Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft
File:                     xPprur_RmXzI8dIP5qVXTe6bMlY.mft (raw, json)
Hash identifier:          2ksfXJimcqyeZMQ11m/6sqE5gH9kbgdeAvrbW2wdRzM=
Subject key identifier:   10:CC:E2:CD:5C:13:D3:85:C3:59:AB:1A:D9:86:48:11:B8:DD:B0:41
Authority key identifier: C4:FA:6B:BA:BF:D1:99:7C:C8:F1:D2:0F:E6:A5:57:4D:EE:9B:32:56
Certificate issuer:       /CN=A9187532/serialNumber=C4FA6BBABFD1997CC8F1D20FE6A5574DEE9B3256
Certificate serial:       027C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPprur_RmXzI8dIP5qVXTe6bMlY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft
Manifest number:          0275
Signing time:             Mon 21 Sep 2026 02:01:24 +0000
Manifest this update:     Mon 21 Sep 2026 02:01:23 +0000
Manifest next update:     Mon 28 Sep 2026 02:01:23 +0000
Files and hashes:         1: xPprur_RmXzI8dIP5qVXTe6bMlY.crl (hash: BPvZuUZoPslGIP+STgZaDKlIwmlyd4DyH3Wk6gi+rlE=)
                          2: 8D176BFAF65011ED90F79C33C4F9AE02.roa (hash: uA3cRTnm0nh69G6nHVUfrJqxaulMue0OOyc7I/1E8Kc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.crl
                          rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPprur_RmXzI8dIP5qVXTe6bMlY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 02:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 636 (0x27c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187532, serialNumber=C4FA6BBABFD1997CC8F1D20FE6A5574DEE9B3256
        Validity
            Not Before: Sep 21 02:01:23 2026 GMT
            Not After : Sep 28 02:01:23 2026 GMT
        Subject: CN=6ab08ff4-630e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d2:d8:34:2d:c1:32:80:51:38:3b:70:6b:6d:
                    09:dd:9e:05:6c:4f:00:53:7d:3d:64:3b:fa:fc:e1:
                    6d:18:29:30:31:ba:c8:d6:18:e5:9c:5a:b2:97:75:
                    64:bc:fa:d9:92:89:09:5d:68:e4:48:67:37:e3:fb:
                    aa:14:2e:71:75:8d:16:ca:84:a7:1a:00:2b:92:20:
                    0e:45:76:80:20:fe:e9:27:a9:da:3a:9e:fa:b9:f1:
                    d5:68:a9:4c:88:93:d5:fe:c9:20:df:8e:28:42:b1:
                    2e:5c:d9:61:d2:12:ed:2f:61:c4:1c:33:30:89:09:
                    61:6f:7e:2e:63:aa:1b:3e:f4:2f:f3:c6:ea:4e:53:
                    ed:7e:48:9b:44:5c:92:34:58:c7:17:fb:a1:f0:4d:
                    97:9d:4a:90:84:dc:1f:2c:0c:45:d1:47:03:38:d6:
                    1d:e1:c8:49:46:39:d0:ce:20:d2:13:7c:53:34:9f:
                    a6:69:12:f8:74:c2:73:c7:3c:24:81:68:95:88:7a:
                    88:1a:b0:da:e5:be:71:20:66:30:5f:cf:5e:cb:e6:
                    b2:a3:17:44:56:de:7c:df:9f:00:e2:1f:eb:c1:9a:
                    d2:c9:68:37:19:37:38:a8:02:05:26:1d:ab:4f:64:
                    77:eb:2a:5f:33:00:f4:1e:42:22:8f:59:ba:f4:14:
                    e5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:CC:E2:CD:5C:13:D3:85:C3:59:AB:1A:D9:86:48:11:B8:DD:B0:41
            X509v3 Authority Key Identifier:
                keyid:C4:FA:6B:BA:BF:D1:99:7C:C8:F1:D2:0F:E6:A5:57:4D:EE:9B:32:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPprur_RmXzI8dIP5qVXTe6bMlY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:95:ab:b9:a0:a6:98:e2:33:eb:6d:9b:28:9e:5a:12:db:63:
         0f:a8:41:77:b0:f9:ba:93:08:3c:d1:3d:d1:13:e1:40:c5:1b:
         e6:38:86:4b:38:b5:e2:65:17:45:01:71:b9:34:80:ae:ea:88:
         06:c5:ef:34:dc:ab:c2:27:10:b1:1d:57:69:9f:e3:fd:9e:49:
         60:91:d5:65:c7:1e:7f:83:e0:8b:93:d4:40:21:08:b9:ee:bc:
         77:be:d7:44:e9:fc:5e:e2:6c:c4:e7:c1:81:e3:a0:95:ec:30:
         1c:bf:f7:96:28:df:d1:d6:80:4d:4f:8d:65:8f:78:77:75:fe:
         5a:c0:2f:13:6b:ad:56:83:8b:ad:e2:00:38:45:df:11:c3:65:
         b9:a8:a0:1e:69:93:71:57:4e:99:78:d0:89:a8:62:bf:4d:fe:
         f0:a7:a7:6e:01:c8:51:dc:9f:b8:ab:03:f2:4a:d7:b6:46:22:
         60:d8:68:44:9d:b2:0a:49:42:2f:a4:fe:fe:85:ff:b6:b7:a8:
         3e:2c:fc:82:4a:ac:9f:34:0f:0b:0b:9b:b6:27:f0:9d:d6:5e:
         b0:b9:39:10:73:fb:64:9d:ea:ba:39:77:ba:64:94:e3:06:a0:
         5f:3b:c4:be:f3:8e:47:aa:d4:db:3e:80:17:ce:65:d6:b0:3c:
         47:74:46:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:47:09 2026 by rpki-client