Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft
File:                     XPuiiRbqwHsjWQlIVdieFqCBS6w.mft (raw, json)
Hash identifier:          /XceaDvID88A6ozIDwwc9ddl0CHMWZpKHgzfJrj6OvU=
Subject key identifier:   31:E9:EA:5A:C5:4E:AD:C1:C7:F5:3B:99:B8:D2:50:95:4E:31:1B:DE
Authority key identifier: 5C:FB:A2:89:16:EA:C0:7B:23:59:09:48:55:D8:9E:16:A0:81:4B:AC
Certificate issuer:       /CN=A918E843/serialNumber=5CFBA28916EAC07B2359094855D89E16A0814BAC
Certificate serial:       0C44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft
Manifest number:          0C31
Signing time:             Sun 20 Sep 2026 18:43:58 +0000
Manifest this update:     Sun 20 Sep 2026 18:43:58 +0000
Manifest next update:     Sun 27 Sep 2026 18:43:58 +0000
Files and hashes:         1: XPuiiRbqwHsjWQlIVdieFqCBS6w.crl (hash: n8GcZuY8joBh1mPvi2ayYbJSJxUZuyOQ5sYF2dWIeww=)
                          2: 01553E10396311EAB24C5A5FC4F9AE02.roa (hash: WrULTRVyC0CP0la8trGFB188cSwiC+Ug49Ju1Bs+OYc=)
                          3: 3EA26CE6396011EABC88BD55C4F9AE02.roa (hash: ZfN47QZk1I0stKKG/PcylN3pXvV6tmE6VzGmQ9cZBhw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.crl
                          rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 18:43:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3140 (0xc44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E843, serialNumber=5CFBA28916EAC07B2359094855D89E16A0814BAC
        Validity
            Not Before: Sep 20 18:43:58 2026 GMT
            Not After : Sep 27 18:43:58 2026 GMT
        Subject: CN=6ab0296e-d71d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b5:c3:25:69:a3:5f:25:ac:aa:65:ff:9c:38:
                    1f:5f:47:f1:f2:40:9e:a5:9d:5a:67:d3:2e:14:b8:
                    6a:31:d2:30:02:27:54:c7:2d:c3:c9:1e:b6:71:89:
                    35:a7:00:20:13:e7:36:08:8e:7b:df:07:19:32:26:
                    67:1b:32:28:8a:46:b1:90:16:db:75:4d:04:0b:cb:
                    ce:6a:0a:6b:44:53:71:d3:5b:cf:98:ae:c7:e4:2d:
                    f7:44:6b:58:35:8e:d9:b8:38:fe:16:6c:51:0b:98:
                    09:f7:6a:00:ce:83:19:ce:a2:63:db:e6:9d:b0:a6:
                    01:82:52:45:d7:61:13:5a:85:d0:99:48:12:70:0f:
                    f7:09:c3:db:e0:4e:a6:e7:b8:29:bd:d0:fa:c8:14:
                    e5:4f:1e:44:c7:95:ad:83:13:42:5c:bc:90:1f:8f:
                    3b:ff:b0:aa:d5:33:66:3b:ad:c7:53:a4:18:2e:48:
                    e8:a2:77:12:b4:1b:d2:99:d5:73:7a:ea:93:2e:02:
                    6c:f3:6f:cd:c6:94:d8:25:ee:bf:11:42:fc:98:5f:
                    4a:c8:af:48:8d:23:36:c7:58:36:ee:71:e2:f7:8f:
                    9c:c0:3f:f4:a2:4e:6e:64:c3:cf:78:c0:43:55:b7:
                    8d:bc:8d:0d:a1:33:f0:76:28:76:3d:95:53:af:81:
                    62:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:E9:EA:5A:C5:4E:AD:C1:C7:F5:3B:99:B8:D2:50:95:4E:31:1B:DE
            X509v3 Authority Key Identifier:
                keyid:5C:FB:A2:89:16:EA:C0:7B:23:59:09:48:55:D8:9E:16:A0:81:4B:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:eb:7c:f0:fd:d5:21:39:b0:1b:19:8d:94:12:0e:da:5b:61:
         05:9b:fc:9b:3b:e3:98:92:74:4f:81:5f:0b:c5:7f:57:d4:9a:
         3e:16:e1:dd:7e:a7:f9:4e:0c:a8:a6:4b:0b:24:8c:2d:70:79:
         8b:e7:1f:3c:cb:b9:ec:b0:d8:81:58:b7:1f:53:06:47:5e:50:
         30:6c:83:1c:22:76:f9:47:43:78:56:92:50:bf:96:46:05:83:
         53:fc:36:30:b9:68:d1:5f:cd:6a:69:5b:a6:8f:97:61:16:58:
         ad:aa:73:ee:e6:11:10:06:bd:ab:12:3d:7d:41:f6:a5:e7:65:
         94:a1:7b:38:79:30:4f:41:78:cc:85:d6:72:be:d8:20:4f:1c:
         16:e7:de:a4:fd:f6:3b:f5:55:6d:0e:d6:c0:44:d6:98:12:30:
         a6:ed:cd:69:ba:1d:41:cf:6c:fd:fc:45:f9:5d:03:7b:85:21:
         e6:37:d4:32:8f:1f:09:45:f3:00:cd:9e:64:72:ef:40:19:53:
         6d:2a:10:42:6c:25:5f:8f:a6:00:91:99:e9:e7:b4:cc:3f:0d:
         5d:9a:48:5c:09:e5:4f:de:8d:7e:65:d4:53:a2:64:4f:00:b6:
         93:4a:25:9d:ec:bf:a1:bb:41:c8:ac:1c:0e:c5:14:ad:90:d5:
         30:39:38:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:14:35 2026 by rpki-client