Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft
File:                     -XxrnwabbALLPY6tWvc-UGwIyjg.mft (raw, json)
Hash identifier:          ULJNG7Lx79LYBJSHyfBpUgbcDspXToE0aMVOgEWcUX0=
Subject key identifier:   CE:60:AC:2B:8F:38:65:4A:71:7A:3A:73:5E:BA:EF:9D:FD:80:6C:8D
Authority key identifier: F9:7C:6B:9F:06:9B:6C:02:CB:3D:8E:AD:5A:F7:3E:50:6C:08:CA:38
Certificate issuer:       /CN=A914DB69/serialNumber=F97C6B9F069B6C02CB3D8EAD5AF73E506C08CA38
Certificate serial:       0230
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft
Manifest number:          0229
Signing time:             Fri 25 Sep 2026 02:49:18 +0000
Manifest this update:     Fri 25 Sep 2026 02:49:18 +0000
Manifest next update:     Fri 02 Oct 2026 02:49:18 +0000
Files and hashes:         1: -XxrnwabbALLPY6tWvc-UGwIyjg.crl (hash: 8Ak4N78XQQG6NLYK5bXqv8fUQdYa5rxz6fFMpOo1WsQ=)
                          2: C4AA7A3A6E5F11EE9F66E967C4F9AE02.roa (hash: kdzwoZAMh51JZsHZZa0HJnczi1+crw9wnyc8mMxvPFw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.crl
                          rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 02:49:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 560 (0x230)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DB69, serialNumber=F97C6B9F069B6C02CB3D8EAD5AF73E506C08CA38
        Validity
            Not Before: Sep 25 02:49:18 2026 GMT
            Not After : Oct  2 02:49:18 2026 GMT
        Subject: CN=6ab5e12e-5514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:23:dc:16:98:e5:1c:76:5b:1b:4f:fb:33:e6:
                    84:12:2c:49:d6:c4:05:0a:3f:34:2b:7d:63:3a:91:
                    bc:c8:06:91:f0:ab:9a:46:2f:e6:74:42:ef:89:4f:
                    4d:36:ef:54:69:d6:bd:eb:ed:5c:0d:bb:ed:04:c3:
                    29:8c:28:a4:91:ad:89:a2:38:d6:67:6c:cd:61:5c:
                    79:2f:f5:7a:69:0e:e0:b3:ab:08:1f:b7:5d:ec:d6:
                    e2:da:30:cb:2c:e7:5c:7f:8a:82:49:42:9c:91:20:
                    6d:10:78:92:d5:3f:5a:b3:97:da:21:00:9b:ff:ea:
                    c0:d6:07:18:16:76:5b:de:42:2a:d5:83:96:f2:f9:
                    08:f2:eb:04:be:7a:a5:bf:55:0d:5a:19:41:f6:62:
                    31:49:f4:df:b4:ce:72:4b:33:3f:1f:66:70:b8:1a:
                    37:1e:ca:4d:30:3f:08:d7:86:75:9e:a0:4c:69:52:
                    63:a7:6a:f0:31:4e:78:e5:9c:5f:89:63:9f:01:92:
                    97:5b:c1:a1:c4:7b:1c:ad:3b:ad:b6:82:89:90:c8:
                    0c:26:97:f7:1f:a1:a7:17:a2:72:56:27:15:9d:94:
                    04:61:52:dd:81:6c:d2:3a:a1:0e:0b:ff:13:e2:c5:
                    dd:35:dc:25:7b:e5:ff:2a:1a:65:91:53:e6:13:96:
                    84:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:60:AC:2B:8F:38:65:4A:71:7A:3A:73:5E:BA:EF:9D:FD:80:6C:8D
            X509v3 Authority Key Identifier:
                keyid:F9:7C:6B:9F:06:9B:6C:02:CB:3D:8E:AD:5A:F7:3E:50:6C:08:CA:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:2c:df:63:24:bb:bb:66:db:d3:78:af:45:28:99:ad:e7:55:
         67:0e:a4:ae:1f:45:48:5f:d4:f2:44:65:d3:9d:cf:fc:bf:e3:
         6d:05:61:ad:24:17:0b:21:ab:ad:c8:9f:d1:f3:1a:b4:45:bb:
         b3:2c:02:3e:27:3e:07:d1:d4:7c:ba:73:3d:cc:2a:9c:c5:13:
         22:7d:1f:e7:42:05:aa:61:3f:c5:a5:99:9f:57:74:49:02:a1:
         a6:0b:41:4c:ac:b5:75:2e:4c:17:d4:68:2c:6c:f0:b9:18:f4:
         c4:90:32:15:46:5e:b8:c1:84:85:ac:3e:3d:1e:fa:5f:10:96:
         52:97:f0:f6:54:76:04:6f:5f:ae:55:3f:b0:d1:96:bc:aa:19:
         ed:d7:d5:17:b2:82:fd:86:f1:67:bc:40:2e:34:bb:d9:dc:bc:
         fb:a0:c4:83:1f:ae:60:b5:1f:2f:c4:08:03:15:ad:7b:6d:ea:
         e1:4d:18:7b:fc:13:cd:36:6a:7c:40:d2:6f:4f:8c:c0:d7:47:
         cc:d6:b4:51:4c:16:dc:63:8f:8d:c9:84:85:dc:06:d0:cc:20:
         b9:88:be:0b:e8:8e:36:06:b0:de:ad:ee:80:c9:57:1c:15:61:
         7c:23:a8:e0:84:13:47:ef:89:a5:ba:9d:14:45:fb:43:87:5f:
         b9:37:1f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:43:38 2026 by rpki-client