Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft
File:                     2xinykRiG1ZTwgBDlHaz8qOAhT4.mft (raw, json)
Hash identifier:          b4cCYbgLt/HilFzKqLM521VMUoILdrbWbQjyu8JwVv0=
Subject key identifier:   79:8C:55:65:19:D1:50:E4:F8:BD:5A:10:3B:33:51:EB:17:35:52:FE
Authority key identifier: DB:18:A7:CA:44:62:1B:56:53:C2:00:43:94:76:B3:F2:A3:80:85:3E
Certificate issuer:       /CN=A918C774/serialNumber=DB18A7CA44621B5653C200439476B3F2A380853E
Certificate serial:       359A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xinykRiG1ZTwgBDlHaz8qOAhT4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft
Manifest number:          3590
Signing time:             Mon 12 Oct 2026 14:54:32 +0000
Manifest this update:     Mon 12 Oct 2026 14:54:31 +0000
Manifest next update:     Mon 19 Oct 2026 14:54:31 +0000
Files and hashes:         1: 2xinykRiG1ZTwgBDlHaz8qOAhT4.crl (hash: 7DytzQpRQ2kLZYwHW9bvxGXTgRPhpM6pbdJYY81j/lc=)
                          2: 0458A9A409FB11EA8742F60AC4F9AE02.roa (hash: B9XMTdbA5EFZjkugV5In7mrbJqz14dCndIA8Lsadbvo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.crl
                          rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xinykRiG1ZTwgBDlHaz8qOAhT4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 14:54:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13722 (0x359a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C774, serialNumber=DB18A7CA44621B5653C200439476B3F2A380853E
        Validity
            Not Before: Oct 12 14:54:31 2026 GMT
            Not After : Oct 19 14:54:31 2026 GMT
        Subject: CN=6accf4a8-ddcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:83:ba:b7:e7:63:a5:6c:24:f2:b7:e7:68:79:
                    b2:ab:57:c6:d5:c4:ed:a6:93:79:62:89:a7:3c:05:
                    dd:0d:44:3a:4b:c5:2f:2a:ea:8b:52:c1:db:60:7e:
                    81:a6:ad:bd:a5:02:fc:1d:84:2b:ef:cc:11:9f:8c:
                    10:0f:3a:d7:de:35:f2:2a:f3:25:05:4c:70:c5:c8:
                    9b:81:12:73:52:84:98:4a:13:14:50:6f:27:e1:01:
                    57:65:e6:1f:bd:6c:79:bf:0b:77:29:5a:22:c3:ff:
                    89:30:c7:8f:4c:f0:42:97:59:60:09:99:ff:93:fe:
                    31:29:8f:24:03:c3:15:c7:be:ba:46:3b:b5:85:58:
                    0c:83:32:2d:51:06:be:48:c4:a6:fc:8e:fe:23:f5:
                    b6:2f:48:e2:5a:17:0a:5d:84:3d:9f:be:d6:17:15:
                    92:b9:3d:8a:25:75:02:9b:11:42:43:3d:a3:50:4c:
                    98:e4:0c:2a:72:4a:a2:b3:48:ac:c4:82:7c:da:42:
                    59:62:4a:4d:49:5b:3c:89:56:7f:5a:23:09:20:ab:
                    16:f4:e5:c1:0e:70:a0:b4:dc:f9:e1:46:d1:94:8e:
                    cf:89:7e:ee:f0:81:a4:dc:62:42:60:ec:9a:ff:fd:
                    a0:36:30:e6:c4:3d:72:42:ef:c0:af:15:48:78:69:
                    c1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:8C:55:65:19:D1:50:E4:F8:BD:5A:10:3B:33:51:EB:17:35:52:FE
            X509v3 Authority Key Identifier:
                keyid:DB:18:A7:CA:44:62:1B:56:53:C2:00:43:94:76:B3:F2:A3:80:85:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xinykRiG1ZTwgBDlHaz8qOAhT4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:0a:c4:42:d3:e7:0b:c6:f9:83:99:9d:41:7c:4e:49:a2:cf:
         ac:e5:e7:74:a4:e3:20:29:49:67:13:7f:bd:14:74:88:35:ed:
         63:bc:f4:62:2d:cc:72:13:2f:eb:7f:fc:de:03:92:0b:fd:f2:
         04:5b:6b:56:75:83:a1:27:f0:ce:80:7b:a9:6a:87:7d:28:0f:
         24:b3:33:be:8c:56:22:59:67:1c:f1:06:fa:aa:06:26:35:06:
         9e:07:c2:e4:49:9a:49:ed:fc:f8:2c:07:d9:13:da:e7:93:a3:
         e7:27:69:a7:a3:7f:9b:39:9c:da:ce:fa:6d:63:0d:68:de:45:
         15:b0:19:55:de:18:cb:49:86:f9:24:41:eb:1c:ad:0a:2b:7d:
         95:2f:19:4b:dc:61:25:60:1f:f4:dd:83:57:c6:db:95:f3:8a:
         c8:4f:e7:ec:d5:39:66:88:8c:91:ad:70:16:bf:38:46:fe:da:
         8b:5f:ae:0a:2d:c8:e4:e5:94:e7:ba:3b:1b:28:d1:04:ea:30:
         e3:95:e3:b6:b7:21:02:ae:0c:0c:3a:84:72:5c:52:be:2e:ab:
         1a:7f:26:05:f5:ca:3b:0e:99:55:8d:26:08:71:2e:8c:21:6f:
         f8:fd:c2:58:f7:f7:97:61:97:98:8c:72:0a:58:0d:41:9a:4d:
         3f:c2:10:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 06:34:51 2026 by rpki-client