Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.mft
File:                     XotdlW6b29kHcBQqxw_fm2OIxtg.mft (raw, json)
Hash identifier:          q12pWQLpeW1eCZ4Zi5XQEcNCZzUFVZDLyWEhOeCBQ/Q=
Subject key identifier:   FD:6D:47:D1:8B:8D:1C:40:CD:88:D3:C4:A4:78:4B:4C:3E:39:1D:A0
Authority key identifier: 5E:8B:5D:95:6E:9B:DB:D9:07:70:14:2A:C7:0F:DF:9B:63:88:C6:D8
Certificate issuer:       /CN=A919D2EE/serialNumber=5E8B5D956E9BDBD90770142AC70FDF9B6388C6D8
Certificate serial:       0556
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XotdlW6b29kHcBQqxw_fm2OIxtg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.mft
Manifest number:          054F
Signing time:             Wed 14 Oct 2026 23:50:34 +0000
Manifest this update:     Wed 14 Oct 2026 23:50:34 +0000
Manifest next update:     Wed 21 Oct 2026 23:50:34 +0000
Files and hashes:         1: XotdlW6b29kHcBQqxw_fm2OIxtg.crl (hash: uvl6D1+iqVYIqZWUqZnq1InSW8YrFIthyenmwEDSwmc=)
                          2: 097C49CC56FC11EC8032440FC4F9AE02.roa (hash: s+tgLB+pF+5avCp/zLgOBTjy0rHN55LZZRbWJEXSZEo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.crl
                          rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XotdlW6b29kHcBQqxw_fm2OIxtg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Oct 2026 23:50:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1366 (0x556)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D2EE, serialNumber=5E8B5D956E9BDBD90770142AC70FDF9B6388C6D8
        Validity
            Not Before: Oct 14 23:50:34 2026 GMT
            Not After : Oct 21 23:50:34 2026 GMT
        Subject: CN=6ad0154a-ebd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c7:c8:2b:9c:0b:fc:2d:59:48:8d:bf:26:c7:
                    0c:46:ca:22:4d:32:fb:72:78:ae:7e:e9:19:60:40:
                    0a:bd:89:00:1a:54:ac:d4:5e:73:e0:f3:61:5a:c6:
                    06:a6:6a:0e:20:1c:43:88:bc:5a:5e:df:a1:0f:f8:
                    d6:b6:a2:85:d0:28:5b:1f:a5:3e:6c:76:03:3a:47:
                    95:6a:45:5f:c1:ba:81:5c:51:82:e3:58:a9:d3:af:
                    dd:24:81:c8:31:89:61:43:eb:40:b3:ea:08:41:97:
                    b3:02:0a:d7:71:ce:69:0f:e9:00:19:dd:51:e4:38:
                    6f:56:e9:47:ec:1d:c9:ef:20:c2:44:1f:20:ca:b7:
                    2c:aa:c6:a3:d9:3b:0a:68:d3:e3:22:d9:c5:bb:23:
                    95:23:89:6c:6b:8e:eb:d7:bc:c4:df:e0:2c:ea:35:
                    41:dd:aa:2c:0a:81:5d:31:01:c2:e5:50:96:a3:95:
                    e6:8c:ed:24:6a:90:32:a2:e3:45:93:01:2f:95:74:
                    41:d9:91:b9:75:a8:dc:a2:59:47:7a:c1:9c:16:fb:
                    f4:74:5c:01:46:63:e6:1f:32:37:d4:0b:ee:68:95:
                    84:fe:3a:e1:f5:58:5d:29:f6:fe:6b:50:fc:81:12:
                    8f:76:d0:5b:4f:10:d0:06:d6:7b:66:93:41:e9:77:
                    42:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:6D:47:D1:8B:8D:1C:40:CD:88:D3:C4:A4:78:4B:4C:3E:39:1D:A0
            X509v3 Authority Key Identifier:
                keyid:5E:8B:5D:95:6E:9B:DB:D9:07:70:14:2A:C7:0F:DF:9B:63:88:C6:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XotdlW6b29kHcBQqxw_fm2OIxtg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:17:06:41:8d:fb:c8:ab:85:77:d5:50:70:78:06:00:76:05:
         f3:09:f8:24:72:7c:25:0a:00:8d:ea:42:97:b3:82:2e:1e:09:
         82:3d:88:d5:65:8d:28:65:c5:72:3e:be:a9:22:71:59:17:73:
         7f:1a:dc:26:1c:35:a4:7f:b1:a8:ec:26:24:d4:ac:7b:fa:5d:
         35:34:74:1a:0c:ec:4c:03:72:41:18:4b:31:59:b5:de:44:1b:
         46:f6:20:dc:37:23:af:1d:5c:6e:f2:8b:bc:0f:3f:7f:f6:b8:
         33:28:8d:31:8a:95:c7:e3:de:96:d9:07:ac:be:f3:17:c1:2f:
         93:67:86:6d:dd:eb:2d:d6:13:40:39:a1:f1:2a:ec:53:63:79:
         be:b5:51:8b:9b:bf:0f:2d:00:e2:71:b0:54:dc:41:93:22:62:
         bf:9f:ae:d4:ab:fb:e7:e0:51:86:e3:6a:f9:fc:0d:6d:57:8e:
         c2:db:01:35:24:5f:04:02:be:39:35:06:9b:ef:94:69:7a:d7:
         26:fb:7e:72:1d:54:6b:c0:a3:9d:e4:87:84:04:0e:51:18:d9:
         52:a7:d7:da:9b:db:ac:5f:c1:67:82:b1:dd:32:ec:9f:de:03:
         38:cf:41:ac:a0:7c:8a:0f:b5:40:3c:a3:51:69:6e:56:58:f7:
         4b:72:fd:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 13:36:28 2026 by rpki-client