Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4F01/A700A8444B7811EC86E50A30C4F9AE02/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.mft
File:                     Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.mft (raw, json)
Hash identifier:          dx4vEFPdqa7WptiTcU/RoD9Pz+eOfxn+vcjO2/r/MC0=
Subject key identifier:   08:36:BB:60:DC:E6:8B:E3:18:90:85:5D:F9:5B:35:43:44:17:DF:9D
Authority key identifier: 5E:BD:A7:FA:A8:01:C5:A2:74:DC:23:D1:71:F8:8B:46:A1:1E:41:54
Certificate issuer:       /CN=A91B4F01/serialNumber=5EBDA7FAA801C5A274DC23D171F88B46A11E4154
Certificate serial:       050F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4F01/A700A8444B7811EC86E50A30C4F9AE02/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.mft
Manifest number:          0508
Signing time:             Sat 04 Apr 2026 23:25:34 +0000
Manifest this update:     Sat 04 Apr 2026 23:25:33 +0000
Manifest next update:     Sat 11 Apr 2026 23:25:33 +0000
Files and hashes:         1: Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.crl (hash: fHUomjIMCTe0AtIFwJLrT3atEHrG2+dul0pr7a5lMJA=)
                          2: BD115AB24B7C11ECA63C0038C4F9AE02.roa (hash: +GvQ/NXwtK6n9zSmGQYOiyRLx0NfuJisquadWhY4pho=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4F01/A700A8444B7811EC86E50A30C4F9AE02/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B4F01/A700A8444B7811EC86E50A30C4F9AE02/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 23:25:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1295 (0x50f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4F01, serialNumber=5EBDA7FAA801C5A274DC23D171F88B46A11E4154
        Validity
            Not Before: Apr  4 23:25:33 2026 GMT
            Not After : Apr 11 23:25:33 2026 GMT
        Subject: CN=69d19dee-1858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b6:c5:7d:72:ce:78:c2:aa:a5:b4:ec:3f:ce:
                    14:d9:11:1e:63:d7:45:8b:92:c7:5b:be:b7:f2:99:
                    bd:c3:ed:d4:89:07:d0:b0:ee:e3:06:7c:bb:67:49:
                    b9:0b:d8:66:03:e1:bf:c9:34:48:d3:e5:dc:9e:48:
                    ee:f1:57:b3:0c:12:12:ea:ff:f0:df:59:93:69:26:
                    a1:fb:c1:fb:70:12:42:12:68:a1:b8:09:c7:6e:da:
                    5e:ac:18:ae:db:2b:87:3a:76:cb:4f:ba:17:30:1b:
                    0f:3e:df:4b:05:90:75:48:4b:23:70:77:10:62:c1:
                    a5:0a:64:50:a5:cb:dc:c9:1f:b4:d8:ab:03:8d:dc:
                    df:e5:57:7b:60:f6:9d:4a:05:fe:a0:fa:a9:e4:1a:
                    ad:56:80:49:06:0a:ba:b1:dd:72:b8:57:10:71:1a:
                    8e:50:37:ed:71:c9:ff:0d:4e:85:03:80:69:65:db:
                    31:2b:ab:3b:de:0b:41:c3:d6:af:40:ff:58:52:60:
                    14:6d:41:e6:89:b9:a8:8f:68:07:af:06:e3:83:76:
                    7c:47:57:4e:fd:e5:ed:53:0b:75:7b:5f:04:3f:84:
                    74:f5:c6:94:67:b9:51:8e:fa:ec:d4:ec:85:55:5b:
                    34:5f:5a:fd:30:cd:69:bb:55:8b:75:10:70:8c:06:
                    7a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:36:BB:60:DC:E6:8B:E3:18:90:85:5D:F9:5B:35:43:44:17:DF:9D
            X509v3 Authority Key Identifier:
                keyid:5E:BD:A7:FA:A8:01:C5:A2:74:DC:23:D1:71:F8:8B:46:A1:1E:41:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4F01/A700A8444B7811EC86E50A30C4F9AE02/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4F01/A700A8444B7811EC86E50A30C4F9AE02/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:f5:3c:76:3a:ec:ae:51:28:74:6b:b4:49:e2:a4:e3:de:64:
         c1:bf:58:89:3b:09:ca:d5:a5:09:f1:28:ae:73:61:e3:7b:88:
         28:73:c1:64:db:5a:01:e6:e0:bd:67:df:1c:79:f3:e6:41:20:
         70:fa:44:20:88:e0:60:84:6c:02:9b:d6:ae:36:61:96:8e:1e:
         13:60:6b:b9:09:dc:4d:1b:6e:63:2e:e2:f2:75:e0:0b:ef:52:
         56:bc:9d:da:f9:d9:d2:eb:35:4a:b2:fa:ae:27:c0:1d:19:c7:
         8f:fc:59:3f:a1:6d:3a:46:34:81:ec:d2:52:17:17:e1:5b:c4:
         8f:b2:fe:37:da:cc:9c:ae:a4:8c:9b:11:80:dc:99:35:78:fe:
         a0:c4:ad:dd:a3:ce:87:9c:1b:5f:e0:8b:4f:95:1d:f7:47:7b:
         65:ae:65:78:e9:a1:fb:bf:bd:0a:97:85:44:2b:76:08:e2:e2:
         2e:a3:d6:ae:70:22:a5:80:32:bd:93:0b:fc:81:8e:83:2f:b3:
         9f:a1:da:12:e7:bb:05:7a:a9:d6:13:2b:82:64:6a:fa:7a:df:
         13:3b:18:28:2a:c8:8b:e9:80:89:a9:ad:be:b3:40:87:07:15:
         b4:60:f7:7a:d5:ed:ea:52:69:82:6a:97:1e:6d:97:e4:f4:ae:
         44:bd:31:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:32:07 2026 by rpki-client