Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft
File:                     xdQJ-106qXOpUMnDHMMBVfNJP2I.mft (raw, json)
Hash identifier:          iANeTtoXfmINnMEU+9X4R60Y52DLCIk6D1HdWEE+0Dc=
Subject key identifier:   59:B4:EB:71:C3:34:05:EA:E3:52:50:11:D5:5E:8B:B7:7C:80:06:EF
Authority key identifier: C5:D4:09:FB:5D:3A:A9:73:A9:50:C9:C3:1C:C3:01:55:F3:49:3F:62
Certificate issuer:       /CN=A91D6884/serialNumber=C5D409FB5D3AA973A950C9C31CC30155F3493F62
Certificate serial:       0232
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft
Manifest number:          022C
Signing time:             Fri 25 Sep 2026 02:46:47 +0000
Manifest this update:     Fri 25 Sep 2026 02:46:46 +0000
Manifest next update:     Fri 02 Oct 2026 02:46:46 +0000
Files and hashes:         1: xdQJ-106qXOpUMnDHMMBVfNJP2I.crl (hash: j2Cx3nvmkP1GbXJGMaJZq8FvEKgbMNNknxpYJCmr4qE=)
                          2: 5CF4C0D4FADD11EE8083D572C4F9AE02.roa (hash: u3RDHvzO8IyUThl8mfuW7Q0vDhMHboGSoExS7yNBOm0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.crl
                          rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 02:46:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 562 (0x232)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6884, serialNumber=C5D409FB5D3AA973A950C9C31CC30155F3493F62
        Validity
            Not Before: Sep 25 02:46:46 2026 GMT
            Not After : Oct  2 02:46:46 2026 GMT
        Subject: CN=6ab5e097-c9ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:57:9a:86:2d:6c:0c:c4:2f:27:55:e1:68:41:
                    02:43:44:8a:31:b9:9c:e6:31:7d:17:cc:d4:e4:7a:
                    9b:15:f8:af:02:d8:e0:f3:10:ae:69:50:39:df:c0:
                    e2:07:70:13:58:cf:7f:77:47:7a:70:33:9c:ee:11:
                    7d:6e:41:54:a1:58:97:0b:97:f6:12:45:9e:a4:4b:
                    fe:a8:2d:fb:64:36:d0:25:88:e1:0c:c5:79:63:a2:
                    cc:61:82:22:ce:2b:20:2b:23:84:f0:9e:cc:5a:12:
                    20:a1:da:7e:7a:13:e0:d7:7c:01:87:9b:c5:41:46:
                    ff:9f:67:0b:a2:cb:be:66:c5:51:b5:64:0f:c0:b0:
                    6d:9d:17:d1:b2:fa:c4:cf:3d:da:48:98:82:72:5b:
                    2e:07:e9:15:3e:6c:33:4c:7d:e3:16:b6:dd:32:86:
                    c2:c0:6b:6d:bb:98:29:c3:38:21:9b:29:a5:be:c7:
                    df:2d:0b:0c:a1:01:ab:bf:58:f3:48:c0:b4:fa:4a:
                    21:1e:a7:10:1e:84:5b:ba:31:b6:ce:7e:6f:23:05:
                    8b:b8:6d:84:62:d3:42:9d:e0:ec:de:86:da:84:65:
                    56:9d:6b:b2:4b:1a:82:d7:e7:c2:57:07:33:5f:28:
                    cf:e8:96:2c:5b:b5:88:09:98:71:ba:d9:c1:53:1d:
                    73:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:B4:EB:71:C3:34:05:EA:E3:52:50:11:D5:5E:8B:B7:7C:80:06:EF
            X509v3 Authority Key Identifier:
                keyid:C5:D4:09:FB:5D:3A:A9:73:A9:50:C9:C3:1C:C3:01:55:F3:49:3F:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:e3:a2:49:ed:a0:d6:c4:99:94:4b:d3:db:0a:14:f2:8e:78:
         35:86:19:55:0e:4d:f4:a0:9a:b1:4a:5b:45:5f:03:ee:da:7f:
         40:7f:b4:60:4c:69:94:d7:65:40:85:03:46:b0:4e:5c:15:56:
         3d:dc:db:bb:c1:96:f0:9b:52:d9:4a:e5:07:6e:8f:23:fd:41:
         66:1c:ac:c9:59:ed:a9:8d:d7:13:e5:42:1c:05:7e:cd:e7:11:
         6e:44:e0:2e:13:77:3d:c3:28:2d:25:3c:c9:eb:e3:5b:1e:73:
         0f:93:5a:76:c1:f2:3f:5d:25:87:95:f1:8a:aa:97:de:52:fe:
         09:82:f7:7d:06:bc:ea:e6:c3:29:ab:38:a0:50:ee:c7:a2:3a:
         01:aa:8e:7f:7c:39:9a:bf:4d:cd:7c:c2:b7:92:41:a1:40:53:
         59:9c:4e:de:bb:86:5b:e1:10:a5:d3:d8:70:63:40:48:08:f9:
         87:be:f0:83:75:ab:8c:a0:9c:d1:b2:2d:d8:85:7a:4e:09:5b:
         31:e0:ea:76:14:f1:58:fe:5e:e2:56:dd:cb:a5:82:b1:78:82:
         f9:10:e4:3e:98:0f:24:b0:db:a8:77:74:06:1c:ce:b2:af:09:
         da:40:e0:5c:f1:a3:ce:d3:8e:47:d2:b4:16:81:e8:39:cc:d9:
         15:7a:1c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 12:43:33 2026 by rpki-client