Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.mft
File:                     XEFCLE7PHfpomnDePAORsdR-Vew.mft (raw, json)
Hash identifier:          UrBA6qxQZe43u3ppzfcyq6AEx88thwPLi3T2AxqVrmU=
Subject key identifier:   E7:0A:56:6A:29:52:F0:44:8D:27:19:4A:F3:A6:56:8F:AA:DB:CE:EE
Authority key identifier: 5C:41:42:2C:4E:CF:1D:FA:68:9A:70:DE:3C:03:91:B1:D4:7E:55:EC
Certificate issuer:       /CN=A916B19D/serialNumber=5C41422C4ECF1DFA689A70DE3C0391B1D47E55EC
Certificate serial:       0314
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEFCLE7PHfpomnDePAORsdR-Vew.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.mft
Manifest number:          030C
Signing time:             Fri 27 Mar 2026 00:58:24 +0000
Manifest this update:     Fri 27 Mar 2026 00:58:23 +0000
Manifest next update:     Fri 03 Apr 2026 00:58:23 +0000
Files and hashes:         1: XEFCLE7PHfpomnDePAORsdR-Vew.crl (hash: i1O6h6rMdWGt7jgXuLrxNQe6fA7gr6kdQWTbD0g24Lg=)
                          2: D11B9044112011EDAC1D3B15C4F9AE02.roa (hash: kypD0HNpdZMUft2CKjrM9l4+dpJKPDYyDTu1PYOEbrs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.crl
                          rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEFCLE7PHfpomnDePAORsdR-Vew.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 00:58:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 788 (0x314)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B19D, serialNumber=5C41422C4ECF1DFA689A70DE3C0391B1D47E55EC
        Validity
            Not Before: Mar 27 00:58:23 2026 GMT
            Not After : Apr  3 00:58:23 2026 GMT
        Subject: CN=69c5d630-700b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8b:83:a0:70:af:8c:83:3f:d6:bb:61:c8:46:
                    a7:4e:20:ed:91:32:8c:3a:ff:1c:b4:bc:97:d5:de:
                    a6:4e:d5:52:58:28:47:c8:41:29:c8:df:69:4d:2f:
                    91:32:5c:82:69:a2:56:30:20:91:0c:bc:ec:66:44:
                    09:53:27:0f:d5:2f:01:25:ba:28:49:b0:b2:b0:42:
                    c3:88:52:c5:00:27:21:7e:2b:45:b4:5b:7a:2d:9d:
                    dc:eb:ad:86:d7:9e:36:fe:c4:2b:64:1f:1f:b9:38:
                    ba:a2:ff:6f:73:61:f2:8b:70:9e:62:81:f6:66:56:
                    24:e1:63:21:83:33:3a:54:02:4a:2b:21:c0:6e:71:
                    ce:8e:e7:b8:44:c4:40:a3:79:b3:c4:c9:61:e1:c7:
                    43:9c:11:aa:fa:a6:90:3f:73:cb:d8:94:58:e9:e6:
                    66:c4:39:51:c5:80:e5:d6:83:44:72:9b:cb:12:74:
                    fd:47:ab:31:e7:ef:c5:03:05:88:70:db:69:48:3c:
                    dc:19:30:dc:2a:73:e9:b1:84:aa:db:9e:67:cd:b1:
                    e2:2c:bc:a0:6d:1a:8b:de:73:2c:e5:8e:c1:c9:03:
                    85:a1:0b:74:fd:40:4c:7b:43:ff:8c:16:14:4d:eb:
                    2c:b5:89:ac:02:d5:0d:4e:dd:1f:05:7d:d7:15:8d:
                    a0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:0A:56:6A:29:52:F0:44:8D:27:19:4A:F3:A6:56:8F:AA:DB:CE:EE
            X509v3 Authority Key Identifier:
                keyid:5C:41:42:2C:4E:CF:1D:FA:68:9A:70:DE:3C:03:91:B1:D4:7E:55:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEFCLE7PHfpomnDePAORsdR-Vew.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:f7:2f:ea:21:29:05:f6:ee:96:b5:ea:db:71:92:c8:bc:64:
         ea:ca:9f:9d:a9:df:b5:65:97:2c:63:fe:98:9b:c9:92:17:c8:
         26:fb:1f:d6:3d:ad:67:9a:ad:39:e7:d9:9d:67:c6:3c:d2:3d:
         f9:b7:ad:6d:fa:49:0f:29:16:ff:2d:03:53:62:62:8b:40:d7:
         30:73:b8:17:fe:34:79:36:3c:41:c5:de:c2:8c:23:48:a8:de:
         81:37:df:6e:35:c2:33:6f:e0:5e:9b:7b:73:2a:f3:e2:57:22:
         12:76:d5:4d:3a:2d:a5:9b:e7:ff:05:9c:ff:30:a4:d9:92:3f:
         fe:51:69:5b:78:02:56:4b:ce:8a:5e:cb:ea:6b:b3:fb:e5:26:
         25:54:af:96:46:bb:76:ed:44:93:7f:85:a9:85:ff:27:f4:e7:
         38:4b:cf:3a:45:a5:71:74:24:e5:c2:14:35:4e:2d:9d:07:e4:
         53:b6:84:df:15:24:90:3b:86:3c:1b:9f:21:3c:ba:76:c6:b9:
         e2:26:78:d3:67:47:01:84:f5:63:83:fc:f4:11:32:63:9c:ae:
         86:b1:3e:e8:ab:bc:91:7f:4f:58:86:fb:8c:30:16:fe:f2:17:
         84:b0:94:21:92:c5:f2:32:ef:92:d8:9c:13:24:8e:7c:f4:9c:
         63:d7:4d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:47:42 2026 by rpki-client