Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft
File:                     XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft (raw, json)
Hash identifier:          w9OCvoQ+YJVcUTKBTDscU2Dy6mEbWPabCc6E6kLuqp8=
Subject key identifier:   09:1A:0E:6F:E6:AF:8F:31:4C:56:8D:C7:02:19:2B:79:9B:4A:D4:B3
Authority key identifier: 5F:1C:53:4A:EE:FF:4E:38:0C:E5:A0:9A:10:84:BF:8F:57:09:ED:08
Certificate issuer:       /CN=A91A467D/serialNumber=5F1C534AEEFF4E380CE5A09A1084BF8F5709ED08
Certificate serial:       0BEC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft
Manifest number:          0BDD
Signing time:             Sun 20 Sep 2026 18:57:06 +0000
Manifest this update:     Sun 20 Sep 2026 18:57:06 +0000
Manifest next update:     Sun 27 Sep 2026 18:57:06 +0000
Files and hashes:         1: XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.crl (hash: dquY9RN2JNDTMpb3R3rT1DFn5qgg345grAN9wYbb2hc=)
                          2: 43272DE249AA11EABABC8610C4F9AE02.roa (hash: apuF+CHb5V3hRVn20QwCD8T6GZ5V5YYEYw6cYSsjqgE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.crl
                          rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3052 (0xbec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A467D, serialNumber=5F1C534AEEFF4E380CE5A09A1084BF8F5709ED08
        Validity
            Not Before: Sep 20 18:57:06 2026 GMT
            Not After : Sep 27 18:57:06 2026 GMT
        Subject: CN=6ab02c82-045d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1e:6c:11:27:c1:da:ef:58:d9:0f:6e:37:29:
                    33:1a:e5:bd:62:4e:5d:fd:0a:5a:a7:9d:56:f5:1c:
                    2c:a3:30:7e:82:63:00:ca:6f:ba:d8:e3:fc:c2:fb:
                    b3:fc:29:34:30:45:93:83:cb:8b:e4:b1:a2:06:56:
                    fd:96:d1:ee:8d:5e:2e:bd:27:98:ba:6c:d5:ec:e6:
                    0c:2c:2e:d1:6a:55:c8:a5:13:9f:99:0b:41:fe:bb:
                    38:6d:b9:4a:f1:5e:a3:8e:5e:7d:76:4a:39:45:fa:
                    c5:05:55:c7:f9:79:9c:73:b1:2c:22:92:20:f5:fc:
                    fe:28:5c:d0:bd:aa:c6:39:5d:30:2c:8b:60:22:78:
                    f4:dc:f0:3c:8f:85:87:7d:b8:a7:74:ea:49:15:5a:
                    a5:9a:a0:47:ce:ac:08:82:55:0a:a5:77:9c:50:24:
                    12:4e:fd:eb:7e:c2:68:b2:d4:33:8c:f4:cc:74:53:
                    14:91:67:7d:fd:b0:de:c4:de:3a:70:49:e5:18:1a:
                    6e:72:68:72:b6:57:84:f7:b0:4b:0a:b7:d6:07:6c:
                    e5:46:f0:92:18:56:54:3d:6c:67:2b:f2:6c:80:a0:
                    3f:66:18:28:78:77:4c:79:19:ad:59:09:c5:d3:ac:
                    7f:27:ae:b4:e0:c2:00:20:49:6f:a7:41:43:77:b7:
                    a3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:1A:0E:6F:E6:AF:8F:31:4C:56:8D:C7:02:19:2B:79:9B:4A:D4:B3
            X509v3 Authority Key Identifier:
                keyid:5F:1C:53:4A:EE:FF:4E:38:0C:E5:A0:9A:10:84:BF:8F:57:09:ED:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:8c:3f:7d:23:18:f4:9d:8c:84:77:70:75:8c:b9:e2:d2:2f:
         08:a2:d7:69:d1:23:c8:c2:0d:73:00:90:c8:47:df:a8:a4:ad:
         4b:89:6e:80:a9:89:b1:bc:8f:e6:4b:06:75:d6:1f:19:07:be:
         17:7c:ed:02:d8:28:26:79:0d:ec:24:10:ce:e1:e1:12:fe:9f:
         6c:51:33:eb:12:34:f5:1c:f6:cf:da:68:18:c0:f1:8b:d4:fc:
         53:87:19:e2:1b:23:6c:43:3a:b7:69:98:f8:ea:58:5b:9f:0b:
         36:10:43:fe:1b:97:3f:fa:d4:72:d7:e5:4e:e7:31:e3:a5:86:
         55:c6:ec:29:c0:b2:5f:7b:3d:66:87:0e:91:92:7b:58:cf:51:
         60:65:72:3b:6d:69:85:68:20:b1:7b:9b:25:c9:54:ca:a2:13:
         52:51:3a:4b:31:97:12:24:d3:78:c9:cb:1d:c5:13:30:cf:05:
         9a:2c:2f:af:59:52:46:7d:e3:e5:c1:6b:7e:87:5b:31:9d:49:
         c3:98:76:46:0c:19:a0:0b:1d:bb:cb:bc:c2:ce:be:6c:7b:42:
         c0:a8:c6:a7:18:3f:ab:2f:3a:96:41:65:32:bf:3b:e5:bd:b3:
         10:41:6e:fd:d9:d3:9d:c0:cb:86:3b:2e:06:27:37:6b:2d:59:
         f3:c8:a6:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 04:57:26 2026 by rpki-client