Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.mft
File:                     XEFCLE7PHfpomnDePAORsdR-Vew.mft (raw, json)
Hash identifier:          0zpvauO/kA63eECdueQ558E2uhQ2LsSxz4hdElP14xw=
Subject key identifier:   0E:D2:4C:F4:2A:57:FB:80:E4:56:9A:E3:39:A5:72:B5:33:48:DB:45
Authority key identifier: 5C:41:42:2C:4E:CF:1D:FA:68:9A:70:DE:3C:03:91:B1:D4:7E:55:EC
Certificate issuer:       /CN=A916B19D/serialNumber=5C41422C4ECF1DFA689A70DE3C0391B1D47E55EC
Certificate serial:       0373
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEFCLE7PHfpomnDePAORsdR-Vew.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.mft
Manifest number:          036A
Signing time:             Wed 23 Sep 2026 00:50:19 +0000
Manifest this update:     Wed 23 Sep 2026 00:50:19 +0000
Manifest next update:     Wed 30 Sep 2026 00:50:19 +0000
Files and hashes:         1: XEFCLE7PHfpomnDePAORsdR-Vew.crl (hash: hCF7srjGRrpKa59nfjvbZbJkDtvrAE4v2Ij9fCpMkvw=)
                          2: D11B9044112011EDAC1D3B15C4F9AE02.roa (hash: yCAXtruLzv3brJF4jN6xJEQZ5a9W9tX4ic/VBZ7dzik=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.crl
                          rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEFCLE7PHfpomnDePAORsdR-Vew.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 00:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 883 (0x373)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B19D, serialNumber=5C41422C4ECF1DFA689A70DE3C0391B1D47E55EC
        Validity
            Not Before: Sep 23 00:50:19 2026 GMT
            Not After : Sep 30 00:50:19 2026 GMT
        Subject: CN=6ab3224b-88b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a7:1e:e8:6f:b8:80:65:38:b6:cb:22:d7:78:
                    61:d8:78:e5:8b:1d:e5:1f:e3:7b:1e:77:c4:d2:77:
                    37:5b:6b:4b:30:5c:1b:3b:e3:f2:47:e4:69:42:ea:
                    80:13:2f:91:58:31:b4:63:cb:03:24:53:fa:5a:65:
                    53:cb:f4:97:fd:00:29:a6:48:55:40:ae:24:9c:38:
                    7f:fa:0f:9a:fc:28:f3:61:29:53:5e:d9:52:7e:a3:
                    2d:7c:43:31:f5:78:2d:93:33:09:9f:b8:13:a5:c4:
                    39:16:ba:9d:d3:72:e7:28:f3:db:f7:c8:a1:ea:2a:
                    35:f9:b2:fe:40:a4:ae:44:d8:c0:f8:c4:28:3a:56:
                    01:85:11:1e:9f:4e:75:ac:a2:4e:17:ce:ef:31:a2:
                    4c:c5:9c:ce:ff:16:10:9e:7f:06:a0:e0:b6:4d:ea:
                    bd:f7:35:cb:ad:f7:c9:87:3e:c9:d6:ef:4c:fc:e9:
                    3a:ec:59:f5:b5:71:82:86:15:54:14:62:4d:d6:0f:
                    12:40:c2:e3:88:14:4f:8c:3d:11:cf:90:d7:0e:95:
                    3f:08:48:05:05:c0:92:e5:e2:75:38:02:54:30:de:
                    85:6b:d7:6b:f3:97:bf:51:ac:66:a3:3d:f1:15:e2:
                    7d:1f:7e:c9:4d:78:28:59:2d:3f:20:5a:9e:98:57:
                    46:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:D2:4C:F4:2A:57:FB:80:E4:56:9A:E3:39:A5:72:B5:33:48:DB:45
            X509v3 Authority Key Identifier:
                keyid:5C:41:42:2C:4E:CF:1D:FA:68:9A:70:DE:3C:03:91:B1:D4:7E:55:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEFCLE7PHfpomnDePAORsdR-Vew.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:f1:97:8d:db:c9:b7:c6:68:e6:29:c1:91:fc:d7:12:9d:6a:
         2f:bd:39:01:91:9e:ab:3e:12:8d:83:c8:1d:3d:ed:a7:5b:55:
         e7:f1:43:1e:bb:cc:48:f0:68:2f:45:3a:ea:3f:3a:5b:83:36:
         1b:f4:e5:73:4a:72:6f:6c:58:89:45:0e:f6:a8:37:4e:63:3a:
         53:60:66:e1:00:32:2d:46:67:66:f9:d7:e8:0b:7f:64:fc:7b:
         c6:c3:c3:61:d6:69:4c:6a:6a:50:84:cf:9c:71:c1:0a:d5:9f:
         d2:25:97:8d:c8:ff:f3:b2:f9:f6:00:4e:a1:2e:fd:35:93:a0:
         e7:b8:4a:f4:0e:b2:c6:d9:f5:6b:12:27:6a:d2:0f:b1:e6:26:
         e6:a3:f1:6e:be:97:38:8a:17:5a:64:b1:fb:0a:72:7a:d4:0e:
         6c:97:d8:1f:0f:f9:bb:e1:14:32:2d:55:26:d1:90:fb:dd:4b:
         e8:3b:e2:24:8f:df:5c:21:47:9a:c5:f3:e7:91:8e:0b:3b:8b:
         69:35:ee:3f:c4:f1:ea:56:1f:2c:c6:01:57:26:ba:f8:4c:70:
         51:a7:a0:75:3f:bd:2c:76:b7:56:67:84:b2:86:aa:97:cc:a6:
         d1:08:82:59:a9:17:5a:43:6d:b7:88:54:5c:30:2a:fa:c6:67:
         42:0c:c2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:06:38 2026 by rpki-client