Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.mft
File:                     XiM50eqvU0mhOKR5fagtDrTfqew.mft (raw, json)
Hash identifier:          VqyFAnoa67U8Vh+skut4BqqnDlHAxGnO+3ed+aaBTFM=
Subject key identifier:   A1:92:81:A4:DD:66:62:7C:EB:CE:75:3D:EE:9A:AA:9E:47:E4:48:36
Authority key identifier: 5E:23:39:D1:EA:AF:53:49:A1:38:A4:79:7D:A8:2D:0E:B4:DF:A9:EC
Certificate issuer:       /CN=A918CFAD/serialNumber=5E2339D1EAAF5349A138A4797DA82D0EB4DFA9EC
Certificate serial:       01DF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XiM50eqvU0mhOKR5fagtDrTfqew.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.mft
Manifest number:          01D8
Signing time:             Tue 29 Sep 2026 04:03:43 +0000
Manifest this update:     Tue 29 Sep 2026 04:03:43 +0000
Manifest next update:     Tue 06 Oct 2026 04:03:43 +0000
Files and hashes:         1: XiM50eqvU0mhOKR5fagtDrTfqew.crl (hash: IntQzAeXsTMzedtW0d3rkqteULbjjH4XFERsqQJQKlk=)
                          2: D161B1F0EA0411EE98A86A13C4F9AE02.roa (hash: BV9XfPuDyzg+pUATxcOqBJ05a9l83d0h3SXHTFR+g1Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.crl
                          rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XiM50eqvU0mhOKR5fagtDrTfqew.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 04:03:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 479 (0x1df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918CFAD, serialNumber=5E2339D1EAAF5349A138A4797DA82D0EB4DFA9EC
        Validity
            Not Before: Sep 29 04:03:43 2026 GMT
            Not After : Oct  6 04:03:43 2026 GMT
        Subject: CN=6abb389f-7656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2e:bd:28:fb:3e:35:02:47:e6:67:45:9f:6a:
                    1f:db:a3:d7:af:3d:76:7a:28:7a:4b:90:8f:c5:41:
                    6e:76:2c:98:88:81:6c:44:e2:06:1b:3a:72:15:63:
                    1b:2f:e4:58:52:eb:d2:e7:8a:c7:a9:55:fc:79:1f:
                    7c:c8:aa:d0:4a:df:97:21:d6:ee:73:84:8e:68:2d:
                    38:c6:98:a6:7b:45:56:05:2f:27:e5:5b:5e:f0:23:
                    18:db:a9:e4:2e:0c:8d:25:76:06:8f:29:85:03:45:
                    37:0c:9c:d4:6d:a9:67:a6:9d:3e:34:1f:0a:1a:6f:
                    46:72:98:2f:03:f6:e8:87:95:39:e6:56:cf:f4:2d:
                    a5:7d:65:e4:f1:7a:5c:a8:64:71:cc:3e:18:e1:73:
                    83:a9:e7:71:19:2c:f6:fb:19:7b:e3:0d:9a:3d:b4:
                    7f:a5:94:f1:4f:7d:da:1e:20:f3:5a:75:48:e2:83:
                    38:e4:32:8d:3f:58:68:4e:7e:56:ff:cd:e6:c2:db:
                    ee:f2:42:3c:3c:75:0e:b8:06:47:87:db:d1:c1:2a:
                    86:47:bb:bb:7b:7d:19:92:fa:22:c1:c7:95:4d:35:
                    a9:04:41:94:de:94:a6:b2:8a:78:8b:95:a1:87:77:
                    a3:13:9d:ed:41:ef:13:02:11:d7:c3:d1:c6:57:a9:
                    4e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:92:81:A4:DD:66:62:7C:EB:CE:75:3D:EE:9A:AA:9E:47:E4:48:36
            X509v3 Authority Key Identifier:
                keyid:5E:23:39:D1:EA:AF:53:49:A1:38:A4:79:7D:A8:2D:0E:B4:DF:A9:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XiM50eqvU0mhOKR5fagtDrTfqew.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:79:67:f7:26:c7:73:93:f0:bd:94:99:16:27:77:bd:11:b6:
         f0:40:2a:8e:ba:a1:46:93:73:4b:6b:30:d4:1e:2d:71:6e:ae:
         7e:41:ba:f6:8b:79:7f:0b:d9:5e:8e:b7:35:f0:88:87:d2:5b:
         32:20:42:89:10:ba:02:bc:78:cf:34:79:88:10:4a:d7:25:7d:
         47:46:a0:f5:a5:09:3c:92:2a:ae:15:91:1b:fd:23:fa:d8:5a:
         6f:fa:aa:2e:27:e7:d2:55:5c:62:6b:89:94:55:60:fb:48:89:
         ac:44:8a:38:51:53:53:73:bc:70:8d:dc:b0:fc:55:db:b5:41:
         97:bb:6c:9d:54:f1:65:52:f6:44:85:22:43:3c:fb:91:9b:5d:
         77:5b:6a:f0:cc:c1:67:3d:cf:fb:52:f6:ed:a1:fc:54:f0:ad:
         af:2a:78:0a:11:7f:45:0e:06:99:44:fe:2d:8c:d5:c2:29:6c:
         94:7f:74:65:bb:a1:0b:3f:b5:dd:3f:cf:63:a7:ba:a9:cb:82:
         56:96:a6:de:48:23:57:a2:0b:b8:7b:55:7a:b6:0a:05:84:bb:
         dc:50:b5:63:3f:9f:d9:6d:e6:39:42:34:b0:26:4a:b2:eb:8d:
         4c:bd:31:68:68:51:78:0f:b8:f8:db:ac:87:89:d6:f2:03:90:
         a9:ce:d7:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 04:43:59 2026 by rpki-client