Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.mft
File:                     XiM50eqvU0mhOKR5fagtDrTfqew.mft (raw, json)
Hash identifier:          RxhqtcG9DZTjIrC6aX10Zx3AStCIwEIPHy37k2k6ktc=
Subject key identifier:   E3:36:EA:6E:E0:42:C0:E6:04:BE:29:1C:35:27:3F:21:BE:96:2F:11
Authority key identifier: 5E:23:39:D1:EA:AF:53:49:A1:38:A4:79:7D:A8:2D:0E:B4:DF:A9:EC
Certificate issuer:       /CN=A918CFAD/serialNumber=5E2339D1EAAF5349A138A4797DA82D0EB4DFA9EC
Certificate serial:       01DD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XiM50eqvU0mhOKR5fagtDrTfqew.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.mft
Manifest number:          01D6
Signing time:             Fri 25 Sep 2026 03:42:08 +0000
Manifest this update:     Fri 25 Sep 2026 03:42:07 +0000
Manifest next update:     Fri 02 Oct 2026 03:42:07 +0000
Files and hashes:         1: XiM50eqvU0mhOKR5fagtDrTfqew.crl (hash: IA4eBsOCMmRyMPyla1Rx3tZlDh0IPW/hlFA/k7WQUpM=)
                          2: D161B1F0EA0411EE98A86A13C4F9AE02.roa (hash: BV9XfPuDyzg+pUATxcOqBJ05a9l83d0h3SXHTFR+g1Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.crl
                          rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XiM50eqvU0mhOKR5fagtDrTfqew.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 03:42:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 477 (0x1dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918CFAD, serialNumber=5E2339D1EAAF5349A138A4797DA82D0EB4DFA9EC
        Validity
            Not Before: Sep 25 03:42:07 2026 GMT
            Not After : Oct  2 03:42:07 2026 GMT
        Subject: CN=6ab5ed8f-e4fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:00:46:75:29:27:46:f7:27:b0:b6:da:0a:48:
                    b9:d1:ec:1c:23:fb:0b:25:b6:5e:ca:20:b3:ba:5c:
                    34:f1:40:91:cb:77:08:ef:33:3a:35:54:87:6b:88:
                    74:9c:31:c5:99:df:f7:72:9f:18:77:b4:1c:7d:cc:
                    d9:2c:1b:54:b0:9f:b1:18:f6:89:50:3b:c0:9f:7f:
                    5d:25:21:88:af:c1:ef:08:63:ae:3e:e1:fc:b5:46:
                    d7:a6:dc:d6:0c:61:a5:c2:de:69:d9:86:44:d4:54:
                    40:23:e3:9b:49:4f:c3:0d:4b:c0:3f:32:0e:25:3f:
                    3c:5f:b4:54:1e:e8:53:ec:9e:fa:85:fc:c7:4f:43:
                    6e:c0:26:d4:df:1f:a3:95:fd:67:87:09:b1:6e:82:
                    c9:01:31:a6:f1:00:4a:85:01:45:f6:e0:f4:ee:61:
                    8a:ab:6d:78:a7:81:14:13:5a:ef:41:04:a9:44:db:
                    21:12:26:14:fb:a6:66:82:63:d7:1e:71:06:25:99:
                    f0:1e:57:79:07:c2:ec:c1:ff:ef:af:9a:ec:13:ce:
                    48:a9:18:d2:8c:2b:21:b1:6b:d2:fc:0d:6e:88:55:
                    49:bf:ec:bf:76:25:50:a4:7f:41:d0:a9:82:73:72:
                    7a:73:50:00:a9:48:1e:df:69:9f:17:8b:67:f8:1f:
                    9f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:36:EA:6E:E0:42:C0:E6:04:BE:29:1C:35:27:3F:21:BE:96:2F:11
            X509v3 Authority Key Identifier:
                keyid:5E:23:39:D1:EA:AF:53:49:A1:38:A4:79:7D:A8:2D:0E:B4:DF:A9:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XiM50eqvU0mhOKR5fagtDrTfqew.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:0a:98:52:cc:fc:9a:2d:6f:d4:29:89:2c:cf:2d:89:8b:bc:
         83:b8:57:7b:49:69:8b:03:35:2a:21:36:98:9d:4a:dd:b0:d0:
         e5:85:dc:a1:6c:98:07:27:dd:59:45:d7:d6:97:5a:f2:81:4f:
         54:5a:4e:1a:17:5d:23:67:85:4f:c7:d8:e1:5a:5d:a1:d4:dc:
         94:3e:ba:82:54:8c:22:59:87:18:ce:32:4e:63:69:6a:90:66:
         26:26:82:00:7e:85:cf:e7:76:f9:a9:75:e7:b2:ce:71:33:a3:
         f6:ce:1f:48:85:8a:11:47:c2:75:15:ca:c3:06:7b:55:df:29:
         56:2e:46:55:4e:54:06:c7:77:ec:55:57:e2:63:3e:8f:60:f2:
         61:2b:8d:5a:9e:6d:54:04:47:46:56:8a:5f:7c:7f:36:a7:11:
         ea:40:14:63:35:76:00:38:9d:ec:19:c8:59:10:74:4f:3f:e3:
         4b:2d:8a:f5:12:61:2b:7d:3a:fd:6c:9c:d8:f3:18:58:6a:96:
         f6:53:81:d0:b2:bb:0b:f9:52:48:17:01:3c:a6:ce:aa:24:1b:
         33:15:9d:21:35:de:4c:3d:39:33:72:05:b2:e9:92:eb:d9:f2:
         06:d1:48:16:c5:e8:ed:5f:58:6e:91:2d:56:eb:40:4a:be:90:
         da:1f:f5:4b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OENGQUQxMTAvBgNVBAUTKDVFMjMzOUQxRUFBRjUzNDlBMTM4QTQ3OTdEQTgyRDBF
QjRERkE5RUMwHhcNMjYwOTI1MDM0MjA3WhcNMjYxMDAyMDM0MjA3WjAYMRYwFAYD
VQQDEw02YWI1ZWQ4Zi1lNGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5wBGdSknRvcnsLbaCki50ewcI/sLJbZeyiCzulw08UCRy3cI7zM6NVSHa4h0
nDHFmd/3cp8Yd7QcfczZLBtUsJ+xGPaJUDvAn39dJSGIr8HvCGOuPuH8tUbXptzW
DGGlwt5p2YZE1FRAI+ObSU/DDUvAPzIOJT88X7RUHuhT7J76hfzHT0NuwCbU3x+j
lf1nhwmxboLJATGm8QBKhQFF9uD07mGKq214p4EUE1rvQQSpRNshEiYU+6ZmgmPX
HnEGJZnwHld5B8Lswf/vr5rsE85IqRjSjCshsWvS/A1uiFVJv+y/diVQpH9B0KmC
c3J6c1AAqUge32mfF4tn+B+f/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOM26m7g
QsDmBL4pHDUnPyG+li8RMB8GA1UdIwQYMBaAFF4jOdHqr1NJoTikeX2oLQ6036ns
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0ZBRC80QzkwMEYxQ0VB
MDQxMUVFOTJEMTA2MTFDNEY5QUUwMi9YaU01MGVxdlUwbWhPS1I1ZmFndERyVGZx
ZXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1hpTTUwZXF2VTBtaE9LUjVmYWd0RHJUZnFldy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
Q0ZBRC80QzkwMEYxQ0VBMDQxMUVFOTJEMTA2MTFDNEY5QUUwMi9YaU01MGVxdlUw
bWhPS1I1ZmFndERyVGZxZXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOwqYUsz8mi1v1CmJLM8tiYu8g7hXe0lpiwM1KiE2mJ1K3bDQ5YXcoWyYByfd
WUXX1pda8oFPVFpOGhddI2eFT8fY4VpdodTclD66glSMIlmHGM4yTmNpapBmJiaC
AH6Fz+d2+al157LOcTOj9s4fSIWKEUfCdRXKwwZ7Vd8pVi5GVU5UBsd37FVX4mM+
j2DyYSuNWp5tVARHRlaKX3x/NqcR6kAUYzV2ADid7BnIWRB0Tz/jSy2K9RJhK306
/Wyc2PMYWGqW9lOB0LK7C/lSSBcBPKbOqiQbMxWdITXeTD05M3IFsumS69nyBtFI
FsXo7V9YbpEtVutASr6Q2h/1Sw==
-----END CERTIFICATE-----
Generated at Sun Sep 27 05:49:35 2026 by rpki-client