Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft
File:                     xNe5S537ZPXBiScjMNvcrSp9AW4.mft (raw, json)
Hash identifier:          D2gmtenc4oNZa8z/l4g3WmJ/A8pEjg9AFre7siagd0I=
Subject key identifier:   D8:04:6B:9F:96:07:78:16:C4:8E:65:CB:0F:D6:BD:C8:CC:A2:58:E9
Authority key identifier: C4:D7:B9:4B:9D:FB:64:F5:C1:89:27:23:30:DB:DC:AD:2A:7D:01:6E
Certificate issuer:       /CN=A912E791/serialNumber=C4D7B94B9DFB64F5C189272330DBDCAD2A7D016E
Certificate serial:       05D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft
Manifest number:          05BA
Signing time:             Wed 28 Oct 2026 23:24:01 +0000
Manifest this update:     Wed 28 Oct 2026 23:24:00 +0000
Manifest next update:     Wed 04 Nov 2026 23:24:00 +0000
Files and hashes:         1: xNe5S537ZPXBiScjMNvcrSp9AW4.crl (hash: g82icHu+x1GdWrs0J/t7G9CzOP3wwNuI7A3Np7u07js=)
                          2: 9E9D5C66157C11F0B4CD801EC4F9AE02.roa (hash: XRPA2JKWpTIHSFaMOHgkHY8yCfbif5wXEREcy191bJ4=)
                          3: 83595478B65E11EF8DB85B32C4F9AE02.roa (hash: et9HDrh+GN5yOnO0QC3PHWe6pVv8xUnM/31aeD6iTS8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.crl
                          rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Nov 2026 23:23:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1492 (0x5d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E791, serialNumber=C4D7B94B9DFB64F5C189272330DBDCAD2A7D016E
        Validity
            Not Before: Oct 28 23:24:00 2026 GMT
            Not After : Nov  4 23:24:00 2026 GMT
        Subject: CN=6ae28411-ec4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0b:d4:ea:18:a6:2e:fd:1a:13:3f:d9:e4:82:
                    9d:f6:36:98:54:3d:91:c3:db:db:3a:eb:97:da:c3:
                    23:a6:a6:72:80:46:7d:4b:be:83:ed:3a:1b:8e:8e:
                    70:ad:6c:1d:9f:ea:e1:eb:62:7a:df:a0:93:ce:64:
                    9a:c0:2d:fc:4b:29:bf:2f:b2:58:88:13:54:b6:38:
                    ef:97:ad:00:8f:fd:02:5a:6d:91:66:0a:ad:31:03:
                    c5:f3:12:be:f4:95:71:e9:66:92:27:7c:d1:6d:3b:
                    95:41:34:f3:cf:ce:f8:fb:e3:e1:76:17:6d:05:30:
                    02:4c:a4:86:ae:2f:14:a2:41:fb:ac:6a:12:a0:22:
                    86:73:ba:c7:18:a6:7d:e2:23:b0:66:31:74:a4:9b:
                    7b:d0:86:fd:b7:2b:2b:c4:f6:30:10:1a:7d:45:77:
                    01:fc:48:65:b5:74:a2:5a:c4:38:8b:b9:4b:76:ec:
                    e1:f7:05:1b:cd:bf:b2:a2:56:45:d1:8d:44:53:df:
                    28:76:1d:95:ff:0b:ce:09:12:ac:25:83:96:a2:18:
                    5c:f7:b5:9c:b6:0f:2b:21:95:26:31:4b:b3:93:87:
                    10:eb:f1:07:f2:a8:be:6e:8a:9c:78:5f:69:77:13:
                    50:ad:e4:4f:28:9e:97:28:54:c0:19:aa:f0:e0:8b:
                    55:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:04:6B:9F:96:07:78:16:C4:8E:65:CB:0F:D6:BD:C8:CC:A2:58:E9
            X509v3 Authority Key Identifier:
                keyid:C4:D7:B9:4B:9D:FB:64:F5:C1:89:27:23:30:DB:DC:AD:2A:7D:01:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:11:ac:31:65:35:47:9e:ea:68:08:dd:59:ba:bf:b4:90:1c:
         65:e1:a6:a8:de:66:5c:0c:cc:56:ed:c4:e7:9f:b7:45:79:3d:
         c7:58:ba:0e:ce:00:37:a5:7f:68:89:af:78:34:9d:d5:d7:2c:
         9a:f9:ce:6f:c5:77:2a:46:b8:65:a4:23:67:c1:6a:3d:6f:80:
         58:b5:a4:12:f1:e7:2f:d3:77:18:ed:b7:c9:e6:25:e2:a5:99:
         e1:c3:ab:b6:0e:7b:05:13:ed:f9:e5:21:a0:a2:fc:98:f1:ad:
         ca:bd:fd:21:da:c3:d7:83:47:5d:8b:3a:7f:6c:64:e7:81:0a:
         f7:6d:c4:ef:63:3f:55:ab:d5:b3:8a:1e:1f:ce:5c:5f:a4:0d:
         78:83:e4:d0:89:9a:52:1f:8d:c4:3b:fa:53:e4:35:20:04:07:
         e5:44:db:61:41:60:fc:67:ce:cc:a1:06:c5:13:b6:68:d2:fc:
         6c:71:9b:a0:8b:b9:21:6a:ac:5e:8c:44:5c:1a:7b:82:d1:91:
         3e:7c:4a:ad:cb:ac:ce:36:96:c8:33:d6:8a:d9:f9:b4:6f:5a:
         bd:ca:8c:1a:c1:57:a6:23:b9:8f:e2:01:99:5f:dc:77:86:92:
         82:21:f2:3c:80:86:d7:0c:40:9d:a3:52:07:78:95:20:b7:e5:
         5d:93:7d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 14:49:10 2026 by rpki-client