Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912A273/13D325DCFD9011F099ABCB395B6F56BC/xF0041r6UWc07r4-Xaxxv0jh1fM.mft
File:                     xF0041r6UWc07r4-Xaxxv0jh1fM.mft (raw, json)
Hash identifier:          4T/W7DVx2+83ioMD2s0jLv/etK+6S+REn8h1JX0gp6g=
Subject key identifier:   30:66:2E:E5:14:03:FF:0C:28:86:FC:80:C4:0C:2F:44:2D:80:B8:DF
Authority key identifier: C4:5D:34:E3:5A:FA:51:67:34:EE:BE:3E:5D:AC:71:BF:48:E1:D5:F3
Certificate issuer:       /CN=A912A273/serialNumber=C45D34E35AFA516734EEBE3E5DAC71BF48E1D5F3
Certificate serial:       7A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xF0041r6UWc07r4-Xaxxv0jh1fM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A273/13D325DCFD9011F099ABCB395B6F56BC/xF0041r6UWc07r4-Xaxxv0jh1fM.mft
Manifest number:          76
Signing time:             Sat 05 Sep 2026 07:33:20 +0000
Manifest this update:     Sat 05 Sep 2026 07:33:20 +0000
Manifest next update:     Sat 12 Sep 2026 07:33:20 +0000
Files and hashes:         1: xF0041r6UWc07r4-Xaxxv0jh1fM.crl (hash: C9qlWApwEhvv9wweGuYvqyOgzJlkr2VLH9xNQ91hkx4=)
                          2: F3BA62BEFD9011F0AC0D2AEE5B6F56BC.roa (hash: fngJ91q3M8+ZvnNF07B50n4sFQUoH1YzhPTItYhTEoc=)
                          3: F7CC41D2FD9111F0AFA9C1725C6F56BC.roa (hash: ZVS5A/ssJ9e5s48dOy5KKX8LrbmgceLLERs2KPItheg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A273/13D325DCFD9011F099ABCB395B6F56BC/xF0041r6UWc07r4-Xaxxv0jh1fM.crl
                          rsync://rpki.apnic.net/member_repository/A912A273/13D325DCFD9011F099ABCB395B6F56BC/xF0041r6UWc07r4-Xaxxv0jh1fM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xF0041r6UWc07r4-Xaxxv0jh1fM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Sep 2026 07:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A273, serialNumber=C45D34E35AFA516734EEBE3E5DAC71BF48E1D5F3
        Validity
            Not Before: Sep  5 07:33:20 2026 GMT
            Not After : Sep 12 07:33:20 2026 GMT
        Subject: CN=6a9bc5c0-e434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9b:21:dc:f4:47:3d:32:ee:9e:81:01:57:7e:
                    1e:90:93:20:81:86:2d:47:aa:1b:db:d6:60:aa:c9:
                    dc:fb:9d:05:05:75:62:2b:06:fe:9b:80:01:4a:53:
                    dc:72:d4:a1:ec:33:e8:ba:10:50:f4:86:ce:b2:9d:
                    fa:ab:76:4a:79:64:8f:f5:cc:c2:ae:50:21:a1:2d:
                    72:7c:a9:25:87:ce:9d:60:3e:f0:46:2d:c7:c5:85:
                    7f:83:fb:dd:b1:19:49:e6:6d:5f:95:b7:ca:3c:8f:
                    49:31:b5:28:72:6a:cf:95:ad:2b:b6:fd:b1:c8:ca:
                    70:54:1d:35:4d:20:b4:01:a8:bc:12:25:c0:c2:b3:
                    8b:13:06:d7:a2:8f:f8:46:9b:5c:3e:26:4d:54:b2:
                    d6:a7:f6:93:43:51:0e:92:52:4a:44:07:f4:fd:0f:
                    17:ed:03:99:a8:e8:33:0c:56:21:60:e1:60:0f:c0:
                    80:49:ea:94:f9:42:74:57:7a:bb:37:29:81:73:89:
                    f9:50:7c:f4:2a:7f:60:c9:01:52:50:d1:e8:e4:82:
                    91:f1:ac:bf:9d:3f:15:44:d2:17:5f:b6:c9:b9:d0:
                    3c:7c:2a:c5:98:f9:c7:55:c5:4e:fc:8e:7a:bf:a8:
                    a8:5d:70:67:54:b1:a9:c9:41:86:93:87:11:2d:0e:
                    48:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:66:2E:E5:14:03:FF:0C:28:86:FC:80:C4:0C:2F:44:2D:80:B8:DF
            X509v3 Authority Key Identifier:
                keyid:C4:5D:34:E3:5A:FA:51:67:34:EE:BE:3E:5D:AC:71:BF:48:E1:D5:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A273/13D325DCFD9011F099ABCB395B6F56BC/xF0041r6UWc07r4-Xaxxv0jh1fM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xF0041r6UWc07r4-Xaxxv0jh1fM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A273/13D325DCFD9011F099ABCB395B6F56BC/xF0041r6UWc07r4-Xaxxv0jh1fM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:38:18:f8:8f:27:a1:f6:a4:11:c9:53:4a:5d:d2:93:9e:7e:
         d9:8c:b0:20:28:30:76:da:80:30:79:fb:35:04:8f:ff:9a:29:
         fd:ca:5f:44:e2:46:5a:93:ab:04:9e:1d:8b:10:10:a3:53:72:
         84:a2:b0:8b:c3:37:1f:11:6d:76:e2:95:b8:a8:65:d8:bc:aa:
         1b:6b:07:21:94:12:14:20:d7:95:14:b0:9e:64:d5:5a:fd:fb:
         f1:2f:50:f0:df:04:c7:9e:fe:cb:d1:7f:46:2b:f8:45:86:0e:
         a9:e1:93:5e:00:e7:c5:e6:b3:d0:ff:43:43:df:d7:cf:2a:3f:
         8b:2f:d2:e6:d2:61:de:9e:72:66:7d:bb:0b:de:6b:7c:6d:5f:
         8f:64:05:5e:ec:0c:50:30:c5:3e:59:dd:18:c1:c4:f8:ab:1b:
         53:84:dd:ea:c1:a6:0c:78:c7:56:df:f1:70:a3:17:42:02:d0:
         84:3e:0a:a2:98:93:79:8e:ae:fe:de:81:13:79:82:55:f9:e9:
         37:76:e9:89:ed:ec:63:4d:d1:85:c5:b3:7f:e5:82:48:47:0b:
         22:c4:fc:8f:f6:0f:e3:6d:e0:1b:f0:b8:7f:46:76:07:c3:8d:
         90:95:da:91:4f:6b:c4:ff:b7:a5:57:85:91:17:19:a3:fc:f6:
         93:f9:b1:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 21:17:11 2026 by rpki-client