Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft
File:                     XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft (raw, json)
Hash identifier:          Lmpch4SL6fGZT3Ni8xqDxqyQPFV4enFYz8OBa8ueFa8=
Subject key identifier:   84:E7:8A:22:40:44:22:BC:1C:0D:51:F8:2C:CB:A1:5F:1A:E7:47:1D
Authority key identifier: 5E:E7:CF:43:9A:42:23:23:29:82:A2:CB:4D:E5:4F:37:C7:20:5A:A9
Certificate issuer:       /CN=A913AE78/serialNumber=5EE7CF439A4223232982A2CB4DE54F37C7205AA9
Certificate serial:       0866
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XufPQ5pCIyMpgqLLTeVPN8cgWqk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft
Manifest number:          085C
Signing time:             Sat 14 Nov 2026 20:50:31 +0000
Manifest this update:     Sat 14 Nov 2026 20:50:31 +0000
Manifest next update:     Sat 21 Nov 2026 20:50:31 +0000
Files and hashes:         1: XufPQ5pCIyMpgqLLTeVPN8cgWqk.crl (hash: SCyoNqUW1EetsVmP2V4EYu0FKc8rrb5X+Ihgwi6a02I=)
                          2: D6138A3C292A11EB9CEDCC26C4F9AE02.roa (hash: 4W1AMLtPIJWXDmSDlQKbcJdkhAxzytpHT4452Y9YBVY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.crl
                          rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XufPQ5pCIyMpgqLLTeVPN8cgWqk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 20:50:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2150 (0x866)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913AE78, serialNumber=5EE7CF439A4223232982A2CB4DE54F37C7205AA9
        Validity
            Not Before: Nov 14 20:50:31 2026 GMT
            Not After : Nov 21 20:50:31 2026 GMT
        Subject: CN=6af8c997-cd31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ca:93:e1:4d:19:01:9c:55:21:c1:b8:c6:a7:
                    c1:00:16:82:1e:b6:e9:47:2b:a1:74:06:64:25:76:
                    82:35:64:c5:e9:4d:50:86:10:d1:6e:14:d5:ed:4f:
                    1e:e7:14:e6:73:ef:72:f1:1e:ab:81:3c:1d:68:d4:
                    7a:2c:2c:00:ec:a4:3c:1e:df:26:f6:66:17:0f:23:
                    7c:f7:4f:7d:d2:3c:4e:b9:4e:0f:b0:0a:18:5b:bd:
                    b0:6f:43:f2:82:ba:40:f8:ba:da:ca:85:8e:c4:59:
                    56:4c:eb:c8:52:49:3b:a8:d3:07:7b:4b:59:4d:a4:
                    fe:57:ec:5b:45:bd:94:4c:26:77:b7:e7:17:f7:30:
                    aa:f9:23:e2:4f:5b:4b:3c:fd:8a:a5:d8:1e:9f:90:
                    b2:29:db:7c:d3:27:07:88:e0:d3:81:7e:b6:60:1f:
                    25:25:6b:43:c3:64:56:55:c8:29:f1:f7:bc:7c:8e:
                    31:6f:ab:d3:d1:dc:92:e9:06:52:c9:eb:c3:0f:1c:
                    83:01:6d:de:b6:30:8e:d1:99:b0:b9:a6:59:a6:c1:
                    c7:02:c7:12:00:fb:26:32:00:a6:bf:2e:b5:13:ae:
                    2e:22:ea:62:df:d7:75:69:13:7d:06:d4:fd:89:41:
                    3f:7f:cb:44:7d:62:59:b0:a5:09:02:58:4b:e0:08:
                    3f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E7:8A:22:40:44:22:BC:1C:0D:51:F8:2C:CB:A1:5F:1A:E7:47:1D
            X509v3 Authority Key Identifier:
                keyid:5E:E7:CF:43:9A:42:23:23:29:82:A2:CB:4D:E5:4F:37:C7:20:5A:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XufPQ5pCIyMpgqLLTeVPN8cgWqk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:a1:31:4f:3f:df:05:06:2c:bf:a9:04:15:db:d8:98:e8:e9:
         f9:47:b8:0e:35:92:29:87:9e:c7:bf:82:8b:79:b9:d8:32:72:
         5e:c9:95:67:f0:07:d8:fe:bc:f7:0c:fa:3b:9c:ec:ae:82:b0:
         fb:57:41:f2:92:08:5a:3e:8f:5e:d9:c8:66:ae:26:30:4e:55:
         9f:41:76:e9:6e:57:28:7f:8d:7c:37:9a:b9:34:7d:74:1d:92:
         74:42:86:ff:61:5a:f8:34:72:41:9c:4f:22:48:01:a3:75:66:
         fb:e5:c0:03:4c:cf:54:c6:5d:81:43:20:b8:81:fd:40:99:b8:
         39:13:d6:be:09:a2:72:15:25:15:1e:bf:50:f4:3d:97:12:0b:
         c1:23:2e:49:79:12:61:6b:61:77:24:d3:b8:28:2e:68:23:b8:
         a3:a3:8c:21:b5:8b:1f:46:de:40:98:e2:68:f6:57:97:72:79:
         ca:09:11:89:f7:e4:cb:6a:db:28:a1:95:f9:cd:c3:d5:b1:7f:
         72:65:20:db:01:de:32:c6:44:32:cc:cf:2f:3e:c8:ab:57:ff:
         f8:39:cf:ee:34:4e:d2:43:1e:ef:82:d9:b1:37:02:85:01:6f:
         22:f9:4e:45:8e:d8:67:91:b0:be:ed:75:2c:64:4b:ab:17:7e:
         07:47:ff:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:38:54 2026 by rpki-client