Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft
File:                     xlk2W58uMddajSCpuY4VOklvRJk.mft (raw, json)
Hash identifier:          +DSqxSUlmh8VT+QBGQJy99m/GFfQcOa9NPMTRKeBSdI=
Subject key identifier:   89:AF:B0:93:E6:B9:27:F5:9E:33:49:CE:33:38:67:20:79:AC:7F:96
Authority key identifier: C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99
Certificate issuer:       /CN=A91954A0/serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499
Certificate serial:       027B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft
Manifest number:          0262
Signing time:             Mon 21 Sep 2026 02:19:23 +0000
Manifest this update:     Mon 21 Sep 2026 02:19:22 +0000
Manifest next update:     Mon 28 Sep 2026 02:19:22 +0000
Files and hashes:         1: xlk2W58uMddajSCpuY4VOklvRJk.crl (hash: UY7i8QV3fnyMnb85zzxzwrYHKPcMymmDgPAF6YNcDss=)
                          2: 6CAF60F0296011EEB0606446C4F9AE02.roa (hash: mxZONybayBYjT/wE5ER2yG5aHXpF0N7OGPjQ6melKBE=)
                          3: 6810784CC56F11F0836DEB12C4F9AE02.roa (hash: vDv+eD+OfMVa33qvWILzbZ7BF93e5A2vMNwg9cii/zI=)
                          4: 36333AA6928111F0AA95D96AC4F9AE02.roa (hash: zYrmifFyXf8eyAWgav1JJc7uPLea+6me2PDJlPHyfws=)
                          5: 94FF257E8F5F11F0A46A7259C4F9AE02.roa (hash: WQFzmtRcnRTzLa+owzbcIOOpVzi5EXn6wMZBFZmtrx0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl
                          rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 02:19:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 635 (0x27b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91954A0, serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499
        Validity
            Not Before: Sep 21 02:19:22 2026 GMT
            Not After : Sep 28 02:19:22 2026 GMT
        Subject: CN=6ab0942a-1eae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e3:76:2b:18:71:4f:03:a2:5a:47:09:98:f6:
                    da:07:49:fe:ea:b9:9e:fb:41:79:9f:12:63:3f:ab:
                    a3:50:46:28:76:e0:68:56:cd:92:3f:da:01:fd:37:
                    af:fe:bf:fb:34:1a:61:ae:f6:2e:8a:91:eb:cf:f1:
                    50:50:92:fa:8b:66:d5:71:4b:dc:fd:d9:3f:6a:19:
                    5a:eb:f3:a3:54:33:84:09:3f:08:fa:04:2c:2d:e3:
                    03:9d:f9:0e:87:61:6d:42:2e:3a:de:49:32:79:ac:
                    46:3a:ae:74:6a:81:ad:4b:49:0f:96:dc:f2:32:da:
                    ab:c6:f7:31:30:46:37:d8:a9:21:15:3b:af:89:dc:
                    28:5e:30:d5:c7:bf:d9:46:2f:26:48:83:35:b0:97:
                    50:c3:89:3d:f6:ff:6f:44:5a:03:b9:27:47:97:51:
                    18:29:68:e0:97:7c:21:bc:eb:3c:4c:3e:ce:1e:e9:
                    2b:54:80:60:c6:ca:25:d1:93:59:a7:c8:56:53:ed:
                    1a:bc:e7:5e:93:43:d1:fa:ff:e6:f2:c1:4f:27:11:
                    63:08:1d:f1:2f:4e:7f:db:da:16:78:34:b8:cc:b2:
                    72:78:76:2a:0a:4b:da:10:6f:82:0e:1f:33:00:11:
                    c6:c6:d2:06:3b:08:cc:67:bd:7a:89:7c:b4:e5:10:
                    81:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:AF:B0:93:E6:B9:27:F5:9E:33:49:CE:33:38:67:20:79:AC:7F:96
            X509v3 Authority Key Identifier:
                keyid:C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:bb:0f:a1:2d:e4:ee:5d:4c:11:de:47:6e:9f:2e:43:45:01:
         66:02:5c:e6:c3:5c:bf:d1:ab:9a:b0:98:39:f9:ba:5d:3e:75:
         0d:1b:0c:3f:83:ca:91:f5:5b:0d:15:ae:84:c9:03:5e:b1:51:
         a9:37:3a:e5:65:d7:1a:4a:c6:70:a1:4d:e4:3b:d5:41:d9:65:
         9a:2d:c2:74:96:5f:42:05:b7:1d:3b:19:f1:1c:95:ff:4b:7f:
         c7:84:c3:f2:b5:ef:3b:d7:26:e5:4e:a7:b0:c8:08:ca:9b:b9:
         02:1f:95:df:a3:27:82:a1:62:51:b0:fc:c7:e0:98:af:c1:ea:
         53:c0:75:3e:d7:6c:90:cb:87:eb:18:9d:9b:56:ff:43:3c:36:
         21:d4:a5:4f:95:86:93:9c:66:5c:95:dc:a6:a9:83:f8:f3:be:
         0b:cf:3c:ad:02:23:10:d2:92:0d:9a:ca:9f:bc:2c:a4:92:02:
         58:a7:af:09:7c:35:2d:f4:0a:e0:b4:02:e3:b1:14:80:2b:b1:
         8d:ce:df:69:85:6d:b5:7c:31:f4:2c:44:56:d9:2f:e0:fa:7b:
         6c:6c:67:ba:05:8e:03:2f:45:41:57:36:d0:81:71:82:b3:72:
         98:82:3e:1d:25:a1:f5:14:67:30:70:65:5b:18:4e:31:15:72:
         b1:05:6f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:44:22 2026 by rpki-client