Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/xL9bEU_BXXDIgNvBbowaMCo6LyE.mft
File:                     xL9bEU_BXXDIgNvBbowaMCo6LyE.mft (raw, json)
Hash identifier:          OQuEB/iW8wj8aGDdUeDWW5WLszkEtsQQlyiML3Xp4HM=
Subject key identifier:   2C:53:45:E3:B3:EA:7D:7E:2F:FE:65:5F:1D:3B:BB:7B:AF:EC:DB:D8
Authority key identifier: C4:BF:5B:11:4F:C1:5D:70:C8:80:DB:C1:6E:8C:1A:30:2A:3A:2F:21
Certificate issuer:       /CN=A9192920/serialNumber=C4BF5B114FC15D70C880DBC16E8C1A302A3A2F21
Certificate serial:       8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xL9bEU_BXXDIgNvBbowaMCo6LyE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/xL9bEU_BXXDIgNvBbowaMCo6LyE.mft
Manifest number:          08D8
Signing time:             Sun 20 Sep 2026 20:56:07 +0000
Manifest this update:     Sun 20 Sep 2026 20:56:07 +0000
Manifest next update:     Sun 27 Sep 2026 20:56:07 +0000
Files and hashes:         1: xL9bEU_BXXDIgNvBbowaMCo6LyE.crl (hash: BNFWr5Pf1MKFfKpOuk1OKRVNw6udbv1clexfd6ulF5w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/xL9bEU_BXXDIgNvBbowaMCo6LyE.crl
                          rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/xL9bEU_BXXDIgNvBbowaMCo6LyE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xL9bEU_BXXDIgNvBbowaMCo6LyE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 20:56:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142 (0x8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192920, serialNumber=C4BF5B114FC15D70C880DBC16E8C1A302A3A2F21
        Validity
            Not Before: Sep 20 20:56:07 2026 GMT
            Not After : Sep 27 20:56:07 2026 GMT
        Subject: CN=6ab04867-66d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ba:75:8a:e5:07:57:cc:2f:6f:9c:3b:35:40:
                    cc:f9:66:35:84:4f:2e:2a:94:24:bc:c9:11:92:02:
                    5f:a7:13:70:74:ad:7f:1c:70:65:a1:4f:d1:f3:97:
                    0e:7f:53:43:eb:7b:18:17:c8:7b:f7:43:39:a9:5e:
                    96:2f:42:0a:26:c4:5e:76:55:f2:6e:68:fc:a9:f7:
                    b2:2b:15:a1:83:79:97:8b:75:78:d6:e4:dd:42:86:
                    01:55:d2:96:10:cb:7f:da:c9:14:50:47:6f:1c:8f:
                    fa:66:31:ef:9e:ef:cf:6b:23:64:3a:6c:f1:84:68:
                    7f:47:a7:a0:99:3d:44:e6:ef:72:10:d0:ad:9f:ad:
                    26:bc:f3:0d:2d:09:b8:de:78:c0:f8:6e:cc:62:db:
                    74:6a:30:5c:d1:6c:16:6f:6c:98:f7:7a:ae:d8:05:
                    5e:9f:67:f7:b7:c1:ad:2f:bd:40:81:c6:e8:09:73:
                    2d:02:da:90:93:1c:87:26:47:f4:20:b8:71:21:b0:
                    fe:49:bc:d3:d9:a4:21:2c:17:c2:74:45:e1:92:65:
                    b3:cf:e7:17:da:8c:b1:45:09:a1:af:f0:fd:4b:a4:
                    f0:84:c2:c0:85:a5:be:b3:76:ba:44:42:6d:aa:b3:
                    4e:2e:41:bf:4a:27:0c:5c:bc:46:7e:43:a1:19:2f:
                    0b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:53:45:E3:B3:EA:7D:7E:2F:FE:65:5F:1D:3B:BB:7B:AF:EC:DB:D8
            X509v3 Authority Key Identifier:
                keyid:C4:BF:5B:11:4F:C1:5D:70:C8:80:DB:C1:6E:8C:1A:30:2A:3A:2F:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/xL9bEU_BXXDIgNvBbowaMCo6LyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xL9bEU_BXXDIgNvBbowaMCo6LyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/xL9bEU_BXXDIgNvBbowaMCo6LyE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:8f:dd:ab:5a:96:fd:30:84:d2:ea:d4:75:5b:12:34:c9:b6:
         cd:bc:24:58:be:4e:40:35:f8:5d:92:fb:f0:03:38:e1:31:5a:
         cc:02:2b:ee:89:ea:dc:98:66:9d:9b:88:ac:56:eb:5a:eb:8a:
         52:5f:6c:60:53:f4:da:49:70:24:d0:10:bd:a7:3d:5c:8f:89:
         39:8a:0d:b8:06:08:df:fa:1c:67:ea:91:57:12:81:8f:b6:8e:
         08:08:30:33:da:03:b1:7e:dd:bc:6d:ec:1a:c4:7f:84:43:d2:
         0e:e9:eb:02:c5:c0:d6:95:04:a8:07:a6:5c:a9:0b:26:2a:4a:
         7d:66:9e:01:c1:6b:eb:48:ee:ae:11:53:6c:ca:d5:a6:fb:c5:
         52:53:86:f1:6c:71:70:aa:13:1c:38:92:f7:aa:59:e4:31:9b:
         9c:d9:e6:e9:75:18:4a:76:f5:7a:ff:48:b8:af:d3:77:f9:fa:
         1f:3a:74:a5:da:e0:d8:76:6b:5a:0b:0e:51:03:2c:20:40:2f:
         7d:f0:27:cc:13:11:f6:bf:f4:d1:18:29:e3:d2:1e:a9:06:d6:
         c4:bb:0a:9a:50:eb:b5:81:90:2a:ea:ec:ab:bc:2c:61:35:77:
         0d:88:98:7a:52:5f:45:26:57:2b:2a:98:6f:7f:3b:22:d8:8c:
         3b:60:06:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:59:13 2026 by rpki-client