Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/xI1E8RHZ9NyOPmStf5ZIZGHLn70.mft
File:                     xI1E8RHZ9NyOPmStf5ZIZGHLn70.mft (raw, json)
Hash identifier:          KDJy55Ddpr8JXHteq+fwZBLeIeGmn7B4PkebNeim8Nw=
Subject key identifier:   2D:C8:C5:B4:A4:29:30:07:21:B1:A7:48:21:62:C9:37:23:56:FF:6F
Authority key identifier: C4:8D:44:F1:11:D9:F4:DC:8E:3E:64:AD:7F:96:48:64:61:CB:9F:BD
Certificate issuer:       /CN=A9181CA2/serialNumber=C48D44F111D9F4DC8E3E64AD7F96486461CB9FBD
Certificate serial:       04C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xI1E8RHZ9NyOPmStf5ZIZGHLn70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/xI1E8RHZ9NyOPmStf5ZIZGHLn70.mft
Manifest number:          04BB
Signing time:             Tue 06 Oct 2026 23:59:16 +0000
Manifest this update:     Tue 06 Oct 2026 23:59:15 +0000
Manifest next update:     Tue 13 Oct 2026 23:59:15 +0000
Files and hashes:         1: xI1E8RHZ9NyOPmStf5ZIZGHLn70.crl (hash: dP+GQ7QZF09o0HpeCeJfH4ot3LAWnM+EklSc2gl2fLo=)
                          2: 76391AA6995311EC8EAA8C59C4F9AE02.roa (hash: /DFzhLMwMBBos/KXMPwemxU7fne2fqyoQbKIJm0faRo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/xI1E8RHZ9NyOPmStf5ZIZGHLn70.crl
                          rsync://rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/xI1E8RHZ9NyOPmStf5ZIZGHLn70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xI1E8RHZ9NyOPmStf5ZIZGHLn70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 23:59:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1218 (0x4c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181CA2, serialNumber=C48D44F111D9F4DC8E3E64AD7F96486461CB9FBD
        Validity
            Not Before: Oct  6 23:59:15 2026 GMT
            Not After : Oct 13 23:59:15 2026 GMT
        Subject: CN=6ac58b54-6b62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:68:59:06:bc:4c:4f:30:49:4d:44:72:95:b3:
                    d4:dd:7b:f3:cb:3e:42:04:13:11:87:c2:de:1b:e8:
                    5e:ae:ef:47:7f:a1:32:cc:18:79:8c:b4:c1:2a:04:
                    c5:09:1c:6c:58:23:b5:27:67:c5:55:3b:53:92:67:
                    c8:b7:21:ac:11:2f:e7:3a:81:db:6a:d2:2c:24:31:
                    15:62:87:4f:9d:a8:b2:9f:2e:17:c2:1d:cc:69:02:
                    76:92:f2:8b:77:b5:bf:ef:3c:1c:26:a8:c3:9d:7c:
                    be:63:90:a0:83:e0:83:e2:64:66:4a:70:52:48:7d:
                    4b:c6:59:94:da:a8:f7:65:fa:f2:ae:8f:ab:a2:5d:
                    b0:23:fc:7d:17:37:d6:fe:28:bf:30:ce:05:9e:3a:
                    e8:45:5c:9d:42:01:4d:8c:f6:90:4f:9c:a0:4a:6e:
                    c2:02:b9:84:16:ef:e4:da:59:e7:52:45:a2:5b:6b:
                    b4:0f:51:2f:c9:ed:10:97:e9:f6:9b:46:3b:66:0d:
                    0c:30:20:dd:90:a7:6a:8d:82:8d:07:f0:3e:55:08:
                    e4:cb:e9:a3:f0:3b:c1:a0:e4:a0:d1:a3:72:f1:13:
                    41:3f:b3:e0:49:23:ce:8a:27:66:7d:eb:47:1e:0f:
                    0e:eb:49:cd:c3:4f:46:6c:b3:e1:40:ad:2e:ef:d3:
                    b1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C8:C5:B4:A4:29:30:07:21:B1:A7:48:21:62:C9:37:23:56:FF:6F
            X509v3 Authority Key Identifier:
                keyid:C4:8D:44:F1:11:D9:F4:DC:8E:3E:64:AD:7F:96:48:64:61:CB:9F:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/xI1E8RHZ9NyOPmStf5ZIZGHLn70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xI1E8RHZ9NyOPmStf5ZIZGHLn70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/xI1E8RHZ9NyOPmStf5ZIZGHLn70.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:d2:43:c5:4b:36:ce:24:d5:94:cf:74:15:ba:bf:df:2f:dd:
         04:25:39:ba:a7:eb:e3:51:61:29:c6:54:22:47:ab:de:7b:2f:
         05:bf:71:e3:28:c1:9c:8a:66:af:bd:c5:21:d7:ed:d6:49:50:
         eb:28:41:cc:22:0d:54:7d:b4:f7:06:17:70:dc:10:bf:08:43:
         7d:fd:d4:09:eb:84:5a:81:00:dc:37:b4:e3:d3:0c:ee:be:91:
         b7:7f:d5:a1:c4:f7:32:60:07:78:76:e4:69:b8:4f:22:5f:3f:
         20:d2:01:31:99:76:31:2d:d3:43:3e:ce:02:d7:2e:a8:50:29:
         03:2f:97:2c:3c:cf:17:69:46:03:78:33:1f:00:2b:4b:18:7d:
         99:33:60:6f:71:f8:ec:2f:c2:1b:81:f5:df:e2:cf:b4:b7:1b:
         36:40:07:89:1d:92:6e:da:dc:b0:a5:db:82:d0:a9:21:df:4c:
         7a:db:bc:13:12:db:d0:8d:7c:e9:33:aa:c6:4d:19:71:2b:2b:
         e2:d6:31:0e:c0:09:69:bb:d5:d2:0e:11:69:0f:ce:49:13:49:
         43:91:eb:a4:8f:cf:a0:18:22:f8:eb:d6:82:8f:fa:78:f9:8f:
         98:a7:2f:af:2a:ea:e0:ca:40:d5:6b:41:f7:ea:8e:52:72:98:
         04:fc:ba:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:54:36 2026 by rpki-client