Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
File:                     MxlflsRtTShdW95LCwMOODFOj8s.mft (raw, json)
Hash identifier:          Kd9US+n5qW0pDDeK9y4ow0vOYWS4XCEQUlHxDtZ5qD0=
Subject key identifier:   12:D9:B9:5D:4E:51:45:32:69:14:EF:11:79:78:FC:84:13:E8:99:11
Authority key identifier: 33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB
Certificate issuer:       /CN=A9173CE6/serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB
Certificate serial:       07C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
Manifest number:          0791
Signing time:             Sun 04 Oct 2026 21:41:19 +0000
Manifest this update:     Sun 04 Oct 2026 21:41:19 +0000
Manifest next update:     Sun 11 Oct 2026 21:41:19 +0000
Files and hashes:         1: MxlflsRtTShdW95LCwMOODFOj8s.crl (hash: 55C2ebsUEJdoZ7dWZdUpwM4D+hah+qsVaGH01/R8gMs=)
                          2: E99C5D78999011F09D326581C4F9AE02.roa (hash: EDqH2s3Y6d4ANcs5gpeBF0bpJwlhgUPDq1qQiNVrKbk=)
                          3: 7AC60C48CEB611ED8850A727C4F9AE02.roa (hash: WBzcS8WqNOR7OFCXitElttUvhLJweHM8ye22np6XMV8=)
                          4: 7A180DFACEB611ED8850A727C4F9AE02.roa (hash: yOtiPIymSWpxM64MUOZfNcIlCPN62Eex18db57t7CG8=)
                          5: C4E57D9EE55A11ED98D38780C4F9AE02.roa (hash: y0+JvtMZneyLAkeZYh9VrzkklhQ0hdBbhaIghcfRRoY=)
                          6: D9D6FFE098E311F08722B635C4F9AE02.roa (hash: 5sks7401iF6XRicrl8vnu/qqHYhqGytZkOAF+7ZwKW0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl
                          rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 21:41:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1986 (0x7c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173CE6, serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB
        Validity
            Not Before: Oct  4 21:41:19 2026 GMT
            Not After : Oct 11 21:41:19 2026 GMT
        Subject: CN=6ac2c7ff-dbec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d5:3d:db:4f:8b:9f:e7:16:99:14:1b:bb:e2:
                    6f:ac:05:ea:a4:2d:45:40:e8:a2:a4:fa:f4:95:a4:
                    09:89:0e:c3:2f:02:a0:d8:bf:b5:aa:38:72:d0:86:
                    b4:b2:db:d7:99:a2:21:c3:81:cf:37:71:7d:ab:5d:
                    3b:28:ad:2d:bb:c5:71:04:db:e8:a3:2b:75:25:85:
                    f2:c6:83:69:a0:7a:2c:4c:e0:0a:93:c1:43:db:c7:
                    e5:2f:f4:38:a0:58:3a:06:30:ca:1b:79:d6:2c:af:
                    cc:ee:c9:b1:50:4f:99:d8:bc:1e:42:e5:b5:e0:ea:
                    37:f0:0d:93:69:1d:81:4b:fa:69:82:d0:71:5e:14:
                    dc:52:98:6c:39:a6:1a:b2:50:e7:fd:bd:59:ee:79:
                    f4:f5:5b:eb:15:6e:44:5c:f6:4d:ce:55:be:71:5c:
                    b7:1c:9b:4b:8d:5f:3c:0f:92:f8:5e:52:e3:45:c6:
                    5a:3e:f5:d7:5e:02:71:2d:c7:f9:7c:11:cd:ce:b5:
                    cf:fb:e8:eb:55:9b:dd:24:4d:3f:86:52:1d:27:37:
                    4c:a1:3b:da:55:83:fd:39:62:3d:a2:fd:02:43:a8:
                    89:18:85:fc:ba:1c:c2:45:46:b5:19:98:b5:34:65:
                    81:c2:ba:67:c3:4a:1b:6c:81:4e:87:f2:dc:b9:51:
                    97:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D9:B9:5D:4E:51:45:32:69:14:EF:11:79:78:FC:84:13:E8:99:11
            X509v3 Authority Key Identifier:
                keyid:33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:a1:89:61:8a:73:8c:e3:a9:b0:90:b4:1d:66:5b:73:19:3d:
         1e:b7:67:90:06:51:43:f8:5a:f4:4b:a6:18:25:5d:6e:da:8b:
         bf:3f:ce:07:b3:dc:3b:79:cc:2c:e3:a3:4d:4f:0c:96:65:12:
         91:60:d6:a4:8a:12:3e:09:28:be:07:ad:22:15:5b:aa:94:e5:
         43:36:f8:90:46:ae:b2:b1:b5:50:e0:db:4e:9d:3b:f3:8b:3d:
         c5:37:90:29:fe:93:33:bd:5d:a6:f2:82:46:a2:83:13:68:15:
         75:0f:43:07:16:51:39:91:67:e5:9a:a9:2c:03:ca:ed:20:22:
         70:ca:9f:d1:bc:d8:d7:9c:19:a8:c8:81:3a:fd:1c:2d:fe:b6:
         b6:bb:8b:b4:d7:4e:76:66:62:b8:59:c0:d1:a9:5d:f5:6a:2a:
         7d:4c:97:d8:d0:ac:8f:15:3b:b0:b5:3b:3e:43:5f:95:13:43:
         6c:93:8f:4c:b4:44:14:ec:99:42:99:3b:da:2c:44:b2:14:15:
         26:09:fa:2e:59:37:48:f0:af:23:42:98:79:40:c6:88:e9:b2:
         58:41:c0:19:a1:55:e6:ee:05:e8:75:24:fd:24:d4:6a:77:f5:
         51:20:4a:a6:30:c8:f5:86:7e:b7:1c:2a:bb:4f:11:6f:fc:f7:
         20:64:66:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 19:23:27 2026 by rpki-client