Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.mft
File:                     xw3ieKt3JtKco6jAJAeqW64S7Ao.mft (raw, json)
Hash identifier:          TKaq/1bwVzt0RowJ/4Du5bw9XIpqBtblle3JZqfkiPs=
Subject key identifier:   D8:17:24:4E:FF:25:91:A2:CA:44:A6:A9:7A:78:CD:CC:5B:3F:92:FC
Authority key identifier: C7:0D:E2:78:AB:77:26:D2:9C:A3:A8:C0:24:07:AA:5B:AE:12:EC:0A
Certificate issuer:       /CN=A918D323/serialNumber=C70DE278AB7726D29CA3A8C02407AA5BAE12EC0A
Certificate serial:       01DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xw3ieKt3JtKco6jAJAeqW64S7Ao.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.mft
Manifest number:          01D2
Signing time:             Tue 13 Oct 2026 04:19:05 +0000
Manifest this update:     Tue 13 Oct 2026 04:19:05 +0000
Manifest next update:     Tue 20 Oct 2026 04:19:05 +0000
Files and hashes:         1: xw3ieKt3JtKco6jAJAeqW64S7Ao.crl (hash: 0aK+cVVvmslrC1rL0qkbB9bidYFuaZQKKVsAoecIsm0=)
                          2: CC166DAC0A0811EFBE7E465EC4F9AE02.roa (hash: y7jb6cwIzoJ+j87zu0EqC/c/p/EowwP9+XVDIVZhy6M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.crl
                          rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xw3ieKt3JtKco6jAJAeqW64S7Ao.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 04:19:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 479 (0x1df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D323, serialNumber=C70DE278AB7726D29CA3A8C02407AA5BAE12EC0A
        Validity
            Not Before: Oct 13 04:19:05 2026 GMT
            Not After : Oct 20 04:19:05 2026 GMT
        Subject: CN=6acdb139-1164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:78:00:14:00:b5:d9:e6:3f:57:d9:61:5e:4d:
                    1f:51:1d:08:0f:de:a0:bd:c6:fb:ea:d6:99:e1:18:
                    cb:32:5b:ab:66:24:57:1a:52:13:9e:40:29:1e:d8:
                    7c:f6:97:04:06:2a:55:0e:71:86:e1:1d:e8:8c:97:
                    cf:23:28:56:a3:3b:23:53:c1:2b:3d:8c:b4:7d:f2:
                    29:d2:2d:c7:cd:9f:4a:a9:d5:66:13:5a:03:6e:a6:
                    7e:10:dc:a7:d0:5e:7a:df:9f:74:e2:2a:2c:76:c8:
                    34:73:98:e1:ba:e5:09:a1:ce:bc:db:53:6c:b3:01:
                    eb:6d:4c:68:ef:95:b6:dc:ca:59:0d:b2:ac:18:f8:
                    3a:78:e9:ff:36:d6:41:59:d5:a1:70:26:aa:b3:6f:
                    8f:4c:ca:7d:67:45:16:bc:03:5d:83:c5:e4:39:2c:
                    e9:a1:2b:b0:c3:a7:43:cf:63:ff:22:e5:8e:61:05:
                    62:61:ad:24:43:84:04:87:29:69:04:a8:ac:69:ba:
                    29:e9:5b:0e:77:97:27:ed:61:e6:7e:63:d1:58:62:
                    39:4a:e6:9b:9f:a7:f0:9c:74:ef:fc:6a:f0:ce:4b:
                    84:2f:d8:ac:ec:76:31:1f:82:cf:4d:3f:e1:b5:6e:
                    67:7c:9c:8d:09:78:b9:14:a1:ab:19:d5:6b:37:62:
                    0b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:17:24:4E:FF:25:91:A2:CA:44:A6:A9:7A:78:CD:CC:5B:3F:92:FC
            X509v3 Authority Key Identifier:
                keyid:C7:0D:E2:78:AB:77:26:D2:9C:A3:A8:C0:24:07:AA:5B:AE:12:EC:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xw3ieKt3JtKco6jAJAeqW64S7Ao.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:3d:48:9b:5c:b4:8a:50:c1:b2:95:5c:7d:85:92:27:4d:59:
         0b:28:66:c2:97:e2:a1:56:dd:9d:b1:9b:ef:4e:a6:a5:ed:c8:
         61:04:93:4c:bd:7e:14:59:d9:22:b5:82:67:05:8e:fb:5e:3f:
         1b:1b:01:10:18:e6:50:d8:44:ef:05:ca:d4:c0:d5:b8:7a:12:
         19:d5:c0:16:48:e9:5f:57:0c:f2:e8:51:58:a0:0c:af:ed:77:
         33:fc:ef:fc:5d:da:2d:96:9c:da:a5:2c:7a:72:6c:98:e7:1b:
         47:f1:f2:30:6a:0c:13:50:1e:e6:4e:1f:51:0a:8b:24:a1:3a:
         b3:a3:08:be:10:c0:5d:a1:09:f0:91:de:31:c8:40:da:95:ff:
         2c:21:a9:b5:8d:04:b2:60:af:8c:dd:6c:4a:09:ed:d4:44:56:
         1e:cd:fb:79:51:95:97:7f:2f:4f:1c:bb:98:1c:c3:d5:96:7e:
         f5:d1:5f:a4:99:e3:4a:fc:cf:e7:93:41:78:20:0e:72:83:36:
         54:2a:40:9d:cd:be:5c:94:8a:b4:82:60:73:c2:aa:de:31:46:
         6d:9c:50:11:b8:f1:18:05:14:f8:1b:e1:c9:69:ff:ca:59:40:
         50:d0:39:c3:73:ed:99:e4:ac:5b:36:7a:66:e9:9f:21:71:1c:
         57:52:f5:14
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEQzMjMxMTAvBgNVBAUTKEM3MERFMjc4QUI3NzI2RDI5Q0EzQThDMDI0MDdBQTVC
QUUxMkVDMEEwHhcNMjYxMDEzMDQxOTA1WhcNMjYxMDIwMDQxOTA1WjAYMRYwFAYD
VQQDEw02YWNkYjEzOS0xMTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwXgAFAC12eY/V9lhXk0fUR0ID96gvcb76taZ4RjLMlurZiRXGlITnkApHth8
9pcEBipVDnGG4R3ojJfPIyhWozsjU8ErPYy0ffIp0i3HzZ9KqdVmE1oDbqZ+ENyn
0F5635904iosdsg0c5jhuuUJoc6821NsswHrbUxo75W23MpZDbKsGPg6eOn/NtZB
WdWhcCaqs2+PTMp9Z0UWvANdg8XkOSzpoSuww6dDz2P/IuWOYQViYa0kQ4QEhylp
BKisabop6VsOd5cn7WHmfmPRWGI5Suabn6fwnHTv/GrwzkuEL9is7HYxH4LPTT/h
tW5nfJyNCXi5FKGrGdVrN2ILtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNgXJE7/
JZGiykSmqXp4zcxbP5L8MB8GA1UdIwQYMBaAFMcN4nirdybSnKOowCQHqluuEuwK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDMyMy8yMjBBMUZEODA5
RUIxMUVGQkM0RDE1MzRDNEY5QUUwMi94dzNpZUt0M0p0S2NvNmpBSkFlcVc2NFM3
QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3h3M2llS3QzSnRLY282akFKQWVxVzY0UzdBby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RDMyMy8yMjBBMUZEODA5RUIxMUVGQkM0RDE1MzRDNEY5QUUwMi94dzNpZUt0M0p0
S2NvNmpBSkFlcVc2NFM3QW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACT1Im1y0ilDBspVcfYWSJ01ZCyhmwpfioVbdnbGb706mpe3IYQSTTL1+FFnZ
IrWCZwWO+14/GxsBEBjmUNhE7wXK1MDVuHoSGdXAFkjpX1cM8uhRWKAMr+13M/zv
/F3aLZac2qUsenJsmOcbR/HyMGoME1Ae5k4fUQqLJKE6s6MIvhDAXaEJ8JHeMchA
2pX/LCGptY0EsmCvjN1sSgnt1ERWHs37eVGVl38vTxy7mBzD1ZZ+9dFfpJnjSvzP
55NBeCAOcoM2VCpAnc2+XJSKtIJgc8Kq3jFGbZxQEbjxGAUU+BvhyWn/yllAUNA5
w3PtmeSsWzZ6ZumfIXEcV1L1FA==
-----END CERTIFICATE-----
Generated at Wed Oct 14 10:39:30 2026 by rpki-client