Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft
File:                     XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft (raw, json)
Hash identifier:          tZwxTYhhv8VzjpHyy25IUqUJz6UZZPsGkrjouscA3p8=
Subject key identifier:   34:D4:62:F7:1C:57:AA:FE:AB:3F:2A:B2:C1:71:82:6F:F1:62:2D:E0
Authority key identifier: 5D:B7:5B:2D:F9:4D:04:47:4A:6E:5E:2D:4B:78:CC:08:4B:FC:2A:6C
Certificate issuer:       /CN=A912698E/serialNumber=5DB75B2DF94D04474A6E5E2D4B78CC084BFC2A6C
Certificate serial:       010F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft
Manifest number:          0107
Signing time:             Thu 10 Sep 2026 17:31:13 +0000
Manifest this update:     Thu 10 Sep 2026 17:31:12 +0000
Manifest next update:     Thu 17 Sep 2026 17:31:12 +0000
Files and hashes:         1: XbdbLflNBEdKbl4tS3jMCEv8Kmw.crl (hash: 24YfQat6cwgguvhn1KUpTGrkROWNlj1jiqbzIvZUlXE=)
                          2: E7E8471858BB11F1BAE21C4D9A833773.roa (hash: Tc3fcqpoYCzH1k3AQYmkHoaNjc5Waq991d+rce3j0bg=)
                          3: D5271A183ADB11F0BC52A042C4F9AE02.roa (hash: 4a6PLPW/gOHUVu6+aFebgQ5/qx4vCQg4zTQoTmjp9Rk=)
                          4: 79FB87E45BE811F1A1050E64C6833773.roa (hash: NWwclcZCcPG2TS1pQpW1RR20GoSP1Iy5BozZgf751Lw=)
                          5: 87087F00267E11F09183092AC4F9AE02.roa (hash: ZonpCT+5ZZuP5erM6WjI5zX2DJGXZb7/2jDh35lgn00=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.crl
                          rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 14:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 271 (0x10f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912698E, serialNumber=5DB75B2DF94D04474A6E5E2D4B78CC084BFC2A6C
        Validity
            Not Before: Sep 10 17:31:12 2026 GMT
            Not After : Sep 17 17:31:12 2026 GMT
        Subject: CN=6aa2e960-7a6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:57:63:7f:38:07:e4:28:bb:7e:44:77:0f:23:
                    6b:e2:a1:42:16:51:4f:17:4c:e9:1f:b5:d8:36:82:
                    d7:2c:b9:56:27:f1:a0:9a:89:18:8d:d7:40:3f:8b:
                    90:c3:a2:1a:67:11:bd:33:2a:e8:5c:c1:6f:d1:bc:
                    d9:94:1d:88:d9:bc:ed:c1:bf:72:2c:64:77:73:b1:
                    ee:51:3a:a1:3f:33:c5:53:98:1a:eb:56:63:d3:42:
                    f4:c6:b4:a0:44:cb:36:27:2f:d3:29:e0:e0:c7:67:
                    c4:41:78:25:99:0a:53:de:ae:24:d7:d3:df:52:a7:
                    a0:6f:6c:76:f9:ee:7e:25:6f:28:b9:d7:fd:b9:f9:
                    8c:6b:71:c2:2d:3a:de:4f:7b:bb:b3:5b:b8:d9:70:
                    46:cc:72:fe:e3:40:e8:35:77:43:04:e4:dd:53:32:
                    22:d6:1b:ba:00:9f:74:80:7c:6d:c4:ad:3f:0f:00:
                    ff:52:55:3d:81:07:13:36:3f:42:81:6c:a9:d1:90:
                    97:9c:d4:67:ee:3b:ea:40:9a:37:ff:26:f0:2d:b1:
                    67:f3:d9:40:a6:46:00:a4:01:c1:b2:88:0d:97:f8:
                    14:a8:6a:b5:e1:c3:f2:78:35:54:9b:a2:23:f8:b0:
                    93:dc:99:11:75:a2:67:bc:6e:ca:4d:72:e8:79:08:
                    52:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D4:62:F7:1C:57:AA:FE:AB:3F:2A:B2:C1:71:82:6F:F1:62:2D:E0
            X509v3 Authority Key Identifier:
                keyid:5D:B7:5B:2D:F9:4D:04:47:4A:6E:5E:2D:4B:78:CC:08:4B:FC:2A:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:74:fd:59:07:8d:55:db:30:45:dc:ac:cc:1c:d8:f2:29:64:
         a0:56:09:8c:8f:43:ae:71:ba:d9:4d:d1:b6:a8:f4:71:98:54:
         c0:f9:3b:11:cb:dc:2a:95:32:61:89:09:95:93:e7:70:a9:df:
         e8:80:f4:ea:b7:0c:59:69:68:3c:1a:3f:e1:cc:bd:55:3f:62:
         39:b7:8c:3a:20:8e:a3:b0:b1:5d:77:56:24:f9:07:65:cd:ad:
         49:65:db:b1:68:cd:c5:66:94:da:17:3f:2b:0f:13:37:53:e7:
         c8:4a:b9:46:21:31:b4:6e:97:da:c3:5d:9f:88:ea:fa:09:af:
         01:be:a2:97:cd:84:63:3e:07:fc:3f:41:2e:25:10:4e:44:c4:
         fb:c2:43:5c:ae:95:27:8e:b6:98:10:89:c1:46:42:96:7f:85:
         46:cc:63:7b:d8:68:7a:35:d3:e2:30:a3:14:7c:19:98:48:0d:
         14:44:ef:99:3d:14:1f:eb:fd:b1:15:ed:2e:24:c3:dd:76:e5:
         b9:6e:3e:7b:b6:fd:ad:57:7d:bc:34:c5:e6:b7:6a:5e:8a:a8:
         5d:8d:bc:87:f0:78:52:09:ac:a1:5f:ac:eb:f6:f1:a3:11:93:
         1a:df:da:43:c1:bf:dc:d7:64:26:8d:c1:b0:fa:c6:6d:31:47:
         92:83:d7:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:19:41 2026 by rpki-client