Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft
File:                     xQRWVXeumfYZHJeDPdvdYk7CTpI.mft (raw, json)
Hash identifier:          s/m1BTt3lh6QAv33yBqSMm2bc6ReJgKimMUsAt+sBIw=
Subject key identifier:   B0:58:9D:01:68:3B:DC:46:3D:71:50:CC:4B:0E:8A:65:20:26:45:87
Authority key identifier: C5:04:56:55:77:AE:99:F6:19:1C:97:83:3D:DB:DD:62:4E:C2:4E:92
Certificate issuer:       /CN=A916D128/serialNumber=C504565577AE99F6191C97833DDBDD624EC24E92
Certificate serial:       07EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft
Manifest number:          07B8
Signing time:             Tue 24 Mar 2026 21:12:27 +0000
Manifest this update:     Tue 24 Mar 2026 21:12:26 +0000
Manifest next update:     Tue 31 Mar 2026 21:12:26 +0000
Files and hashes:         1: xQRWVXeumfYZHJeDPdvdYk7CTpI.crl (hash: GI6Zs4KffulorSfV+E21qTvs7GHrXcxNfJb1PeQlKW8=)
                          2: B38547D6EDB611EEB49CEE2CC4F9AE02.roa (hash: wOEYlAAobb9nCZWU7ILmmI4WtLWkbwGu6k9TfmwOgrw=)
                          3: A2272F186E1D11EEB6A10A0CC4F9AE02.roa (hash: pdKfh0rHk6MsKSq/P/C5bZ/12KI4D++yBlGSjUNlgck=)
                          4: 8342D87641AC11ECACD65E18C4F9AE02.roa (hash: Z9Aj+lSx9qfZY/JZ1gYb96BwZ7DAL++xryjqUPWEopY=)
                          5: 19D427BA6AFD11EEA4AF1A0FC4F9AE02.roa (hash: 8wPCikKi+MQL34SMZFG04z7KedSfiNcxZCrwRnt7vrA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.crl
                          rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:12:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2027 (0x7eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D128, serialNumber=C504565577AE99F6191C97833DDBDD624EC24E92
        Validity
            Not Before: Mar 24 21:12:26 2026 GMT
            Not After : Mar 31 21:12:26 2026 GMT
        Subject: CN=69c2fe3b-3faa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c9:94:53:14:77:0a:6f:68:da:6a:0b:21:8c:
                    09:ef:bd:b0:26:fc:9c:c4:01:f3:c8:32:93:7b:84:
                    a6:b8:82:c3:16:5d:2c:9e:62:64:f7:6b:e3:19:e4:
                    aa:ea:53:aa:55:f0:dd:a8:55:20:81:32:20:c4:ed:
                    c8:c0:9e:46:1f:0c:96:ab:60:b8:41:17:89:84:d2:
                    c8:4c:33:9f:4b:aa:f7:6b:23:54:15:6f:81:45:54:
                    d5:00:fc:62:33:97:a4:b3:b0:f1:e0:b6:cf:fc:2d:
                    f6:8d:e7:9b:4f:d7:94:ff:c1:fc:c9:69:90:b5:33:
                    e1:ff:ff:c2:93:09:86:c5:51:b6:ed:b2:6a:43:3a:
                    aa:51:df:50:b3:f6:8a:2f:31:fd:08:30:33:d0:bc:
                    34:cc:3c:f1:40:09:f2:e9:4f:d2:4b:dd:c1:f2:6e:
                    7c:3a:a3:02:48:79:7b:aa:2a:8d:e0:50:7f:d8:5a:
                    2a:e5:c8:5b:ce:e4:4e:05:09:a0:21:c2:eb:6f:06:
                    23:7e:9d:d6:43:68:2f:a0:2b:1e:18:ca:e0:c5:07:
                    34:d0:69:00:c8:ba:17:1c:d4:94:11:8b:89:e5:91:
                    63:b4:47:c3:ab:fa:67:9f:7e:88:1d:8e:99:63:7e:
                    c3:68:10:4e:5c:1b:b6:3a:f5:cf:71:32:4d:be:0e:
                    44:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:58:9D:01:68:3B:DC:46:3D:71:50:CC:4B:0E:8A:65:20:26:45:87
            X509v3 Authority Key Identifier:
                keyid:C5:04:56:55:77:AE:99:F6:19:1C:97:83:3D:DB:DD:62:4E:C2:4E:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:51:c0:8e:28:8d:85:72:35:10:87:8c:56:3d:22:84:b7:a1:
         2a:a6:0f:db:ae:76:b2:86:30:46:24:d2:aa:46:ab:7b:4d:80:
         ab:29:46:7e:59:04:d7:68:23:1d:ba:79:ff:e7:ae:f6:ce:e9:
         74:4e:82:27:5a:a5:4e:e8:15:f8:23:66:8c:e5:e4:08:34:c5:
         1a:2e:85:89:db:7a:59:c6:6d:49:fc:9c:de:0a:84:d9:65:46:
         35:f9:54:95:1e:c7:11:85:6e:d4:ba:a5:df:6c:44:07:d0:cd:
         9e:ef:f9:57:79:75:eb:8e:74:7e:b3:f3:ca:1e:1f:f7:56:53:
         ef:cc:9d:ac:68:b9:4e:69:3e:6f:f3:f8:25:e1:7a:c2:c9:d8:
         99:0c:ae:39:35:af:12:3d:0e:6b:ee:af:e5:4d:1e:54:fc:ae:
         d3:55:68:e2:40:8d:41:b2:9c:4f:94:4c:64:18:41:9f:35:47:
         5b:6b:9d:cb:e8:74:27:ee:55:08:69:bc:03:e8:91:1d:19:97:
         bf:50:14:63:c9:fd:74:9b:ab:ac:b5:b4:26:e7:ca:34:1c:2a:
         f3:48:aa:9d:9b:e7:c5:0c:1a:e3:3c:ad:50:ca:28:ac:5b:b6:
         26:f9:c9:09:e1:9c:a8:7a:78:49:0e:53:51:55:ff:f1:21:5f:
         f3:65:b9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:51:50 2026 by rpki-client