Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.mft
File:                     xG1ZE_bCUMau4vMnRTXOhmKVufo.mft (raw, json)
Hash identifier:          bvyopxlbO7WE676hdhaRTf++Xrm97BJbXNqXwlJqVO8=
Subject key identifier:   69:CE:5F:DD:86:E5:15:78:39:BE:82:26:77:D2:6A:AF:82:48:1C:AF
Authority key identifier: C4:6D:59:13:F6:C2:50:C6:AE:E2:F3:27:45:35:CE:86:62:95:B9:FA
Certificate issuer:       /CN=A9148B83/serialNumber=C46D5913F6C250C6AEE2F3274535CE866295B9FA
Certificate serial:       0762
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xG1ZE_bCUMau4vMnRTXOhmKVufo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.mft
Manifest number:          0751
Signing time:             Fri 02 Oct 2026 22:07:14 +0000
Manifest this update:     Fri 02 Oct 2026 22:07:14 +0000
Manifest next update:     Fri 09 Oct 2026 22:07:14 +0000
Files and hashes:         1: xG1ZE_bCUMau4vMnRTXOhmKVufo.crl (hash: Y8/7HskI+eywvYiHwFrnJFkNBgncMpk5IUluCOYqatg=)
                          2: 009E969E885C11EB88A7723DC4F9AE02.roa (hash: mZPmB2gMHhMYq9+9YsdLGZPVF9Xjisj7wRrJK9Yzmx4=)
                          3: 65FE79B8885D11EB81454E41C4F9AE02.roa (hash: nPFuvMawG4xx+gCcX5sOjIYDGXFIgyL0vbMikWZz2Nc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.crl
                          rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xG1ZE_bCUMau4vMnRTXOhmKVufo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 22:07:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1890 (0x762)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148B83, serialNumber=C46D5913F6C250C6AEE2F3274535CE866295B9FA
        Validity
            Not Before: Oct  2 22:07:14 2026 GMT
            Not After : Oct  9 22:07:14 2026 GMT
        Subject: CN=6ac02b12-93d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2a:b4:a1:b2:aa:3d:75:1f:99:b4:86:76:f6:
                    14:de:85:ce:d2:df:bd:c3:2c:98:7a:0f:b4:5e:7f:
                    4d:fb:83:f1:40:66:d6:18:69:0e:91:cf:5a:d1:e1:
                    fd:33:ee:a2:55:5f:15:1d:94:2e:ce:37:7a:97:8d:
                    02:c4:a4:ac:14:51:5b:10:a4:22:a9:37:e5:9f:e3:
                    ca:9b:a2:83:44:b1:e2:fe:d3:ee:6e:7e:6d:cc:e2:
                    95:08:6e:d5:b0:1c:87:df:de:33:6d:75:15:e8:29:
                    99:14:c0:bc:65:11:13:8b:0e:93:b3:51:75:8a:bf:
                    9c:8a:ad:cc:e4:bd:db:04:4c:96:54:aa:3a:1b:0e:
                    6f:e7:6e:fa:0b:8a:f9:0b:7c:7a:56:92:2b:d0:b1:
                    10:e1:58:52:b2:0b:e5:12:9d:6c:3b:67:0b:14:60:
                    fb:83:16:ba:d2:98:f9:b6:79:d5:18:54:e9:9d:4d:
                    dd:83:ea:49:4a:3d:1d:fd:5f:69:80:b3:fc:f1:27:
                    83:15:11:51:62:be:1e:e6:b6:6e:de:c8:62:2e:01:
                    c3:28:42:64:9f:fb:e0:c6:05:d4:ab:cd:e0:99:78:
                    0f:a5:db:79:9f:7c:99:30:d3:24:fa:e0:09:15:c2:
                    04:3d:8a:a7:7b:16:c9:d0:d4:6f:78:44:1b:00:33:
                    3c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:CE:5F:DD:86:E5:15:78:39:BE:82:26:77:D2:6A:AF:82:48:1C:AF
            X509v3 Authority Key Identifier:
                keyid:C4:6D:59:13:F6:C2:50:C6:AE:E2:F3:27:45:35:CE:86:62:95:B9:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xG1ZE_bCUMau4vMnRTXOhmKVufo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:06:04:22:f8:4a:3e:ec:12:3f:6b:81:d3:f2:f2:b3:77:58:
         af:95:cb:a5:c7:7d:3f:88:c4:af:2f:d8:e6:d7:98:1e:c2:eb:
         d0:80:16:b0:10:b5:62:57:52:53:9e:a8:7a:ee:49:88:f2:be:
         13:66:46:77:69:10:f6:35:f3:8d:d5:e2:07:ea:14:91:7f:39:
         23:1b:ae:d3:fb:e7:26:ba:dd:48:4c:be:7e:8b:61:e0:da:ee:
         b4:e0:db:1c:d0:ba:9c:cb:9b:75:c9:51:79:ed:bf:e3:83:a7:
         01:39:0a:6c:3c:65:69:6a:7d:3e:2b:99:87:84:47:e5:78:bc:
         5d:08:dd:7f:58:38:71:1c:5e:ca:0f:00:16:bb:dd:0e:26:0e:
         ce:1b:9f:14:a9:e9:8a:77:cf:b7:7c:f1:0d:bb:01:bd:99:e5:
         79:06:40:e5:a8:8b:dd:34:3f:82:26:22:98:7e:6c:7e:25:2c:
         2b:e4:83:e7:55:8f:df:e9:bd:39:1b:db:05:31:7b:1d:07:c9:
         61:27:90:a1:98:21:30:34:66:c8:03:76:d0:e1:8f:3c:54:44:
         3c:6b:23:7c:c7:86:e6:98:f3:23:30:bc:4c:49:09:c8:1d:1c:
         4c:3d:f8:09:31:8b:35:fc:e7:02:3b:f2:0c:33:da:39:44:d2:
         70:6b:a3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:50:05 2026 by rpki-client