Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft
File:                     xyabEkxCDFXin7UdPBsNnUdsvQA.mft (raw, json)
Hash identifier:          xpXSeYFISKky8MjxhvL9H7kwsMmexT55qyVG7Y59JHM=
Subject key identifier:   07:BD:D9:0B:53:1B:AB:4D:1D:B9:BE:10:65:71:15:7B:D7:23:0B:99
Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
Certificate issuer:       /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Certificate serial:       1A02
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft
Manifest number:          1737
Signing time:             Tue 28 Apr 2026 16:55:44 +0000
Manifest this update:     Tue 28 Apr 2026 16:55:44 +0000
Manifest next update:     Tue 05 May 2026 16:55:44 +0000
Files and hashes:         1: xyabEkxCDFXin7UdPBsNnUdsvQA.crl (hash: +OyJck/dVjusWYL3A/H5WzK83Z6Rki1XXhgGWgAx3mc=)
                          2: 2F6ACEDCDAAE11E9A0D2D77BC4F9AE02.roa (hash: BxG0F/WjWpDjPTtb5RRrHO+ss4unVJo7zC1MzAvtUtk=)
                          3: 2C0D015EABA211EAB7C51982C4F9AE02.roa (hash: OXnUP/JG3w1yEFtXRtB3EemUPot6EKdNnxfAnstSIjI=)
                          4: FCDECBBE538711EA81ECEB2EC4F9AE02.roa (hash: S/dafMyGnoaScUVOEOAthiDLiY0z9mFaUx5kMMduICQ=)
                          5: 777818EE811411EABAD68C17C4F9AE02.roa (hash: yLBCrU/9RvuI/3Ay5n3EAF4Spgkoeqo4m1QHvpK9Jp0=)
                          6: 2EEE5866DAAE11E9A0D2D77BC4F9AE02.roa (hash: ddBHtww0w889dxAapR0tDPN4CvQLtyLCegfsQh3khs4=)
                          7: 31DEDB2CDAAE11E9A0D2D77BC4F9AE02.roa (hash: hoLS1gV18m+O3GqsO6stfQ7iSMrUj2IEPQoamxZ9gzQ=)
                          8: 0861EEFA881A11EFA769B787C4F9AE02.roa (hash: psgGb3ANrPemsGMpfT9JCuPtdmIwAydwkIMUMCBZW4Y=)
                          9: 311A9A8CDAAE11E9A0D2D77BC4F9AE02.roa (hash: aHoZLC2L3b3zGtWoG3wC75zKVeJj+YJNHv+9PZJe2Ss=)
                          10: 900AE11A539811EAB7BED96CC4F9AE02.roa (hash: QEmI8rFO3uFcQUGRkaarXEyZTTwJDnEF3MflJofq8Ho=)
                          11: 6687BE468B9F11EA97BB8046C4F9AE02.roa (hash: ICs1TEIOpnxVUHj987EsWwjf3g4Xq+0ePZB44Mwwr1U=)
                          12: B9FF8C12120A11EEBF7A0D72C4F9AE02.roa (hash: 9k+NHvdwPaL2Te9EGjJfwM53cdhWCBk6SgfyxFOLTzw=)
                          13: 4996DBD6FC6111EA9BE8AB1AC4F9AE02.roa (hash: 1HlLCwNQIyozJV4R6Hnm8QJXf/uITnPoAyb7nipvwt4=)
                          14: 54C069B0523211EBAD962F7AC4F9AE02.roa (hash: nT4IqSSGqtky3oV2UAtgSCBzreFM8SwkDqRJ1RnCCsQ=)
                          15: E6F611DADD1211EABAE49278C4F9AE02.roa (hash: XnGwGjApnJiNJjn58kdU+fCn2kMRI3F8FSS/7+708cw=)
                          16: F6F34FA2EC2611F097438BD43E6F56BC.roa (hash: d4qLINHxzHC2igs+d7HFx4FkCdNcECuX29TNhu6zNb0=)
                          17: 910426E4539811EAB7BED96CC4F9AE02.roa (hash: IpBvgX/8iJN/8+lDdhFGN5U95vt5chfijPRQMRrbUXk=)
                          18: 6BDD8DBA4AD811EFAECCDA0FC4F9AE02.roa (hash: kxl0Ju03xol22MdSZwz8cEZSAcwOMODv9xQLWw9mcDU=)
                          19: 2A309FACEC2511F093ADEAD03D6F56BC.roa (hash: J0nwYlEYUE4zSCS6vykAZTwAKoV8/9btL95KquTry64=)
                          20: 0351889A90C511EFBAE1BD70C4F9AE02.roa (hash: qwFwplU43G/hNJT02NNQ4dEUqw5/rgD0dEX0nQo6jl4=)
                          21: 8489DCB2DD1111EA9D8EEB74C4F9AE02.roa (hash: mPbx6GaGGpEZcuE74LbXOCQRX7Jy5PlwX+gtNN/XZgI=)
                          22: F2DC6FDA590111EE965F2E48C4F9AE02.roa (hash: ycOq0IsrhA+YmUYWAhAsrdeYN4eebRnWEnTPZHVK1yQ=)
                          23: 0E1AD8C2982011F0A7A0894CC4F9AE02.roa (hash: wKUa5/luq9B8kVj6p/G8xPQ0IZcLYJQWqnLpb5Jwx4c=)
                          24: 8A5FD86448E711EDA6CDF473C4F9AE02.roa (hash: kDxO50GD5AXFe4GFX5YhHhfReI3EK8WF+6AhrrSnCTE=)
                          25: EE744ACAD55C11EAA224E026C4F9AE02.roa (hash: Q48uJdRRBErvN0MaEglf3VQ+DumuMDNeFKgsuTsot38=)
                          26: 28C73E085EC411F0AFDCEE52C4F9AE02.roa (hash: E+w+5MHO8ewDddMwvBrrEc1lgQdxewrUq+QuhkdbY4w=)
                          27: 678B44F28B9F11EA97BB8046C4F9AE02.roa (hash: SntS7Vg1oFYriW3szo2h4z7g9R8/MBi6lWybX6Gw4N8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl
                          rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 05 May 2026 16:55:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6658 (0x1a02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAE3D, serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
        Validity
            Not Before: Apr 28 16:55:44 2026 GMT
            Not After : May  5 16:55:44 2026 GMT
        Subject: CN=69f0e690-0859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d8:8f:18:bf:2c:20:74:90:b0:d0:37:01:45:
                    a7:f4:4f:41:4d:67:de:12:98:11:95:7c:f9:60:7f:
                    7e:a9:88:49:1a:88:04:df:b4:36:a8:4d:6f:1c:7d:
                    7f:9e:f8:62:de:bd:59:ef:90:30:3e:bc:dd:7a:05:
                    4f:87:9d:02:b8:eb:33:f4:ac:75:98:03:86:10:29:
                    ba:3d:ca:71:90:30:cd:9c:92:33:54:2d:6e:46:7f:
                    0d:a2:4a:42:d6:33:c8:ba:6b:dc:68:c3:65:59:a2:
                    54:7b:e2:af:61:bf:bc:3b:c1:2a:39:71:35:ca:1b:
                    ed:9e:00:d8:6f:88:b1:6f:d0:6a:37:13:37:c3:4e:
                    a6:f1:31:ef:e1:cf:94:67:de:3d:80:2d:6e:d9:cb:
                    90:5d:c9:02:27:2c:65:ea:bf:4b:e0:ad:de:51:36:
                    42:d2:01:07:84:d6:5d:cb:c5:00:b6:7b:60:5f:82:
                    18:4c:2a:47:df:b7:78:c9:36:1c:b7:4f:bb:e5:b6:
                    2f:63:c2:d3:8d:68:0d:4b:71:64:08:c5:7b:89:57:
                    a1:19:5b:98:31:dc:05:f7:bb:42:f8:50:0c:46:68:
                    45:f4:36:62:ce:c4:7b:14:39:9e:c3:d5:56:34:1a:
                    f7:a4:05:e6:87:cb:5d:f5:bb:2c:32:6b:a6:3c:98:
                    cd:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:BD:D9:0B:53:1B:AB:4D:1D:B9:BE:10:65:71:15:7B:D7:23:0B:99
            X509v3 Authority Key Identifier:
                keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:65:3e:bf:06:19:a4:c4:3a:cf:9f:d5:32:ec:b5:fd:98:d8:
         21:e9:04:43:70:5c:6c:a4:05:25:f4:a5:eb:f8:5d:76:e7:ba:
         fe:0d:be:99:f2:7b:fb:ef:49:b5:8e:95:d0:2d:c6:4e:d5:85:
         0b:59:1c:b6:8d:14:a9:1b:21:35:b1:65:27:9e:cb:7e:c1:42:
         c6:cb:d3:67:78:95:ec:be:37:ac:82:07:74:01:a6:6d:29:d4:
         d9:54:d0:4d:12:77:d0:d7:57:06:09:b2:d9:cc:6e:55:e6:34:
         f9:32:be:7c:d0:27:23:4c:09:bc:6f:5c:86:5a:80:05:54:78:
         26:86:b0:a7:11:14:fb:56:b6:cc:12:c9:d9:67:6e:1f:4f:d4:
         2c:85:d3:6a:1a:c9:be:14:ef:30:75:c4:47:b8:60:ce:73:a2:
         4b:16:b0:4b:61:98:ec:b8:2d:64:98:75:76:db:50:43:07:57:
         32:a7:af:fe:52:31:74:4f:cf:5a:dd:a5:24:bf:dd:63:22:66:
         f9:e7:d2:d4:b5:40:d3:7e:dc:ee:3f:5d:b8:d9:6e:b6:27:93:
         c6:4b:81:ac:4f:17:64:f5:f2:da:9e:e7:14:c2:ef:e6:ec:ca:
         21:7c:3c:33:d0:8c:26:d5:0e:37:02:da:3b:85:95:f3:c0:2e:
         f2:a2:07:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 07:33:02 2026 by rpki-client