Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft
File:                     Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft (raw, json)
Hash identifier:          5N0LOFeJ7BhCDVi15PFiKSaMESHD7a9qukqXAPIziTk=
Subject key identifier:   E3:BA:BC:88:7A:47:AE:69:ED:E3:66:A1:CD:07:98:DD:02:46:8A:6A
Authority key identifier: 5E:F7:2F:9B:E4:E3:A2:8D:E3:56:9E:76:DE:2D:22:25:DB:F3:FD:8A
Certificate issuer:       /CN=A91DB63B/serialNumber=5EF72F9BE4E3A28DE3569E76DE2D2225DBF3FD8A
Certificate serial:       0A35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft
Manifest number:          0A2A
Signing time:             Sun 20 Sep 2026 19:39:42 +0000
Manifest this update:     Sun 20 Sep 2026 19:39:42 +0000
Manifest next update:     Sun 27 Sep 2026 19:39:42 +0000
Files and hashes:         1: Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl (hash: TWaScnHKKXv2De0AiVTkhM6UHkR7yojFt5sMOiwuQ90=)
                          2: FF57D3205A4611EF88B33287C4F9AE02.roa (hash: rI4b1YgzMPn2BfRwdTDQyxiYnkW+OyQNTTa1mQYXQvM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl
                          rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 19:39:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2613 (0xa35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB63B, serialNumber=5EF72F9BE4E3A28DE3569E76DE2D2225DBF3FD8A
        Validity
            Not Before: Sep 20 19:39:42 2026 GMT
            Not After : Sep 27 19:39:42 2026 GMT
        Subject: CN=6ab0367e-d6eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:fb:bb:4d:ab:f4:03:82:b1:ce:46:d8:a1:4a:
                    33:95:10:26:ea:27:be:51:1c:a8:93:df:f0:ed:c1:
                    a0:9a:3f:37:74:d3:95:4a:84:e2:51:c9:83:de:5f:
                    32:24:c5:d3:bc:33:15:7b:97:fa:26:66:5d:d9:75:
                    5b:84:b1:d8:5b:8a:60:ee:71:37:3b:e3:eb:fc:c9:
                    95:d1:41:45:de:09:ad:31:d9:c2:b0:6a:a8:30:b3:
                    7a:b2:d7:16:f8:53:53:09:90:aa:1f:73:03:cb:8d:
                    3a:d1:ad:a5:17:c3:07:d3:fa:9d:27:87:27:97:e8:
                    9b:43:91:e4:b6:a5:d4:4a:aa:0f:b5:eb:67:ae:68:
                    81:34:5a:b0:2a:c7:24:d6:41:24:eb:55:80:ea:ba:
                    5f:ee:81:58:63:69:38:4c:b1:be:0a:d4:b7:8e:0c:
                    ad:46:18:68:9e:c2:43:6a:ce:49:ad:ea:7b:bd:3a:
                    2e:39:18:a3:55:be:75:25:ad:91:0a:16:6c:de:e9:
                    fd:45:32:aa:15:4d:4d:b3:ac:85:2d:91:a7:99:20:
                    7d:71:47:30:c7:a4:24:76:07:a8:2d:5b:2e:1d:74:
                    60:62:6f:64:4d:2b:d2:de:e3:57:12:73:13:66:89:
                    8d:44:c3:84:34:5d:25:4f:0b:33:f6:7a:6a:32:3a:
                    3e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:BA:BC:88:7A:47:AE:69:ED:E3:66:A1:CD:07:98:DD:02:46:8A:6A
            X509v3 Authority Key Identifier:
                keyid:5E:F7:2F:9B:E4:E3:A2:8D:E3:56:9E:76:DE:2D:22:25:DB:F3:FD:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:ec:d2:3a:84:ab:f9:cf:b6:88:72:19:76:99:33:0b:04:51:
         fd:e3:ad:79:a7:85:97:84:c6:bd:1d:cb:3d:d9:5f:4e:bf:7a:
         c0:8d:d0:5d:30:85:0e:60:7e:66:dc:85:1e:ed:b6:a4:d6:ff:
         81:d4:75:78:99:a6:e6:0e:11:ab:e1:c7:33:20:05:8d:8c:ca:
         54:61:3f:16:91:a9:11:03:bd:e9:ee:9e:28:28:1b:33:e4:f5:
         b5:d2:8b:63:4a:80:2c:17:ef:35:be:a5:e6:1e:ab:f0:19:fc:
         29:d0:e9:c0:72:24:e4:15:9e:db:af:73:5b:3e:4c:80:67:69:
         fb:97:45:71:26:60:21:79:bb:53:d4:65:95:5e:17:2c:d0:41:
         4a:9e:08:d7:58:b5:17:f6:df:f7:4d:e0:41:08:ee:ee:29:e4:
         10:94:7d:85:80:4e:7e:d5:5c:78:4d:5f:c7:12:0f:c6:24:7a:
         78:9b:25:30:58:2d:db:31:52:cc:16:54:93:84:1e:d5:c8:97:
         7a:d6:3e:dd:48:2d:de:63:2f:45:43:6f:ba:86:32:a5:71:a6:
         22:e4:90:66:4e:fd:75:5b:9e:2c:f4:ca:a9:b2:bf:01:1e:35:
         d5:a3:64:0f:0c:0a:b8:fd:f0:8e:10:ac:03:b5:8b:c7:f4:90:
         54:30:cd:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:23:10 2026 by rpki-client