Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.mft
File:                     XUofz1MBwCdZyE7qVZFeJcFxpz8.mft (raw, json)
Hash identifier:          7jXmdmjO9nqFcFDVqTiOJTeisr4F8LFkqLd70cI+/+s=
Subject key identifier:   73:DE:41:AF:37:05:DA:FA:B9:E7:32:BF:DF:D7:77:77:63:C8:B4:42
Authority key identifier: 5D:4A:1F:CF:53:01:C0:27:59:C8:4E:EA:55:91:5E:25:C1:71:A7:3F
Certificate issuer:       /CN=A91194E9/serialNumber=5D4A1FCF5301C02759C84EEA55915E25C171A73F
Certificate serial:       038E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUofz1MBwCdZyE7qVZFeJcFxpz8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.mft
Manifest number:          0385
Signing time:             Mon 21 Sep 2026 00:34:24 +0000
Manifest this update:     Mon 21 Sep 2026 00:34:24 +0000
Manifest next update:     Mon 28 Sep 2026 00:34:24 +0000
Files and hashes:         1: XUofz1MBwCdZyE7qVZFeJcFxpz8.crl (hash: 3OgBQqpT0W17qrtUFnS0dsFYlObiwoR3Vqt20osK/Fc=)
                          2: 388802BC067711EDA1DEB529C4F9AE02.roa (hash: 4y97Cz+0NkvrW6iabyeon+58TjVg/RlH4aalzb3X3X8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.crl
                          rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUofz1MBwCdZyE7qVZFeJcFxpz8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 00:34:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 910 (0x38e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91194E9, serialNumber=5D4A1FCF5301C02759C84EEA55915E25C171A73F
        Validity
            Not Before: Sep 21 00:34:24 2026 GMT
            Not After : Sep 28 00:34:24 2026 GMT
        Subject: CN=6ab07b90-cdd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:26:e3:5a:a0:69:c2:5d:6a:01:f8:42:93:cb:
                    38:1c:ea:23:aa:8b:e8:53:f8:3a:e8:94:76:17:15:
                    66:9a:80:77:32:cb:9f:02:73:0b:51:29:2c:8b:d0:
                    52:1a:16:94:3d:9f:49:4a:8f:2f:e8:bb:eb:a3:03:
                    81:51:47:3a:3a:9c:58:4d:e4:b5:4a:65:d3:a8:28:
                    2c:52:b4:41:84:1f:84:9a:84:4b:42:1b:8d:e3:98:
                    e9:7c:fc:23:7f:68:8e:65:b9:07:2a:ab:75:a4:fb:
                    46:38:17:54:4c:f0:9b:cd:8e:b5:66:d7:21:9b:b6:
                    f8:f2:db:58:07:11:ff:78:b1:85:1e:74:bd:61:bc:
                    ed:6a:1c:ca:b8:bd:50:05:0d:82:55:87:ba:b8:98:
                    a7:79:78:42:48:ea:69:86:5e:34:96:31:85:59:4e:
                    62:e1:01:46:23:fe:9b:d4:f0:09:c9:65:bd:1e:5d:
                    c6:42:65:34:90:3c:a1:a2:89:3b:43:24:7e:1d:1b:
                    79:70:ac:5c:7c:bb:0b:8c:9c:75:c8:1b:08:37:3c:
                    6f:62:2f:44:4a:21:be:5b:19:b3:10:44:c9:17:37:
                    d5:6f:62:eb:36:eb:5e:43:53:3d:f2:6d:01:0a:d3:
                    6f:ba:11:fb:5b:87:15:72:c8:69:de:a8:57:a3:6c:
                    f9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:DE:41:AF:37:05:DA:FA:B9:E7:32:BF:DF:D7:77:77:63:C8:B4:42
            X509v3 Authority Key Identifier:
                keyid:5D:4A:1F:CF:53:01:C0:27:59:C8:4E:EA:55:91:5E:25:C1:71:A7:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUofz1MBwCdZyE7qVZFeJcFxpz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:56:78:39:77:87:69:84:25:61:39:64:a6:11:2e:dd:74:c2:
         6e:24:7b:69:04:32:75:70:29:df:1b:b7:a2:65:8e:63:b3:8f:
         85:ba:51:c9:51:de:2a:45:1a:46:2a:dc:72:bd:a0:63:12:19:
         f4:5c:17:5c:10:46:2b:fd:90:14:0f:0a:27:17:8d:28:c7:ec:
         3c:49:01:d7:97:8d:a8:1f:ab:cd:95:1c:b3:7e:2c:72:61:01:
         d8:15:c0:7c:41:d6:1b:5a:26:a3:f3:4f:6b:42:1c:de:7b:18:
         3d:90:6f:98:59:12:bf:e8:61:f8:15:a2:bd:dc:40:59:9f:75:
         88:3c:43:54:fa:df:53:8e:c4:cc:5d:c9:c4:eb:71:11:7e:63:
         86:cf:42:ec:f7:19:df:a4:a3:a1:65:bc:78:02:60:5b:73:00:
         49:d7:bc:31:53:01:f1:07:df:2b:4a:d2:70:2e:77:09:b4:b0:
         e0:ef:e0:a8:42:36:cf:4e:e2:e5:6b:11:33:0d:0d:2c:d9:f0:
         86:bb:7c:7f:a7:de:64:b7:4e:e1:2c:a1:01:ac:3d:df:41:ff:
         47:4d:b6:8c:3d:32:67:8b:89:65:90:d0:20:a2:b7:8f:79:53:
         4a:3f:c3:43:c2:c2:18:1f:b7:ef:38:27:4e:c4:85:b6:e8:7f:
         ba:99:de:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:07:57 2026 by rpki-client