Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft
File:                     Xx0w6XO1wcioD2BH3FKXeJQETD8.mft (raw, json)
Hash identifier:          YJhzbJGy+MizPY/8hj/usZ8neaGW+05mSnjxeePOERc=
Subject key identifier:   9C:09:0C:C6:FA:04:AF:F4:0E:93:68:63:22:ED:98:DA:E7:A0:49:23
Authority key identifier: 5F:1D:30:E9:73:B5:C1:C8:A8:0F:60:47:DC:52:97:78:94:04:4C:3F
Certificate issuer:       /CN=A9122E09/serialNumber=5F1D30E973B5C1C8A80F6047DC52977894044C3F
Certificate serial:       0895
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft
Manifest number:          0883
Signing time:             Sun 20 Sep 2026 20:42:13 +0000
Manifest this update:     Sun 20 Sep 2026 20:42:13 +0000
Manifest next update:     Sun 27 Sep 2026 20:42:13 +0000
Files and hashes:         1: Xx0w6XO1wcioD2BH3FKXeJQETD8.crl (hash: TY3fnjY0pzpXjaYwboqsT73c6p0zfMmTykLsy1zA05I=)
                          2: 0226D57A0CCB11EF8AE6276FC4F9AE02.roa (hash: 4KpiEW9W9pRgd3+FQVTWJZ0pxE+Z+z9l6OeSvbZgOVU=)
                          3: BE35EDD80CCA11EF9AEDB96EC4F9AE02.roa (hash: YSshHnrBitWJflcXZv9vZjmuWryahdL3ueeQ/8L7cts=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.crl
                          rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 20:42:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2197 (0x895)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122E09, serialNumber=5F1D30E973B5C1C8A80F6047DC52977894044C3F
        Validity
            Not Before: Sep 20 20:42:13 2026 GMT
            Not After : Sep 27 20:42:13 2026 GMT
        Subject: CN=6ab04525-5fc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e6:89:9d:3e:1c:ef:bc:19:55:98:b3:87:84:
                    97:46:0a:e5:8f:3f:36:2f:06:ae:35:6d:3c:84:03:
                    96:f7:a7:e1:fb:f2:0f:9c:f9:c6:18:6f:c7:b0:6a:
                    52:e5:cf:a9:38:1d:de:a4:65:f8:30:4e:e1:95:17:
                    b8:08:3a:d7:d3:3a:da:d5:7a:b8:28:38:3e:6a:29:
                    75:19:c7:9a:4b:37:58:c5:f8:03:a9:62:69:1d:05:
                    83:f9:b0:2c:88:36:08:7f:f7:9c:71:3f:4c:b7:f1:
                    10:02:53:fa:99:f1:67:24:b8:34:0f:e3:40:47:e2:
                    01:48:61:8e:8d:d1:bb:67:22:40:4a:b7:9a:fd:0d:
                    7f:b3:72:e7:b1:23:ba:aa:05:49:60:47:92:48:e6:
                    f4:30:15:4b:0c:bb:71:aa:fe:da:e9:e2:d4:b4:c1:
                    b8:13:b2:3e:e1:f6:58:c0:3e:e1:46:d3:af:1a:d4:
                    3c:50:40:2e:33:2c:0d:8a:8e:00:31:60:2f:59:01:
                    58:8e:33:d9:91:96:b1:17:9f:57:be:71:b2:af:0b:
                    d9:01:56:39:82:c2:8a:1e:30:4f:b3:d7:48:22:6f:
                    d1:35:e5:97:f2:40:e7:fb:6c:8d:ca:c3:40:53:59:
                    76:0e:b5:0f:1c:64:6b:89:f8:50:e6:3b:ed:ce:fb:
                    ee:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:09:0C:C6:FA:04:AF:F4:0E:93:68:63:22:ED:98:DA:E7:A0:49:23
            X509v3 Authority Key Identifier:
                keyid:5F:1D:30:E9:73:B5:C1:C8:A8:0F:60:47:DC:52:97:78:94:04:4C:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:9a:bf:6f:25:ef:10:47:68:34:26:82:04:ef:16:38:60:c2:
         56:64:47:30:7f:a3:67:9d:38:b1:57:a8:59:bb:96:94:c9:5f:
         f9:d4:5f:96:2f:3a:83:2b:ba:fe:f7:6b:3b:5d:45:af:c2:25:
         c7:6d:31:b5:c9:57:e6:cf:6e:69:7a:6b:5f:26:d0:65:1a:e1:
         19:54:14:ea:da:3f:4a:6c:03:0c:be:cc:08:74:9d:fd:7e:58:
         bc:a0:d1:48:ec:df:ac:b0:06:96:4b:43:8e:2f:a1:b0:5d:94:
         99:d2:13:bd:cc:60:f1:0e:ab:63:a4:2a:ce:0a:f4:2b:be:62:
         43:53:25:d6:c4:b1:62:32:f8:c7:14:ea:07:5a:77:58:d6:40:
         a1:23:26:78:f6:54:8f:3b:6d:e7:e2:40:67:0e:1a:95:0d:14:
         07:5f:f6:01:e1:2e:52:dc:78:04:a6:5a:78:92:d7:0a:89:1c:
         68:80:e8:06:d7:61:dd:59:1f:dd:8b:1d:55:ea:e1:02:1c:63:
         d6:59:d0:34:63:b7:ad:fa:72:1a:4d:45:da:8e:c2:1c:c3:fa:
         d3:a9:ab:67:01:7d:62:d7:1d:6b:8b:d9:10:68:11:66:a4:79:
         5e:f2:bd:09:e6:e6:15:20:49:65:b5:2c:47:b5:cf:74:f3:3c:
         ae:8f:49:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:23:07 2026 by rpki-client