Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft
File:                     XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft (raw, json)
Hash identifier:          jkgDVnDNyHpIQGtQIDvszHuMAdlApvOo/xpZ0j8Izh0=
Subject key identifier:   30:47:3F:93:98:7A:B7:D4:30:74:99:55:D5:0A:F0:59:5A:62:CC:F0
Authority key identifier: 5C:AF:E8:A8:3F:09:0A:E1:46:A4:03:AF:A5:57:C5:CF:AA:88:CD:84
Certificate issuer:       /CN=A912FCBB/serialNumber=5CAFE8A83F090AE146A403AFA557C5CFAA88CD84
Certificate serial:       019B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft
Manifest number:          0196
Signing time:             Tue 29 Sep 2026 04:47:51 +0000
Manifest this update:     Tue 29 Sep 2026 04:47:50 +0000
Manifest next update:     Tue 06 Oct 2026 04:47:50 +0000
Files and hashes:         1: XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl (hash: 3IX937XlHHGpnsTYAPxYP5bcF9+8IkbDlRK252Sl/TI=)
                          2: E1A8E22A9E9611F0BCFAF76AC4F9AE02.roa (hash: HpXF9RK830aj73W2wDJDIKJP/rmMEYbJuFSH5BCvJto=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl
                          rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 04:47:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 411 (0x19b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FCBB, serialNumber=5CAFE8A83F090AE146A403AFA557C5CFAA88CD84
        Validity
            Not Before: Sep 29 04:47:50 2026 GMT
            Not After : Oct  6 04:47:50 2026 GMT
        Subject: CN=6abb42f7-5f63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a8:00:ff:e4:07:b2:31:81:86:4e:0a:68:9d:
                    b4:1b:e0:e3:ab:02:ff:13:70:6f:3a:c3:f6:dd:2f:
                    74:f4:9e:57:45:76:f2:32:fd:96:8d:53:e4:e8:ef:
                    7b:bf:1d:7d:43:55:e1:97:c2:85:22:95:a5:90:63:
                    4e:41:b6:f6:d1:77:54:cd:6a:0f:7f:13:67:b1:b6:
                    61:e0:a1:21:4a:b1:69:b9:0d:34:b2:18:43:3b:54:
                    78:3b:17:31:6c:0e:2a:7c:08:80:df:51:58:39:b1:
                    c5:b9:84:02:5f:42:66:3a:be:52:2d:1b:05:a2:af:
                    d4:7b:b0:b8:7a:6e:39:8c:d5:ca:fe:79:89:22:51:
                    cc:03:ad:7a:2a:bb:ce:d0:38:96:de:ef:4b:cd:07:
                    6d:c7:ec:e8:45:9a:53:68:cd:93:f2:7d:ac:49:c9:
                    59:13:f9:ff:2b:8d:9f:2e:86:60:4c:7f:64:73:6a:
                    1c:12:a1:df:25:21:f0:73:e0:10:64:a5:f5:6e:8a:
                    dd:5a:73:fe:f4:49:15:8c:91:49:05:26:d0:bb:f6:
                    74:e6:8d:54:5d:da:0a:e2:95:5b:5d:bd:12:fe:ba:
                    44:41:06:ef:5a:7d:2a:7b:4c:0f:b1:96:ba:dd:fe:
                    96:99:71:91:82:79:eb:d6:2e:bb:45:80:4f:a8:5b:
                    58:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:47:3F:93:98:7A:B7:D4:30:74:99:55:D5:0A:F0:59:5A:62:CC:F0
            X509v3 Authority Key Identifier:
                keyid:5C:AF:E8:A8:3F:09:0A:E1:46:A4:03:AF:A5:57:C5:CF:AA:88:CD:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:d1:db:ad:db:66:98:77:cb:56:a1:4a:2d:20:61:23:e2:52:
         c2:ec:7f:54:60:0e:c9:fc:b9:2a:fa:f6:8e:bc:10:36:73:7d:
         4b:ce:bc:21:ba:a7:75:6b:53:0e:06:61:3c:49:37:6d:38:af:
         9c:0f:e4:12:65:ad:2c:87:a2:04:d5:5b:6b:7c:4c:73:f0:93:
         f3:d0:2b:f4:1c:ee:b5:81:8d:a6:1a:54:09:c9:1b:a8:8e:ce:
         c4:49:dd:ad:0b:86:41:b1:a1:5c:54:d8:c3:c5:27:a5:85:85:
         ac:7e:5e:01:ee:53:1f:29:ba:54:09:67:25:20:77:22:7b:2f:
         91:3a:37:f3:f7:d1:2c:8b:bb:cf:dc:05:07:64:c1:0f:ef:93:
         cd:04:eb:2f:ae:77:a7:77:7b:4c:5c:3f:86:37:a6:2d:50:9a:
         5e:8b:a2:ba:d3:45:9a:be:a1:45:92:5d:d5:7e:13:e1:a3:a5:
         59:d4:75:b8:d6:e3:f0:ad:b2:0e:b9:f5:c4:c4:65:eb:ae:c1:
         5f:d7:f6:af:43:7d:1b:90:cc:98:0e:7d:85:af:ce:68:bc:3c:
         4e:e2:b0:a2:29:d7:fb:ee:d0:1b:df:8f:b2:7c:12:86:30:0f:
         50:6c:dc:4b:9a:41:16:aa:6e:3a:c0:99:02:50:c3:27:58:17:
         c2:fa:a4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 16:51:21 2026 by rpki-client