Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft
File:                     xQRWVXeumfYZHJeDPdvdYk7CTpI.mft (raw, json)
Hash identifier:          pcTBYqj2cSyf8HJ/A2JM2hZrhdEegjeXTSjs/JnzMRY=
Subject key identifier:   C0:B9:E3:FE:95:26:46:6E:DA:46:19:7D:C6:EF:3E:FC:68:30:02:32
Authority key identifier: C5:04:56:55:77:AE:99:F6:19:1C:97:83:3D:DB:DD:62:4E:C2:4E:92
Certificate issuer:       /CN=A916D128/serialNumber=C504565577AE99F6191C97833DDBDD624EC24E92
Certificate serial:       0848
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft
Manifest number:          0815
Signing time:             Tue 22 Sep 2026 20:59:58 +0000
Manifest this update:     Tue 22 Sep 2026 20:59:58 +0000
Manifest next update:     Tue 29 Sep 2026 20:59:58 +0000
Files and hashes:         1: xQRWVXeumfYZHJeDPdvdYk7CTpI.crl (hash: DRk45ncYIEykegYgd54dppCHAQr3aQb82M7kwtfQROw=)
                          2: A2272F186E1D11EEB6A10A0CC4F9AE02.roa (hash: pdKfh0rHk6MsKSq/P/C5bZ/12KI4D++yBlGSjUNlgck=)
                          3: B38547D6EDB611EEB49CEE2CC4F9AE02.roa (hash: wOEYlAAobb9nCZWU7ILmmI4WtLWkbwGu6k9TfmwOgrw=)
                          4: 8342D87641AC11ECACD65E18C4F9AE02.roa (hash: Z9Aj+lSx9qfZY/JZ1gYb96BwZ7DAL++xryjqUPWEopY=)
                          5: 19D427BA6AFD11EEA4AF1A0FC4F9AE02.roa (hash: 8wPCikKi+MQL34SMZFG04z7KedSfiNcxZCrwRnt7vrA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.crl
                          rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 20:59:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2120 (0x848)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D128, serialNumber=C504565577AE99F6191C97833DDBDD624EC24E92
        Validity
            Not Before: Sep 22 20:59:58 2026 GMT
            Not After : Sep 29 20:59:58 2026 GMT
        Subject: CN=6ab2ec4e-c20d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d1:f8:98:36:72:e1:72:74:02:65:78:2b:fa:
                    63:e0:5b:de:b2:a2:8f:86:e5:52:39:0a:c2:fd:7d:
                    61:c2:95:6d:06:29:71:62:d4:9a:31:16:04:81:1d:
                    f1:e5:28:ae:42:53:ab:f7:ae:9a:4b:e0:b8:76:26:
                    72:42:75:ec:a8:b7:51:2b:bf:20:2f:44:a3:50:2d:
                    f4:05:79:e8:2e:1d:39:df:63:a3:be:8e:a5:54:4c:
                    f5:f3:ba:ea:0e:d6:04:79:b6:24:ef:be:ad:3b:73:
                    9c:7f:c1:9f:46:c8:1a:9d:f9:3e:79:f1:a8:3d:ca:
                    84:82:10:83:09:f2:83:39:ce:34:e6:e8:05:48:b5:
                    3e:e4:3f:d4:ae:a4:42:89:33:1a:c2:00:30:23:5a:
                    de:8c:0e:de:40:03:b0:45:75:9c:b2:30:56:ca:63:
                    59:dd:06:49:42:23:52:3f:ab:f3:92:7c:ff:6b:a0:
                    b2:7d:9c:99:c2:ab:8c:70:6c:99:18:30:29:76:07:
                    f7:46:5a:a6:f9:e5:45:87:62:90:fe:d5:40:bd:9e:
                    96:55:90:2b:86:51:af:63:4c:3c:51:04:fd:d2:63:
                    a7:71:68:93:0b:00:11:8a:8d:49:8e:b9:08:50:dc:
                    be:5a:18:21:9b:0c:51:de:38:50:00:9a:59:a9:05:
                    05:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:B9:E3:FE:95:26:46:6E:DA:46:19:7D:C6:EF:3E:FC:68:30:02:32
            X509v3 Authority Key Identifier:
                keyid:C5:04:56:55:77:AE:99:F6:19:1C:97:83:3D:DB:DD:62:4E:C2:4E:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:3c:16:88:ed:8e:7e:bd:e2:0f:54:e1:fd:3e:62:7a:6d:59:
         64:e0:cd:19:3c:3f:87:cb:68:5b:dc:c2:84:86:4f:17:49:ac:
         3c:0f:f3:b6:25:86:bc:81:b9:fb:f9:b1:7a:a9:4a:65:b7:16:
         a7:76:c4:38:41:38:20:6c:2f:58:c9:36:5f:ed:c1:fc:09:db:
         b4:b5:d0:92:c0:43:9a:11:a9:2c:26:58:2e:4e:e2:40:a5:56:
         d4:21:c2:77:f4:32:93:81:a2:ac:08:3a:62:6d:f3:97:80:67:
         0b:68:77:b9:df:16:a0:2f:25:da:07:36:db:ab:93:e5:79:e9:
         7c:bf:ac:4a:da:de:87:31:4d:85:06:21:9e:86:4a:ed:6e:3f:
         b4:3f:e8:82:96:ce:3c:26:69:f8:43:28:46:cf:8a:bf:7d:cd:
         02:16:50:ce:80:94:c1:d0:b2:51:26:a0:c8:c0:40:a1:8a:9e:
         9a:b6:ff:f6:9a:0c:9b:50:a7:c9:e5:ac:6c:ba:01:e3:6a:e8:
         b5:5d:44:10:86:0d:2c:d3:5c:44:9f:e5:35:61:30:d3:d3:5d:
         ca:32:7c:96:59:7d:fa:71:4b:f7:69:fd:57:b4:2d:8b:f4:95:
         e0:4f:a5:45:c1:7c:89:76:79:13:32:71:8c:b2:4c:ab:71:d1:
         d9:03:d4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:09:35 2026 by rpki-client