Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft
File:                     xNe5S537ZPXBiScjMNvcrSp9AW4.mft (raw, json)
Hash identifier:          jE2CTvdV0+P4OepKI0kzcMf87yRHLnt1vJpgCvtkk2c=
Subject key identifier:   8C:B4:02:ED:9C:02:03:81:48:42:5E:0B:DC:38:EF:28:0D:3A:E2:B0
Authority key identifier: C4:D7:B9:4B:9D:FB:64:F5:C1:89:27:23:30:DB:DC:AD:2A:7D:01:6E
Certificate issuer:       /CN=A912E791/serialNumber=C4D7B94B9DFB64F5C189272330DBDCAD2A7D016E
Certificate serial:       05B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft
Manifest number:          059F
Signing time:             Fri 04 Sep 2026 23:02:44 +0000
Manifest this update:     Fri 04 Sep 2026 23:02:44 +0000
Manifest next update:     Fri 11 Sep 2026 23:02:44 +0000
Files and hashes:         1: xNe5S537ZPXBiScjMNvcrSp9AW4.crl (hash: +R/u+KFb9KRcYBfa955jc2/pbFfROKgBRUpZi0Syu5Q=)
                          2: 83595478B65E11EF8DB85B32C4F9AE02.roa (hash: et9HDrh+GN5yOnO0QC3PHWe6pVv8xUnM/31aeD6iTS8=)
                          3: 9E9D5C66157C11F0B4CD801EC4F9AE02.roa (hash: XRPA2JKWpTIHSFaMOHgkHY8yCfbif5wXEREcy191bJ4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.crl
                          rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 23:02:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1465 (0x5b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E791, serialNumber=C4D7B94B9DFB64F5C189272330DBDCAD2A7D016E
        Validity
            Not Before: Sep  4 23:02:44 2026 GMT
            Not After : Sep 11 23:02:44 2026 GMT
        Subject: CN=6a9b4e14-d5c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1f:11:ec:13:0a:be:d5:2e:0d:6e:6b:05:3f:
                    b8:75:e0:f4:b0:c3:e0:78:b0:86:78:33:c0:3a:c6:
                    19:ee:b1:41:7b:80:d3:22:b6:92:44:15:d6:25:91:
                    54:b4:33:11:36:cc:db:93:4f:62:78:1b:56:47:70:
                    dc:cf:1c:b5:03:c5:4c:25:bf:17:94:1e:c5:5e:07:
                    ef:9e:e2:db:59:89:66:c8:eb:ff:75:ef:61:8d:32:
                    4f:22:b1:77:3d:66:8f:90:ac:20:c1:20:fc:90:10:
                    e0:6c:98:ae:3b:84:07:ea:f0:8a:c6:4c:98:b0:98:
                    43:f8:57:c9:57:c0:40:47:59:45:a7:8b:2e:3d:5c:
                    17:14:f8:e7:a5:b6:ce:22:0e:24:d5:34:b0:d5:46:
                    e9:f1:3c:e5:53:0e:25:b2:eb:f6:c3:a5:90:23:17:
                    2b:3a:e1:8b:59:75:1c:13:d7:86:55:7a:db:94:39:
                    9d:7b:39:6e:df:04:44:53:a3:ce:b9:97:97:22:d8:
                    0b:2d:09:d3:4b:dd:9b:15:a4:76:c1:f2:79:5e:db:
                    1d:4e:c7:48:c4:6e:ed:2d:85:d1:d4:35:53:46:aa:
                    38:fb:32:62:7f:7d:bf:3c:84:b0:9b:fb:95:ec:79:
                    c3:01:2d:aa:55:a8:c7:8a:ac:a8:a3:6b:f0:fd:81:
                    99:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B4:02:ED:9C:02:03:81:48:42:5E:0B:DC:38:EF:28:0D:3A:E2:B0
            X509v3 Authority Key Identifier:
                keyid:C4:D7:B9:4B:9D:FB:64:F5:C1:89:27:23:30:DB:DC:AD:2A:7D:01:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:e4:d4:84:24:e0:27:14:23:8d:54:47:80:4b:a0:02:60:a6:
         c6:09:a7:1f:df:bb:de:18:d2:c6:d1:df:79:d4:8e:dd:82:3c:
         86:21:63:46:27:1b:a3:74:b0:5e:8a:b1:61:61:89:c9:87:db:
         06:04:f4:94:99:cc:1f:a6:81:7d:53:fd:4c:56:24:1a:c2:67:
         47:1d:fd:9f:08:43:14:be:c8:82:28:7c:94:aa:61:09:a0:ea:
         c5:41:e3:21:88:df:62:ca:a7:e7:84:44:0d:05:4b:0b:fa:00:
         10:e7:6d:0d:74:5d:0f:74:82:ae:a3:c1:69:4a:71:08:51:70:
         1a:5b:b6:e6:9e:58:cf:b1:80:75:83:53:84:e2:d3:e5:d0:f8:
         b0:ff:ec:65:e8:08:51:ee:ac:d6:3a:68:40:d0:22:e1:a1:48:
         df:c9:ae:b9:f6:45:c8:0b:61:64:9c:21:69:9d:23:90:36:35:
         16:71:c3:e3:ae:b4:8b:27:c5:05:fb:54:2b:6e:6f:00:bf:8e:
         91:15:e8:b8:85:d1:33:40:45:cc:c9:77:67:34:95:71:fb:1e:
         47:70:36:9a:a6:3f:ad:93:22:9a:bd:50:d7:d1:df:22:e5:07:
         ce:fe:41:7b:5f:d7:9b:b9:f4:8b:a1:0d:56:17:41:54:a4:22:
         ad:00:94:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:55:47 2026 by rpki-client