Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.mft
File:                     4XM7lw_d92f_GVQoQ34SQqN2knc.mft (raw, json)
Hash identifier:          8QF0g1K4hxLpJzIDsPBfCp2yEeEJWvQVyof/eOUn5bc=
Subject key identifier:   F8:F7:3A:B7:37:39:E3:B1:B4:7A:28:D7:91:66:CD:4C:D1:F8:DF:8A
Authority key identifier: E1:73:3B:97:0F:DD:F7:67:FF:19:54:28:43:7E:12:42:A3:76:92:77
Certificate issuer:       /CN=A912E5CB/serialNumber=E1733B970FDDF767FF195428437E1242A3769277
Certificate serial:       02D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XM7lw_d92f_GVQoQ34SQqN2knc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.mft
Manifest number:          02CE
Signing time:             Thu 01 Oct 2026 01:55:27 +0000
Manifest this update:     Thu 01 Oct 2026 01:55:27 +0000
Manifest next update:     Thu 08 Oct 2026 01:55:27 +0000
Files and hashes:         1: 4XM7lw_d92f_GVQoQ34SQqN2knc.crl (hash: 64x/PUHnQfiDJM8Z0rB7Xz42WvNGJiUcpHVgAvqPeGU=)
                          2: 5FF4FD52704C11ED97935E7DC4F9AE02.roa (hash: LdRxke1Bck5JxIBRCGjM9TpaCqk+l96r/JCtzyDPs+0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.crl
                          rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XM7lw_d92f_GVQoQ34SQqN2knc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Oct 2026 01:55:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 724 (0x2d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E5CB, serialNumber=E1733B970FDDF767FF195428437E1242A3769277
        Validity
            Not Before: Oct  1 01:55:27 2026 GMT
            Not After : Oct  8 01:55:27 2026 GMT
        Subject: CN=6abdbd8f-44b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d4:c0:83:2c:cf:c0:d5:28:e4:54:4c:47:20:
                    04:11:92:74:8e:f3:29:73:dc:dc:30:da:5f:6f:61:
                    a8:15:87:2a:36:28:b9:29:57:c6:de:d1:97:90:d8:
                    09:cc:51:7f:32:50:69:72:3d:d8:c6:fd:b7:30:82:
                    d0:2e:64:d0:b2:8b:68:d7:f0:6a:de:dc:2b:41:f1:
                    3d:e6:42:75:79:2e:04:b8:96:1f:ff:25:ea:67:14:
                    64:31:34:c7:8c:10:aa:b4:76:5b:b7:8a:a3:00:0e:
                    c3:d5:d6:13:14:fc:1a:d6:29:ce:b5:ea:f9:e1:1a:
                    f1:e7:58:bc:b9:af:be:53:45:69:71:79:2c:2c:7b:
                    fd:89:d1:00:9a:7e:4a:9d:db:cf:d1:a4:f3:0f:56:
                    b0:c9:94:27:0b:60:73:c4:81:4d:eb:69:e2:70:14:
                    a2:c2:c5:7d:d7:8d:47:d0:60:1b:45:a1:fa:98:c2:
                    b6:38:9c:bd:7d:41:89:59:9c:08:5b:8a:90:12:2a:
                    29:c6:fa:22:9a:aa:21:64:d8:b8:0c:dd:56:7f:59:
                    7a:dd:39:b4:3b:fc:3c:e1:54:62:fb:71:c7:c7:69:
                    1e:b4:3d:d5:d2:9a:03:05:a0:e5:47:97:30:b5:c1:
                    3e:b5:42:28:19:43:86:3b:59:ef:d8:76:1b:d1:bf:
                    fd:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F7:3A:B7:37:39:E3:B1:B4:7A:28:D7:91:66:CD:4C:D1:F8:DF:8A
            X509v3 Authority Key Identifier:
                keyid:E1:73:3B:97:0F:DD:F7:67:FF:19:54:28:43:7E:12:42:A3:76:92:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XM7lw_d92f_GVQoQ34SQqN2knc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:3d:94:f4:ca:bd:cf:21:b3:eb:d8:a2:4a:84:3e:f4:c3:64:
         63:82:6d:29:d1:dc:fd:b1:1e:02:2c:c6:4a:8c:f4:30:8b:8f:
         93:4d:59:2f:c0:b8:21:c9:7f:6a:18:c1:7f:cb:02:d2:fe:4f:
         a1:0c:99:68:50:b1:25:cf:b4:83:d5:c1:72:c4:60:dd:ef:d1:
         9c:97:ee:db:8c:92:0a:a3:0b:2b:27:2a:12:12:40:ac:37:fc:
         51:0e:e3:bb:06:81:d7:77:76:5a:ca:55:53:51:73:a2:7b:87:
         58:ef:7f:21:a2:af:b9:7f:a4:cd:a4:3a:4e:d4:26:68:df:22:
         ee:ed:ee:68:94:76:7c:c1:12:7a:ff:f2:bb:f3:59:9e:11:e8:
         dc:5e:7b:9d:7d:36:c9:99:ee:0a:8a:b5:86:19:81:16:a5:bf:
         89:30:64:ec:47:92:eb:42:4c:44:1d:c2:12:6b:52:f9:a1:02:
         0b:6e:c2:60:ec:55:09:41:28:08:7d:8d:16:da:c6:89:81:03:
         f9:45:0a:f9:67:19:83:37:f0:6a:a2:79:14:8a:5e:c2:13:76:
         74:81:1b:2b:cb:19:a9:dc:58:b9:03:3d:1a:39:bc:22:45:60:
         33:3d:8d:e6:fc:53:a7:b4:3f:38:a2:8a:ac:23:af:fa:e5:51:
         ae:d0:57:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 05:55:22 2026 by rpki-client