Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft
File:                     xvo-z74pzTYwaQdi6zKIEDptCKA.mft (raw, json)
Hash identifier:          bC9ncqrJCSvQrMy+qyGQhPPOB9AU+r5WBZF02ulNwIM=
Subject key identifier:   11:82:B3:4B:0F:93:07:80:84:DE:C9:1B:23:DB:AD:44:57:4B:FC:F7
Authority key identifier: C6:FA:3E:CF:BE:29:CD:36:30:69:07:62:EB:32:88:10:3A:6D:08:A0
Certificate issuer:       /CN=A91D9A6D/serialNumber=C6FA3ECFBE29CD3630690762EB3288103A6D08A0
Certificate serial:       0E20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft
Manifest number:          0E14
Signing time:             Mon 28 Sep 2026 17:54:29 +0000
Manifest this update:     Mon 28 Sep 2026 17:54:29 +0000
Manifest next update:     Mon 05 Oct 2026 17:54:29 +0000
Files and hashes:         1: xvo-z74pzTYwaQdi6zKIEDptCKA.crl (hash: eZqhG6588c4W+8MS/Mra5aLk/iWB37ag6esNwh7etBQ=)
                          2: 959C0ABE93EA11EE91A46031C4F9AE02.roa (hash: o03RGCe0M4Rcb7aja2eQGJ8mh/lLVGkF7+Q0rj78MZA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.crl
                          rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 17:54:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3616 (0xe20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9A6D, serialNumber=C6FA3ECFBE29CD3630690762EB3288103A6D08A0
        Validity
            Not Before: Sep 28 17:54:29 2026 GMT
            Not After : Oct  5 17:54:29 2026 GMT
        Subject: CN=6abaa9d5-e5f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:87:76:c5:e4:17:f3:6b:9c:32:ab:4c:67:61:
                    ee:f4:5e:a5:82:0e:16:7c:9e:14:21:11:b9:e8:f6:
                    2b:85:fa:08:93:e1:43:37:aa:d3:85:95:d9:e5:06:
                    3a:dd:0a:c5:3b:7c:99:5a:f4:c5:86:37:5a:01:a8:
                    7b:73:6b:e8:2d:73:1f:d4:ac:63:c6:f8:7b:5f:61:
                    c0:3a:28:6e:16:e2:40:a8:73:c2:b2:4f:94:83:68:
                    e0:7c:b3:a7:8c:fc:d6:fd:4c:6a:29:18:7d:19:33:
                    37:3f:ba:2b:9f:c3:35:6e:45:e5:45:ed:a2:37:a8:
                    42:45:c7:49:35:d2:e4:15:ab:f4:c9:30:8a:fa:a9:
                    5e:0c:e7:1a:da:4d:dc:c6:14:79:c2:66:f6:92:dc:
                    eb:86:9c:89:53:ee:bf:16:1d:c0:ed:e6:f0:39:75:
                    7d:62:41:a2:0a:7f:6e:8a:d7:b5:32:38:43:87:0f:
                    00:4f:38:8d:54:42:e6:44:3d:64:98:10:da:9c:a6:
                    fa:33:24:a2:b6:27:3b:4f:28:99:a7:cb:60:72:f3:
                    9a:3b:3e:9d:2f:49:85:b5:de:fa:88:57:2f:12:b9:
                    68:63:56:db:a3:79:78:03:fa:a7:fe:4b:03:80:52:
                    1a:e6:50:63:6a:1b:8a:6e:6e:be:f8:3b:2c:22:32:
                    21:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:82:B3:4B:0F:93:07:80:84:DE:C9:1B:23:DB:AD:44:57:4B:FC:F7
            X509v3 Authority Key Identifier:
                keyid:C6:FA:3E:CF:BE:29:CD:36:30:69:07:62:EB:32:88:10:3A:6D:08:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:01:e4:f4:08:73:47:a2:aa:fd:af:3e:1a:ea:9e:4a:61:3b:
         21:b0:13:2f:2e:7e:7e:d9:8b:95:32:ca:a4:5e:8c:4c:c5:6e:
         b8:ce:2a:ba:eb:a1:78:53:f4:5a:ca:67:01:75:80:ae:54:2f:
         e2:5b:e0:b3:62:d0:c0:61:22:ae:30:ea:ea:cc:3c:f0:6b:cb:
         8a:f6:60:50:c1:18:10:6f:db:7d:d1:ca:a7:38:d6:f8:7a:20:
         87:6e:0e:4e:84:d7:61:2c:48:45:3e:3b:59:56:ca:a2:e5:77:
         76:0f:d4:61:73:b9:25:d3:b1:ac:c7:3b:e4:44:24:83:cd:d1:
         42:c2:a8:b6:c2:d9:43:62:31:88:e7:6d:ef:08:74:b0:2f:e6:
         dd:9f:f5:bd:9c:78:d2:fe:19:80:4a:09:34:fd:76:a6:70:c7:
         ce:40:ef:67:90:82:d9:73:ef:8d:c0:60:b8:d5:95:f8:1d:aa:
         3e:f4:a5:ee:58:db:84:01:bb:4d:2b:a6:ea:ae:0e:eb:cd:a4:
         05:ff:aa:b8:6f:66:3a:c3:fe:40:38:5d:f6:e7:3c:db:b6:ff:
         28:26:46:2f:28:42:f4:ed:dc:10:1c:ea:10:ea:95:72:64:fc:
         60:29:a7:f9:b1:11:42:67:95:95:fe:bf:0f:5f:b7:5f:5f:f3:
         6c:ea:a3:13
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDlBNkQxMTAvBgNVBAUTKEM2RkEzRUNGQkUyOUNEMzYzMDY5MDc2MkVCMzI4ODEw
M0E2RDA4QTAwHhcNMjYwOTI4MTc1NDI5WhcNMjYxMDA1MTc1NDI5WjAYMRYwFAYD
VQQDEw02YWJhYTlkNS1lNWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtId2xeQX82ucMqtMZ2Hu9F6lgg4WfJ4UIRG56PYrhfoIk+FDN6rThZXZ5QY6
3QrFO3yZWvTFhjdaAah7c2voLXMf1Kxjxvh7X2HAOihuFuJAqHPCsk+Ug2jgfLOn
jPzW/UxqKRh9GTM3P7orn8M1bkXlRe2iN6hCRcdJNdLkFav0yTCK+qleDOca2k3c
xhR5wmb2ktzrhpyJU+6/Fh3A7ebwOXV9YkGiCn9uite1MjhDhw8ATziNVELmRD1k
mBDanKb6MySitic7TyiZp8tgcvOaOz6dL0mFtd76iFcvErloY1bbo3l4A/qn/ksD
gFIa5lBjahuKbm6++DssIjIhFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBGCs0sP
kweAhN7JGyPbrURXS/z3MB8GA1UdIwQYMBaAFMb6Ps++Kc02MGkHYusyiBA6bQig
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUE2RC9BMjFFNzFEMkRC
OEUxMUU5QTM1MjYyMjRDNEY5QUUwMi94dm8tejc0cHpUWXdhUWRpNnpLSUVEcHRD
S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3h2by16NzRwelRZd2FRZGk2ektJRURwdENLQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
OUE2RC9BMjFFNzFEMkRCOEUxMUU5QTM1MjYyMjRDNEY5QUUwMi94dm8tejc0cHpU
WXdhUWRpNnpLSUVEcHRDS0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUAHk9AhzR6Kq/a8+GuqeSmE7IbATLy5+ftmLlTLKpF6MTMVuuM4quuuheFP0
WspnAXWArlQv4lvgs2LQwGEirjDq6sw88GvLivZgUMEYEG/bfdHKpzjW+Hogh24O
ToTXYSxIRT47WVbKouV3dg/UYXO5JdOxrMc75EQkg83RQsKotsLZQ2IxiOdt7wh0
sC/m3Z/1vZx40v4ZgEoJNP12pnDHzkDvZ5CC2XPvjcBguNWV+B2qPvSl7ljbhAG7
TSum6q4O682kBf+quG9mOsP+QDhd9uc827b/KCZGLyhC9O3cEBzqEOqVcmT8YCmn
+bERQmeVlf6/D1+3X1/zbOqjEw==
-----END CERTIFICATE-----
Generated at Wed Sep 30 01:06:03 2026 by rpki-client