Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917D488/8D733ACAC11E11F08DDE8787C4F9AE02/xDyP7aRVEFkimLW5U-J5-6zkWmQ.mft
File:                     xDyP7aRVEFkimLW5U-J5-6zkWmQ.mft (raw, json)
Hash identifier:          xj2srhLqQmYFiT7uYOWNTE1ov1h8YE1ZMLbJHx7EZEs=
Subject key identifier:   73:BF:B5:9C:27:A9:67:CA:1F:82:10:73:0E:66:A6:36:5D:4A:7C:45
Authority key identifier: C4:3C:8F:ED:A4:55:10:59:22:98:B5:B9:53:E2:79:FB:AC:E4:5A:64
Certificate issuer:       /CN=A917D488/serialNumber=C43C8FEDA45510592298B5B953E279FBACE45A64
Certificate serial:       A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDyP7aRVEFkimLW5U-J5-6zkWmQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D488/8D733ACAC11E11F08DDE8787C4F9AE02/xDyP7aRVEFkimLW5U-J5-6zkWmQ.mft
Manifest number:          A2
Signing time:             Fri 25 Sep 2026 07:18:50 +0000
Manifest this update:     Fri 25 Sep 2026 07:18:50 +0000
Manifest next update:     Fri 02 Oct 2026 07:18:50 +0000
Files and hashes:         1: xDyP7aRVEFkimLW5U-J5-6zkWmQ.crl (hash: Ym0uVmHeCp5YIisXMW9bfTyAgD2s1jU8YRn1qj93Bz0=)
                          2: 038304DEC11F11F0A9F08209C4F9AE02.roa (hash: Y37EvjA3svHQwyGXd0a+TXPBLOFhRYmTcbPi/KdjSGw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D488/8D733ACAC11E11F08DDE8787C4F9AE02/xDyP7aRVEFkimLW5U-J5-6zkWmQ.crl
                          rsync://rpki.apnic.net/member_repository/A917D488/8D733ACAC11E11F08DDE8787C4F9AE02/xDyP7aRVEFkimLW5U-J5-6zkWmQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDyP7aRVEFkimLW5U-J5-6zkWmQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 07:18:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164 (0xa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D488, serialNumber=C43C8FEDA45510592298B5B953E279FBACE45A64
        Validity
            Not Before: Sep 25 07:18:50 2026 GMT
            Not After : Oct  2 07:18:50 2026 GMT
        Subject: CN=6ab6205a-b84f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1e:b6:a7:f0:10:93:bd:89:34:a1:76:08:0b:
                    ae:2d:8b:e3:14:31:44:86:ab:39:13:0b:15:8e:22:
                    a7:2c:97:fb:9e:86:94:95:af:46:a6:7f:b6:2d:5d:
                    16:2c:8d:0d:f3:92:40:b2:d4:9b:0e:56:df:e0:0e:
                    39:22:b9:39:95:8d:94:67:58:20:93:24:74:3e:01:
                    d5:20:32:c9:f6:ea:d9:27:c4:fb:8a:64:e5:2c:48:
                    8d:b1:31:a1:f9:f4:ea:cc:aa:c7:22:bc:af:1e:b4:
                    2f:97:d4:49:35:81:93:29:c8:54:42:ba:32:4f:06:
                    86:26:f9:c1:e5:4d:93:ad:97:a7:2f:a3:c3:b5:18:
                    4c:d9:50:d9:af:01:c9:28:bc:9b:1a:1d:59:0d:34:
                    eb:af:89:43:ea:12:fb:ba:4a:00:84:14:34:2f:ea:
                    c4:61:49:dc:03:c4:c9:80:fe:b6:4f:c3:5a:10:11:
                    95:29:23:aa:8d:b6:f8:03:53:b5:da:d4:d6:4a:41:
                    54:0c:df:ce:99:dc:22:5b:91:13:18:9f:ed:82:79:
                    cf:66:c8:0a:18:21:bd:47:64:3a:6d:9b:0b:79:cd:
                    07:14:a3:38:1b:03:1d:7c:c2:0f:1a:b8:b9:ae:1b:
                    37:4e:f5:b2:14:55:40:88:a2:47:53:ce:fe:64:dd:
                    a1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:BF:B5:9C:27:A9:67:CA:1F:82:10:73:0E:66:A6:36:5D:4A:7C:45
            X509v3 Authority Key Identifier:
                keyid:C4:3C:8F:ED:A4:55:10:59:22:98:B5:B9:53:E2:79:FB:AC:E4:5A:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D488/8D733ACAC11E11F08DDE8787C4F9AE02/xDyP7aRVEFkimLW5U-J5-6zkWmQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDyP7aRVEFkimLW5U-J5-6zkWmQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D488/8D733ACAC11E11F08DDE8787C4F9AE02/xDyP7aRVEFkimLW5U-J5-6zkWmQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:38:a3:7b:7e:8c:33:46:ff:4c:e6:61:91:d9:6e:6e:60:13:
         f6:25:9c:8a:c3:2e:78:51:34:f1:b8:4b:ea:ad:7f:9c:ef:fb:
         b7:d4:7a:77:23:37:97:c9:54:c8:01:dc:0b:1f:8c:61:30:21:
         f9:8c:0e:d4:9c:17:e7:b3:eb:34:cb:16:e9:32:0e:97:b4:0d:
         1f:fa:04:ad:87:b8:60:5e:93:64:6e:13:6b:8f:57:41:87:be:
         50:bd:c2:0b:46:81:ca:f2:36:f0:82:c3:05:bc:9c:83:d9:60:
         9b:2a:8d:c2:33:0c:ac:8c:9c:3a:50:99:a4:ce:e4:2f:90:48:
         f7:9f:a7:07:c5:06:95:63:68:49:21:c9:32:06:10:51:cc:0f:
         53:89:c4:d6:8d:d8:72:68:3f:10:53:46:9b:d5:8b:90:10:18:
         0f:e2:dc:08:e9:ce:99:57:99:f5:73:62:58:4a:89:c2:c7:f5:
         f1:95:dd:e4:4f:58:86:3f:db:c0:87:16:43:2a:82:fc:b8:f3:
         42:67:9b:c1:65:8c:92:48:4e:90:c6:41:18:a2:fe:4e:da:2c:
         a4:2f:06:9d:09:d4:c0:79:54:60:61:ce:1b:51:eb:2d:d6:44:
         34:d0:da:9c:14:5c:d2:8f:6a:a3:63:71:f1:ab:91:51:1e:f1:
         98:9b:77:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 20:37:17 2026 by rpki-client