Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft
File:                     XPuiiRbqwHsjWQlIVdieFqCBS6w.mft (raw, json)
Hash identifier:          OHFcOM3hW8raCDF0DQQkeRsblSeAy5b6cz5PXOJuc4Q=
Subject key identifier:   14:3E:3E:ED:D9:CA:F6:D0:94:D1:F9:48:95:88:A2:77:A7:AB:77:8D
Authority key identifier: 5C:FB:A2:89:16:EA:C0:7B:23:59:09:48:55:D8:9E:16:A0:81:4B:AC
Certificate issuer:       /CN=A918E843/serialNumber=5CFBA28916EAC07B2359094855D89E16A0814BAC
Certificate serial:       0BE5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft
Manifest number:          0BD4
Signing time:             Thu 26 Mar 2026 18:49:26 +0000
Manifest this update:     Thu 26 Mar 2026 18:49:26 +0000
Manifest next update:     Thu 02 Apr 2026 18:49:26 +0000
Files and hashes:         1: XPuiiRbqwHsjWQlIVdieFqCBS6w.crl (hash: jE4e1x1Wdz7l0YnwRlN5uHhK7a1R+B/TCQ94yzc7DIc=)
                          2: 01553E10396311EAB24C5A5FC4F9AE02.roa (hash: Uo93hzMxNF+jVqkGOria3VXRV3+weXxYw/vG0YhBuJs=)
                          3: 3EA26CE6396011EABC88BD55C4F9AE02.roa (hash: SSQpbtCsMq8SLI9YHkAv1i1dNu2TaU1odweqDk/00YQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.crl
                          rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 18:49:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3045 (0xbe5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E843, serialNumber=5CFBA28916EAC07B2359094855D89E16A0814BAC
        Validity
            Not Before: Mar 26 18:49:26 2026 GMT
            Not After : Apr  2 18:49:26 2026 GMT
        Subject: CN=69c57fb6-b2ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d3:10:92:c7:af:b0:50:99:e8:02:70:0a:cf:
                    fa:3b:0e:79:4f:92:6a:73:e0:fd:54:54:c3:4a:1e:
                    09:cd:12:fe:ee:98:fb:60:31:af:e4:0a:6b:be:75:
                    6f:b1:ac:a3:a7:8f:31:c8:55:c0:fd:18:44:66:fd:
                    c1:1e:81:6d:5d:43:6a:70:2b:57:ff:71:20:8f:31:
                    dd:d5:4e:dc:47:cf:e4:94:c3:8c:87:d6:08:14:13:
                    99:06:a5:e6:45:7f:ce:d9:b9:55:ae:8f:21:0e:c2:
                    eb:0e:d7:a9:3e:9b:66:d8:a3:b1:ac:86:48:f6:9e:
                    50:cf:be:59:5e:a1:63:c8:67:09:62:66:c8:89:68:
                    68:53:28:ae:c1:6c:5f:9c:1d:01:7e:e7:55:3a:91:
                    df:8e:4b:cd:a5:fe:cb:ee:c1:19:d4:55:3e:f5:d4:
                    08:0c:ab:6e:b4:3c:a8:17:19:69:58:a7:e3:1e:fd:
                    fd:9d:c5:ef:a2:af:b2:74:20:85:6c:3c:a4:37:d6:
                    13:c9:8e:91:f8:9f:7f:6c:ac:79:40:32:09:bc:d3:
                    42:6e:fb:59:34:1f:c4:03:5e:9f:12:54:de:70:4e:
                    bc:9a:b8:df:09:c4:43:66:f9:11:1b:db:b1:16:d2:
                    76:5d:af:f7:ae:d5:5c:62:57:e0:e8:c4:ff:13:97:
                    68:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:3E:3E:ED:D9:CA:F6:D0:94:D1:F9:48:95:88:A2:77:A7:AB:77:8D
            X509v3 Authority Key Identifier:
                keyid:5C:FB:A2:89:16:EA:C0:7B:23:59:09:48:55:D8:9E:16:A0:81:4B:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:a6:cb:91:b3:e7:6d:b1:f0:6a:30:e9:74:74:4c:4a:e3:47:
         36:5d:3f:f9:de:8d:a2:48:56:c6:90:1b:c0:99:31:46:03:03:
         ff:56:43:5d:a0:c7:3b:74:e6:76:6f:71:b7:4b:26:85:8c:80:
         61:2b:3c:00:d5:a6:0b:6d:6e:40:d1:08:8c:66:b6:fa:41:b0:
         c7:ab:03:32:e2:f4:7e:c0:34:38:e7:cb:c5:7f:ca:a9:17:45:
         d9:18:b0:b3:e6:cd:77:bd:93:6d:ce:42:e1:5c:5c:31:bd:54:
         90:d7:6a:51:b2:31:6c:92:bb:ae:5f:c6:84:9c:16:97:3c:1b:
         dc:ee:42:11:35:d3:bd:1c:05:b0:58:7d:52:42:df:b7:b5:91:
         7c:e8:65:1d:56:89:d5:87:f4:dd:06:82:8f:32:43:ee:e8:c6:
         5a:6f:15:f0:d4:eb:f6:c7:e8:59:41:2b:0b:1c:0a:67:00:d2:
         4a:df:bf:6b:b9:f5:81:cb:fb:2d:3f:49:dc:2e:e7:1b:e0:88:
         57:2f:a9:5c:2d:7d:a8:1a:78:c9:17:ae:a0:f8:79:2e:42:fb:
         9a:37:63:82:e7:66:5d:ad:da:12:99:1a:c6:4b:e9:cf:08:bd:
         84:93:91:13:cc:f5:54:3e:2a:7c:51:d1:39:29:d1:d5:cc:a0:
         8a:2b:a9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:41:44 2026 by rpki-client