Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.mft
File:                     xHI5__XPeIUhf8bKkBt6MngIMfA.mft (raw, json)
Hash identifier:          cOoJC8UxBtwI+bjeO0Cmcsl1c51r1OAbE5nHuvt7WFY=
Subject key identifier:   00:CB:43:67:7D:00:E4:DC:5B:67:96:DE:7B:4C:8A:2E:F2:EB:4F:5D
Authority key identifier: C4:72:39:FF:F5:CF:78:85:21:7F:C6:CA:90:1B:7A:32:78:08:31:F0
Certificate issuer:       /CN=A91761A9/serialNumber=C47239FFF5CF7885217FC6CA901B7A32780831F0
Certificate serial:       97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHI5__XPeIUhf8bKkBt6MngIMfA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.mft
Manifest number:          93
Signing time:             Mon 21 Sep 2026 07:32:15 +0000
Manifest this update:     Mon 21 Sep 2026 07:32:14 +0000
Manifest next update:     Mon 28 Sep 2026 07:32:14 +0000
Files and hashes:         1: xHI5__XPeIUhf8bKkBt6MngIMfA.crl (hash: UUHraTyA/W9ppt4RbirkYRFkYp4krQvDqSTqkm48yYc=)
                          2: 1B831C724A1811F1A8A9712CC9833773.roa (hash: u4Y6CGErEsB0B7gfACiMg7sntGtE2KvV4PDqZ7u1hQM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.crl
                          rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHI5__XPeIUhf8bKkBt6MngIMfA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:32:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151 (0x97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91761A9, serialNumber=C47239FFF5CF7885217FC6CA901B7A32780831F0
        Validity
            Not Before: Sep 21 07:32:14 2026 GMT
            Not After : Sep 28 07:32:14 2026 GMT
        Subject: CN=6ab0dd7f-5fe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ea:aa:35:2f:6b:6a:9e:be:54:8e:6a:9f:40:
                    04:ab:7c:fe:6a:35:61:4b:1d:f0:d4:54:ed:ab:56:
                    42:75:bf:39:2a:3b:83:9b:c4:e0:16:2f:55:5b:ab:
                    23:82:e6:2d:18:25:4d:e6:59:59:5a:5c:f5:ab:9f:
                    10:c4:f6:ba:cd:fe:75:eb:87:6f:88:a5:89:52:02:
                    97:ed:95:93:e9:be:96:1c:60:48:f3:cd:79:3d:44:
                    46:c2:aa:78:90:ba:d3:ab:72:af:d2:fc:1f:88:3f:
                    26:ef:0e:b3:59:09:3b:15:8e:e6:7a:29:0e:0e:25:
                    93:c6:13:87:ac:71:98:65:f4:a6:f2:57:7b:3f:fd:
                    d2:2b:f9:42:24:9a:59:ba:16:6d:dc:1a:71:8d:34:
                    ff:ec:0f:76:2a:22:93:cc:49:6c:b4:d8:b0:31:5f:
                    c3:cb:2c:27:1e:ef:d1:b3:8c:73:70:4f:12:bf:d4:
                    ad:d2:24:c2:e1:f0:5f:09:e8:34:cc:36:e0:fd:86:
                    c4:61:82:ea:c0:16:c1:5e:57:8c:39:4e:a2:3e:1c:
                    0d:a7:46:8b:d2:4d:0f:8b:cc:da:d7:dc:80:01:5d:
                    a9:52:0b:48:71:23:b3:c4:7f:96:6f:8c:9b:39:85:
                    e9:a9:e3:f2:5f:40:0c:03:b8:e4:fb:9c:47:8a:ba:
                    af:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:CB:43:67:7D:00:E4:DC:5B:67:96:DE:7B:4C:8A:2E:F2:EB:4F:5D
            X509v3 Authority Key Identifier:
                keyid:C4:72:39:FF:F5:CF:78:85:21:7F:C6:CA:90:1B:7A:32:78:08:31:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHI5__XPeIUhf8bKkBt6MngIMfA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:d3:58:53:d3:b1:7a:b4:1e:ec:25:a1:8c:fd:69:9f:e7:b5:
         4f:d4:2c:af:44:22:e4:95:3c:fa:b9:af:1f:17:46:58:73:a9:
         c0:5a:e0:a2:df:e4:5d:dd:2a:ec:ee:c1:1d:dc:51:59:aa:8f:
         b1:09:ea:d0:94:f5:4f:9f:c1:70:0f:ad:b7:1d:7d:eb:34:00:
         c0:15:9f:6f:6d:80:e1:da:f2:53:02:cc:2a:da:90:95:8b:6c:
         7f:35:4c:e4:cc:87:3a:56:b2:68:8b:21:74:82:c4:c1:13:d5:
         f2:3a:71:6f:83:b6:db:27:d9:7b:8d:e0:b8:48:7a:1b:79:63:
         3e:be:c6:e9:e0:e5:8c:5e:e4:f5:6f:be:d2:d8:d6:a5:bf:d0:
         ca:c9:0d:88:6a:03:82:3a:5e:29:64:f4:50:bb:17:07:a3:44:
         61:78:d5:7b:e9:5c:d6:3f:33:56:0f:b7:b3:bb:bf:e3:6d:e7:
         d9:31:d6:01:4e:8b:f7:94:d8:e5:d6:4c:39:15:6c:d4:77:e2:
         08:30:8e:fa:5d:48:0a:08:03:38:8c:6c:02:7c:fb:94:b3:c9:
         f8:b6:03:22:9f:3e:ff:7c:d7:0a:fa:dc:da:52:18:cf:c0:17:
         7f:fc:71:49:45:80:b3:db:22:8a:db:0d:ed:d7:91:a2:ac:91:
         37:94:95:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:59:45 2026 by rpki-client