Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft
File:                     XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft (raw, json)
Hash identifier:          CBM3HB7AdPnePr4Va3AdU77SzFv8ng6zraUihpNrkfM=
Subject key identifier:   C5:A3:3C:F5:CE:95:73:15:52:FF:66:40:40:00:98:CE:F0:F0:49:77
Authority key identifier: 5D:B5:7E:D3:86:03:9E:A6:64:D1:EF:F7:57:07:36:D6:F9:F0:4C:44
Certificate issuer:       /CN=A9175F54/serialNumber=5DB57ED386039EA664D1EFF7570736D6F9F04C44
Certificate serial:       0216
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XbV-04YDnqZk0e_3Vwc21vnwTEQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft
Manifest number:          020C
Signing time:             Mon 21 Sep 2026 03:08:41 +0000
Manifest this update:     Mon 21 Sep 2026 03:08:41 +0000
Manifest next update:     Mon 28 Sep 2026 03:08:41 +0000
Files and hashes:         1: XbV-04YDnqZk0e_3Vwc21vnwTEQ.crl (hash: /Lat6K+lefmMShD2DJDoIzWntsqnShDe/s+UthWWLcU=)
                          2: 262FD0CEFE5C11EFA373D67EC4F9AE02.roa (hash: cqGtRkyIvtI6VzYqSOXDeTVxWlR+pKo31+SsEOK5spw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.crl
                          rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XbV-04YDnqZk0e_3Vwc21vnwTEQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 03:08:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 534 (0x216)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175F54, serialNumber=5DB57ED386039EA664D1EFF7570736D6F9F04C44
        Validity
            Not Before: Sep 21 03:08:41 2026 GMT
            Not After : Sep 28 03:08:41 2026 GMT
        Subject: CN=6ab09fb9-88a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:75:c4:ea:18:f9:e2:ca:9f:32:90:0b:b8:4d:
                    78:c6:a6:98:aa:3d:75:e7:07:42:44:76:ed:49:98:
                    9d:05:5a:43:b7:85:07:1a:87:18:a8:c0:6d:2e:8c:
                    40:11:10:3d:14:0b:fa:d0:e8:f4:64:24:ed:12:ab:
                    bc:01:17:65:39:84:db:38:e9:31:f6:92:51:04:7d:
                    f7:81:a1:36:8c:3d:47:9c:fa:ee:af:6d:2b:50:61:
                    b9:39:a1:a1:de:44:ab:49:55:fb:2f:b8:cb:eb:15:
                    d0:76:d7:bf:6a:da:bb:10:1a:fa:6f:24:f3:08:b4:
                    53:99:e7:e5:02:ef:cb:70:6f:41:05:6c:8e:72:ab:
                    84:8b:f5:8f:3e:6c:85:f5:76:b9:26:ed:b4:de:cc:
                    fa:10:12:e9:5c:3f:75:7f:75:f1:ec:ad:af:25:7e:
                    55:79:f5:9e:c3:38:3c:df:e5:31:ff:17:2d:a7:91:
                    97:00:a2:8f:1e:c8:61:2c:e9:23:95:f6:12:40:28:
                    7f:92:df:38:86:17:da:79:83:49:15:c7:92:88:3f:
                    ae:dc:0b:47:0a:49:38:78:09:72:5f:e3:94:90:88:
                    c2:1b:13:83:0e:06:4f:c7:af:96:9b:cb:6c:ec:15:
                    86:65:00:e0:5c:b6:45:f8:05:ed:db:09:6f:24:ee:
                    20:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:A3:3C:F5:CE:95:73:15:52:FF:66:40:40:00:98:CE:F0:F0:49:77
            X509v3 Authority Key Identifier:
                keyid:5D:B5:7E:D3:86:03:9E:A6:64:D1:EF:F7:57:07:36:D6:F9:F0:4C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XbV-04YDnqZk0e_3Vwc21vnwTEQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:ff:06:8f:09:25:df:e4:a2:8c:96:04:a6:f9:b3:80:72:f6:
         12:8f:c0:a1:5b:e8:cb:48:3f:33:72:32:66:4e:57:ff:77:d5:
         8c:88:80:8c:73:de:ea:d5:fd:f3:8b:38:53:9f:b5:40:b9:87:
         45:06:76:1d:33:92:c8:f2:f5:47:aa:67:cd:a6:4c:c4:53:74:
         d7:9d:2c:7c:1d:7f:d2:7b:b2:62:de:43:40:00:a6:74:7c:aa:
         6e:4f:ac:5d:11:63:93:4e:af:52:a8:16:9c:e4:b1:dc:6c:f4:
         14:3b:03:46:8e:dc:91:c7:ad:44:2b:58:ef:df:18:d5:91:0c:
         c5:7c:00:ae:36:fc:44:0f:ec:d3:5c:56:2d:cc:a6:b0:0a:db:
         06:cd:07:c0:b0:ee:48:52:e8:2e:88:7e:0f:d9:0b:85:f7:33:
         28:9e:45:ac:26:cf:df:20:f3:4a:13:d8:f2:d8:87:9d:01:48:
         ed:e2:d2:37:f1:58:72:05:e4:cf:76:1c:e3:19:a2:4e:5d:ef:
         25:10:cf:1e:2c:f8:2c:5d:ae:f6:ec:3d:79:68:72:01:13:89:
         f6:91:db:1f:70:a0:99:60:a2:5e:b5:fa:5e:6f:89:01:0e:02:
         fc:31:bf:50:12:30:0b:62:22:6f:5c:73:37:8a:98:06:44:65:
         7a:bd:28:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:37:29 2026 by rpki-client