Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.mft
File:                     XfVm12I2fCjH8_ElYbRxa4yhuWY.mft (raw, json)
Hash identifier:          uuUHf9QdUJB5/pHuOT3MH39KXHd3iyoj0HcU1YC9zdo=
Subject key identifier:   2E:17:69:CF:46:2F:0B:09:EE:B0:1A:E0:D9:EF:57:17:B6:7E:DA:F6
Authority key identifier: 5D:F5:66:D7:62:36:7C:28:C7:F3:F1:25:61:B4:71:6B:8C:A1:B9:66
Certificate issuer:       /CN=A9133B47/serialNumber=5DF566D762367C28C7F3F12561B4716B8CA1B966
Certificate serial:       01CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfVm12I2fCjH8_ElYbRxa4yhuWY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.mft
Manifest number:          01C2
Signing time:             Tue 29 Sep 2026 04:19:03 +0000
Manifest this update:     Tue 29 Sep 2026 04:19:03 +0000
Manifest next update:     Tue 06 Oct 2026 04:19:03 +0000
Files and hashes:         1: XfVm12I2fCjH8_ElYbRxa4yhuWY.crl (hash: AOTvDNUKK1pwrJKLNSh/R43HmIPHwKoWea/7t356Db0=)
                          2: 23B1A0120FA511EFB28F5235C4F9AE02.roa (hash: wvSHxxBQmLwE16AVo39FOmMXKWaWbJvTWAsomwhTSy4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.crl
                          rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfVm12I2fCjH8_ElYbRxa4yhuWY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 04:19:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 460 (0x1cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133B47, serialNumber=5DF566D762367C28C7F3F12561B4716B8CA1B966
        Validity
            Not Before: Sep 29 04:19:03 2026 GMT
            Not After : Oct  6 04:19:03 2026 GMT
        Subject: CN=6abb3c37-8f00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:eb:a1:31:16:84:2d:0a:59:26:36:0b:cd:07:
                    bd:5a:8b:1f:b1:f8:fc:83:e4:f3:6f:b5:ec:39:a4:
                    67:cc:1a:7c:41:d2:44:f2:4e:d6:dd:08:83:bf:b5:
                    05:21:82:6c:f6:dc:c1:4f:90:00:28:1f:ee:bc:67:
                    4b:97:d6:07:8a:54:ea:00:05:9c:e2:e7:40:2a:10:
                    3e:fb:ce:70:66:25:bc:f3:11:2f:01:b9:59:32:1a:
                    cb:3f:3e:5f:d8:0a:2b:d6:4e:72:ae:08:6e:75:3c:
                    28:34:22:4a:8a:17:f6:4a:db:86:de:a3:f5:27:ca:
                    0d:82:d0:97:71:a4:fb:fc:1c:a6:82:d3:d1:a6:fa:
                    94:59:c4:cf:40:6d:f2:40:de:39:a9:08:00:b5:18:
                    8a:68:e8:86:79:44:21:57:14:66:ff:dc:2b:df:61:
                    c7:35:31:10:a9:d1:4b:60:f5:16:b9:59:67:ae:1d:
                    98:03:af:41:21:e1:32:2c:a4:e2:2a:f2:20:75:78:
                    a8:5d:e7:08:08:a6:e2:43:20:2c:a7:1d:b4:2d:e8:
                    1b:b3:95:34:68:83:8e:eb:d4:ea:18:14:ce:de:8e:
                    ff:a1:78:b1:48:e9:c9:36:2d:57:13:96:ce:da:ec:
                    9b:ca:f8:b6:b7:73:2d:b9:36:4a:70:28:38:32:0a:
                    77:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:17:69:CF:46:2F:0B:09:EE:B0:1A:E0:D9:EF:57:17:B6:7E:DA:F6
            X509v3 Authority Key Identifier:
                keyid:5D:F5:66:D7:62:36:7C:28:C7:F3:F1:25:61:B4:71:6B:8C:A1:B9:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfVm12I2fCjH8_ElYbRxa4yhuWY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:f9:d7:78:58:5c:52:1d:e9:1a:49:62:f5:a4:b0:68:84:be:
         d9:38:a6:95:13:88:2a:58:fb:4f:d1:6e:ea:ad:28:e2:7e:6b:
         93:4a:40:53:75:a8:6f:8c:1c:9e:b2:9f:ff:92:47:9e:96:ec:
         02:a6:53:49:44:47:7c:7d:13:b5:e8:bc:84:02:cc:6b:44:25:
         92:22:a2:e3:93:6d:d6:32:3a:a5:c3:9a:96:00:25:99:de:7f:
         14:bd:51:7b:27:cc:00:e3:11:be:fe:b7:6f:07:30:4d:35:cf:
         4c:0a:8b:d1:a8:1e:7c:8c:64:c6:ea:58:fd:fa:e9:f4:50:ca:
         33:42:d6:d6:fb:3f:95:c4:44:9d:c2:20:58:f7:f0:c9:3f:d7:
         f3:66:0b:9d:98:d9:e1:47:1c:ae:7c:3e:18:3d:eb:95:69:0a:
         22:d2:17:db:bd:c5:f3:e6:04:57:7d:42:b0:54:ba:8d:f3:bf:
         cf:ec:3b:bb:ea:7d:82:30:02:c4:2d:84:fc:34:c4:e0:6d:16:
         10:a5:06:d1:7d:5c:77:28:7c:fa:ad:e9:cf:31:b8:51:69:66:
         4f:45:de:25:bd:4a:60:75:90:be:f9:cf:0c:e0:f2:ad:f7:0c:
         95:67:97:c1:ca:23:8c:9d:a7:d4:75:03:91:dc:84:71:5f:72:
         13:f9:29:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:20:46 2026 by rpki-client