Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.mft
File:                     ex-xujsOyMpeXBOuvPxuuo0g6qc.mft (raw, json)
Hash identifier:          JyoFZgl6Yv393oE8ZvXgEUzHxqmSU4zKpYGdFr2YOgw=
Subject key identifier:   F9:E8:73:FE:10:99:1C:28:92:21:38:E0:03:83:E0:1A:27:54:A9:A8
Authority key identifier: 7B:1F:B1:BA:3B:0E:C8:CA:5E:5C:13:AE:BC:FC:6E:BA:8D:20:EA:A7
Certificate issuer:       /CN=A913B4BE/serialNumber=7B1FB1BA3B0EC8CA5E5C13AEBCFC6EBA8D20EAA7
Certificate serial:       019B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ex-xujsOyMpeXBOuvPxuuo0g6qc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.mft
Manifest number:          0190
Signing time:             Wed 25 Mar 2026 03:43:55 +0000
Manifest this update:     Wed 25 Mar 2026 03:43:55 +0000
Manifest next update:     Wed 01 Apr 2026 03:43:55 +0000
Files and hashes:         1: ex-xujsOyMpeXBOuvPxuuo0g6qc.crl (hash: pfyjTbxz7tKWdMrvtylcaxlQRaIdDY1itZzLT87cbjA=)
                          2: AE9090F83B0F11F08D496424C4F9AE02.roa (hash: XOfrJtsfsR+/OaB8ND0RqeVpDEphsXI6C793fxqaX4Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.crl
                          rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ex-xujsOyMpeXBOuvPxuuo0g6qc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:43:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 411 (0x19b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B4BE, serialNumber=7B1FB1BA3B0EC8CA5E5C13AEBCFC6EBA8D20EAA7
        Validity
            Not Before: Mar 25 03:43:55 2026 GMT
            Not After : Apr  1 03:43:55 2026 GMT
        Subject: CN=69c359fb-0d47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:73:7a:24:1d:e6:d4:eb:09:ef:09:0b:ef:f4:
                    f8:5e:93:c8:07:74:b6:d6:9b:03:df:95:fa:09:ea:
                    25:33:ff:8a:e9:d7:f9:1c:b8:2c:20:74:11:51:51:
                    88:4b:21:58:9a:dc:2b:ab:32:5d:28:44:29:8e:ae:
                    15:bb:2d:33:b0:1b:42:75:7f:6d:d3:34:5a:57:83:
                    1c:b6:89:07:92:9d:a9:a9:47:a7:be:85:50:02:72:
                    49:de:42:f0:3c:a8:f9:f5:51:b1:a7:1e:3a:9f:d0:
                    bc:62:23:b2:ad:fa:a7:bb:ba:26:1d:98:6f:28:51:
                    2b:0d:e9:b3:f1:9b:b3:59:8c:08:42:1f:6b:8d:c6:
                    11:58:3b:75:71:82:b0:66:7d:53:5c:4a:da:6e:a2:
                    df:cb:5a:2f:c2:c7:71:49:39:93:32:05:ec:e5:ef:
                    d7:f0:38:cd:ed:be:20:e3:14:9e:b2:40:2f:f7:9f:
                    6c:1f:3b:b9:08:4d:64:3d:ff:b4:4d:76:f3:3d:4c:
                    03:28:61:2e:a9:2c:e4:5d:88:44:12:8c:64:ab:f1:
                    8e:15:95:e2:68:8e:54:df:8f:43:af:b3:ad:3f:62:
                    ca:4e:ff:28:e5:49:41:40:a9:54:68:7d:02:bd:28:
                    38:52:28:35:20:ce:a3:f6:06:ac:3c:db:01:df:83:
                    84:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:E8:73:FE:10:99:1C:28:92:21:38:E0:03:83:E0:1A:27:54:A9:A8
            X509v3 Authority Key Identifier:
                keyid:7B:1F:B1:BA:3B:0E:C8:CA:5E:5C:13:AE:BC:FC:6E:BA:8D:20:EA:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ex-xujsOyMpeXBOuvPxuuo0g6qc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B4BE/6F2FD338CCF711EE9E89D67AC4F9AE02/ex-xujsOyMpeXBOuvPxuuo0g6qc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:b7:3f:06:1d:a3:8c:be:83:02:01:95:75:6c:95:9d:cd:75:
         7e:ff:1e:db:25:dd:3d:41:3a:06:da:1d:3b:ba:57:28:8d:5b:
         dd:de:a3:88:e0:6c:74:c0:1d:26:29:50:ef:31:ea:b4:d7:8b:
         08:29:a1:a9:ae:6b:52:c5:31:ef:3c:cc:98:cf:e0:22:3f:b4:
         7a:f5:76:27:be:32:74:f4:1c:1a:c2:8d:90:59:38:60:2d:e4:
         f9:03:00:c7:9b:b8:65:e0:d0:68:da:9f:87:5f:7b:7e:d8:4b:
         1b:03:2f:ff:13:d1:84:36:18:68:0b:fb:f4:96:66:e5:a3:be:
         63:0e:c7:19:03:66:1d:47:c6:70:7b:4d:74:41:da:25:85:7f:
         5a:92:7b:06:cc:01:b3:f5:a2:7b:6c:62:28:9d:11:59:a7:05:
         67:ea:e4:95:6c:87:db:f8:ec:9f:52:88:39:52:f0:fb:76:5f:
         b9:eb:e2:94:22:70:28:89:41:e3:d1:c5:70:21:aa:e6:fb:18:
         3d:45:1f:8c:ee:69:be:08:c4:8f:3f:b3:c5:1c:ae:cf:fd:e0:
         64:b8:72:ab:e5:de:82:e7:dd:5a:2c:2f:35:5e:3d:a1:a8:41:
         d3:ac:b3:0a:a9:d3:7a:94:8f:d0:04:4f:06:7f:f6:7d:c1:b7:
         af:a5:be:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:00:07 2026 by rpki-client