Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft
File:                     XwTABfKMKFbHu_R2uRxioC8vxRw.mft (raw, json)
Hash identifier:          JQ6zDS96NQ/69beggCeptt7CmVOJHeH6gIt0FNdcojo=
Subject key identifier:   AF:39:93:FE:A0:39:8F:A7:5E:E2:32:D3:D8:93:8A:12:AB:08:4E:9A
Authority key identifier: 5F:04:C0:05:F2:8C:28:56:C7:BB:F4:76:B9:1C:62:A0:2F:2F:C5:1C
Certificate issuer:       /CN=A915A0FB/serialNumber=5F04C005F28C2856C7BBF476B91C62A02F2FC51C
Certificate serial:       01AB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XwTABfKMKFbHu_R2uRxioC8vxRw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft
Manifest number:          01A2
Signing time:             Wed 23 Sep 2026 03:38:51 +0000
Manifest this update:     Wed 23 Sep 2026 03:38:50 +0000
Manifest next update:     Wed 30 Sep 2026 03:38:50 +0000
Files and hashes:         1: XwTABfKMKFbHu_R2uRxioC8vxRw.crl (hash: oWx4rekdUX0BUrBM2duyQaYGAmemIAOcFKciLsfVGPI=)
                          2: 900F4ADA440611EF85166C30C4F9AE02.roa (hash: Wxf+pnMbRXmK89KrT1cPFUY8XepsRf7BgNp3XpkASBg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.crl
                          rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XwTABfKMKFbHu_R2uRxioC8vxRw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 03:38:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 427 (0x1ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0FB, serialNumber=5F04C005F28C2856C7BBF476B91C62A02F2FC51C
        Validity
            Not Before: Sep 23 03:38:50 2026 GMT
            Not After : Sep 30 03:38:50 2026 GMT
        Subject: CN=6ab349ca-9ea0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:71:30:e0:a7:7a:ae:b0:1e:96:52:f3:80:46:
                    15:c3:28:24:5a:02:60:73:e1:ce:79:fd:4e:a7:ac:
                    0f:26:90:5f:ce:c8:e7:a0:ba:c5:bc:1b:a5:d2:2e:
                    8a:6c:ad:52:7c:01:8b:1e:c0:3f:b2:2c:41:f0:18:
                    b6:e1:97:22:f7:b2:75:9b:a6:1c:74:4c:41:5c:f2:
                    81:a9:ca:51:b4:98:59:7c:4c:98:72:63:af:28:9c:
                    5d:69:64:fc:ab:a1:09:92:14:94:ca:6e:6f:34:d5:
                    5a:f8:74:ec:6a:74:3b:af:37:90:33:d9:90:6e:27:
                    56:34:15:79:3f:36:88:b8:8c:41:a2:64:7f:70:50:
                    30:ca:6e:d1:9b:2b:c5:c1:1b:d8:f2:a5:f3:d9:c1:
                    ef:de:3f:a5:3d:76:ce:f2:d0:4b:34:69:8c:31:3b:
                    db:4f:f2:30:43:81:36:a2:78:bf:9c:a8:98:8c:14:
                    f8:34:64:3f:fc:e9:f2:bc:78:7a:d6:ac:ce:58:58:
                    70:4a:1c:ea:d0:0b:ac:a5:e1:90:59:dc:4f:cd:d6:
                    93:1f:fd:33:ce:b8:f5:c5:88:42:d8:49:f5:0c:17:
                    3d:30:49:b8:ba:f1:3e:08:bb:0d:a9:d5:30:39:c3:
                    c6:d2:3c:e8:d7:f6:d3:69:04:dc:94:ad:7a:34:18:
                    dd:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:39:93:FE:A0:39:8F:A7:5E:E2:32:D3:D8:93:8A:12:AB:08:4E:9A
            X509v3 Authority Key Identifier:
                keyid:5F:04:C0:05:F2:8C:28:56:C7:BB:F4:76:B9:1C:62:A0:2F:2F:C5:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XwTABfKMKFbHu_R2uRxioC8vxRw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:fc:6a:01:2b:51:0d:d3:78:93:0d:d8:07:21:d4:c7:14:e3:
         8d:39:35:9d:dc:0e:ad:2f:85:c0:c3:59:50:2f:6d:d1:d1:b2:
         cd:66:b0:40:71:88:32:35:19:58:96:e4:12:05:c6:b5:60:a3:
         1b:f1:e2:9e:75:74:b9:bc:fa:fa:39:de:3d:cf:e1:47:8e:d3:
         bc:92:c2:b3:98:e8:b4:8a:b8:46:0b:e4:82:41:1f:0e:4c:3a:
         b6:33:02:2e:7e:37:a5:fa:cf:96:bc:67:44:5e:ce:b2:ea:ae:
         a4:b2:fa:08:9d:60:6b:26:b3:73:92:8d:92:cf:33:53:cc:76:
         3f:08:88:c0:cb:f8:d6:dd:d2:89:73:ea:16:7a:0d:74:87:9d:
         0a:5e:92:c8:3b:b3:8a:a2:ef:18:c1:fe:b8:99:f9:9a:73:a7:
         bf:68:98:ba:bd:92:9e:2c:b8:5e:10:24:5b:87:ae:52:3e:06:
         a2:25:67:3b:be:89:a1:4f:ce:5a:14:1c:94:63:40:4c:57:48:
         7d:9d:cc:4c:50:63:3d:ed:22:49:20:ca:b9:f5:9c:32:eb:ff:
         ce:79:cf:4c:29:09:eb:ae:d2:b6:51:b2:d8:b6:0a:4e:c5:b3:
         9a:47:0e:98:77:a1:ad:ec:ab:3f:34:2e:23:2f:88:21:b5:b3:
         c5:3f:0e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:05:08 2026 by rpki-client