Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.mft
File:                     XAo1I_02RadjWvJRmtzQAuEy-84.mft (raw, json)
Hash identifier:          42OGdYss/VzCK6jDZD6kPw+o5mrO78OLuXaNmtBsXyc=
Subject key identifier:   5C:2D:0B:6F:C1:AB:FC:65:F2:18:93:6D:B6:72:13:F5:88:E0:24:EE
Authority key identifier: 5C:0A:35:23:FD:36:45:A7:63:5A:F2:51:9A:DC:D0:02:E1:32:FB:CE
Certificate issuer:       /CN=A91B0F90/serialNumber=5C0A3523FD3645A7635AF2519ADCD002E132FBCE
Certificate serial:       0145
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAo1I_02RadjWvJRmtzQAuEy-84.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.mft
Manifest number:          0137
Signing time:             Mon 21 Sep 2026 05:42:01 +0000
Manifest this update:     Mon 21 Sep 2026 05:42:00 +0000
Manifest next update:     Mon 28 Sep 2026 05:42:00 +0000
Files and hashes:         1: XAo1I_02RadjWvJRmtzQAuEy-84.crl (hash: h1GWRPpNpq41S0PH9Se1JEtl1+nguC0hv2SVsFC31Y4=)
                          2: 304DD002EFAB11EF97C9610FC4F9AE02.roa (hash: 72tND6FYfSKJu0sQNqpeEtwTYhVCnqpq4nZnR1IjkYo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.crl
                          rsync://rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAo1I_02RadjWvJRmtzQAuEy-84.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 05:42:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 325 (0x145)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0F90, serialNumber=5C0A3523FD3645A7635AF2519ADCD002E132FBCE
        Validity
            Not Before: Sep 21 05:42:00 2026 GMT
            Not After : Sep 28 05:42:00 2026 GMT
        Subject: CN=6ab0c3a9-6815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:26:e7:00:f9:cd:47:c9:4f:44:4f:ee:8e:1a:
                    c3:24:3d:e0:2b:fb:2a:e5:c4:cc:96:e4:cc:d5:c8:
                    c2:2b:a4:05:01:88:f8:4b:fa:3e:be:91:90:a0:28:
                    91:22:5d:83:84:f4:2d:ba:1a:5c:0f:23:56:4e:67:
                    54:e5:fb:d9:b8:ab:f2:1a:d9:bd:9a:e7:c1:ec:d3:
                    32:95:97:5f:5c:4b:f9:8e:17:da:2a:16:13:a9:7a:
                    e1:26:91:c1:af:e3:d2:a6:30:2e:4e:e0:42:cc:54:
                    ec:93:af:ea:1a:4a:47:a6:c7:86:4d:62:53:45:bf:
                    1c:bb:a7:f0:be:c0:28:33:17:b5:cd:54:66:a9:ef:
                    78:e5:ad:7a:72:cf:87:32:2e:09:77:7e:de:58:5a:
                    fc:51:a5:c6:7e:6a:df:8e:0b:1f:5b:cc:ca:59:f7:
                    32:78:bb:2f:85:71:f5:31:86:4b:6d:45:c5:1b:87:
                    cc:4a:98:b9:02:2f:43:88:d0:c2:90:bc:16:15:8c:
                    57:12:cd:8d:6f:4f:6e:f2:f4:14:89:26:84:32:66:
                    08:50:26:a3:fa:23:9e:99:bd:a8:9e:6e:7c:2c:f6:
                    8f:a1:ef:6c:4b:48:36:aa:ef:c9:1b:de:d5:af:38:
                    62:66:08:4e:cd:01:2f:a2:16:c7:91:4c:3e:16:7b:
                    2f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:2D:0B:6F:C1:AB:FC:65:F2:18:93:6D:B6:72:13:F5:88:E0:24:EE
            X509v3 Authority Key Identifier:
                keyid:5C:0A:35:23:FD:36:45:A7:63:5A:F2:51:9A:DC:D0:02:E1:32:FB:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAo1I_02RadjWvJRmtzQAuEy-84.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:f3:4a:93:52:62:f0:57:6b:ad:7b:06:f2:e8:30:53:cf:53:
         c4:f9:f0:47:9e:35:23:90:96:6f:81:6e:22:a0:c6:0e:7a:e5:
         1c:59:3a:ee:2f:32:17:3c:45:4d:d5:5b:4a:e7:d7:5f:4d:2e:
         1d:c3:cd:bc:c5:8a:36:36:c4:6b:92:27:e1:ad:09:c6:f1:d1:
         d1:7c:86:f7:df:a4:ee:86:67:6d:c3:cd:cc:55:0e:4b:86:73:
         be:0c:21:3f:19:82:d9:66:d2:7f:14:ce:7d:d3:7c:18:b3:29:
         3c:c1:6d:4f:aa:bc:45:fd:c8:fd:ed:85:5d:cd:44:a1:0b:71:
         ad:e7:20:6e:1b:c0:bf:c5:c5:ed:73:04:8b:cb:9f:80:2e:43:
         94:7c:79:81:fc:72:59:42:09:94:83:62:c2:0a:0e:e4:12:df:
         4a:9f:e7:12:0c:d1:26:e0:c9:e6:31:03:fd:04:31:3e:1f:26:
         ae:b3:13:11:c0:5a:b2:42:e5:d6:0f:c6:bc:f9:32:81:ba:83:
         dd:9d:e8:70:32:14:f9:bc:dc:0c:d2:be:7a:f4:f7:bd:47:8a:
         9d:d4:ef:b2:b0:05:77:61:72:3c:eb:5a:8b:55:6b:52:10:fb:
         16:18:0c:ea:98:6f:3c:34:2e:55:88:0e:eb:7c:e6:88:e7:f5:
         4f:f5:11:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:52:44 2026 by rpki-client