Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft
File:                     Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft (raw, json)
Hash identifier:          mN+5pAW+PxLV1IGmNu6UqO8/BF3WuVyTFwJTLaJZ4eE=
Subject key identifier:   03:0C:0B:AF:0A:26:1A:54:71:21:81:54:B6:79:36:84:95:63:00:68
Authority key identifier: 5F:38:F4:19:51:61:62:BD:88:6E:40:BD:A9:27:F5:5D:C6:FF:3E:62
Certificate issuer:       /CN=A91F8119/serialNumber=5F38F419516162BD886E40BDA927F55DC6FF3E62
Certificate serial:       264F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft
Manifest number:          2633
Signing time:             Sat 04 Apr 2026 15:39:09 +0000
Manifest this update:     Sat 04 Apr 2026 15:39:09 +0000
Manifest next update:     Sat 11 Apr 2026 15:39:09 +0000
Files and hashes:         1: Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl (hash: nFfxygHJo55cR/35SDXwE022hAlqDC9wZKibaf2xY8w=)
                          2: 171130AE15F011EC805A0A2FC4F9AE02.roa (hash: OkYL9yCBMETHaZgdXd4jZyNgPnKLNw6+6FHJVPhZs8k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl
                          rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 15:39:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9807 (0x264f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8119, serialNumber=5F38F419516162BD886E40BDA927F55DC6FF3E62
        Validity
            Not Before: Apr  4 15:39:09 2026 GMT
            Not After : Apr 11 15:39:09 2026 GMT
        Subject: CN=69d1309d-4830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:3d:3e:e6:14:70:26:77:96:41:ed:73:cf:cb:
                    93:be:4c:dc:0c:27:3a:10:77:ed:16:86:75:2a:64:
                    64:fb:94:6c:ce:57:c3:ba:c6:c5:a1:70:e5:4c:33:
                    f5:ff:f7:a4:46:42:b1:0c:6e:6a:8f:86:dd:4b:3b:
                    d7:b9:9b:65:db:e0:51:7e:75:f6:d7:d4:c5:08:c3:
                    49:25:2f:da:52:47:71:0d:6d:6f:99:ca:d8:9b:da:
                    13:9c:61:c6:32:35:c1:1c:e1:fc:18:56:65:fc:be:
                    b2:cc:d5:be:b6:fe:0c:02:26:e5:e1:df:b0:43:f9:
                    2e:f3:58:bf:7a:e7:e7:6c:df:ea:29:59:be:8c:e0:
                    c7:cd:f3:bb:06:0e:fa:1f:2d:5e:ea:85:51:7e:6b:
                    1f:4e:b8:d2:45:59:87:7d:13:a8:7d:ce:18:cb:ef:
                    ff:27:04:ef:b1:17:11:aa:a4:8e:9c:18:91:1e:6a:
                    a0:b6:cb:e6:5f:05:23:e0:7a:1b:f5:6a:d7:15:fc:
                    62:2e:59:2e:ec:45:a2:e6:bf:c1:6a:9c:c2:c5:07:
                    db:4c:ca:f0:52:1b:6c:d1:be:d4:0e:ea:c7:64:70:
                    38:d8:1d:39:7d:f9:5e:09:24:41:57:70:83:63:62:
                    98:3d:ef:6f:8a:b2:95:33:d7:ad:e0:ab:98:e2:a3:
                    1d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:0C:0B:AF:0A:26:1A:54:71:21:81:54:B6:79:36:84:95:63:00:68
            X509v3 Authority Key Identifier:
                keyid:5F:38:F4:19:51:61:62:BD:88:6E:40:BD:A9:27:F5:5D:C6:FF:3E:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:ae:d6:75:62:cd:bd:e9:46:d7:ec:f5:66:2b:f1:a8:f4:6a:
         17:7d:68:bd:ae:82:9e:1e:74:f3:a0:55:41:a3:d2:ad:1c:7f:
         23:f0:88:99:45:e8:47:02:b0:42:d4:65:8e:f9:36:c3:91:70:
         8d:4e:02:f8:a7:e2:19:f2:2f:03:59:fa:25:76:47:16:cc:8f:
         a8:ac:7b:07:d4:16:21:5f:8d:a5:be:a1:8d:12:1b:2f:01:b9:
         f4:f1:1e:17:a1:28:bf:9c:f0:ad:64:77:2f:81:61:a6:b9:a1:
         67:7f:d6:6c:e4:a6:0e:d6:9c:b7:9b:29:f9:a8:fd:01:72:1f:
         53:b4:56:ab:20:7b:e1:8c:18:8b:db:09:e8:64:e4:80:9e:02:
         cc:7e:af:d0:a8:3a:e7:5c:a7:9b:2a:f5:63:4b:85:e4:f8:25:
         a3:dd:ac:9a:50:8f:3a:20:7b:55:21:40:dc:83:e4:68:5e:cc:
         8f:0d:e9:63:00:2e:63:34:a3:e4:b5:31:cd:0a:33:f8:69:61:
         ff:f1:2b:61:b4:d2:34:61:1c:a7:cb:38:e9:81:c9:e4:fc:79:
         d7:2e:41:01:d0:3a:86:b8:04:56:ef:98:bc:34:a2:ed:a7:24:
         f7:da:0b:85:77:4c:b4:8d:95:79:23:01:b1:7c:ec:9b:32:73:
         d5:50:d7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:54:34 2026 by rpki-client