Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft
File:                     xVZN7BAWY79D0_LjQDlMAHZqY-M.mft (raw, json)
Hash identifier:          SipitKmivvkHSGixemCbG0aWnUz9FV/m7wR9P1sJhQY=
Subject key identifier:   84:F8:A6:0B:3F:2A:EA:12:1C:94:D6:20:C3:DC:94:CE:AF:90:88:8D
Authority key identifier: C5:56:4D:EC:10:16:63:BF:43:D3:F2:E3:40:39:4C:00:76:6A:63:E3
Certificate issuer:       /CN=A9122B85/serialNumber=C5564DEC101663BF43D3F2E340394C00766A63E3
Certificate serial:       0183
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft
Manifest number:          0178
Signing time:             Sat 31 Oct 2026 03:09:19 +0000
Manifest this update:     Sat 31 Oct 2026 03:09:19 +0000
Manifest next update:     Sat 07 Nov 2026 03:09:19 +0000
Files and hashes:         1: xVZN7BAWY79D0_LjQDlMAHZqY-M.crl (hash: qFkxVFCMaBLBzO2jUcdW7JawpDRbliwxreL62rye+Jo=)
                          2: 21D32B1EC54211EFBA442C85C4F9AE02.roa (hash: PK2V6pJkKs1cUfHH+NplffRcxO64GLqymLJjQgGE2VI=)
                          3: 42582BE6C54211EFBC189185C4F9AE02.roa (hash: fdQvyXJ/WQPf7MvdyljKOEY7VxKzLOji0CmCTZOXpHI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.crl
                          rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Nov 2026 03:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 387 (0x183)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122B85, serialNumber=C5564DEC101663BF43D3F2E340394C00766A63E3
        Validity
            Not Before: Oct 31 03:09:19 2026 GMT
            Not After : Nov  7 03:09:19 2026 GMT
        Subject: CN=6ae55bdf-8cbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:78:59:37:a1:e6:47:01:f3:4b:e7:11:da:bc:
                    16:44:5c:14:8d:61:e8:f6:eb:9c:de:eb:9e:55:4d:
                    e0:ca:57:eb:87:9e:a8:d7:b7:10:89:89:56:88:c6:
                    0a:dd:98:b8:47:36:e3:58:8e:aa:2f:22:f4:40:ee:
                    06:10:5f:5a:cc:95:9a:45:bc:f8:2a:2f:4e:50:ba:
                    bd:b0:bf:c3:5d:65:06:c9:b5:98:ae:f2:cf:bc:63:
                    e1:a3:f4:dc:80:06:1a:7b:4e:fe:88:64:ee:85:a9:
                    b6:26:5c:5e:a6:2e:e0:5e:b3:8f:01:7e:ae:56:92:
                    39:20:aa:fa:dd:8f:19:30:62:39:d8:44:94:04:45:
                    91:ce:9c:2e:07:09:0e:37:79:2c:c9:f1:d0:c9:b0:
                    ff:79:b5:d5:68:64:f6:b9:92:9c:75:1a:ae:6c:de:
                    fc:7a:91:8b:0c:ac:e9:7a:28:e4:8f:b2:27:ec:67:
                    07:28:d0:b4:4e:84:80:d0:60:25:4d:55:ff:06:19:
                    b0:5b:ad:e3:09:56:34:45:25:af:8e:57:37:60:62:
                    bf:db:a2:97:32:e9:50:58:fc:57:7e:a2:e3:9d:51:
                    cc:96:70:14:1d:5d:92:fe:87:23:37:70:9d:70:74:
                    89:e6:89:47:cf:5e:1a:90:8e:95:5a:ef:95:d2:01:
                    f5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:F8:A6:0B:3F:2A:EA:12:1C:94:D6:20:C3:DC:94:CE:AF:90:88:8D
            X509v3 Authority Key Identifier:
                keyid:C5:56:4D:EC:10:16:63:BF:43:D3:F2:E3:40:39:4C:00:76:6A:63:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:c0:a7:15:c3:08:70:82:f0:6f:57:fb:16:3c:bf:4f:ef:39:
         b0:41:0b:5f:a4:91:5b:3c:a8:64:84:b8:f0:6b:02:ff:24:96:
         21:4d:93:5d:24:42:64:a8:ea:51:1f:8d:d5:ee:16:91:6a:9c:
         66:32:d7:42:98:26:37:87:fd:fc:51:df:9c:b1:75:c9:f6:fb:
         d1:ae:92:e4:14:14:ce:11:71:db:fc:28:e6:26:61:3a:32:d6:
         a8:b9:05:3a:40:10:18:a4:e1:31:49:43:d8:aa:b6:05:52:8e:
         41:1f:45:1b:3b:a9:c0:84:2c:bb:f2:b2:45:71:e6:98:2d:65:
         2e:a9:5c:d2:54:58:8b:a7:3b:b9:73:c7:eb:af:f0:0b:70:8c:
         57:30:6c:f8:50:14:25:4c:d1:28:51:5a:21:18:34:9a:88:8e:
         ac:c6:64:e9:ac:8f:82:30:1d:d2:95:fc:27:ca:9e:69:76:db:
         8a:86:36:e0:e3:57:15:94:e5:3b:66:b5:83:eb:aa:29:f4:d1:
         da:fe:21:09:1f:b0:18:46:65:cd:9d:34:13:ac:35:43:5f:bc:
         02:c3:60:ef:fa:7e:30:90:64:e8:49:ce:65:9c:86:aa:30:4c:
         a0:ff:25:a3:8c:0f:31:1f:49:0a:80:f9:0d:ad:5d:2b:00:0c:
         32:3c:f0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 03:25:28 2026 by rpki-client