Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft
File:                     xGxDuid9LBDufR7_PfDi78iFGh0.mft (raw, json)
Hash identifier:          dfSJCudaKmcFgAser5cDMEQ4iHFrsT5NbDSign+TmGU=
Subject key identifier:   44:7B:52:B6:4D:71:7C:D0:67:1D:C1:39:76:8C:9C:FE:A3:1C:CA:F2
Authority key identifier: C4:6C:43:BA:27:7D:2C:10:EE:7D:1E:FF:3D:F0:E2:EF:C8:85:1A:1D
Certificate issuer:       /CN=A913638A/serialNumber=C46C43BA277D2C10EE7D1EFF3DF0E2EFC8851A1D
Certificate serial:       017C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft
Manifest number:          0171
Signing time:             Mon 05 Oct 2026 05:15:58 +0000
Manifest this update:     Mon 05 Oct 2026 05:15:57 +0000
Manifest next update:     Mon 12 Oct 2026 05:15:57 +0000
Files and hashes:         1: xGxDuid9LBDufR7_PfDi78iFGh0.crl (hash: WMIv1YZd5kgZr8Xhk9hkxu0Gdl+1HmgOlAy79O6DY+w=)
                          2: 9D7ED59A954711EF9830412DC4F9AE02.roa (hash: 2YuAa3vXnmLnBf2q5mIusFMk4m38OnK+8EAkU7/cT84=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.crl
                          rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 05:15:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 380 (0x17c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913638A, serialNumber=C46C43BA277D2C10EE7D1EFF3DF0E2EFC8851A1D
        Validity
            Not Before: Oct  5 05:15:57 2026 GMT
            Not After : Oct 12 05:15:57 2026 GMT
        Subject: CN=6ac3328e-4595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:09:5d:07:37:98:68:aa:9d:c0:15:71:1c:ab:
                    1f:67:28:aa:1f:77:1a:8f:94:4e:ed:07:1c:a9:99:
                    ac:7c:51:66:9b:aa:05:3b:7a:71:f6:3f:8a:a1:5a:
                    36:94:5a:cd:d7:d3:71:5c:92:a9:b5:19:cc:7d:b8:
                    8f:5d:c0:7c:ed:24:f2:64:7d:ed:34:1b:c1:31:a3:
                    d8:b5:9b:fe:42:8e:e8:b6:16:32:60:d6:64:44:a1:
                    02:05:03:99:62:b5:e8:47:85:4c:67:bf:00:2e:e1:
                    31:02:50:38:1b:f8:eb:03:f6:42:5f:d6:10:b3:fc:
                    5a:5a:c8:c5:35:63:72:ba:c5:1b:93:19:d7:1a:60:
                    49:de:ac:63:60:6f:b9:38:08:cf:29:29:08:23:83:
                    8a:f0:55:2b:98:0b:39:f1:1f:ed:be:47:56:92:71:
                    cb:66:d3:59:29:f1:a4:12:76:2c:6f:0a:be:b1:f7:
                    1a:35:c9:d8:a4:b8:f5:d1:81:62:1d:89:5d:24:23:
                    42:81:71:3b:fa:12:b8:fd:88:81:28:8f:9d:55:ff:
                    6c:19:ee:7e:8e:66:31:10:ee:e7:67:d8:12:13:3d:
                    c1:cf:0e:a1:19:95:cf:a8:b1:82:24:c6:c4:aa:2d:
                    be:51:d1:ac:f8:43:54:cf:7c:1c:f9:91:4d:b8:b9:
                    3c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:7B:52:B6:4D:71:7C:D0:67:1D:C1:39:76:8C:9C:FE:A3:1C:CA:F2
            X509v3 Authority Key Identifier:
                keyid:C4:6C:43:BA:27:7D:2C:10:EE:7D:1E:FF:3D:F0:E2:EF:C8:85:1A:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:8a:e9:ce:11:45:c9:f2:12:ed:4f:23:4d:82:dd:a0:8c:81:
         85:b8:70:ab:fb:be:52:d6:06:5e:a3:dc:cb:7e:ab:23:ae:3b:
         37:15:1f:50:dd:1c:64:87:42:ff:10:a3:07:68:e6:94:47:22:
         7b:cf:50:d5:65:52:ba:d7:c7:29:26:2b:a4:58:9a:c3:6c:b1:
         da:b5:41:06:b2:3f:f5:c1:48:c1:0b:ac:e8:df:74:5d:9b:1e:
         a7:ee:77:ab:96:02:b7:ca:d0:d2:04:1a:11:75:b0:b4:81:2a:
         81:22:ea:59:4c:66:d2:46:4c:84:ca:12:ce:e6:93:ab:95:04:
         db:c5:ad:9f:e4:4e:18:00:f1:36:06:60:03:a4:10:24:c0:18:
         87:96:81:38:d9:d0:93:a0:73:ac:dd:9c:7c:fb:5c:9d:b5:47:
         8f:7d:79:67:fe:87:a1:8b:e1:31:bc:26:87:7b:7f:9e:28:74:
         c5:cd:43:af:f8:19:cc:ee:90:fb:61:03:95:6f:c6:99:17:3d:
         1d:33:e3:55:ae:30:74:af:cf:68:f8:0d:40:68:3a:cf:fd:78:
         08:01:a1:bb:14:d7:a9:47:f3:45:9a:1f:cb:d2:f7:4d:6c:3c:
         a3:35:d4:77:57:73:cc:5b:c4:7f:0f:8b:98:ea:1e:70:29:db:
         94:5b:91:55
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzYzOEExMTAvBgNVBAUTKEM0NkM0M0JBMjc3RDJDMTBFRTdEMUVGRjNERjBFMkVG
Qzg4NTFBMUQwHhcNMjYxMDA1MDUxNTU3WhcNMjYxMDEyMDUxNTU3WjAYMRYwFAYD
VQQDEw02YWMzMzI4ZS00NTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvQldBzeYaKqdwBVxHKsfZyiqH3caj5RO7QccqZmsfFFmm6oFO3px9j+KoVo2
lFrN19NxXJKptRnMfbiPXcB87STyZH3tNBvBMaPYtZv+Qo7othYyYNZkRKECBQOZ
YrXoR4VMZ78ALuExAlA4G/jrA/ZCX9YQs/xaWsjFNWNyusUbkxnXGmBJ3qxjYG+5
OAjPKSkII4OK8FUrmAs58R/tvkdWknHLZtNZKfGkEnYsbwq+sfcaNcnYpLj10YFi
HYldJCNCgXE7+hK4/YiBKI+dVf9sGe5+jmYxEO7nZ9gSEz3Bzw6hGZXPqLGCJMbE
qi2+UdGs+ENUz3wc+ZFNuLk8gwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFER7UrZN
cXzQZx3BOXaMnP6jHMryMB8GA1UdIwQYMBaAFMRsQ7onfSwQ7n0e/z3w4u/IhRod
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjM4QS81QkREMkNBRTk1
NDcxMUVGOTY4MDhGMkNDNEY5QUUwMi94R3hEdWlkOUxCRHVmUjdfUGZEaTc4aUZH
aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hHeER1aWQ5TEJEdWZSN19QZkRpNzhpRkdoMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NjM4QS81QkREMkNBRTk1NDcxMUVGOTY4MDhGMkNDNEY5QUUwMi94R3hEdWlkOUxC
RHVmUjdfUGZEaTc4aUZHaDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXorpzhFFyfIS7U8jTYLdoIyBhbhwq/u+UtYGXqPcy36rI647NxUfUN0cZIdC
/xCjB2jmlEcie89Q1WVSutfHKSYrpFiaw2yx2rVBBrI/9cFIwQus6N90XZsep+53
q5YCt8rQ0gQaEXWwtIEqgSLqWUxm0kZMhMoSzuaTq5UE28Wtn+ROGADxNgZgA6QQ
JMAYh5aBONnQk6BzrN2cfPtcnbVHj315Z/6HoYvhMbwmh3t/nih0xc1Dr/gZzO6Q
+2EDlW/GmRc9HTPjVa4wdK/PaPgNQGg6z/14CAGhuxTXqUfzRZofy9L3TWw8ozXU
d1dzzFvEfw+LmOoecCnblFuRVQ==
-----END CERTIFICATE-----
Generated at Tue Oct 6 21:59:07 2026 by rpki-client