Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft
File:                     xMZ-u2st3Gkku7llXn4PghhTDGU.mft (raw, json)
Hash identifier:          xGiRD/fkM3Fmx5gUzVD8e3dnPz36cnBY+OA9E5fzZZc=
Subject key identifier:   95:E3:F5:66:62:06:76:82:D8:63:58:4A:D9:91:B5:09:78:20:2E:86
Authority key identifier: C4:C6:7E:BB:6B:2D:DC:69:24:BB:B9:65:5E:7E:0F:82:18:53:0C:65
Certificate issuer:       /CN=A9122D51/serialNumber=C4C67EBB6B2DDC6924BBB9655E7E0F8218530C65
Certificate serial:       01E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xMZ-u2st3Gkku7llXn4PghhTDGU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft
Manifest number:          01DB
Signing time:             Fri 09 Oct 2026 04:11:50 +0000
Manifest this update:     Fri 09 Oct 2026 04:11:50 +0000
Manifest next update:     Fri 16 Oct 2026 04:11:50 +0000
Files and hashes:         1: xMZ-u2st3Gkku7llXn4PghhTDGU.crl (hash: y5G4bYC3lzexsX+nz4iGFvifUD3Z8qRU+D+oz7SnulA=)
                          2: 6D610A58F23711EEA11AA759C4F9AE02.roa (hash: H955n/7dglZtqfdGojSNMJAFJkmI9QdbLn1Kqy9frW8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.crl
                          rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xMZ-u2st3Gkku7llXn4PghhTDGU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 04:11:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 483 (0x1e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122D51, serialNumber=C4C67EBB6B2DDC6924BBB9655E7E0F8218530C65
        Validity
            Not Before: Oct  9 04:11:50 2026 GMT
            Not After : Oct 16 04:11:50 2026 GMT
        Subject: CN=6ac86986-404c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c9:14:d8:d0:7e:d2:8a:40:d9:2c:dd:1e:ed:
                    c9:71:1b:fa:cf:4d:4a:ec:8f:dd:cc:ad:d2:16:b3:
                    fb:27:fd:6f:7d:3a:9c:28:b8:0c:30:0d:c5:25:d3:
                    e0:c5:b9:88:04:f8:6f:c8:b9:3c:61:b9:d4:4f:41:
                    55:45:83:99:f4:1b:ab:a0:b3:6d:74:1a:c0:9f:17:
                    5b:e9:69:91:7d:f6:86:b2:8e:c2:6d:5c:3a:30:f7:
                    74:b1:1c:05:6f:7b:e8:32:d7:3d:6d:eb:62:e1:97:
                    da:57:c7:fb:73:4d:1c:c9:c7:e2:ea:70:68:6c:fa:
                    12:61:19:6c:3d:10:87:32:b8:77:06:53:66:fc:8c:
                    0b:08:d8:95:d3:8f:c3:fa:ef:13:e5:3a:b1:8e:d8:
                    18:5a:48:ec:09:9c:57:2d:1b:eb:b3:5d:e7:e6:4b:
                    31:7c:0b:d6:b3:37:dc:8b:66:81:77:0a:d2:de:8b:
                    34:27:f2:a5:2e:a6:9b:80:d3:9b:70:8c:e7:f2:f0:
                    5d:bd:d8:72:61:1a:d3:95:b6:45:41:5a:92:8b:21:
                    8c:34:3e:90:f1:22:33:ca:e3:39:b8:6a:65:e4:43:
                    b6:98:07:3d:60:01:14:b7:69:ac:14:49:01:e6:97:
                    4b:ff:36:c6:cc:16:3d:3e:5d:5f:cd:29:f4:2b:c0:
                    a4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:E3:F5:66:62:06:76:82:D8:63:58:4A:D9:91:B5:09:78:20:2E:86
            X509v3 Authority Key Identifier:
                keyid:C4:C6:7E:BB:6B:2D:DC:69:24:BB:B9:65:5E:7E:0F:82:18:53:0C:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xMZ-u2st3Gkku7llXn4PghhTDGU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:e6:ca:d4:4e:25:62:04:fd:70:12:6b:f9:0c:2f:a4:ca:ea:
         2a:0d:c2:de:b6:02:f1:18:6d:89:29:9e:fc:c4:8e:f7:07:1d:
         61:2f:47:a7:a7:a8:e2:1f:6a:62:ce:fb:35:24:70:40:df:be:
         01:e8:3e:71:ab:bf:a0:28:8d:cf:1e:3e:41:0a:b1:d7:2a:09:
         41:66:bb:fc:12:51:51:ec:c5:01:2e:a5:c8:2f:0a:37:16:72:
         a6:67:e8:53:57:d3:a6:ac:55:78:e9:a9:bf:dc:db:85:ed:96:
         5f:e8:18:0a:74:af:26:e8:15:20:a1:bd:51:2f:b5:49:0e:56:
         ba:92:57:86:fd:b4:42:36:c5:b5:40:ca:b9:98:2a:dd:07:89:
         a8:c1:91:8b:10:44:d2:7e:33:30:b4:85:c8:02:83:b6:2c:2d:
         b3:4a:26:c2:cb:bb:06:ef:08:d9:82:ba:b6:51:1d:f8:8f:fe:
         8f:50:d5:43:e9:ee:af:45:0e:61:2a:88:13:20:b3:b0:3d:e3:
         ab:1e:99:78:c0:41:2a:11:eb:15:de:04:18:f7:1c:c5:a3:82:
         f0:f3:40:bc:10:46:27:f0:af:b5:03:d4:64:f6:e5:66:7d:52:
         45:e5:3f:80:31:63:f3:df:cf:ab:c2:cd:cc:0d:82:07:9c:0e:
         b7:aa:82:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:57:47 2026 by rpki-client