Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft
File:                     xK1kn8XyMwadUdhtVa3KzxQtYVc.mft (raw, json)
Hash identifier:          QDYli1bRiek1enekRN4+ywhzBRqDsBgiXmlovQ7krwk=
Subject key identifier:   0B:01:4B:2B:76:F0:8C:41:D6:C2:32:C7:9E:54:6F:A2:EC:2E:40:EF
Authority key identifier: C4:AD:64:9F:C5:F2:33:06:9D:51:D8:6D:55:AD:CA:CF:14:2D:61:57
Certificate issuer:       /CN=A918BDEB/serialNumber=C4AD649FC5F233069D51D86D55ADCACF142D6157
Certificate serial:       0B16
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft
Manifest number:          0B0A
Signing time:             Sat 10 Oct 2026 19:24:00 +0000
Manifest this update:     Sat 10 Oct 2026 19:24:00 +0000
Manifest next update:     Sat 17 Oct 2026 19:24:00 +0000
Files and hashes:         1: xK1kn8XyMwadUdhtVa3KzxQtYVc.crl (hash: ghC3bK6zhN8iHmsddfFVO1v46BMCnj/gWzPoWtkj+lI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.crl
                          rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 19:23:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2838 (0xb16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BDEB, serialNumber=C4AD649FC5F233069D51D86D55ADCACF142D6157
        Validity
            Not Before: Oct 10 19:24:00 2026 GMT
            Not After : Oct 17 19:24:00 2026 GMT
        Subject: CN=6aca90d0-ff05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:24:cc:76:4b:9b:13:f3:d4:c8:c8:78:4b:f5:
                    64:1f:b9:4a:50:3e:44:4a:3e:e2:d8:c0:8a:51:c9:
                    ec:1a:a3:fd:bb:bb:55:26:8f:8b:1c:7e:85:2d:3a:
                    15:f9:0e:05:10:5f:4a:88:95:40:08:b9:12:27:79:
                    a3:24:b8:9b:84:ff:d6:0b:0a:1f:58:ff:95:02:d8:
                    be:56:a5:04:d3:cc:a8:5f:46:b1:0d:b8:11:6e:85:
                    87:79:ee:01:d3:d0:ca:d6:71:6a:cb:43:b6:4b:a7:
                    d3:96:d0:c1:69:e7:45:e1:ab:1a:1e:d4:94:c7:d7:
                    b2:29:de:bf:72:e5:a5:45:44:de:b3:21:f4:fc:df:
                    56:7e:dd:3a:fd:27:dd:46:15:88:1f:b5:8d:0f:3d:
                    f6:47:e6:2a:2b:c7:c1:9e:08:e1:82:c7:c5:53:d3:
                    54:bd:1a:f7:53:ee:51:9e:9a:99:af:e5:2d:d4:9b:
                    6a:7b:28:88:0d:0f:43:ff:fa:e9:fd:44:13:c8:44:
                    0a:64:2a:18:6f:dc:fd:34:51:db:9d:a7:3d:ed:a5:
                    11:59:ab:53:42:c8:96:ed:e4:83:0a:24:37:86:22:
                    bc:3a:40:8c:41:51:51:8d:53:5d:2b:fb:a5:54:70:
                    bb:c5:d0:92:16:85:a6:c0:02:2e:fc:37:a9:6e:24:
                    52:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:01:4B:2B:76:F0:8C:41:D6:C2:32:C7:9E:54:6F:A2:EC:2E:40:EF
            X509v3 Authority Key Identifier:
                keyid:C4:AD:64:9F:C5:F2:33:06:9D:51:D8:6D:55:AD:CA:CF:14:2D:61:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:64:43:92:4c:09:a9:d5:60:0e:c4:6c:a7:be:be:4a:db:82:
         2d:c8:1d:e8:1a:fa:c8:d8:95:38:53:87:02:ac:43:f8:af:7e:
         3a:40:7a:a7:b5:ef:6c:34:e1:71:f0:51:2b:4a:c2:37:5b:f6:
         88:17:ab:ca:f5:82:29:d3:0d:2d:44:2f:f9:31:ba:be:50:be:
         85:83:e6:36:f5:6d:cf:91:1d:7b:be:6a:99:c3:ff:9a:dc:5b:
         a6:5b:0c:df:5f:7b:cf:ae:05:ce:ee:f4:fd:67:bf:38:76:4d:
         94:43:f4:05:03:d9:a1:49:2c:10:ee:75:b0:4e:ff:36:cc:a8:
         65:b0:70:84:47:57:90:86:7f:c7:36:95:23:aa:82:1a:88:17:
         dc:5b:43:85:86:bb:ef:53:f3:88:af:fd:f9:fb:34:93:e1:f6:
         1d:99:c5:3d:b2:ec:b2:c9:be:76:ff:8f:27:af:4a:c9:29:f7:
         97:7d:74:d5:b4:60:2e:f4:82:04:0f:00:3b:a8:9f:f9:86:d8:
         df:c6:d0:b2:b6:cb:fb:58:52:23:7f:28:cb:b6:c6:a2:6f:31:
         91:bb:af:0d:4d:3a:e3:d2:05:21:f1:61:fe:77:76:65:2f:77:
         b1:c5:35:d1:bb:19:ef:dc:ec:8f:e9:62:0f:9f:40:63:94:21:
         07:c4:d7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:22:38 2026 by rpki-client