Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.mft
File:                     xv9_8XAyqWoLIW8LwszDXwIgwnI.mft (raw, json)
Hash identifier:          Uf2T4VbNopT0OG3UF6rNIVdju42vx6TRbJFjWeGJzB4=
Subject key identifier:   FC:58:17:8C:B8:B3:26:B6:F3:F5:F8:A3:72:B3:8E:D0:6F:EF:4F:9D
Authority key identifier: C6:FF:7F:F1:70:32:A9:6A:0B:21:6F:0B:C2:CC:C3:5F:02:20:C2:72
Certificate issuer:       /CN=A91B7929/serialNumber=C6FF7FF17032A96A0B216F0BC2CCC35F0220C272
Certificate serial:       34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xv9_8XAyqWoLIW8LwszDXwIgwnI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.mft
Manifest number:          32
Signing time:             Sun 01 Mar 2026 10:05:28 +0000
Manifest this update:     Sun 01 Mar 2026 10:05:28 +0000
Manifest next update:     Sun 08 Mar 2026 10:05:28 +0000
Files and hashes:         1: xv9_8XAyqWoLIW8LwszDXwIgwnI.crl (hash: jlsLDAU+8E8swEO7RRHC/oRShv/I7mg71fs7dL87qfg=)
                          2: 8709BBD4DB2011F0B6C890B887D3641D.roa (hash: EpL7U0XS/RThjCfzf6MnDPKqtdekXvQOYsOhN2Yrndg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.crl
                          rsync://rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xv9_8XAyqWoLIW8LwszDXwIgwnI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:05:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7929, serialNumber=C6FF7FF17032A96A0B216F0BC2CCC35F0220C272
        Validity
            Not Before: Mar  1 10:05:28 2026 GMT
            Not After : Mar  8 10:05:28 2026 GMT
        Subject: CN=69a40f68-9c98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:9c:9f:96:9f:35:d3:fa:01:95:77:d4:f1:5d:
                    4b:e0:e4:b2:83:90:f6:d3:6e:53:fe:ef:f6:77:3d:
                    4b:00:5f:20:52:2f:30:5d:59:12:75:00:0d:1d:9e:
                    60:5f:9d:9c:d2:c5:ee:09:c8:98:13:d5:36:45:08:
                    16:2c:3e:6f:20:49:c5:08:cb:98:77:36:64:1b:fd:
                    29:07:92:a9:0a:45:3a:9c:d8:d2:8b:d4:2c:16:79:
                    72:f4:98:a5:b1:6b:4c:c2:41:30:ad:de:07:d8:2c:
                    44:60:69:f4:e9:51:9c:ff:dd:d1:1b:86:ac:25:c6:
                    4a:52:d1:ee:7a:76:c8:91:76:38:25:c0:27:dd:c1:
                    f3:a7:a6:96:07:97:69:96:a1:bf:be:3a:8c:a9:2b:
                    ba:f3:87:46:99:98:ce:31:0d:6c:d9:97:40:5a:61:
                    70:19:62:22:15:15:b7:11:e3:85:1f:e2:6c:d1:bb:
                    0b:21:f5:36:93:91:66:e9:a0:f0:49:4a:92:87:c7:
                    25:f3:46:98:63:8b:81:a4:44:a0:82:be:80:45:fe:
                    ae:6f:11:b3:1b:81:08:0f:93:5b:3a:86:d7:57:48:
                    14:19:e0:8d:04:9a:00:55:c8:87:98:8f:e7:22:78:
                    0e:13:f5:67:eb:1a:3a:a9:88:d4:f6:68:a2:16:a4:
                    31:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:58:17:8C:B8:B3:26:B6:F3:F5:F8:A3:72:B3:8E:D0:6F:EF:4F:9D
            X509v3 Authority Key Identifier:
                keyid:C6:FF:7F:F1:70:32:A9:6A:0B:21:6F:0B:C2:CC:C3:5F:02:20:C2:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xv9_8XAyqWoLIW8LwszDXwIgwnI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:62:7c:c8:88:2c:4b:61:de:4c:d6:c3:c6:09:00:d9:b8:76:
         62:e9:a8:bf:e9:bd:5b:0b:3b:12:d2:57:67:b9:00:3b:0d:f0:
         15:af:57:81:f0:fa:a9:2e:15:28:45:ce:95:83:6c:96:3b:22:
         27:8d:0c:f8:de:e2:10:b8:c0:4b:83:f9:86:98:6a:f0:c7:7b:
         69:71:87:42:7e:c8:00:7f:40:88:8c:87:c6:68:c1:a9:98:34:
         7b:48:c1:9a:f7:a1:76:60:b7:30:05:30:da:6a:2d:ca:58:0c:
         fd:15:00:0f:ba:85:81:37:c9:3e:4f:33:80:1c:7a:44:3e:45:
         40:88:e3:30:32:23:ef:cb:6b:57:5a:00:6e:94:d7:04:d6:2e:
         91:d3:28:12:65:3d:b5:07:57:29:cf:0a:f9:db:be:8b:5f:01:
         82:6a:d4:22:69:a6:ee:1c:ec:67:8e:9f:1b:52:fe:80:8f:73:
         de:4a:d0:00:d5:f7:67:f6:52:55:fe:ba:c5:d3:2d:26:a8:12:
         94:1b:4f:89:c7:1b:47:81:1f:df:21:4b:01:8e:50:3a:73:bc:
         84:d6:9a:1f:d1:12:6e:7f:bd:b6:95:03:4c:7a:80:0e:9c:a2:
         8e:54:d8:17:97:6c:ce:53:60:99:a7:d9:c2:e0:45:aa:82:c5:
         4d:99:18:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:02:08 2026 by rpki-client