Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft
File:                     xkM8SeY82SA1swfo95Y3YI_q2_U.mft (raw, json)
Hash identifier:          TuT/onURSv7VwVoVHkZuBe0vsoE6JurIGRBVWEXLFks=
Subject key identifier:   31:86:7C:BB:B3:8C:EC:00:25:46:E4:63:B6:7E:43:4E:3E:3F:67:E2
Authority key identifier: C6:43:3C:49:E6:3C:D9:20:35:B3:07:E8:F7:96:37:60:8F:EA:DB:F5
Certificate issuer:       /CN=A9164390/serialNumber=C6433C49E63CD92035B307E8F79637608FEADBF5
Certificate serial:       1DE5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft
Manifest number:          1D93
Signing time:             Mon 28 Sep 2026 16:08:57 +0000
Manifest this update:     Mon 28 Sep 2026 16:08:56 +0000
Manifest next update:     Mon 05 Oct 2026 16:08:56 +0000
Files and hashes:         1: xkM8SeY82SA1swfo95Y3YI_q2_U.crl (hash: QKEPktc09WRe/RXAaxEa3dlpMz/zENnzwT1LwjUO+VI=)
                          2: BA1F21AC731111F0BD7FF574C4F9AE02.roa (hash: 7F3EV0mM/ALk4AT2S2gOquXFkNEiD0LHjF4Qz5WNCvo=)
                          3: 35D40EDE9F8511ECBE806D30C4F9AE02.roa (hash: UeYjCbhpLlJLJlqOXzDkcK+yw3hLZ56FWNkCBB4H+Ew=)
                          4: SeVz8gQjPGkdw4zVIf82ObaFpY0.asa (hash: kmHeGiiqpa55vbGHg8bwUKc75USh2jaQvW3B/lxFRyI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.crl
                          rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 16:08:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7653 (0x1de5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164390, serialNumber=C6433C49E63CD92035B307E8F79637608FEADBF5
        Validity
            Not Before: Sep 28 16:08:56 2026 GMT
            Not After : Oct  5 16:08:56 2026 GMT
        Subject: CN=6aba9119-163b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5d:7e:21:5b:e1:41:f1:00:e1:bd:ee:b8:8e:
                    0d:d7:f6:67:c9:28:04:8f:bb:d5:f6:59:30:5f:75:
                    3c:31:4d:8d:c1:f3:04:e4:18:7d:70:4a:7c:ca:3a:
                    26:ab:cb:66:4c:a3:2f:20:d7:c8:f8:10:5c:47:61:
                    d9:e7:c5:aa:5d:18:2e:4b:87:67:6d:e0:fd:bd:1f:
                    0c:d6:b2:c7:eb:03:9d:a4:cf:c8:db:c0:f5:82:5a:
                    c0:be:45:ae:36:cd:ec:b5:ba:e1:1a:14:d4:bd:8b:
                    98:fe:60:86:89:43:61:40:38:37:92:67:88:7b:4d:
                    37:00:44:e7:ea:b4:82:95:94:33:74:7a:ce:8b:ca:
                    ce:6a:f4:53:2e:e3:c3:0c:7a:4a:7c:71:39:10:86:
                    67:6b:37:33:4d:92:ce:25:39:73:c4:20:be:e1:ae:
                    50:53:c7:8d:8c:66:17:1f:82:74:37:8e:63:3a:0a:
                    9a:b8:01:f3:44:8c:6c:41:42:34:4a:cf:ea:90:b7:
                    3c:ab:ec:5c:db:6b:c5:ce:aa:97:bf:15:1c:1c:ea:
                    92:9f:35:a4:22:f0:87:3d:cd:fe:d0:6a:d3:94:46:
                    83:06:a4:e9:41:fe:39:a2:c4:df:9b:d6:bf:d0:f8:
                    14:c3:14:67:78:f0:00:4c:6b:b3:a1:0f:2e:28:4d:
                    a7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:86:7C:BB:B3:8C:EC:00:25:46:E4:63:B6:7E:43:4E:3E:3F:67:E2
            X509v3 Authority Key Identifier:
                keyid:C6:43:3C:49:E6:3C:D9:20:35:B3:07:E8:F7:96:37:60:8F:EA:DB:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:77:ad:73:59:8c:d0:85:70:ab:91:7d:1c:a6:c0:87:f8:93:
         4c:f8:67:8c:ed:15:53:72:47:3e:63:fb:09:62:f0:9b:80:01:
         0c:69:68:90:af:4f:73:41:3e:41:58:8b:c2:35:6a:ab:76:3d:
         ae:87:f2:97:9b:f0:22:5b:4b:78:27:74:5c:0a:f0:bb:96:a0:
         67:5c:8a:fe:09:3a:53:62:8d:43:a3:59:35:1d:2a:85:56:d8:
         3d:fd:88:ba:b1:f4:74:72:bb:0b:ad:df:6f:5a:52:98:d5:f7:
         10:3f:14:80:5f:bd:e6:a2:4e:21:a0:2b:98:dc:9b:14:08:24:
         e2:1c:d7:88:cd:d1:cf:cb:6f:df:2d:fc:3d:e9:1d:ad:2e:ec:
         2d:21:a1:92:c5:8d:24:b5:c4:c8:eb:d5:99:1f:51:9a:7b:16:
         26:02:dd:30:37:a6:a7:3c:ab:25:78:29:59:be:97:c4:cc:8a:
         22:1b:9e:10:a5:cd:bc:73:c4:8f:5b:08:75:d4:bd:5c:30:2a:
         ed:b3:25:a1:23:db:1d:9d:5a:d3:3d:32:b1:12:73:af:24:04:
         5d:82:74:bb:71:ed:5b:77:44:f0:c7:2a:c0:c0:4e:29:54:e7:
         fc:40:5b:51:4e:22:3c:ff:21:c2:f9:cd:ee:6c:ba:55:b6:f4:
         8f:e8:22:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:07:37 2026 by rpki-client