Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.mft
File:                     xv9_8XAyqWoLIW8LwszDXwIgwnI.mft (raw, json)
Hash identifier:          FWUBBEVUEpCziklEjgAiMTmeDYkfQOdJIAnWGx5XYJA=
Subject key identifier:   41:72:2F:C1:6D:67:7B:87:48:BE:6A:FE:BB:EC:75:22:A3:66:DC:6A
Authority key identifier: C6:FF:7F:F1:70:32:A9:6A:0B:21:6F:0B:C2:CC:C3:5F:02:20:C2:72
Certificate issuer:       /CN=A91B7929/serialNumber=C6FF7FF17032A96A0B216F0BC2CCC35F0220C272
Certificate serial:       A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xv9_8XAyqWoLIW8LwszDXwIgwnI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.mft
Manifest number:          A3
Signing time:             Sun 11 Oct 2026 07:52:19 +0000
Manifest this update:     Sun 11 Oct 2026 07:52:19 +0000
Manifest next update:     Sun 18 Oct 2026 07:52:19 +0000
Files and hashes:         1: xv9_8XAyqWoLIW8LwszDXwIgwnI.crl (hash: NavqbfY+FzL+KB6RECtr/k6qZAvLHlgk3TslfNz6gaE=)
                          2: 8709BBD4DB2011F0B6C890B887D3641D.roa (hash: EpL7U0XS/RThjCfzf6MnDPKqtdekXvQOYsOhN2Yrndg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.crl
                          rsync://rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xv9_8XAyqWoLIW8LwszDXwIgwnI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 07:52:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165 (0xa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7929, serialNumber=C6FF7FF17032A96A0B216F0BC2CCC35F0220C272
        Validity
            Not Before: Oct 11 07:52:19 2026 GMT
            Not After : Oct 18 07:52:19 2026 GMT
        Subject: CN=6acb4033-4738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ce:48:ce:94:d5:cf:b2:0b:94:10:f2:63:1b:
                    fe:dc:1b:92:11:68:5a:0a:e6:19:4b:b0:e0:bc:3f:
                    75:52:fc:da:fb:2d:be:22:57:17:54:d3:b5:59:05:
                    e6:5b:f1:b3:61:26:31:78:1e:f3:0a:af:6e:ad:08:
                    59:b2:3f:3a:a7:e1:52:77:52:9a:f0:d9:99:38:38:
                    33:aa:8f:a6:71:97:5e:98:a1:6f:5c:bd:3e:3e:ad:
                    bf:6e:3c:8a:6b:d1:76:30:12:b9:d6:a9:13:61:3a:
                    c6:be:fb:dd:25:d3:79:eb:e5:5b:f8:74:db:98:0d:
                    4f:f6:42:ea:67:e8:2d:10:dc:92:ad:ae:d4:23:ce:
                    6a:7b:40:cf:79:a7:21:f4:b7:a2:20:76:39:43:d2:
                    7c:20:80:f2:fe:66:70:07:8a:8c:d5:d9:6e:03:a0:
                    ac:a8:a8:32:7c:8d:e8:28:df:87:c2:25:33:1a:4b:
                    4a:bb:4d:2b:f9:32:e6:92:49:fe:0b:6c:ed:47:76:
                    fe:e5:0f:f7:33:82:51:84:89:01:49:63:72:79:b6:
                    44:e6:a3:c4:1c:24:15:32:98:37:ab:c4:67:d0:a3:
                    38:ae:bb:40:f1:c8:67:39:61:c4:ee:e7:68:dc:5f:
                    88:0e:9f:69:f4:37:4e:8f:8a:61:dc:ba:1a:01:e5:
                    18:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:72:2F:C1:6D:67:7B:87:48:BE:6A:FE:BB:EC:75:22:A3:66:DC:6A
            X509v3 Authority Key Identifier:
                keyid:C6:FF:7F:F1:70:32:A9:6A:0B:21:6F:0B:C2:CC:C3:5F:02:20:C2:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xv9_8XAyqWoLIW8LwszDXwIgwnI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:46:00:63:e9:8b:cc:2d:db:df:68:9e:8f:5d:7b:8c:1a:f2:
         d1:e6:39:f2:98:96:51:ae:e4:a8:9f:60:d0:d9:f0:09:70:eb:
         7a:b1:ff:e5:0a:de:16:79:37:f9:79:20:8d:e2:00:71:33:d5:
         69:5e:b5:b5:f0:17:7b:70:19:54:e8:98:76:aa:bb:b7:c0:56:
         ca:b2:bc:ea:76:5a:a8:41:a6:3f:6e:0a:2d:54:be:10:6d:85:
         de:09:48:6a:d0:fb:7f:c0:e7:36:af:64:61:f6:a9:0e:55:02:
         a7:ef:3d:7e:bf:a4:71:db:88:bf:f4:5f:2b:4f:bc:e5:fb:24:
         9c:2d:b0:1b:1d:82:24:56:ff:28:2d:a4:1b:e7:9a:7f:a7:c6:
         c1:98:ee:2c:40:80:eb:d8:39:62:0f:30:24:98:21:fb:a9:f8:
         7d:b3:4e:c5:e8:b1:55:5d:13:11:2c:c8:de:e9:75:23:a0:8f:
         26:42:cb:ef:3b:d0:1d:03:7b:34:2f:58:9d:ca:56:68:bc:45:
         0f:ff:4a:69:b6:fd:15:d4:79:2a:7f:c7:b0:96:ef:3a:5c:4a:
         e4:6c:af:b5:75:23:42:51:4a:1e:5e:8d:43:5c:60:f4:14:73:
         1d:9f:eb:37:d0:75:0c:19:e9:a0:55:7f:c4:95:f1:28:b7:41:
         d0:f8:fb:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:20:19 2026 by rpki-client