Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.mft
File:                     XiiKKIBK_-76DkRDEJedfO6Y5DI.mft (raw, json)
Hash identifier:          pnDVGVb+RoDVlSNSebxytIZoEjKjMzPxQUkhoUaso7E=
Subject key identifier:   87:D4:CC:C2:E8:27:B7:B5:C0:A4:DC:29:7B:81:76:D3:C3:4B:7E:37
Authority key identifier: 5E:28:8A:28:80:4A:FF:EE:FA:0E:44:43:10:97:9D:7C:EE:98:E4:32
Certificate issuer:       /CN=A91B5F8A/serialNumber=5E288A28804AFFEEFA0E444310979D7CEE98E432
Certificate serial:       98
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XiiKKIBK_-76DkRDEJedfO6Y5DI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.mft
Manifest number:          98
Signing time:             Mon 21 Sep 2026 07:26:49 +0000
Manifest this update:     Mon 21 Sep 2026 07:26:49 +0000
Manifest next update:     Mon 28 Sep 2026 07:26:49 +0000
Files and hashes:         1: XiiKKIBK_-76DkRDEJedfO6Y5DI.crl (hash: FGSOvGZQfprTFI54qVeyD7pXogMVM3Qqj+42FyjrN4Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.crl
                          rsync://rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XiiKKIBK_-76DkRDEJedfO6Y5DI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 152 (0x98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5F8A, serialNumber=5E288A28804AFFEEFA0E444310979D7CEE98E432
        Validity
            Not Before: Sep 21 07:26:49 2026 GMT
            Not After : Sep 28 07:26:49 2026 GMT
        Subject: CN=6ab0dc39-5b19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:51:3d:56:5b:a8:d7:34:7e:f1:c4:03:e8:66:
                    bd:9b:7a:55:1e:c0:06:ad:93:75:03:d6:3e:0e:84:
                    b4:cc:4c:69:37:a8:84:d6:c4:b2:f7:7f:66:36:ac:
                    1a:18:77:9a:f9:46:d2:42:b2:ea:9d:35:14:65:5b:
                    f9:d7:7f:ab:c8:5a:93:85:a6:e0:53:0f:2f:4c:ff:
                    1c:6d:17:cc:a6:e0:a8:58:e6:2f:fa:87:44:4a:bf:
                    fc:54:63:74:53:bb:92:25:e5:a2:09:f2:d0:de:27:
                    d1:81:eb:dc:f6:2a:66:b1:b8:d6:ee:3b:ad:7d:d8:
                    bd:75:14:05:e1:28:ee:9b:7a:64:1a:89:64:e3:9a:
                    f1:c2:80:1f:a3:e1:d7:3f:26:38:66:84:5a:7c:c4:
                    23:b6:38:5d:22:5e:03:d2:b3:98:78:31:8b:4b:c6:
                    84:4f:ca:cd:5e:3f:a3:ba:f4:03:dc:1d:87:9d:73:
                    9d:93:15:a4:54:a9:30:e6:3c:ee:2c:19:de:e1:be:
                    28:ca:73:ab:6d:20:74:b1:b9:d1:67:4a:74:8b:b7:
                    ef:61:32:b2:6d:a4:f7:20:2e:e0:bc:90:ea:27:f7:
                    df:ec:77:db:c1:cb:21:2a:9a:46:2c:99:60:64:d4:
                    d5:07:f4:3f:c7:c2:44:1b:3f:ff:48:0a:80:9c:bc:
                    5b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D4:CC:C2:E8:27:B7:B5:C0:A4:DC:29:7B:81:76:D3:C3:4B:7E:37
            X509v3 Authority Key Identifier:
                keyid:5E:28:8A:28:80:4A:FF:EE:FA:0E:44:43:10:97:9D:7C:EE:98:E4:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XiiKKIBK_-76DkRDEJedfO6Y5DI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:ff:7d:f8:e8:28:73:f1:fd:ef:24:bf:8f:ff:cc:e3:31:68:
         f0:a4:72:d7:59:c0:d4:7c:70:61:a5:54:7f:4c:54:3d:64:79:
         53:7c:e7:d3:d6:f4:b6:f2:30:da:92:99:0d:be:98:7d:fe:d3:
         f9:4d:38:0a:92:6c:28:32:92:a3:b5:d7:54:43:88:b5:96:db:
         4f:c3:d3:c1:cf:1d:22:36:ab:0b:f9:14:59:ef:ef:4d:a0:b7:
         da:7e:de:73:84:21:c4:41:f8:bb:92:8d:84:2a:41:be:b1:4a:
         fa:ac:0c:04:15:28:08:a1:6d:53:f2:35:d3:d8:15:bc:ed:b0:
         4b:d2:c7:49:82:f4:70:9c:51:79:5c:54:57:ad:c3:78:32:97:
         72:48:ff:fd:a3:fe:26:fd:4f:9b:da:aa:b2:a5:58:c4:8b:d0:
         dd:e2:8a:c3:ba:78:10:78:82:d2:58:3e:a6:31:4a:18:43:05:
         87:29:4d:01:58:0a:59:38:3d:17:8d:ed:a3:92:8c:99:47:58:
         85:85:9b:f1:6d:77:07:9a:bd:bf:43:76:cf:2f:2e:0c:90:82:
         05:54:79:45:64:41:21:4c:d9:73:74:ff:4c:eb:18:ef:64:e1:
         fe:34:fb:7e:cd:31:78:a5:69:78:71:70:cd:ea:86:a4:07:cf:
         e0:55:82:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:58:56 2026 by rpki-client