Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft
File:                     cXLtDPRHBezrGWHROgV-z_MHyG8.mft (raw, json)
Hash identifier:          QwrcENAEVxqUlWvJwGz0IRD6kPmiE7gIYXI7zQqBcxA=
Subject key identifier:   E6:35:87:A9:8C:E7:72:AA:57:53:E1:54:13:81:4B:31:87:FB:62:8F
Authority key identifier: 71:72:ED:0C:F4:47:05:EC:EB:19:61:D1:3A:05:7E:CF:F3:07:C8:6F
Certificate issuer:       /CN=A913B7C7/serialNumber=7172ED0CF44705ECEB1961D13A057ECFF307C86F
Certificate serial:       0115
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft
Manifest number:          0105
Signing time:             Wed 25 Mar 2026 05:18:57 +0000
Manifest this update:     Wed 25 Mar 2026 05:18:57 +0000
Manifest next update:     Wed 01 Apr 2026 05:18:57 +0000
Files and hashes:         1: cXLtDPRHBezrGWHROgV-z_MHyG8.crl (hash: OvVARjTktemUXmv63d4rUlXxR8SLHSRCEWUaQy86uZM=)
                          2: 1A1C5AF89D9C11EFAAA9FA6AC4F9AE02.roa (hash: A90aJCYjIr3J34Qclm1ssR9ehYnkyd4nyWXLA2mBndw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.crl
                          rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:18:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 277 (0x115)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B7C7, serialNumber=7172ED0CF44705ECEB1961D13A057ECFF307C86F
        Validity
            Not Before: Mar 25 05:18:57 2026 GMT
            Not After : Apr  1 05:18:57 2026 GMT
        Subject: CN=69c37041-073b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:14:79:64:de:ea:77:9e:62:53:67:82:5d:1a:
                    41:95:ed:24:d5:12:97:bd:17:ed:19:86:8d:23:35:
                    01:79:9a:b3:9a:3a:42:bb:19:54:1f:5f:f9:1c:b5:
                    06:98:34:9b:12:18:82:4c:92:80:e5:fe:bb:80:26:
                    c4:12:f5:66:ab:dc:d3:1d:bf:01:ec:68:95:b6:67:
                    7e:b7:50:6a:71:d8:89:6f:29:11:a3:83:3e:9b:ab:
                    aa:26:af:03:91:75:e2:53:ef:67:53:76:ca:f9:a2:
                    17:85:f6:f6:4c:0b:37:d6:58:45:78:fa:1a:f3:71:
                    b0:01:7f:30:f5:d8:cc:11:b4:51:0b:a5:d2:a4:da:
                    b8:d7:0e:59:dd:b7:69:c4:dd:ac:bd:74:14:83:7e:
                    c3:7f:dc:65:f0:a6:fe:ec:08:c9:fe:1c:08:d2:a9:
                    78:18:93:c4:80:17:55:54:9c:29:e6:b7:9d:0b:98:
                    79:9c:97:06:6c:bb:91:14:a7:0c:d2:30:d2:bc:56:
                    07:1c:97:e0:48:a4:b3:62:e3:79:9f:fa:15:0d:d7:
                    b5:ce:54:45:20:52:99:1d:ed:59:7e:e7:8e:45:9c:
                    b8:d9:c3:cc:27:ba:0f:94:0d:f8:a2:e7:79:ad:2c:
                    51:68:5d:a8:ba:29:06:11:07:3b:67:23:4b:94:db:
                    cb:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:35:87:A9:8C:E7:72:AA:57:53:E1:54:13:81:4B:31:87:FB:62:8F
            X509v3 Authority Key Identifier:
                keyid:71:72:ED:0C:F4:47:05:EC:EB:19:61:D1:3A:05:7E:CF:F3:07:C8:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:52:ef:e3:af:c9:cb:e6:c5:a9:0d:88:37:c4:e8:8a:14:87:
         d4:2f:ea:5f:55:ca:f8:4e:cb:dd:a2:56:a4:6a:e0:4a:4a:0b:
         56:48:26:a6:26:fa:d6:46:b0:1f:42:67:d2:1a:3e:6c:3f:57:
         ff:42:30:37:2b:44:1d:19:c5:e7:09:9d:86:a9:10:fa:90:53:
         39:8f:59:26:59:e3:eb:c1:73:ea:f5:cc:8d:ba:3a:92:21:a7:
         2e:13:14:14:cb:61:cc:70:06:54:0f:e2:cf:08:60:0e:b5:b4:
         09:19:b8:d9:04:2d:48:50:79:4a:a2:49:c0:af:62:be:6e:0e:
         20:c5:de:76:5c:b1:b9:a8:78:62:29:23:bf:20:b3:3b:16:7e:
         39:ac:2d:9c:88:ae:fd:8a:7d:63:ab:f9:64:e6:25:e0:78:ba:
         7a:f7:73:f3:93:24:52:c4:28:9e:b9:76:c0:c0:34:62:d6:20:
         98:7f:22:38:8f:b1:0b:a0:09:ec:ff:66:c8:5f:86:39:74:50:
         8e:3d:38:cf:c9:ad:fa:31:0d:76:a1:cf:62:8a:4e:2b:49:51:
         45:e1:e5:7f:5d:b4:0d:5a:32:18:37:34:20:a6:08:30:85:49:
         ce:8e:0d:39:e3:e8:af:23:4f:2f:97:4d:18:79:6b:8d:1b:a6:
         9b:8f:b4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:58:21 2026 by rpki-client