Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft
File:                     xM4RIyFRinKEfG1X56ijVDRVNzs.mft (raw, json)
Hash identifier:          ZhEU/tjo6jMlwb/aWvLBaQqA4keLTuRZoKLmDQpsLxA=
Subject key identifier:   E4:85:09:EB:25:1C:FA:93:BC:26:D7:1C:71:11:D1:E5:F3:1F:86:9D
Authority key identifier: C4:CE:11:23:21:51:8A:72:84:7C:6D:57:E7:A8:A3:54:34:55:37:3B
Certificate issuer:       /CN=A9116D64/serialNumber=C4CE112321518A72847C6D57E7A8A3543455373B
Certificate serial:       3595
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft
Manifest number:          358F
Signing time:             Thu 08 Oct 2026 15:08:35 +0000
Manifest this update:     Thu 08 Oct 2026 15:08:35 +0000
Manifest next update:     Thu 15 Oct 2026 15:08:35 +0000
Files and hashes:         1: xM4RIyFRinKEfG1X56ijVDRVNzs.crl (hash: JiKv371KRM0F/iJi9J3ey0iQvHImyz2BJA8XGUOK8QI=)
                          2: 83440A96A05E11F1BD16176B4411F970.roa (hash: ibRZc0F5qz64ffBnyZag/XiuPhH/eRAyOQPliiCWC9E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.crl
                          rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 14:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13717 (0x3595)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116D64, serialNumber=C4CE112321518A72847C6D57E7A8A3543455373B
        Validity
            Not Before: Oct  8 15:08:35 2026 GMT
            Not After : Oct 15 15:08:35 2026 GMT
        Subject: CN=6ac7b1f3-56d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:eb:e1:6f:3d:24:fd:8d:5c:6d:75:d2:83:7d:
                    2f:11:e7:7b:a9:15:1a:56:68:df:a5:c4:8e:8f:fc:
                    17:04:4d:4a:75:51:2a:4d:34:93:5e:43:7c:7d:0d:
                    3b:9a:e0:b3:ca:e8:72:f2:b2:cd:53:d6:f6:fe:d3:
                    a9:be:27:df:79:dd:dd:da:c1:16:d9:a2:f1:f0:48:
                    4f:06:81:73:7b:fb:8e:db:5c:c7:28:1c:a2:ad:0c:
                    a2:41:8a:70:65:11:a9:3a:ec:e6:0c:8a:82:d2:6d:
                    44:aa:ca:a1:92:f0:ab:0b:10:4c:ce:4e:46:d0:5d:
                    30:d0:46:c9:74:c3:e0:12:d5:31:f7:9d:0c:55:bc:
                    f9:86:22:0e:37:3c:4d:57:0b:7a:dc:ab:da:de:af:
                    a0:f5:33:ba:40:15:6f:19:3d:41:3a:bc:ad:91:08:
                    e0:28:8f:a4:d7:63:da:44:d9:dc:59:f3:89:4b:1f:
                    f0:23:fd:1f:9e:fe:54:6a:f6:0a:ea:03:40:78:b3:
                    98:91:52:5d:b8:5a:02:31:28:eb:a5:11:2c:5f:07:
                    d9:80:1d:c1:8a:88:21:52:24:a6:b0:b3:f3:02:71:
                    da:dd:3b:18:17:9d:97:bb:65:ad:fa:5a:67:00:5c:
                    1f:1f:48:18:5a:6f:82:28:8d:80:fc:25:46:62:7a:
                    b8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:85:09:EB:25:1C:FA:93:BC:26:D7:1C:71:11:D1:E5:F3:1F:86:9D
            X509v3 Authority Key Identifier:
                keyid:C4:CE:11:23:21:51:8A:72:84:7C:6D:57:E7:A8:A3:54:34:55:37:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:85:fa:84:18:2b:81:4d:22:f5:75:69:47:8e:0a:14:c0:4f:
         01:36:0b:48:d4:19:69:eb:02:b0:f4:09:52:ec:02:bd:a2:25:
         41:ee:2e:2c:fc:73:d6:72:b0:cd:eb:34:06:51:cb:03:0c:78:
         6e:37:d3:a7:68:d7:b9:33:2e:1c:d2:aa:28:4c:99:cd:ff:d5:
         8d:32:04:60:79:cb:94:79:73:a1:06:6e:d4:67:62:6f:5e:fd:
         93:5c:1c:2d:3f:a2:30:13:76:23:8d:5f:51:ea:92:6c:61:71:
         eb:74:6a:6e:4f:36:9c:b0:57:5a:61:d8:ee:04:d8:87:82:29:
         f4:85:e0:a7:f5:59:51:a4:ff:01:6b:09:f2:34:27:04:38:84:
         55:19:64:e2:10:4c:88:52:54:6c:f0:a5:e6:5f:a4:f8:0d:13:
         15:75:05:ce:f6:4d:c2:cb:bf:4d:32:63:82:8e:62:98:dd:1d:
         05:42:b5:23:c4:44:36:5e:45:8c:f4:1f:a6:33:16:19:e3:6a:
         22:39:d7:3c:4b:71:30:ab:86:55:4b:f4:6e:03:e6:62:e8:48:
         b3:ca:fa:b7:d8:0c:0d:2a:1f:b2:d0:60:f3:ed:91:3c:8b:f7:
         a2:be:6b:04:3f:cd:32:78:39:43:33:2f:4f:7f:27:05:5b:c1:
         5d:37:68:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:56:42 2026 by rpki-client