Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.mft
File:                     xv9_8XAyqWoLIW8LwszDXwIgwnI.mft (raw, json)
Hash identifier:          c/Xd2guolrlhbzOoAGBGhAQkwqP9/wVyazoNvYDS57E=
Subject key identifier:   FA:8F:67:A6:19:01:51:C9:4E:DB:F3:6E:54:48:F9:A0:BF:80:E0:83
Authority key identifier: C6:FF:7F:F1:70:32:A9:6A:0B:21:6F:0B:C2:CC:C3:5F:02:20:C2:72
Certificate issuer:       /CN=A91B7929/serialNumber=C6FF7FF17032A96A0B216F0BC2CCC35F0220C272
Certificate serial:       46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xv9_8XAyqWoLIW8LwszDXwIgwnI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.mft
Manifest number:          44
Signing time:             Sun 05 Apr 2026 07:45:27 +0000
Manifest this update:     Sun 05 Apr 2026 07:45:27 +0000
Manifest next update:     Sun 12 Apr 2026 07:45:27 +0000
Files and hashes:         1: xv9_8XAyqWoLIW8LwszDXwIgwnI.crl (hash: OXRXs+E/Ip8+ewp4Q2k7Eylo1+1R6DRuEhjURxDi4Lg=)
                          2: 8709BBD4DB2011F0B6C890B887D3641D.roa (hash: EpL7U0XS/RThjCfzf6MnDPKqtdekXvQOYsOhN2Yrndg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.crl
                          rsync://rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xv9_8XAyqWoLIW8LwszDXwIgwnI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 07:45:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7929, serialNumber=C6FF7FF17032A96A0B216F0BC2CCC35F0220C272
        Validity
            Not Before: Apr  5 07:45:27 2026 GMT
            Not After : Apr 12 07:45:27 2026 GMT
        Subject: CN=69d21317-62ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:65:c5:05:8b:07:6e:0c:ac:33:a1:ea:21:88:
                    e7:74:ec:17:51:02:96:1d:2e:e0:f5:fe:54:f8:89:
                    8d:fc:6b:fc:5e:1a:39:f4:9c:aa:4d:fd:d5:37:8f:
                    c4:69:33:59:fb:11:e5:da:06:e6:52:03:cf:d6:6d:
                    ac:7e:be:ac:d8:08:b6:46:1e:a0:89:47:d3:46:6f:
                    80:76:0c:7f:56:fb:ee:0d:57:a7:d2:7b:ea:e6:49:
                    01:50:fa:2f:37:8c:17:e7:66:d8:8f:99:5a:df:1f:
                    35:dc:d7:f6:7a:7a:dd:bb:0b:bb:cc:5b:a2:32:e3:
                    de:43:b9:e6:01:71:62:f6:c5:67:dd:7a:43:44:a0:
                    7a:92:2e:48:a4:4d:b3:9f:9c:4b:eb:41:ea:51:51:
                    cc:6c:01:b4:85:3a:80:6d:29:b8:0d:51:a8:ae:64:
                    8a:af:8f:23:e5:68:d4:e0:4d:12:cf:8d:b5:cd:c7:
                    67:f1:b0:fc:03:7c:b2:d8:78:ab:c0:96:89:5c:7a:
                    db:34:9c:c7:78:f0:ab:b6:0e:c2:fe:ff:67:eb:f9:
                    f0:18:29:68:1a:db:8c:3e:22:cc:d3:c6:99:63:fe:
                    a0:db:8e:55:86:76:a9:09:c3:4d:a5:7f:f1:b9:c3:
                    48:32:ee:c5:5a:df:cc:cd:28:16:39:66:60:b4:7b:
                    ae:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:8F:67:A6:19:01:51:C9:4E:DB:F3:6E:54:48:F9:A0:BF:80:E0:83
            X509v3 Authority Key Identifier:
                keyid:C6:FF:7F:F1:70:32:A9:6A:0B:21:6F:0B:C2:CC:C3:5F:02:20:C2:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xv9_8XAyqWoLIW8LwszDXwIgwnI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:77:4c:f8:1b:80:26:cc:af:a3:ba:98:ee:ff:4d:51:4c:83:
         df:b0:69:19:b2:c8:e4:ce:66:aa:b6:1c:65:3e:ae:d8:32:c0:
         99:1a:70:d7:54:12:9f:da:ad:98:e5:55:30:99:89:a2:a3:da:
         41:4e:45:91:65:9e:7d:b9:1e:c4:88:c0:44:d9:8e:1e:34:70:
         ab:4a:ab:f8:ff:a7:d2:da:6e:52:ac:06:3f:2b:5c:89:5e:3f:
         a9:f1:bc:68:9b:49:7d:ce:bb:28:4e:59:20:3e:1a:17:48:58:
         9d:fd:82:75:02:68:61:30:1a:19:25:67:11:40:b7:81:09:d5:
         97:c9:f3:34:8a:05:27:28:d1:15:ba:c7:26:7a:13:23:62:fd:
         48:dc:00:e4:68:5c:e5:79:02:20:27:57:dc:ac:52:09:ad:b4:
         25:6b:04:b8:ef:8d:e0:13:b0:b4:24:a5:25:5e:68:09:8c:88:
         d8:a4:4b:08:66:92:c9:cf:09:74:5b:a8:2d:ed:fe:38:83:f4:
         b1:6e:ec:e0:d4:a0:f5:15:1f:3d:ca:db:31:fe:0f:2a:2f:e5:
         4b:83:95:4a:ed:7b:de:2f:c2:e2:b7:79:70:8d:b6:5d:62:6b:
         bb:ae:fd:bb:83:7e:73:07:49:87:95:f0:8c:77:28:7e:c5:05:
         db:a8:23:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:33:02 2026 by rpki-client