Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft
File:                     XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft (raw, json)
Hash identifier:          h52rQxZQqH6vcwFXR0bpnaYhcNbRDvHA921pt7zP3HM=
Subject key identifier:   DB:2A:A1:50:2E:2D:1F:C1:2D:13:49:72:27:F6:9E:92:EA:D0:68:6D
Authority key identifier: 5D:B7:5B:2D:F9:4D:04:47:4A:6E:5E:2D:4B:78:CC:08:4B:FC:2A:6C
Certificate issuer:       /CN=A912698E/serialNumber=5DB75B2DF94D04474A6E5E2D4B78CC084BFC2A6C
Certificate serial:       0116
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft
Manifest number:          010E
Signing time:             Thu 24 Sep 2026 17:30:08 +0000
Manifest this update:     Thu 24 Sep 2026 17:30:08 +0000
Manifest next update:     Thu 01 Oct 2026 17:30:08 +0000
Files and hashes:         1: XbdbLflNBEdKbl4tS3jMCEv8Kmw.crl (hash: 2AkQkAes58MUxc+BPID6OLKHCryfohx74ayKW3i2MKY=)
                          2: 79FB87E45BE811F1A1050E64C6833773.roa (hash: NWwclcZCcPG2TS1pQpW1RR20GoSP1Iy5BozZgf751Lw=)
                          3: 87087F00267E11F09183092AC4F9AE02.roa (hash: ZonpCT+5ZZuP5erM6WjI5zX2DJGXZb7/2jDh35lgn00=)
                          4: D5271A183ADB11F0BC52A042C4F9AE02.roa (hash: 4a6PLPW/gOHUVu6+aFebgQ5/qx4vCQg4zTQoTmjp9Rk=)
                          5: E7E8471858BB11F1BAE21C4D9A833773.roa (hash: Tc3fcqpoYCzH1k3AQYmkHoaNjc5Waq991d+rce3j0bg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.crl
                          rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 14:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 278 (0x116)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912698E, serialNumber=5DB75B2DF94D04474A6E5E2D4B78CC084BFC2A6C
        Validity
            Not Before: Sep 24 17:30:08 2026 GMT
            Not After : Oct  1 17:30:08 2026 GMT
        Subject: CN=6ab55e20-b799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:78:56:2c:30:8b:df:34:5e:d6:20:d6:16:f6:
                    ad:bc:3f:4c:b5:9e:97:aa:a7:62:89:39:3f:16:3d:
                    77:7a:a2:3d:bd:9d:5c:a4:ac:ba:40:51:93:da:f9:
                    70:4d:20:ce:b3:8f:71:c6:4f:0f:aa:0d:52:c8:11:
                    e3:36:77:3b:7c:4f:3b:d2:6e:58:00:f2:71:3d:c8:
                    94:4b:ce:28:42:24:83:f9:09:76:ea:00:48:8a:c8:
                    7c:11:ab:55:5b:0e:c5:5a:3b:22:86:6c:80:33:65:
                    10:c0:7d:38:1b:bf:50:94:66:c5:2e:ce:15:dd:c3:
                    24:92:ea:0a:fd:df:75:f6:3d:27:0d:d2:20:de:26:
                    49:63:9f:8c:c7:3f:27:82:3e:e1:0f:10:fc:1f:9f:
                    fa:fc:63:ef:3a:13:a3:44:ee:77:48:f8:bc:dc:b6:
                    8c:23:2e:1b:a0:56:af:8c:31:5e:1e:9e:d2:0a:5b:
                    42:07:e9:b9:c0:44:c7:ff:59:1b:e9:00:55:a5:e0:
                    dc:46:73:57:a1:8c:68:0e:20:77:0d:33:ab:b9:1d:
                    be:69:50:a5:1c:1f:62:88:47:12:12:0b:c7:43:42:
                    02:76:49:1c:16:67:ff:ae:5e:65:c5:f1:06:75:cf:
                    5f:d3:b6:dd:6a:eb:e6:8b:7b:6f:8c:61:29:71:1f:
                    91:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:2A:A1:50:2E:2D:1F:C1:2D:13:49:72:27:F6:9E:92:EA:D0:68:6D
            X509v3 Authority Key Identifier:
                keyid:5D:B7:5B:2D:F9:4D:04:47:4A:6E:5E:2D:4B:78:CC:08:4B:FC:2A:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:13:37:a9:37:8d:79:50:4a:84:fe:52:e4:8e:ee:3a:34:6f:
         0a:d2:2d:d1:e1:27:62:6f:4f:e9:44:05:bf:7d:f9:00:63:bb:
         37:e1:72:3c:ec:11:0b:80:dd:70:90:5f:8b:05:52:63:43:2c:
         6b:3b:1d:6a:d4:11:2a:1e:09:9d:1d:39:96:80:4d:1d:58:e1:
         57:66:22:3e:e7:56:1a:97:05:3e:4e:21:12:7d:b9:f7:6f:22:
         43:8b:68:b9:b7:c3:75:a1:a0:9d:57:89:e3:22:6c:91:3f:24:
         47:fc:2d:fc:4a:f2:3e:69:88:f5:f0:fd:0b:3a:fa:88:08:56:
         b3:8b:ae:a1:cd:ec:3d:d5:ee:68:f3:e9:5c:96:78:2f:12:58:
         af:9f:60:4a:4d:5d:de:97:af:fa:cb:e7:94:f4:b7:5f:48:af:
         50:26:78:47:d0:c4:c9:55:c9:76:9e:ec:4a:fa:39:c8:8c:ef:
         1d:e1:89:8a:3a:3b:7c:06:7e:ab:fb:e0:b7:e3:1c:cb:e3:d3:
         37:bc:6d:08:98:d0:d7:b6:4e:ca:b3:29:49:30:d9:e5:47:2b:
         04:df:04:1d:96:3b:27:4c:e8:35:fc:32:c2:cc:00:f0:49:39:
         2d:41:58:aa:e0:60:82:dc:59:5c:a6:b7:75:02:88:c4:f2:09:
         e0:de:6c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:00:46 2026 by rpki-client