A:DC:D0:02:E1:32:FB:CE
Certificate issuer:       /CN=A91B0F90/serialNumber=5C0A3523FD3645A7635AF2519ADCD002E132FBCE
Certificate serial:       ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAo1I_02RadjWvJRmtzQAuEy-84.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.mft
Manifest number:          E0
Signing time:             Sun 05 Apr 2026 06:04:46 +0000
Manifest this update:     Sun 05 Apr 2026 06:04:46 +0000
Manifest next update:     Sun 12 Apr 2026 06:04:46 +0000
Files and hashes:         1: XAo1I_02RadjWvJRmtzQAuEy-84.crl (hash: MoK37XFsKZxkGx1bXj9FD0sTsxVpllpjqpUPz0vd5YA=)
                          2: 304DD002EFAB11EF97C9610FC4F9AE02.roa (hash: t1JjvZDB24X6k3Mu8SErmmJoER7kOsUM0Jx228MJLJ4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.crl
                          rsync://rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAo1I_02RadjWvJRmtzQAuEy-84.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 06:04:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 237 (0xed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0F90, serialNumber=5C0A3523FD3645A7635AF2519ADCD002E132FBCE
        Validity
            Not Before: Apr  5 06:04:46 2026 GMT
            Not After : Apr 12 06:04:46 2026 GMT
        Subject: CN=69d1fb7e-65ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a4:bb:21:dc:13:bb:8c:09:05:40:f8:53:21:
                    7f:32:0d:1a:1b:3d:1d:f3:f2:74:1b:b7:c6:48:19:
                    e6:90:72:fe:f3:5c:ed:87:de:e1:a8:b6:0f:a6:0d:
                    d2:c0:39:f5:ba:9f:b3:98:2e:03:31:23:cb:fb:91:
                    ba:73:49:60:2a:4e:48:fc:4e:e7:54:da:cb:20:4e:
                    51:e5:0e:99:40:ac:3c:dc:8b:14:68:11:19:98:b5:
                    18:19:bd:b3:04:6f:08:97:3e:55:e9:81:90:e7:d9:
                    23:43:12:88:90:a6:cf:86:c7:09:3a:bd:f2:70:b1:
                    45:87:f9:01:e6:fc:a6:eb:91:84:ee:11:42:d1:1e:
                    6f:b2:90:2b:20:98:ca:33:06:a1:f7:03:d1:e9:a7:
                    cc:02:5c:83:43:8a:f6:14:eb:d8:65:ad:78:9a:66:
                    0f:5d:f1:81:f3:22:ac:85:23:5f:56:45:7f:fa:8d:
                    71:ae:e8:aa:15:a9:5a:ac:6f:9b:2a:90:16:80:d5:
                    f2:b1:19:49:ee:6e:3f:e9:b6:21:0b:8b:e1:20:ed:
                    38:2c:46:66:73:f0:d2:3f:7b:bd:73:6c:c5:b4:36:
                    76:29:b2:a9:4b:8b:13:34:89:a5:42:5b:35:e1:eb:
                    9e:41:56:11:c2:5d:5e:25:92:b2:fe:51:b6:99:98:
                    54:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:8C:8B:4A:C3:77:03:78:1C:E1:AC:0D:7D:23:A8:EA:DA:71:8C:68
            X509v3 Authority Key Identifier:
                keyid:5C:0A:35:23:FD:36:45:A7:63:5A:F2:51:9A:DC:D0:02:E1:32:FB:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAo1I_02RadjWvJRmtzQAuEy-84.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:be:de:a7:8a:cf:64:5a:96:3b:9b:32:08:e9:4f:08:52:c0:
         6f:38:70:e4:91:38:46:18:45:79:14:63:73:a3:bd:aa:96:87:
         33:79:ed:fc:de:15:14:fc:50:ce:ec:8d:fe:24:5d:8f:0b:34:
         55:73:17:cf:ea:6f:06:f7:9d:d6:2f:13:17:67:08:be:b7:fc:
         4e:d1:1d:96:7f:68:fc:0f:2f:6e:83:96:7b:53:10:8e:c8:ba:
         d4:7e:2e:0f:86:20:f2:94:f6:13:43:6a:06:67:1b:a1:d0:ea:
         ae:57:f3:12:73:80:2b:d0:45:91:33:23:a1:4c:84:75:2a:6e:
         9d:02:91:83:1e:38:6f:61:10:37:b3:23:e7:97:87:e5:4d:62:
         91:13:ce:d9:66:9a:e3:32:95:ea:04:76:37:62:a9:8f:89:f0:
         ec:50:ed:e3:8d:dc:38:61:aa:ef:48:4b:ee:06:48:5b:e9:ba:
         02:0f:41:bb:3b:9f:17:99:a6:85:49:dd:86:bd:f7:ae:52:6f:
         ca:fb:5f:b6:80:cf:5a:7f:f0:53:f8:46:b7:e0:63:be:d7:91:
         2b:d0:dc:eb:21:fd:9d:72:ee:c8:ac:07:2e:dc:4a:55:76:ca:
         4d:74:e9:93:bc:e4:9c:8b:4a:39:79:44:2b:38:73:79:b7:41:
         9c:5c:0d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:51:05 2026 by rpki-client