Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft
File:                     Xtho2ocq-NaWpcGp-ngp9lJzynk.mft (raw, json)
Hash identifier:          zwJyn/VREVl7AorErDd1o1WCIrNOaGHNRMKRRwgfYBM=
Subject key identifier:   D4:BD:C9:AA:C9:A5:24:0C:97:E9:B5:5B:CC:EE:E6:6A:0A:2B:2A:9E
Authority key identifier: 5E:D8:68:DA:87:2A:F8:D6:96:A5:C1:A9:FA:78:29:F6:52:73:CA:79
Certificate issuer:       /CN=A9119B43/serialNumber=5ED868DA872AF8D696A5C1A9FA7829F65273CA79
Certificate serial:       057A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xtho2ocq-NaWpcGp-ngp9lJzynk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft
Manifest number:          056F
Signing time:             Sat 10 Oct 2026 23:23:55 +0000
Manifest this update:     Sat 10 Oct 2026 23:23:54 +0000
Manifest next update:     Sat 17 Oct 2026 23:23:54 +0000
Files and hashes:         1: Xtho2ocq-NaWpcGp-ngp9lJzynk.crl (hash: QFVZQSWn3XqDLvOwqyRX0zYeit7ac9pCUCpgrXl6ZME=)
                          2: 6C27C19E4BFA11ECA6797F6DC4F9AE02.roa (hash: d542I90WWDGGQbicaXbMdjG+yHM90agVdnOM5BcvIy0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.crl
                          rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xtho2ocq-NaWpcGp-ngp9lJzynk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 23:23:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1402 (0x57a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119B43, serialNumber=5ED868DA872AF8D696A5C1A9FA7829F65273CA79
        Validity
            Not Before: Oct 10 23:23:54 2026 GMT
            Not After : Oct 17 23:23:54 2026 GMT
        Subject: CN=6acac90a-afe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1e:e4:30:30:5a:ca:75:fd:6c:71:de:f5:58:
                    d5:a4:ea:e5:dc:79:75:c6:b9:32:45:e5:22:91:77:
                    fd:8a:3a:b9:80:bd:82:52:4e:d4:88:1b:17:a0:36:
                    c4:92:6c:83:b3:74:74:d2:0c:25:3d:bc:8f:15:4c:
                    53:a5:df:05:82:87:85:21:f4:74:a7:6c:d9:aa:81:
                    30:c8:72:49:1a:07:6a:a1:a2:b2:56:86:e5:ad:2e:
                    b7:e6:2f:4a:79:89:b9:c8:ff:72:41:6f:8f:9c:17:
                    b4:97:7b:d4:0c:af:37:a3:01:22:4b:44:5e:d2:84:
                    5e:ae:ea:ae:9e:b1:09:ce:d5:41:5f:db:5d:0d:70:
                    73:03:00:e3:87:47:88:e2:e1:93:88:3a:b7:a0:36:
                    dc:80:b6:87:57:09:17:8b:b1:05:ea:8b:77:75:c0:
                    4e:48:3d:2c:64:47:ed:98:8c:51:a0:49:d0:70:a6:
                    65:5e:fb:29:36:60:4c:ee:14:88:07:a3:6e:77:19:
                    99:de:bb:9f:a4:1c:3e:f0:c2:37:ef:82:37:7c:15:
                    4b:32:e3:51:f8:93:d9:39:8c:4f:71:be:f6:0f:88:
                    bd:d2:eb:dc:cc:4c:8c:7b:6a:a8:91:d2:d0:91:74:
                    87:6a:0a:1f:2b:ea:bf:ea:99:02:14:b5:60:12:a8:
                    2b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:BD:C9:AA:C9:A5:24:0C:97:E9:B5:5B:CC:EE:E6:6A:0A:2B:2A:9E
            X509v3 Authority Key Identifier:
                keyid:5E:D8:68:DA:87:2A:F8:D6:96:A5:C1:A9:FA:78:29:F6:52:73:CA:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xtho2ocq-NaWpcGp-ngp9lJzynk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:6d:d8:f3:75:77:93:1a:94:98:87:ef:dd:66:c7:39:c3:02:
         0a:44:57:9e:8d:e5:c9:1d:b8:a6:b6:ef:75:56:7f:9f:3d:d8:
         fa:9c:22:b3:3d:94:7c:76:b9:28:f1:41:13:e7:bd:ef:d0:53:
         19:c8:9e:17:24:e1:5e:1f:f2:6b:93:4c:7c:75:14:9a:c3:8a:
         2f:eb:2c:b5:68:11:5f:96:94:25:5b:d0:1d:c6:17:87:66:55:
         d4:4f:0e:18:a7:4a:8b:0f:37:e8:9d:cd:29:1a:63:3d:a5:c7:
         27:b2:69:7c:3f:4d:e3:1d:3b:36:74:ae:12:f6:7c:f1:9a:65:
         70:61:7d:a0:be:30:94:fb:c4:c9:ec:9f:48:1a:a9:b7:58:72:
         d1:b8:dd:90:33:25:28:55:6e:cd:07:76:af:03:8a:ae:a3:26:
         2b:0d:d3:00:7b:4e:df:d7:3d:eb:a8:de:d8:31:e7:85:22:54:
         db:4b:cd:db:76:28:98:cb:7c:a3:72:ac:0e:28:8d:a6:ef:cb:
         f9:eb:aa:19:c2:b6:75:09:b7:49:63:a3:66:b4:46:20:e5:b9:
         32:fd:cb:e2:70:d3:ff:b4:e3:21:95:07:d1:99:98:db:0c:e9:
         db:13:be:1b:99:ce:6e:15:dd:f6:ba:b7:b3:e5:a6:66:80:46:
         d2:52:98:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:27:31 2026 by rpki-client