Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9112F94/EAAF28EA6AD111F196BA5E2E6B47A888/cxpd1NZKcLcdOLC1S6RUa2aDoBs.mft
File:                     cxpd1NZKcLcdOLC1S6RUa2aDoBs.mft (raw, json)
Hash identifier:          kTbplBDweOJ6Tzu1Jrvb/ijafjClGEehn2ylcCfHI6k=
Subject key identifier:   E2:70:A6:88:21:F4:77:07:90:02:FF:0F:A3:07:A2:3D:BD:58:34:8C
Authority key identifier: 73:1A:5D:D4:D6:4A:70:B7:1D:38:B0:B5:4B:A4:54:6B:66:83:A0:1B
Certificate issuer:       /CN=A9112F94/serialNumber=731A5DD4D64A70B71D38B0B54BA4546B6683A01B
Certificate serial:       3C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cxpd1NZKcLcdOLC1S6RUa2aDoBs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112F94/EAAF28EA6AD111F196BA5E2E6B47A888/cxpd1NZKcLcdOLC1S6RUa2aDoBs.mft
Manifest number:          37
Signing time:             Sat 19 Sep 2026 08:42:29 +0000
Manifest this update:     Sat 19 Sep 2026 08:42:29 +0000
Manifest next update:     Sat 26 Sep 2026 08:42:29 +0000
Files and hashes:         1: cxpd1NZKcLcdOLC1S6RUa2aDoBs.crl (hash: mVfXwKEFeFFRnNxUaeqRaQqvTxoj1XrV7UJ55e3PvmQ=)
                          2: 1603FF2C6AE911F1B5ED47487247A888.roa (hash: 3qfyehPx18iZ+nZ3Fp3nstIPk0IChqfQZsM3HoTDXwU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112F94/EAAF28EA6AD111F196BA5E2E6B47A888/cxpd1NZKcLcdOLC1S6RUa2aDoBs.crl
                          rsync://rpki.apnic.net/member_repository/A9112F94/EAAF28EA6AD111F196BA5E2E6B47A888/cxpd1NZKcLcdOLC1S6RUa2aDoBs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cxpd1NZKcLcdOLC1S6RUa2aDoBs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112F94, serialNumber=731A5DD4D64A70B71D38B0B54BA4546B6683A01B
        Validity
            Not Before: Sep 19 08:42:29 2026 GMT
            Not After : Sep 26 08:42:29 2026 GMT
        Subject: CN=6aae4af5-9f27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:83:e0:ca:91:44:c4:ea:19:8e:9f:b1:50:53:
                    af:3b:5d:a6:68:f0:cb:be:65:39:9d:cd:14:0c:b9:
                    05:a7:78:2b:1b:4a:03:55:e1:a7:7f:1b:8a:c7:79:
                    5e:ef:52:b3:55:ef:9c:43:0c:94:b3:54:c4:f8:d4:
                    38:66:bb:12:56:7a:d4:49:ca:67:b5:5b:25:2a:37:
                    b4:c8:87:d1:a7:32:f5:10:4b:68:4f:21:e6:17:66:
                    c6:f5:64:35:14:43:77:46:bc:f6:ab:04:76:27:e8:
                    48:ff:0b:91:e8:64:86:99:58:94:b1:5a:57:22:6a:
                    2e:a3:ff:f8:82:64:2a:2d:a9:9e:4b:10:7f:f8:c5:
                    9a:5f:12:e9:ad:3d:f2:77:78:45:51:b3:bc:17:56:
                    b3:c0:da:99:60:90:10:ff:fc:8e:5a:f2:f7:b9:31:
                    e1:21:29:45:a3:1e:67:ac:54:32:51:19:de:d7:6e:
                    a7:09:80:7f:7f:5d:3c:35:4b:14:dc:2d:37:be:c7:
                    40:bc:e6:96:06:f4:ba:38:3f:52:9e:c0:98:fd:4c:
                    d5:e7:3a:61:ac:27:5e:44:19:f2:59:01:06:83:ee:
                    46:e5:cd:04:25:c8:68:5a:72:50:06:05:53:6c:97:
                    68:8a:31:4f:28:23:3e:9a:6b:99:ff:46:29:6c:81:
                    60:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:70:A6:88:21:F4:77:07:90:02:FF:0F:A3:07:A2:3D:BD:58:34:8C
            X509v3 Authority Key Identifier:
                keyid:73:1A:5D:D4:D6:4A:70:B7:1D:38:B0:B5:4B:A4:54:6B:66:83:A0:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112F94/EAAF28EA6AD111F196BA5E2E6B47A888/cxpd1NZKcLcdOLC1S6RUa2aDoBs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cxpd1NZKcLcdOLC1S6RUa2aDoBs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112F94/EAAF28EA6AD111F196BA5E2E6B47A888/cxpd1NZKcLcdOLC1S6RUa2aDoBs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:a2:22:63:33:4d:d9:fc:0a:1d:72:af:4c:bc:73:37:42:4e:
         bc:21:49:9c:81:cb:9e:96:b9:23:7f:29:d0:ed:4f:d6:1f:10:
         c5:5d:dd:92:25:dc:7a:fa:22:1e:01:01:04:99:0c:ca:03:b1:
         dc:81:2f:6b:92:79:78:56:1d:38:95:15:44:6a:ab:15:12:a0:
         9a:56:c2:68:10:12:7a:ec:7a:46:78:f5:c8:ee:60:67:67:ed:
         37:ab:f8:a4:9d:0b:dc:89:4b:1f:83:db:c6:60:ca:99:7f:96:
         44:f8:9d:6f:c5:25:d6:25:72:23:78:5a:e3:e4:0d:8d:68:1c:
         e1:bf:32:2c:eb:c8:fb:c8:11:fb:8f:93:73:c8:08:3b:a6:99:
         6d:50:37:20:a7:3f:c1:85:44:83:38:d4:35:2f:dc:51:2f:e0:
         b3:a5:23:c4:c5:65:7b:f8:3c:33:4c:87:d3:89:23:fd:b2:15:
         0a:d4:44:5d:7c:78:df:2e:19:b4:b6:0e:70:87:c1:7d:1b:83:
         fe:0f:dc:6d:6f:e6:47:f9:47:60:37:fc:2d:b5:fd:4b:7c:6d:
         c3:79:1e:2a:20:d6:d0:3f:c5:53:c5:5f:ab:bf:71:1e:5a:57:
         4a:9f:e1:ef:c6:09:20:01:1a:c4:99:59:76:ed:2f:83:a7:48:
         6e:ae:1a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:32:12 2026 by rpki-client