Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/XAPGyccm_z0gJ0cKGKDIgiLsZvs.mft
File:                     XAPGyccm_z0gJ0cKGKDIgiLsZvs.mft (raw, json)
Hash identifier:          ng3kKIFVKp0GJMF42QTT3x79XKINJShH1Bje9HlnNsE=
Subject key identifier:   5A:1D:64:FD:20:1D:4C:0D:57:14:59:D4:F9:B0:F0:30:34:D5:6E:13
Authority key identifier: 5C:03:C6:C9:C7:26:FF:3D:20:27:47:0A:18:A0:C8:82:22:EC:66:FB
Certificate issuer:       /CN=A9162B98/serialNumber=5C03C6C9C726FF3D2027470A18A0C88222EC66FB
Certificate serial:       90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAPGyccm_z0gJ0cKGKDIgiLsZvs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/XAPGyccm_z0gJ0cKGKDIgiLsZvs.mft
Manifest number:          90
Signing time:             Mon 21 Sep 2026 07:31:25 +0000
Manifest this update:     Mon 21 Sep 2026 07:31:25 +0000
Manifest next update:     Mon 28 Sep 2026 07:31:25 +0000
Files and hashes:         1: XAPGyccm_z0gJ0cKGKDIgiLsZvs.crl (hash: Y8moBqFKCQ4wkPI1FXhtvP0PIITWopzvBcZjlrqemq4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/XAPGyccm_z0gJ0cKGKDIgiLsZvs.crl
                          rsync://rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/XAPGyccm_z0gJ0cKGKDIgiLsZvs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAPGyccm_z0gJ0cKGKDIgiLsZvs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:31:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144 (0x90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162B98, serialNumber=5C03C6C9C726FF3D2027470A18A0C88222EC66FB
        Validity
            Not Before: Sep 21 07:31:25 2026 GMT
            Not After : Sep 28 07:31:25 2026 GMT
        Subject: CN=6ab0dd4d-8814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:85:c5:64:19:dc:62:2a:02:ea:2b:16:7a:e6:
                    7a:2a:ab:4b:79:47:a9:ff:07:35:0d:0b:29:b9:57:
                    d1:3b:87:61:5b:8e:81:7e:d6:7b:43:aa:1e:c8:6f:
                    dd:02:e9:e0:6f:aa:31:4c:be:e5:71:fa:8a:43:02:
                    44:f7:8d:a7:82:e3:17:27:b3:e5:81:ae:34:db:ee:
                    65:2b:50:f4:f8:a2:99:75:5f:ea:0a:1e:9f:0b:bb:
                    0e:56:5b:16:53:8a:a0:0b:8a:1f:02:6d:2b:83:48:
                    8c:93:59:7d:e9:d6:26:9d:1c:a1:3a:c5:d1:b9:48:
                    88:87:27:ea:27:35:5c:cf:9a:a7:0c:0c:c1:29:aa:
                    8c:64:d6:a2:03:5a:b1:a9:31:0e:ff:29:83:d8:6a:
                    59:e6:b1:5c:80:ef:92:af:c9:aa:56:b9:a0:2f:51:
                    93:22:6e:30:39:27:de:d8:49:54:57:a9:00:4f:8e:
                    a7:c1:3c:f4:eb:4e:2f:eb:76:0e:8f:30:e5:22:fb:
                    04:11:7b:47:29:6b:86:29:da:cd:99:9b:4c:f0:f7:
                    20:47:6f:ce:29:15:c8:1b:55:eb:f7:b6:63:3a:70:
                    62:6d:82:0d:66:c0:b5:af:b0:7b:6e:1f:8f:ab:b5:
                    77:73:05:75:cc:52:f9:4d:f0:ca:cc:da:28:fc:95:
                    5c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:1D:64:FD:20:1D:4C:0D:57:14:59:D4:F9:B0:F0:30:34:D5:6E:13
            X509v3 Authority Key Identifier:
                keyid:5C:03:C6:C9:C7:26:FF:3D:20:27:47:0A:18:A0:C8:82:22:EC:66:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/XAPGyccm_z0gJ0cKGKDIgiLsZvs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAPGyccm_z0gJ0cKGKDIgiLsZvs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162B98/239CA20EDC9311F0995D84D93F6F56BC/XAPGyccm_z0gJ0cKGKDIgiLsZvs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:73:35:28:13:da:87:b9:fa:55:b1:5f:da:28:90:e9:7f:7a:
         43:0d:0a:f1:49:c0:36:28:da:e8:3e:23:5d:48:17:25:44:af:
         a1:c2:f2:0a:0c:a5:eb:b8:54:de:fe:6d:3d:c1:54:e5:74:36:
         0b:a8:e2:0b:b1:c2:bd:ce:52:a5:ea:da:31:d7:88:45:a0:f6:
         37:0f:8d:b4:d0:40:1b:e9:fc:30:cd:b2:40:77:6a:46:d1:03:
         0b:7d:b9:3d:45:64:ab:49:2b:c0:4f:e2:26:45:ab:66:5e:41:
         87:57:fe:70:c5:b8:9b:83:7b:c4:f2:34:c2:17:63:c7:d7:d5:
         81:5f:ad:fb:50:4f:29:10:b5:22:dc:7d:97:fc:e1:fc:62:c8:
         22:1a:96:2e:06:88:07:5b:c4:1d:a5:b6:89:7a:f7:ac:3e:98:
         bf:f0:c9:3b:38:78:6d:8f:f4:d1:2c:ba:0e:e0:45:08:25:5f:
         a9:b4:13:9a:0b:cc:0c:d7:81:89:d2:7a:de:20:00:79:43:b8:
         84:df:bc:8b:39:db:a3:27:28:cb:e4:37:2f:02:e7:98:0d:fe:
         3e:0c:8d:76:ae:41:de:b1:ba:52:f0:a8:50:11:51:bc:e2:bc:
         54:2e:95:cb:5d:cd:d6:f7:19:64:3a:85:02:c0:3a:80:b7:b0:
         8f:dd:ab:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:33:44 2026 by rpki-client