Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9152787/2286562A8F7911EF92AC781EC4F9AE02/XZRtT0edN7zhcAywut1RosPfYg8.mft
File:                     XZRtT0edN7zhcAywut1RosPfYg8.mft (raw, json)
Hash identifier:          6w6JoRAV+lOb5kZi6kPuMiXxzRz9L8tyYWe8V1WiVyM=
Subject key identifier:   F4:F6:12:78:09:D4:F2:A0:06:1D:7E:3E:9A:62:CF:4C:ED:3C:D4:CB
Authority key identifier: 5D:94:6D:4F:47:9D:37:BC:E1:70:0C:B0:BA:DD:51:A2:C3:DF:62:0F
Certificate issuer:       /CN=A9152787/serialNumber=5D946D4F479D37BCE1700CB0BADD51A2C3DF620F
Certificate serial:       0183
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XZRtT0edN7zhcAywut1RosPfYg8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152787/2286562A8F7911EF92AC781EC4F9AE02/XZRtT0edN7zhcAywut1RosPfYg8.mft
Manifest number:          0177
Signing time:             Sat 03 Oct 2026 05:31:46 +0000
Manifest this update:     Sat 03 Oct 2026 05:31:45 +0000
Manifest next update:     Sat 10 Oct 2026 05:31:45 +0000
Files and hashes:         1: XZRtT0edN7zhcAywut1RosPfYg8.crl (hash: od3nwwsPQAsnXiJwenew8OGsrETx8paYkDRHTWI5AuY=)
                          2: CB24F37C033711F0B76A8520C4F9AE02.roa (hash: 6FOSG+PDOX8IQ8IkU4F+r2ZxK7Ap4wqnXAN3PEPi5FM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152787/2286562A8F7911EF92AC781EC4F9AE02/XZRtT0edN7zhcAywut1RosPfYg8.crl
                          rsync://rpki.apnic.net/member_repository/A9152787/2286562A8F7911EF92AC781EC4F9AE02/XZRtT0edN7zhcAywut1RosPfYg8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XZRtT0edN7zhcAywut1RosPfYg8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 05:31:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 387 (0x183)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152787, serialNumber=5D946D4F479D37BCE1700CB0BADD51A2C3DF620F
        Validity
            Not Before: Oct  3 05:31:45 2026 GMT
            Not After : Oct 10 05:31:45 2026 GMT
        Subject: CN=6ac09342-af0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e0:4e:16:ce:ba:c4:60:ed:66:31:3e:83:45:
                    3c:55:37:a9:33:0c:63:60:25:a6:64:39:11:f9:a5:
                    a4:af:7a:ba:1e:38:3c:78:82:1e:69:fb:c9:ad:c7:
                    64:05:0d:ab:68:b6:5b:a4:46:b1:62:88:ff:fa:0e:
                    b7:b5:96:2b:6c:0a:5e:ae:a3:7e:39:a6:28:be:c8:
                    63:71:34:55:fe:8c:06:6a:25:1c:d5:5d:58:1d:09:
                    2f:8d:ab:2f:56:47:83:2a:89:24:20:fd:6c:f7:37:
                    78:33:f2:59:68:d3:0e:90:5a:19:cb:dd:68:12:8e:
                    26:f7:ec:e5:9c:c6:da:38:61:39:1b:a0:69:0f:75:
                    5b:03:9a:2b:f2:b9:d2:1a:ea:d6:fa:e9:1e:1b:8c:
                    05:bd:de:c2:c6:7e:e3:c0:74:8c:bd:f5:f7:0e:fb:
                    8b:e9:82:0b:09:40:f6:7b:af:4d:f9:5e:fc:7e:57:
                    f5:25:46:9e:bb:e2:9e:ae:f5:93:31:d8:9f:46:14:
                    66:48:7c:ad:6d:3d:41:15:e5:3e:62:d6:bb:bd:3d:
                    b7:88:fd:4a:8e:3f:96:e4:b6:4a:8b:c1:37:6d:92:
                    c8:04:b1:7d:2c:d2:49:1c:d7:e9:ea:e5:f3:78:0e:
                    01:e1:e7:bf:f3:ce:6c:55:bb:93:de:5c:7a:75:55:
                    71:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F6:12:78:09:D4:F2:A0:06:1D:7E:3E:9A:62:CF:4C:ED:3C:D4:CB
            X509v3 Authority Key Identifier:
                keyid:5D:94:6D:4F:47:9D:37:BC:E1:70:0C:B0:BA:DD:51:A2:C3:DF:62:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152787/2286562A8F7911EF92AC781EC4F9AE02/XZRtT0edN7zhcAywut1RosPfYg8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XZRtT0edN7zhcAywut1RosPfYg8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152787/2286562A8F7911EF92AC781EC4F9AE02/XZRtT0edN7zhcAywut1RosPfYg8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:02:fe:c2:a7:a6:6d:51:88:ec:63:1d:3f:66:2e:e9:d7:61:
         bc:13:e6:7d:b2:10:b1:cf:10:6c:e2:59:6e:23:34:75:1e:07:
         7a:f9:2e:4f:7b:0e:b5:51:97:cf:0a:d7:a6:52:60:3e:c6:bc:
         44:9a:5e:85:1d:84:59:38:df:65:9d:bd:7b:47:ba:ee:23:1d:
         5b:75:c9:e3:61:a0:a6:16:1f:c3:22:18:66:f5:1f:eb:93:5f:
         ca:dd:2e:4c:4d:9a:ee:5f:4a:de:2d:71:a4:fe:4e:e1:5c:9c:
         4c:ed:fa:8b:dd:a7:dd:92:bb:c0:ff:d2:ce:8a:22:b2:d4:68:
         d0:1a:7a:30:a4:81:24:54:25:be:aa:56:ac:a6:de:1b:e3:b8:
         88:b3:ab:b9:7f:18:03:bd:7c:f1:76:ca:54:2b:92:a2:9a:43:
         d4:ab:48:64:85:04:1e:d3:73:42:29:90:76:57:82:e9:b9:94:
         d4:b0:4c:84:9b:7b:cc:cd:7b:17:e9:16:96:de:5e:78:97:5c:
         1b:97:a0:08:78:65:e5:e4:3f:8b:02:be:9e:72:7b:dd:c1:bf:
         af:c8:d4:14:fc:20:ad:50:5a:1d:5b:f5:f2:bc:e7:de:a9:e9:
         ce:6b:89:c9:fd:28:aa:02:cf:84:fe:6b:c7:6c:7e:67:b7:7f:
         72:3d:1a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:45:21 2026 by rpki-client