Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft
File:                     XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft (raw, json)
Hash identifier:          gsahkXoYwG3DV65to+mUUiOwQZl/CIZdlv7hmWzz7gU=
Subject key identifier:   D4:39:6A:23:B9:26:C9:16:DD:0B:79:9B:F3:F2:FA:9C:A8:33:44:D0
Authority key identifier: 5E:84:25:16:65:70:4C:DD:DF:2F:3F:9B:E8:2E:31:FF:B0:74:A5:8E
Certificate issuer:       /CN=A9127EAD/serialNumber=5E84251665704CDDDF2F3F9BE82E31FFB074A58E
Certificate serial:       08F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoQlFmVwTN3fLz-b6C4x_7B0pY4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft
Manifest number:          08E9
Signing time:             Sun 04 Oct 2026 20:25:46 +0000
Manifest this update:     Sun 04 Oct 2026 20:25:46 +0000
Manifest next update:     Sun 11 Oct 2026 20:25:46 +0000
Files and hashes:         1: XoQlFmVwTN3fLz-b6C4x_7B0pY4.crl (hash: jVb+bTDZqjM0vpm07Ewtrk8At5KhTtiqXqCbceloT3s=)
                          2: 6CAC2064EA2211EA9C2F064AC4F9AE02.roa (hash: NWq6rBlzl9ex6GIufRvovjoO12pZgzDILKLwtdCgUVE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.crl
                          rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoQlFmVwTN3fLz-b6C4x_7B0pY4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 20:25:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2291 (0x8f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127EAD, serialNumber=5E84251665704CDDDF2F3F9BE82E31FFB074A58E
        Validity
            Not Before: Oct  4 20:25:46 2026 GMT
            Not After : Oct 11 20:25:46 2026 GMT
        Subject: CN=6ac2b64a-caf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:11:b8:b6:36:71:75:fc:95:d3:87:29:00:a7:
                    c5:da:96:e1:be:f1:6d:de:70:ab:09:f7:77:d8:2f:
                    49:99:e8:42:9f:63:14:54:c8:87:96:8b:de:95:cc:
                    84:dc:0b:9f:33:a8:75:ab:1e:e6:1e:c3:04:5e:24:
                    6e:b5:59:aa:af:2a:ec:a7:fe:63:c1:37:fc:b0:b3:
                    89:fc:56:54:f9:b2:13:50:ff:02:fc:32:68:11:6c:
                    82:fe:ea:00:81:c5:c4:e5:d0:64:38:01:90:e9:75:
                    80:99:65:b2:ce:1e:a9:c6:50:11:f9:6e:98:12:42:
                    b2:b1:b4:04:91:ee:98:de:66:8c:74:00:69:e5:3b:
                    53:8d:f4:ef:4f:a9:eb:17:40:47:4b:0d:d9:57:53:
                    ab:5d:63:f8:dd:67:8b:ca:2c:2b:cc:36:c5:96:5f:
                    63:20:ef:56:c3:92:e5:e2:ec:f7:78:d1:77:fb:37:
                    67:75:a4:cb:44:0c:76:e8:76:78:5d:94:fd:dd:39:
                    fa:e7:b6:a8:29:bf:00:e3:c5:3e:47:a6:3a:07:2e:
                    9f:9e:11:c6:b8:03:df:ba:2c:9a:74:1d:74:8e:28:
                    d2:d4:aa:65:70:3d:f4:28:77:48:b1:f7:29:f7:98:
                    86:aa:3a:80:23:2e:80:48:8d:de:22:63:be:ff:86:
                    97:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:39:6A:23:B9:26:C9:16:DD:0B:79:9B:F3:F2:FA:9C:A8:33:44:D0
            X509v3 Authority Key Identifier:
                keyid:5E:84:25:16:65:70:4C:DD:DF:2F:3F:9B:E8:2E:31:FF:B0:74:A5:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoQlFmVwTN3fLz-b6C4x_7B0pY4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:20:a0:05:d8:df:fe:cd:dd:a7:ac:72:92:e7:a0:4e:bf:59:
         3f:76:19:8c:e4:8a:3c:55:b8:db:06:c0:69:a3:1a:87:a2:81:
         aa:8d:a4:bc:b0:00:6a:cb:07:fb:e5:da:9e:f1:4c:8e:ce:f9:
         26:7f:a1:a8:a3:4a:3b:ee:91:4f:0d:a5:0d:fd:be:19:db:78:
         cf:43:da:0f:83:cd:45:91:99:2f:b2:f1:c2:4f:b3:a0:84:8e:
         98:75:44:fe:32:86:e3:f8:c3:54:f0:6b:fd:d0:f3:bf:52:76:
         23:0d:a6:8b:2e:15:65:c6:63:44:7e:72:09:ae:5d:d6:88:ce:
         a9:4c:9e:ed:09:8a:16:4e:e9:8b:7f:e9:0e:72:96:91:52:96:
         72:17:75:6e:0a:85:4e:83:fb:57:d1:d9:24:e3:98:af:ca:aa:
         3a:1c:08:cc:cb:9f:0c:1f:33:86:88:16:ff:f1:98:10:1d:6b:
         4a:a4:6a:2a:48:03:bd:79:f7:57:a8:f8:88:08:88:55:60:b8:
         25:0a:c5:be:c7:1e:c9:a9:a3:36:69:4c:c1:29:09:79:df:a2:
         52:3c:4c:20:ed:0c:5a:aa:d5:4f:16:94:ea:36:7e:f8:98:7e:
         0b:07:d6:77:0c:ba:7f:b9:64:6b:98:0c:6b:b3:c9:b1:f3:79:
         88:57:a9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:43:52 2026 by rpki-client