Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft
File:                     xA63gWRRh1SG2mQ_j5Nht337IaM.mft (raw, json)
Hash identifier:          KnToj++gzMjboo34F8Ylb5mjVslftGY4FVhDxSdGoCQ=
Subject key identifier:   63:80:E0:CE:FF:DB:38:AC:82:E2:7C:E7:FD:53:ED:81:A5:7E:AE:63
Authority key identifier: C4:0E:B7:81:64:51:87:54:86:DA:64:3F:8F:93:61:B7:7D:FB:21:A3
Certificate issuer:       /CN=A9125590/serialNumber=C40EB7816451875486DA643F8F9361B77DFB21A3
Certificate serial:       35C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft
Manifest number:          35A4
Signing time:             Sun 04 Oct 2026 14:19:38 +0000
Manifest this update:     Sun 04 Oct 2026 14:19:37 +0000
Manifest next update:     Sun 11 Oct 2026 14:19:37 +0000
Files and hashes:         1: xA63gWRRh1SG2mQ_j5Nht337IaM.crl (hash: CleHggrLjqcc3UBnqgZEFgdXylXDzO+u1FsjVkcTnvo=)
                          2: 26E02598562F11EB94FD0463C4F9AE02.roa (hash: HyRMO/pcIzGm5plPPapZZ07tr13jSP+aoFVCVKamf28=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.crl
                          rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 14:19:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13760 (0x35c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125590, serialNumber=C40EB7816451875486DA643F8F9361B77DFB21A3
        Validity
            Not Before: Oct  4 14:19:37 2026 GMT
            Not After : Oct 11 14:19:37 2026 GMT
        Subject: CN=6ac26079-01be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:dd:b7:74:4f:20:41:c5:57:ed:f1:1e:30:13:
                    5b:6e:a8:ef:e6:70:bd:d4:b8:8c:93:2d:3b:63:76:
                    48:b3:7a:71:8e:64:1f:fe:94:5a:16:1d:1c:61:84:
                    77:19:2b:b2:fe:bb:8e:c2:5f:7d:e7:e0:97:42:a9:
                    9a:56:62:6a:25:25:99:be:8e:58:16:0a:ba:a4:c6:
                    39:4f:e3:2c:eb:bb:5a:5c:db:b7:9e:3a:0a:b8:6e:
                    fa:ab:21:da:76:a8:ad:11:3a:42:2d:14:d0:63:f7:
                    7e:11:e6:6c:ba:62:a6:68:39:02:61:3a:88:e4:95:
                    b6:60:47:e9:eb:cf:c2:85:10:8e:0f:98:1b:aa:73:
                    27:dc:78:f7:eb:2b:67:0c:47:dc:ab:fc:e7:b7:87:
                    eb:e9:60:70:de:4a:18:00:2b:57:3a:a0:a8:b9:dc:
                    48:ed:65:51:7c:0b:bc:a4:f5:72:3b:a2:a0:eb:4e:
                    f6:b6:30:4b:43:9e:0c:fb:61:c2:cb:84:bf:e2:fe:
                    90:14:5b:76:00:cc:44:d3:65:d8:78:dd:d1:d2:8c:
                    9b:cd:6b:6a:f5:65:26:41:b0:a8:d3:df:b9:39:0b:
                    6c:33:10:35:0a:7a:a7:b2:1a:a3:6d:50:9e:1a:9b:
                    f4:08:ef:c8:5a:c8:02:55:31:72:25:11:6d:55:e0:
                    39:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:80:E0:CE:FF:DB:38:AC:82:E2:7C:E7:FD:53:ED:81:A5:7E:AE:63
            X509v3 Authority Key Identifier:
                keyid:C4:0E:B7:81:64:51:87:54:86:DA:64:3F:8F:93:61:B7:7D:FB:21:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:49:62:a3:59:cd:5e:43:a7:d7:61:41:41:19:f3:e5:7d:a8:
         87:78:81:fd:e6:7c:23:7f:29:7f:60:4f:b9:4a:62:42:08:37:
         8b:b1:bc:65:37:70:d9:53:ea:7a:25:93:d8:13:4b:6a:86:25:
         9d:48:f1:e8:72:6e:2b:74:b1:8b:99:22:2a:44:55:7c:54:ff:
         08:b3:c4:f6:62:1c:de:cc:d6:78:3e:e5:2a:e7:57:b3:85:1e:
         34:cb:ce:eb:b7:18:da:7f:f9:5b:ce:4b:d1:9e:46:7e:11:6a:
         d3:bb:17:e2:cb:d0:48:34:81:41:79:04:f3:31:27:c9:8b:b2:
         19:91:d4:cc:4d:47:35:ba:9a:79:59:6d:33:f7:8e:0e:4c:2a:
         56:de:0b:b6:21:e0:a5:6e:dd:77:d5:7c:68:7d:17:20:b0:6c:
         d9:18:e2:60:7e:6b:a6:c1:8b:73:3b:64:4f:3f:85:7c:ba:76:
         32:c9:18:9d:f8:cf:28:50:c3:d7:af:12:e9:dd:96:9c:0b:6e:
         50:4e:4a:21:53:b0:a4:50:78:b2:d9:51:0f:79:ba:18:c6:ed:
         4a:13:c9:de:a9:ef:98:4b:20:db:2f:63:69:76:4c:94:62:b8:
         6d:06:ea:32:bc:2e:a3:c7:15:87:55:02:f1:93:ae:e8:ec:79:
         6d:fa:a3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:59:35 2026 by rpki-client