Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.mft
File:                     XfVm12I2fCjH8_ElYbRxa4yhuWY.mft (raw, json)
Hash identifier:          wjt+t4DrzE3sfg6b3hHeE5VQp7kELVDFLSQ1YwslKUw=
Subject key identifier:   96:D7:3E:F4:95:03:A0:88:24:3E:8E:35:D4:5A:5C:AE:9E:57:7A:3F
Authority key identifier: 5D:F5:66:D7:62:36:7C:28:C7:F3:F1:25:61:B4:71:6B:8C:A1:B9:66
Certificate issuer:       /CN=A9133B47/serialNumber=5DF566D762367C28C7F3F12561B4716B8CA1B966
Certificate serial:       01D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfVm12I2fCjH8_ElYbRxa4yhuWY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.mft
Manifest number:          01C9
Signing time:             Tue 13 Oct 2026 04:21:21 +0000
Manifest this update:     Tue 13 Oct 2026 04:21:21 +0000
Manifest next update:     Tue 20 Oct 2026 04:21:21 +0000
Files and hashes:         1: XfVm12I2fCjH8_ElYbRxa4yhuWY.crl (hash: Ch5buEFhEViSMavJXqFKw+GXQhsmqI8IEE4cE1nxdp4=)
                          2: 23B1A0120FA511EFB28F5235C4F9AE02.roa (hash: wvSHxxBQmLwE16AVo39FOmMXKWaWbJvTWAsomwhTSy4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.crl
                          rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfVm12I2fCjH8_ElYbRxa4yhuWY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 04:21:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 467 (0x1d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133B47, serialNumber=5DF566D762367C28C7F3F12561B4716B8CA1B966
        Validity
            Not Before: Oct 13 04:21:21 2026 GMT
            Not After : Oct 20 04:21:21 2026 GMT
        Subject: CN=6acdb1c1-f2e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:92:f5:15:af:1c:1f:e2:1f:d5:b7:44:fd:36:
                    62:e0:a6:f8:9c:89:1a:f5:b0:7b:57:66:5d:90:7b:
                    3c:fc:ba:d6:01:5a:fb:bd:92:34:5a:ec:59:ff:85:
                    85:4e:78:61:57:fd:1a:ea:94:66:49:fc:c4:92:a2:
                    e9:1f:3c:f2:64:16:c7:1b:7e:38:9a:97:75:14:48:
                    89:fb:9d:07:46:10:f3:3c:25:11:b4:da:1f:76:7a:
                    87:1d:cb:7b:7c:66:97:ad:6b:0d:84:2c:8c:01:1f:
                    d7:75:9b:8e:ae:69:42:9a:10:26:25:ec:0f:0a:a1:
                    a0:58:8d:e3:1f:2e:e4:34:cc:7b:38:e0:6d:a8:c1:
                    86:88:33:03:45:58:c2:2b:f4:0d:43:b5:78:ad:83:
                    20:71:a4:9c:56:0a:4c:db:c2:16:d3:de:24:bb:c8:
                    5a:15:5e:c6:3f:70:24:b6:25:f1:d6:9e:45:89:fe:
                    b6:3a:3b:3a:4e:26:b0:54:e8:b8:a6:35:2c:65:e5:
                    12:0b:cb:b5:4b:c2:1e:8b:f6:12:aa:77:2f:35:de:
                    08:51:85:bc:68:6f:99:f5:3a:ad:c9:2d:34:3b:6f:
                    02:79:f0:d0:40:65:98:d8:52:47:83:f2:fc:7c:d6:
                    b9:1f:23:ea:77:77:1c:56:33:1e:d7:cb:af:e1:05:
                    7b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D7:3E:F4:95:03:A0:88:24:3E:8E:35:D4:5A:5C:AE:9E:57:7A:3F
            X509v3 Authority Key Identifier:
                keyid:5D:F5:66:D7:62:36:7C:28:C7:F3:F1:25:61:B4:71:6B:8C:A1:B9:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfVm12I2fCjH8_ElYbRxa4yhuWY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:2f:6d:51:31:25:20:43:c7:66:81:c9:7a:cf:f2:6e:e8:e8:
         f0:42:48:ac:0e:c5:95:8f:9f:c0:a5:43:0c:31:92:06:79:6f:
         38:2b:72:ea:f5:16:7c:20:e1:fc:e3:01:94:57:d1:4b:c2:25:
         6b:33:81:a3:50:7d:67:a3:da:87:61:f3:0f:b3:ef:d8:f7:ad:
         62:4d:60:27:d2:f1:6c:d1:f1:5b:da:2d:b6:3e:63:74:ef:98:
         d7:a4:2c:6e:ef:0e:ce:9b:28:ca:be:6c:a0:b8:5c:2c:07:fb:
         e1:3f:38:c5:49:fb:8b:f9:62:13:fc:be:98:80:c9:d0:cc:4e:
         30:27:84:f8:c7:ed:5a:74:fe:76:26:e4:54:23:e0:b2:07:a9:
         8f:76:fb:64:7a:81:48:19:ad:fd:b0:59:6d:e9:22:92:ad:e7:
         9e:08:11:f9:49:08:56:5b:7f:26:28:45:88:65:3c:39:4b:12:
         ba:4a:a2:65:13:4c:c4:cb:a9:83:46:bb:1e:0c:97:67:0d:c6:
         b3:89:81:6d:35:f5:95:5e:1d:ba:85:e0:44:d3:77:09:9e:b0:
         67:47:75:26:40:13:ea:9b:ab:b1:8c:d7:7f:7e:90:3b:f0:d5:
         dc:cf:2c:86:5c:ad:95:6d:9b:ba:cb:90:8a:6c:dc:dc:90:b5:
         40:fc:a6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 12:39:41 2026 by rpki-client