Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9152787/2286562A8F7911EF92AC781EC4F9AE02/XZRtT0edN7zhcAywut1RosPfYg8.mft
File:                     XZRtT0edN7zhcAywut1RosPfYg8.mft (raw, json)
Hash identifier:          0wxGSgVepwSajylzGU48WPDFhQAQTrAYrOxwRDVF8XM=
Subject key identifier:   C7:D5:E2:F4:C8:97:CF:62:DB:FC:7A:C8:55:CE:B9:70:CE:7C:24:30
Authority key identifier: 5D:94:6D:4F:47:9D:37:BC:E1:70:0C:B0:BA:DD:51:A2:C3:DF:62:0F
Certificate issuer:       /CN=A9152787/serialNumber=5D946D4F479D37BCE1700CB0BADD51A2C3DF620F
Certificate serial:       017F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XZRtT0edN7zhcAywut1RosPfYg8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152787/2286562A8F7911EF92AC781EC4F9AE02/XZRtT0edN7zhcAywut1RosPfYg8.mft
Manifest number:          0173
Signing time:             Fri 25 Sep 2026 04:57:17 +0000
Manifest this update:     Fri 25 Sep 2026 04:57:17 +0000
Manifest next update:     Fri 02 Oct 2026 04:57:17 +0000
Files and hashes:         1: XZRtT0edN7zhcAywut1RosPfYg8.crl (hash: 1YNpr4pe9lI+MnriZs7YJ0+jkh8wXI1L6HPJoZSX0U0=)
                          2: CB24F37C033711F0B76A8520C4F9AE02.roa (hash: 6FOSG+PDOX8IQ8IkU4F+r2ZxK7Ap4wqnXAN3PEPi5FM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152787/2286562A8F7911EF92AC781EC4F9AE02/XZRtT0edN7zhcAywut1RosPfYg8.crl
                          rsync://rpki.apnic.net/member_repository/A9152787/2286562A8F7911EF92AC781EC4F9AE02/XZRtT0edN7zhcAywut1RosPfYg8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XZRtT0edN7zhcAywut1RosPfYg8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 04:57:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 383 (0x17f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152787, serialNumber=5D946D4F479D37BCE1700CB0BADD51A2C3DF620F
        Validity
            Not Before: Sep 25 04:57:17 2026 GMT
            Not After : Oct  2 04:57:17 2026 GMT
        Subject: CN=6ab5ff2d-2001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:48:57:a4:f6:1e:3b:40:32:ed:6c:0c:f5:54:
                    5d:19:a1:f9:bd:7a:96:36:c6:38:3e:d2:6b:2c:d1:
                    8b:50:d6:c4:65:b7:0b:7a:90:23:66:69:4a:20:c3:
                    57:35:a9:b9:8b:95:39:aa:1d:ef:f9:2c:9d:7d:00:
                    e0:0f:22:43:14:4c:b2:7d:b2:44:64:a6:07:b0:e6:
                    66:7f:16:bb:ed:ba:7a:ee:e8:bb:d1:65:33:07:a4:
                    0b:48:87:c8:6b:a9:44:08:83:7f:67:d7:4c:9a:3d:
                    c1:85:e5:e5:4b:1d:06:9d:a6:5e:5f:33:05:60:0d:
                    7d:94:f8:4b:8d:ba:64:f1:b7:1e:62:4b:dd:66:1a:
                    94:c5:e0:00:0b:c7:6f:fa:cb:76:65:47:df:5b:32:
                    90:f7:a4:6b:27:38:1f:98:38:fa:08:f2:e7:59:9b:
                    e1:c4:1b:1b:76:68:87:24:74:15:98:67:07:f2:51:
                    16:f7:8e:77:0a:bc:d4:b5:d9:87:a8:6d:d4:e6:a1:
                    51:35:d8:ce:c1:99:8b:67:3c:50:39:1c:f2:22:17:
                    fb:cc:1b:a2:10:18:1d:70:ac:a1:e1:71:d9:78:63:
                    34:9e:4a:90:35:0d:f0:59:20:e3:ad:f4:f4:f7:39:
                    42:c0:b8:4f:12:ba:49:2b:38:c3:a1:20:5a:a1:2d:
                    d3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:D5:E2:F4:C8:97:CF:62:DB:FC:7A:C8:55:CE:B9:70:CE:7C:24:30
            X509v3 Authority Key Identifier:
                keyid:5D:94:6D:4F:47:9D:37:BC:E1:70:0C:B0:BA:DD:51:A2:C3:DF:62:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152787/2286562A8F7911EF92AC781EC4F9AE02/XZRtT0edN7zhcAywut1RosPfYg8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XZRtT0edN7zhcAywut1RosPfYg8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152787/2286562A8F7911EF92AC781EC4F9AE02/XZRtT0edN7zhcAywut1RosPfYg8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:90:be:89:2b:4b:ec:ee:ce:46:14:e7:70:93:ca:4f:9a:5c:
         a5:e8:6c:94:4c:a9:d0:59:da:e3:b7:ac:c3:61:13:2b:99:9f:
         40:87:76:e6:ec:82:42:c2:7e:87:ae:50:54:83:1e:6f:88:2a:
         79:6e:0c:06:bf:1d:cd:ca:e4:a3:ca:31:e2:b7:ea:b7:dc:6a:
         a3:f3:b4:87:58:b1:3b:9a:87:ed:50:0d:e8:3e:0f:1f:0c:15:
         3a:cd:3a:f1:9e:96:28:e8:61:90:81:96:35:f6:c0:b3:d6:eb:
         11:34:3f:3e:67:c7:c5:25:6f:8e:ac:7e:f2:53:9e:28:31:7b:
         74:3d:13:d9:63:2a:4b:1f:c2:8e:f0:a9:aa:2f:2e:9d:af:d2:
         48:56:96:4b:15:4d:00:9e:dc:93:4f:9c:97:1b:d4:bd:4e:43:
         25:e9:ab:7b:90:df:43:a7:4a:f6:6e:27:87:b9:28:9c:45:92:
         ea:b0:17:7a:98:0d:3d:76:7b:f4:ec:23:b4:0d:44:67:e0:f8:
         b7:2f:44:10:49:90:da:e0:e0:96:60:be:81:d4:64:05:ac:b0:
         93:12:17:e3:da:d6:f8:df:2c:dd:53:cd:91:2b:82:67:d3:4b:
         78:74:2e:26:22:41:51:73:6f:8a:68:8d:2c:c0:c0:fd:dd:30:
         f2:7f:3e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:00:50 2026 by rpki-client