Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.mft
File:                     XerjhTD4FfvwubP472N1B4bIrAo.mft (raw, json)
Hash identifier:          079X9T20oN045iRKydjDhf6VCaPbI+8whyGSqkPLbEM=
Subject key identifier:   CB:E4:78:23:55:B4:95:1D:D9:28:DF:66:2F:FE:ED:D9:57:12:87:AF
Authority key identifier: 5D:EA:E3:85:30:F8:15:FB:F0:B9:B3:F8:EF:63:75:07:86:C8:AC:0A
Certificate issuer:       /CN=A91A4481/serialNumber=5DEAE38530F815FBF0B9B3F8EF63750786C8AC0A
Certificate serial:       01CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XerjhTD4FfvwubP472N1B4bIrAo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.mft
Manifest number:          01C4
Signing time:             Wed 23 Sep 2026 03:39:47 +0000
Manifest this update:     Wed 23 Sep 2026 03:39:47 +0000
Manifest next update:     Wed 30 Sep 2026 03:39:47 +0000
Files and hashes:         1: XerjhTD4FfvwubP472N1B4bIrAo.crl (hash: FevsFxWlYKrCR/VXX0NqQalY4pLznNyeC5U7/8xK5io=)
                          2: 5B08B12602C211EF9A1E4567C4F9AE02.roa (hash: 3K3ILgZCY+aW8Uz31syQLaXzVT7Ru8BASPjTSZG08co=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.crl
                          rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XerjhTD4FfvwubP472N1B4bIrAo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 03:39:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 458 (0x1ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4481, serialNumber=5DEAE38530F815FBF0B9B3F8EF63750786C8AC0A
        Validity
            Not Before: Sep 23 03:39:47 2026 GMT
            Not After : Sep 30 03:39:47 2026 GMT
        Subject: CN=6ab34a03-1105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:94:8f:97:cd:73:3c:e1:f5:14:65:08:59:c3:
                    b6:d3:8e:7d:41:51:1b:b9:b7:4d:6d:21:02:e4:7a:
                    66:8f:79:d6:80:c6:bc:f1:37:fa:75:c8:cf:b7:81:
                    6c:0b:2c:e1:af:fd:eb:4a:36:40:c6:73:43:d5:b3:
                    07:9b:2c:15:85:56:98:4e:11:0e:8c:a4:3f:70:4f:
                    47:a0:4c:f6:5e:04:62:0c:df:43:f7:1e:a7:33:16:
                    c9:fd:98:d5:7e:d1:00:20:66:34:d9:cd:25:ed:7a:
                    11:1f:84:1c:fc:4c:e0:5b:ea:db:f0:45:f7:cc:06:
                    30:d0:b9:f8:ff:14:3d:f1:f5:75:66:22:f4:ab:f4:
                    9a:c8:04:2f:05:bc:15:34:55:b5:d1:ac:d4:75:88:
                    d9:a8:ce:c3:e3:4d:06:0a:fb:14:ec:32:e5:c7:14:
                    46:a3:36:18:0a:26:98:76:74:0b:69:9e:8a:a1:d1:
                    03:06:a8:62:4e:a9:3a:b8:9c:6e:35:12:f4:86:08:
                    b7:ac:39:a2:f3:bc:67:fd:5d:ec:c0:3e:53:52:90:
                    f7:3a:06:79:13:03:d7:4d:58:5b:64:80:76:ff:b0:
                    0a:cb:f4:fd:75:21:ab:e1:53:12:3b:05:e7:aa:ed:
                    cb:35:ea:06:2d:5f:1b:b7:84:ea:89:46:9b:31:67:
                    ea:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:E4:78:23:55:B4:95:1D:D9:28:DF:66:2F:FE:ED:D9:57:12:87:AF
            X509v3 Authority Key Identifier:
                keyid:5D:EA:E3:85:30:F8:15:FB:F0:B9:B3:F8:EF:63:75:07:86:C8:AC:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XerjhTD4FfvwubP472N1B4bIrAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:d5:7d:c8:eb:e9:6f:90:7e:ec:7c:a0:f6:72:3b:d0:8c:b0:
         32:b5:61:da:25:c6:66:c3:6a:da:d1:9f:fb:3a:45:d1:33:65:
         c4:17:fc:cb:a9:c6:64:5c:72:c8:87:58:0e:e1:70:d7:c2:13:
         c1:9f:9d:9e:52:a9:05:03:cb:c2:f4:11:6d:f5:9c:a7:97:df:
         05:41:90:33:16:db:66:ec:4a:a8:7f:bc:33:ef:a0:6f:6f:38:
         04:cb:2b:27:d7:a1:aa:16:11:8f:bb:5c:80:2b:9b:73:c3:47:
         c5:22:8b:c4:02:14:fa:a1:31:75:66:6b:79:7b:60:b3:43:03:
         54:e5:0d:08:51:ee:e1:9e:bd:98:19:a7:0a:70:7e:32:01:33:
         47:9d:12:fe:09:7d:5d:93:5e:66:bb:d8:f5:db:6d:c6:01:6f:
         43:28:22:6a:61:b5:8d:4e:9b:30:1e:64:f1:d5:86:72:53:d1:
         79:5f:6d:98:a0:9b:f0:e3:33:87:88:ae:a1:46:c7:1c:ba:75:
         73:79:ce:ba:4d:8b:be:27:9e:c3:a3:56:92:93:37:07:95:1f:
         8d:88:b1:1d:45:d6:df:19:a2:bf:89:fc:75:f6:e1:85:38:fb:
         45:cb:e0:98:f6:af:84:e7:3b:99:d0:9e:3f:d1:c1:cf:b2:99:
         12:9c:2f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:34:40 2026 by rpki-client