Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft
File:                     xGxDuid9LBDufR7_PfDi78iFGh0.mft (raw, json)
Hash identifier:          MEGatTdeouOBDvT7CGx7xbuxm3CzqHBYg4XeEmrQ+4A=
Subject key identifier:   B2:56:B8:0B:76:E9:4E:7F:87:87:27:7E:D5:52:8C:8C:14:52:D4:6B
Authority key identifier: C4:6C:43:BA:27:7D:2C:10:EE:7D:1E:FF:3D:F0:E2:EF:C8:85:1A:1D
Certificate issuer:       /CN=A913638A/serialNumber=C46C43BA277D2C10EE7D1EFF3DF0E2EFC8851A1D
Certificate serial:       0177
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft
Manifest number:          016C
Signing time:             Fri 25 Sep 2026 05:00:49 +0000
Manifest this update:     Fri 25 Sep 2026 05:00:48 +0000
Manifest next update:     Fri 02 Oct 2026 05:00:48 +0000
Files and hashes:         1: xGxDuid9LBDufR7_PfDi78iFGh0.crl (hash: gA+u5Fn82ITl1RJugLziH3EyiW1elsrRBPkW6dSOvso=)
                          2: 9D7ED59A954711EF9830412DC4F9AE02.roa (hash: 2YuAa3vXnmLnBf2q5mIusFMk4m38OnK+8EAkU7/cT84=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.crl
                          rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 05:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 375 (0x177)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913638A, serialNumber=C46C43BA277D2C10EE7D1EFF3DF0E2EFC8851A1D
        Validity
            Not Before: Sep 25 05:00:48 2026 GMT
            Not After : Oct  2 05:00:48 2026 GMT
        Subject: CN=6ab60001-beee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bd:0b:96:fe:3e:24:26:50:91:37:17:d8:80:
                    04:17:ff:70:d2:e8:00:be:6e:ec:8a:47:82:e0:77:
                    7b:e3:3f:c5:64:1a:ff:79:fe:6a:b9:8d:26:86:0a:
                    3f:73:c1:67:3a:f7:56:19:ba:35:0c:16:1e:4a:72:
                    40:2e:10:6b:50:fb:29:59:b8:38:b7:84:01:4f:5f:
                    c5:f3:49:5b:8f:ea:75:7c:43:44:21:7e:83:b1:63:
                    8a:2d:4d:74:27:7a:33:59:85:03:eb:a4:dc:85:1f:
                    82:e7:89:bb:c5:35:8a:1d:01:5a:38:6e:2f:5c:78:
                    da:47:fb:f7:c5:70:94:87:5f:d5:ba:f0:05:3f:02:
                    df:7a:fc:c9:33:24:98:2a:d9:43:ae:28:b8:ea:40:
                    01:27:7c:9b:c1:a2:cf:6d:d2:22:ed:5a:09:aa:0c:
                    79:90:fe:11:7e:3d:62:bd:35:10:8f:a9:73:23:b4:
                    12:f7:61:a2:17:6a:b5:48:d8:fb:f2:42:42:dc:01:
                    1a:be:18:26:a5:74:92:21:9f:31:aa:9b:6b:6e:f5:
                    8e:9d:56:8c:92:7f:c4:cd:8b:2a:94:25:bf:03:48:
                    85:16:cc:bc:fc:43:96:1d:7d:8e:94:3d:3d:72:e6:
                    06:bd:0b:8b:d4:1c:27:45:46:49:3b:97:a4:c4:dc:
                    68:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:56:B8:0B:76:E9:4E:7F:87:87:27:7E:D5:52:8C:8C:14:52:D4:6B
            X509v3 Authority Key Identifier:
                keyid:C4:6C:43:BA:27:7D:2C:10:EE:7D:1E:FF:3D:F0:E2:EF:C8:85:1A:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:78:44:02:77:17:96:a2:68:53:c3:ff:21:70:c0:95:4e:db:
         17:3a:28:53:0f:a7:9d:f0:f0:1d:cd:f9:b8:b5:86:de:0c:bd:
         1f:3e:2e:3c:3e:c2:e4:7a:f7:d1:f1:bf:f3:3a:b0:8f:ee:7b:
         95:3e:8e:ab:00:8d:54:84:4c:8b:cb:e4:6f:69:22:fc:e8:b8:
         23:84:f5:74:5e:54:1f:9b:15:ee:8d:e4:1a:e4:88:ae:19:fd:
         92:6c:48:52:f9:a6:04:90:f1:aa:de:c6:42:9f:0a:7b:16:64:
         dd:6a:a3:69:92:ff:77:c5:4b:84:c0:cb:ed:d7:89:ee:27:96:
         97:6c:69:26:bb:8d:ee:2a:fb:52:04:d4:14:b2:8a:b2:87:42:
         dd:f5:b8:e6:8a:bf:79:97:b2:fa:d8:41:d2:66:c7:38:2c:04:
         c3:cf:c2:1a:bb:5f:45:b2:7c:1f:2e:62:9d:fa:c7:06:aa:34:
         c7:d7:53:e0:51:2e:36:4b:cc:5d:92:90:bc:4d:a5:89:89:73:
         74:b8:1d:83:59:a6:88:89:16:66:7c:aa:5d:90:51:e6:b4:fe:
         92:6d:f3:d5:64:07:0b:6b:e9:1d:82:78:2d:b4:0e:47:07:b0:
         bf:63:53:d5:bd:cb:df:eb:df:08:11:fe:7b:bd:88:25:9a:56:
         4d:88:20:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:52:19 2026 by rpki-client