Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912418E/E5676BECB08011F08A950351C4F9AE02/XFIDfgLgI3qkpHhukIwUJuu5qUc.mft
File:                     XFIDfgLgI3qkpHhukIwUJuu5qUc.mft (raw, json)
Hash identifier:          7QMuGOx6iAOQaIcqvb5hR0SHAU26Iu2FSC/2AMosQ+o=
Subject key identifier:   D5:F7:E5:E1:F9:AF:A3:C0:6C:57:B3:22:F7:7C:D0:A9:AD:2D:5D:3E
Authority key identifier: 5C:52:03:7E:02:E0:23:7A:A4:A4:78:6E:90:8C:14:26:EB:B9:A9:47
Certificate issuer:       /CN=A912418E/serialNumber=5C52037E02E0237AA4A4786E908C1426EBB9A947
Certificate serial:       53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFIDfgLgI3qkpHhukIwUJuu5qUc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912418E/E5676BECB08011F08A950351C4F9AE02/XFIDfgLgI3qkpHhukIwUJuu5qUc.mft
Manifest number:          51
Signing time:             Wed 25 Mar 2026 07:24:10 +0000
Manifest this update:     Wed 25 Mar 2026 07:24:10 +0000
Manifest next update:     Wed 01 Apr 2026 07:24:10 +0000
Files and hashes:         1: XFIDfgLgI3qkpHhukIwUJuu5qUc.crl (hash: iPbhoa9okIIO1JHgZftcd5wjyc+gv/k7li0MfBbcn1o=)
                          2: E7126E0AB08111F0B4456572C4F9AE02.roa (hash: 0GAesb+JQxtp5ammK5xQgRS65FUnFD4BF2qHgcR+Ggs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912418E/E5676BECB08011F08A950351C4F9AE02/XFIDfgLgI3qkpHhukIwUJuu5qUc.crl
                          rsync://rpki.apnic.net/member_repository/A912418E/E5676BECB08011F08A950351C4F9AE02/XFIDfgLgI3qkpHhukIwUJuu5qUc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFIDfgLgI3qkpHhukIwUJuu5qUc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:24:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912418E, serialNumber=5C52037E02E0237AA4A4786E908C1426EBB9A947
        Validity
            Not Before: Mar 25 07:24:10 2026 GMT
            Not After : Apr  1 07:24:10 2026 GMT
        Subject: CN=69c38d9a-1d37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d3:32:a0:35:5e:80:bc:09:a9:7e:e0:bf:fc:
                    57:bc:18:4a:ff:2b:a5:18:81:a6:5e:c2:a9:00:d5:
                    90:0f:81:5a:d0:88:cd:27:01:07:e0:3d:19:eb:e0:
                    f1:bf:67:ea:db:d3:ae:64:af:72:d9:a2:79:88:25:
                    b2:9c:63:2e:2e:8f:ad:19:b0:3f:8d:67:6e:d7:bc:
                    b6:c8:65:6f:44:3b:01:4d:64:6b:7c:52:ad:60:c0:
                    f3:1a:ff:99:e5:23:16:e8:bd:5b:6c:20:16:5c:19:
                    98:79:4b:61:51:57:76:20:1d:81:45:95:5d:9a:e9:
                    21:a0:06:15:6d:0b:cf:63:d0:b6:51:c5:32:72:ac:
                    25:bb:4d:f1:23:58:77:93:c7:78:81:94:b3:f9:88:
                    15:47:a6:ac:91:be:ba:6d:65:46:fa:5b:4a:43:91:
                    5d:de:a8:4c:34:d7:1a:2d:04:26:d4:26:6b:15:64:
                    4f:cf:ea:24:3f:18:dd:15:b9:1f:0a:46:c5:60:74:
                    f9:53:be:b9:91:d3:a7:10:59:98:ad:a5:5f:d4:e7:
                    cc:fc:30:ef:6d:f9:3b:96:db:9c:b2:bf:1e:a4:2c:
                    e4:52:40:92:b1:e9:9a:de:04:f1:f5:01:91:9c:41:
                    af:05:7e:e9:6a:ae:ef:3b:3f:56:cf:a4:a8:59:6a:
                    c8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F7:E5:E1:F9:AF:A3:C0:6C:57:B3:22:F7:7C:D0:A9:AD:2D:5D:3E
            X509v3 Authority Key Identifier:
                keyid:5C:52:03:7E:02:E0:23:7A:A4:A4:78:6E:90:8C:14:26:EB:B9:A9:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912418E/E5676BECB08011F08A950351C4F9AE02/XFIDfgLgI3qkpHhukIwUJuu5qUc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFIDfgLgI3qkpHhukIwUJuu5qUc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912418E/E5676BECB08011F08A950351C4F9AE02/XFIDfgLgI3qkpHhukIwUJuu5qUc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:ac:bb:6c:11:1b:11:31:07:20:86:cd:6d:8e:a4:b9:cb:6a:
         5c:dd:fc:91:4d:39:8a:8b:15:27:32:78:b7:b2:f4:dc:a0:0f:
         3a:31:d9:e5:99:8e:a5:45:91:ae:4d:6f:ef:bf:09:e2:32:1d:
         ec:57:1b:81:df:ca:79:6f:d7:47:0e:77:ce:71:17:56:92:d9:
         8d:1e:58:29:f8:80:69:ee:f2:71:35:7d:4f:c4:0e:7b:74:08:
         ee:ee:53:a8:0c:3e:f4:22:38:6e:6d:4a:8b:94:85:f4:98:7b:
         1a:27:98:d3:82:f5:e8:d1:14:21:40:97:04:c6:03:d0:94:40:
         8c:2e:e9:bc:e9:69:7f:ee:1c:7a:af:da:74:2d:90:4f:e8:8e:
         b6:46:ee:9a:88:ba:87:32:e2:0d:76:9c:b5:7e:23:56:73:d8:
         e4:9d:d7:19:cf:eb:ad:13:75:0e:09:f7:13:0d:40:b4:22:87:
         fe:10:84:5a:6f:7d:28:8b:54:29:68:3f:53:c2:5a:eb:39:4f:
         00:85:c6:aa:eb:27:aa:ed:25:0c:98:dc:f6:84:1f:b8:2b:e9:
         c7:66:6a:b3:c6:80:67:28:f3:79:c4:3b:ff:89:ca:e2:03:55:
         5c:33:ce:61:68:3b:7e:6e:b1:e3:c9:2c:d8:bb:e3:a5:8d:2d:
         3d:8e:ca:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:28:59 2026 by rpki-client