Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft
File:                     xMZ-u2st3Gkku7llXn4PghhTDGU.mft (raw, json)
Hash identifier:          o4/B6jJMsVNkbxueZXUS3AIFk9gLHq7QDeMH0p9VEmU=
Subject key identifier:   42:80:B8:E7:92:99:5B:02:38:E2:19:A1:DB:FF:B5:AA:12:17:1C:09
Authority key identifier: C4:C6:7E:BB:6B:2D:DC:69:24:BB:B9:65:5E:7E:0F:82:18:53:0C:65
Certificate issuer:       /CN=A9122D51/serialNumber=C4C67EBB6B2DDC6924BBB9655E7E0F8218530C65
Certificate serial:       01EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xMZ-u2st3Gkku7llXn4PghhTDGU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft
Manifest number:          01E3
Signing time:             Sun 25 Oct 2026 03:55:48 +0000
Manifest this update:     Sun 25 Oct 2026 03:55:48 +0000
Manifest next update:     Sun 01 Nov 2026 03:55:48 +0000
Files and hashes:         1: xMZ-u2st3Gkku7llXn4PghhTDGU.crl (hash: zhE6g6HKIsuEkA2hUcLH1gcwTgr4Kc+fSD6tbuPbKsY=)
                          2: 6D610A58F23711EEA11AA759C4F9AE02.roa (hash: H955n/7dglZtqfdGojSNMJAFJkmI9QdbLn1Kqy9frW8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.crl
                          rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xMZ-u2st3Gkku7llXn4PghhTDGU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 03:55:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 491 (0x1eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122D51, serialNumber=C4C67EBB6B2DDC6924BBB9655E7E0F8218530C65
        Validity
            Not Before: Oct 25 03:55:48 2026 GMT
            Not After : Nov  1 03:55:48 2026 GMT
        Subject: CN=6add7dc4-8bee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2b:6a:99:df:ca:59:f7:b0:48:3c:a9:27:63:
                    6b:4b:5d:c6:10:dd:6f:10:d0:32:c0:06:10:9e:09:
                    25:5d:8c:f0:66:22:82:a0:26:c3:b4:0d:d5:14:97:
                    63:f8:36:51:ae:e8:8b:2d:01:b6:e1:68:43:9f:d5:
                    e1:a5:39:cf:05:5a:1b:d2:a4:a0:ee:9c:21:b7:be:
                    cf:27:54:f8:31:41:b3:a9:76:aa:cb:ee:fd:94:fa:
                    57:3e:a9:84:52:9f:03:47:f1:b0:0c:85:63:c3:f2:
                    c0:65:6b:f0:39:fa:19:42:e2:52:84:ff:83:27:48:
                    9e:ae:d4:ca:b7:bf:72:f4:63:b2:2b:76:d9:82:41:
                    96:a5:ba:6b:39:42:b7:b6:ae:3f:d9:d5:5c:04:47:
                    4c:9c:25:39:f3:82:57:d4:1f:35:b3:8b:ad:83:2a:
                    d2:5d:d6:2e:1e:0f:b9:7a:b5:98:ba:af:f9:f5:09:
                    e5:06:93:d7:26:7e:66:6d:72:e9:1b:3f:52:25:b4:
                    65:60:98:b2:fb:cb:f7:83:12:0b:2d:4d:bb:82:1f:
                    87:2a:87:e1:b4:97:19:a4:66:97:d9:9e:fc:66:e2:
                    1f:b8:02:86:2e:1c:7e:8c:f9:1f:27:b7:a3:87:8e:
                    06:b4:7a:75:fb:3c:0c:f9:e6:31:ff:c0:5c:5a:c2:
                    45:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:80:B8:E7:92:99:5B:02:38:E2:19:A1:DB:FF:B5:AA:12:17:1C:09
            X509v3 Authority Key Identifier:
                keyid:C4:C6:7E:BB:6B:2D:DC:69:24:BB:B9:65:5E:7E:0F:82:18:53:0C:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xMZ-u2st3Gkku7llXn4PghhTDGU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:11:8e:e2:a9:b8:c1:84:ad:d2:fb:e2:81:35:52:13:7f:63:
         eb:9b:17:0b:a2:66:82:b5:32:00:9d:77:17:92:f9:0d:58:f5:
         4e:8d:e9:f3:25:c8:53:bb:36:c2:0a:fc:d6:0c:b8:6f:d2:b4:
         7c:d1:47:51:af:45:4c:f0:e3:a9:3f:31:a3:f4:a4:bc:bf:f0:
         e3:6f:d5:06:d2:4a:63:91:d5:df:26:53:ea:f8:ea:9d:5b:9c:
         a1:ab:15:bb:27:dd:ec:42:1a:59:a3:85:03:a1:ca:29:96:5b:
         5b:9d:ac:83:1c:1b:23:6c:08:59:41:6a:71:ab:76:da:f9:d2:
         15:ae:44:63:f0:f4:e7:07:be:2e:e5:b1:28:0b:e3:fa:c1:5f:
         28:d5:ef:b6:c3:26:ea:94:ba:f9:a2:11:b8:14:ef:a4:7a:9f:
         4f:19:10:b6:75:27:51:4b:e2:95:47:16:f1:af:2e:5d:87:e4:
         af:af:48:36:14:f1:09:dc:c9:b6:8d:2d:a3:43:87:7c:a4:cc:
         64:b2:dd:29:2d:42:85:44:e3:77:9b:a3:3d:2b:05:be:c2:08:
         a7:47:79:ee:d5:b6:aa:60:58:0e:c9:56:b7:1b:3e:51:2f:3b:
         ea:2b:5b:2b:84:09:75:5a:c3:4a:3f:b6:fa:95:45:0a:60:bb:
         00:1f:8c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 17:56:45 2026 by rpki-client