Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft
File:                     XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft (raw, json)
Hash identifier:          rfItn0hN8PEkRgMtR65oMEQknid0JRBAbNxfrOfWQKU=
Subject key identifier:   DC:C6:72:9B:8C:65:E8:44:59:93:59:46:42:3A:0D:3E:2E:22:52:86
Authority key identifier: 5C:17:AF:2E:0A:AF:49:0C:EA:A8:4E:2A:AA:71:48:3D:03:95:F1:E4
Certificate issuer:       /CN=A91923A9/serialNumber=5C17AF2E0AAF490CEAA84E2AAA71483D0395F1E4
Certificate serial:       027C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBevLgqvSQzqqE4qqnFIPQOV8eQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft
Manifest number:          0275
Signing time:             Fri 25 Sep 2026 02:03:06 +0000
Manifest this update:     Fri 25 Sep 2026 02:03:06 +0000
Manifest next update:     Fri 02 Oct 2026 02:03:06 +0000
Files and hashes:         1: XBevLgqvSQzqqE4qqnFIPQOV8eQ.crl (hash: FIrvAbUkMSG9f/XoOYLfZLD4LI+ezMPTHpq9a9t6z9k=)
                          2: 80F75824FAAD11EDB0C98683C4F9AE02.roa (hash: nWRLx+q0lfEoBWKjg9VIVBRs/nhFZ936B5rRLzukBEs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.crl
                          rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBevLgqvSQzqqE4qqnFIPQOV8eQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 02:03:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 636 (0x27c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91923A9, serialNumber=5C17AF2E0AAF490CEAA84E2AAA71483D0395F1E4
        Validity
            Not Before: Sep 25 02:03:06 2026 GMT
            Not After : Oct  2 02:03:06 2026 GMT
        Subject: CN=6ab5d65a-796f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:1e:f2:a0:c8:4c:42:73:e7:d1:85:a1:02:62:
                    d5:c9:32:0b:ac:79:7f:b4:f4:be:64:4c:38:c2:f0:
                    ca:b6:80:5f:ab:a3:1d:88:92:e1:d0:63:c0:9d:c1:
                    c2:72:32:b3:8a:ac:d7:cd:3b:41:d9:0e:76:94:3f:
                    00:c2:f0:fb:68:ce:fc:b4:db:a6:db:13:07:80:ea:
                    6e:83:77:2d:6b:27:6c:18:12:c0:89:a5:11:73:0f:
                    ca:d1:06:f6:aa:7b:19:42:7a:7c:52:e4:d5:0a:e2:
                    7c:e9:df:03:2d:e3:be:b2:2a:77:d0:a1:53:69:e9:
                    40:57:fa:cd:c8:6f:f7:f4:d9:dc:56:52:b4:1d:4b:
                    3f:95:dc:b8:f0:6c:d7:11:9b:b0:bf:bf:3e:8d:10:
                    46:b5:22:eb:fb:83:5e:2b:8f:a1:71:60:7e:03:71:
                    33:78:9e:67:33:1b:08:15:06:d4:c8:3e:50:de:8a:
                    2c:50:bf:fb:b5:0e:92:0a:87:78:23:6e:3c:92:1c:
                    e7:f7:18:d3:fd:6b:8c:91:af:2e:73:6a:9e:5f:ec:
                    52:71:11:22:be:67:5d:7a:d5:bd:36:56:6a:c3:ac:
                    1e:7b:5f:70:59:96:05:b3:d1:97:3a:0b:83:21:e2:
                    57:fa:3d:ad:7d:3e:cf:67:d5:a4:a5:e3:81:e0:f5:
                    ca:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C6:72:9B:8C:65:E8:44:59:93:59:46:42:3A:0D:3E:2E:22:52:86
            X509v3 Authority Key Identifier:
                keyid:5C:17:AF:2E:0A:AF:49:0C:EA:A8:4E:2A:AA:71:48:3D:03:95:F1:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBevLgqvSQzqqE4qqnFIPQOV8eQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:4b:52:8e:79:c2:97:6b:98:0c:ac:af:25:f8:02:e8:33:12:
         e6:53:bd:3e:5f:64:89:f8:11:6d:ba:04:a9:b7:bf:1c:77:2f:
         34:f2:1e:73:f0:7b:8e:fb:c6:82:11:b0:14:87:61:06:7a:3c:
         cb:08:42:91:3f:06:d5:83:5f:7e:90:7e:e1:c6:43:9a:41:a9:
         f2:b2:a3:5f:15:47:ac:9f:38:db:fc:03:e9:85:44:70:19:ce:
         d2:e0:17:6d:8e:a0:dc:2d:21:9f:14:ac:ae:a1:b0:0e:b1:35:
         16:17:ad:45:17:a8:bf:26:ec:15:b3:76:e4:8f:ff:c1:ac:5b:
         77:dd:ce:df:9d:f7:49:fe:bb:f9:a7:7b:a0:2f:79:6d:4c:e3:
         a9:cd:74:b0:72:69:ab:12:22:92:ac:fe:a8:64:75:e7:c4:95:
         71:4f:49:45:ef:8f:fa:a0:67:06:80:7b:0b:68:2b:0f:c9:eb:
         30:9c:3c:4f:c8:19:f6:27:f5:79:5e:ca:f7:b2:3d:3f:9c:66:
         f4:7a:d9:04:e9:10:11:84:a2:26:1e:11:53:96:de:ce:8e:29:
         0d:cc:eb:0e:76:c7:2e:61:30:8a:68:45:56:35:41:a5:3a:4a:
         29:fb:38:ff:7a:7e:dc:5d:cc:8c:46:66:e9:51:d9:94:12:78:
         4d:8a:da:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:45:31 2026 by rpki-client