Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft
File:                     xPprur_RmXzI8dIP5qVXTe6bMlY.mft (raw, json)
Hash identifier:          AHXZc/O0LrcfPULr8vuq3llcwRdM5yr+RhsOhNcJlE0=
Subject key identifier:   6E:D5:E5:5D:6D:82:96:BA:92:D0:F2:EC:E0:FA:4D:AA:D4:17:EF:DC
Authority key identifier: C4:FA:6B:BA:BF:D1:99:7C:C8:F1:D2:0F:E6:A5:57:4D:EE:9B:32:56
Certificate issuer:       /CN=A9187532/serialNumber=C4FA6BBABFD1997CC8F1D20FE6A5574DEE9B3256
Certificate serial:       021E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPprur_RmXzI8dIP5qVXTe6bMlY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft
Manifest number:          0218
Signing time:             Wed 25 Mar 2026 02:13:48 +0000
Manifest this update:     Wed 25 Mar 2026 02:13:47 +0000
Manifest next update:     Wed 01 Apr 2026 02:13:47 +0000
Files and hashes:         1: xPprur_RmXzI8dIP5qVXTe6bMlY.crl (hash: uSknbSfZaMD0ovddvKTR1Pk9OKeD+l+vbOmt3S5asxo=)
                          2: 8D176BFAF65011ED90F79C33C4F9AE02.roa (hash: aajUanjdNrNtkjhupeIjAdiXMn4aEREZ53JBb0jvqlQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.crl
                          rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPprur_RmXzI8dIP5qVXTe6bMlY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:13:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 542 (0x21e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187532, serialNumber=C4FA6BBABFD1997CC8F1D20FE6A5574DEE9B3256
        Validity
            Not Before: Mar 25 02:13:47 2026 GMT
            Not After : Apr  1 02:13:47 2026 GMT
        Subject: CN=69c344dc-d3e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:13:66:71:a5:f2:b3:18:6a:09:ae:2d:6d:99:
                    67:41:b4:c2:91:14:95:aa:71:a8:04:12:d2:3d:40:
                    13:74:10:d6:99:d7:4c:81:90:76:a1:93:ab:16:c7:
                    cd:c3:22:22:96:5d:21:e3:8f:c8:95:b6:35:bc:94:
                    e9:d7:cf:c4:ec:e9:df:f0:60:aa:60:33:0c:94:48:
                    85:eb:5d:f2:65:40:02:f1:5a:89:70:8c:96:1d:c1:
                    6e:89:01:e8:61:e6:c4:2f:60:e1:7f:6c:44:ec:17:
                    26:bd:ae:bf:96:50:4a:77:19:fe:08:d3:c4:86:6c:
                    7f:26:a6:6c:02:4f:d8:b9:29:1a:0f:66:f1:7a:f0:
                    74:34:42:0b:74:7c:d5:70:2b:56:74:3d:8a:80:56:
                    c8:b2:f9:90:4b:82:2e:18:f1:06:44:f6:51:0e:4d:
                    1c:1f:8c:65:69:d0:d2:02:0f:43:a5:5f:15:4a:97:
                    2f:5c:d8:98:d0:ed:9f:42:ef:7a:72:c9:70:3c:fa:
                    bc:49:25:49:11:95:62:e4:a9:3a:e2:3e:28:b1:db:
                    19:eb:80:16:af:76:f6:26:17:90:91:62:dd:39:31:
                    18:f4:7a:d9:8a:b3:48:8a:ff:32:7b:b9:6b:aa:d4:
                    fe:8b:f2:03:0d:5d:14:c3:fa:47:01:d0:9a:48:11:
                    ce:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:D5:E5:5D:6D:82:96:BA:92:D0:F2:EC:E0:FA:4D:AA:D4:17:EF:DC
            X509v3 Authority Key Identifier:
                keyid:C4:FA:6B:BA:BF:D1:99:7C:C8:F1:D2:0F:E6:A5:57:4D:EE:9B:32:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPprur_RmXzI8dIP5qVXTe6bMlY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:52:5d:22:63:9b:46:7a:23:3c:7f:22:e1:27:27:be:97:3b:
         f8:6a:0a:81:83:48:d8:ce:c4:a2:61:ea:4f:1a:13:4f:10:15:
         21:8b:76:ca:80:0c:78:5e:71:8b:ed:dc:b3:3e:75:49:0d:db:
         42:1a:f3:ed:70:0e:c5:37:37:f1:98:c1:f4:3d:00:50:f9:2c:
         04:e2:e1:9c:bf:c0:91:36:be:88:57:4e:55:6d:9c:43:7a:0b:
         0e:73:07:36:1e:42:ff:9e:20:b5:5a:cf:12:7b:35:4d:0a:a1:
         46:98:96:a9:52:87:11:19:3f:a3:af:e6:6b:9e:28:d4:92:17:
         c5:03:81:93:dc:50:99:4c:36:1a:00:5c:5b:3c:a5:45:96:14:
         c8:d3:b5:3a:23:93:74:0d:9a:65:af:a8:03:01:2f:25:57:a0:
         cd:e5:ea:5a:a7:17:77:ff:ac:cc:4c:11:48:54:8b:49:71:fe:
         4f:56:b8:7d:d4:51:da:5e:9c:39:5d:7d:55:68:ad:01:bd:c1:
         87:f5:ea:58:8b:2d:72:9a:6c:d2:1d:c4:24:44:22:db:d0:b4:
         e6:a5:05:78:15:d9:b8:c9:05:29:91:6d:ad:03:7c:b5:ee:9a:
         ae:4e:82:d3:8d:9d:0e:1d:fa:4e:a2:c4:60:70:f4:bf:38:b3:
         25:bb:8e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:31:21 2026 by rpki-client