Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft
File:                     xGxDuid9LBDufR7_PfDi78iFGh0.mft (raw, json)
Hash identifier:          E1Ag/DXK7GsSdOtdp20/z8wvDxgnTk9pYqr4/igF+1w=
Subject key identifier:   01:F8:39:72:15:8C:28:5D:57:F1:E1:75:40:71:E7:2C:10:1E:D7:A8
Authority key identifier: C4:6C:43:BA:27:7D:2C:10:EE:7D:1E:FF:3D:F0:E2:EF:C8:85:1A:1D
Certificate issuer:       /CN=A913638A/serialNumber=C46C43BA277D2C10EE7D1EFF3DF0E2EFC8851A1D
Certificate serial:       0164
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft
Manifest number:          0159
Signing time:             Wed 19 Aug 2026 05:48:13 +0000
Manifest this update:     Wed 19 Aug 2026 05:48:13 +0000
Manifest next update:     Wed 26 Aug 2026 05:48:13 +0000
Files and hashes:         1: xGxDuid9LBDufR7_PfDi78iFGh0.crl (hash: 0M+JBM0bceFoOVOQG/LW6/9o/R6YBxbCleukAc6Dkjo=)
                          2: 9D7ED59A954711EF9830412DC4F9AE02.roa (hash: 2YuAa3vXnmLnBf2q5mIusFMk4m38OnK+8EAkU7/cT84=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.crl
                          rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 05:48:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 356 (0x164)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913638A, serialNumber=C46C43BA277D2C10EE7D1EFF3DF0E2EFC8851A1D
        Validity
            Not Before: Aug 19 05:48:13 2026 GMT
            Not After : Aug 26 05:48:13 2026 GMT
        Subject: CN=6a85439d-c49d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5b:6d:9e:2e:74:ae:e9:43:d7:c2:c5:e6:b4:
                    82:13:35:41:2f:18:e4:bc:d2:a3:42:de:c9:96:74:
                    c1:94:d8:b9:c3:36:44:2b:13:4e:ce:a9:9b:7d:e5:
                    9e:e1:cc:f7:47:da:0c:64:e6:eb:3b:b9:d4:24:e1:
                    ca:88:d0:98:b0:a3:ea:c5:9c:1b:7a:e1:fa:db:3a:
                    5d:3d:25:2f:07:0b:3d:09:ea:e1:17:46:55:fd:9d:
                    88:f9:7b:b5:ea:a0:eb:0e:48:ee:e4:69:65:81:71:
                    ab:bf:e2:c5:4c:4b:6c:0e:95:07:91:2d:73:24:05:
                    9f:1e:c0:d3:3b:f4:6e:e4:00:85:29:4c:1f:78:06:
                    25:a5:a5:ba:63:54:15:61:77:40:42:45:c8:cd:d7:
                    2e:1c:3b:99:5a:00:2a:e9:08:e6:97:9d:5d:36:44:
                    25:eb:17:c3:8d:80:b3:f0:56:f7:9c:98:eb:c6:99:
                    02:ac:1c:12:4a:61:51:24:83:02:cd:7f:ca:ff:fb:
                    74:c4:63:c3:84:fe:f7:80:dd:fe:a0:55:12:f2:e4:
                    64:57:ae:ac:0e:8d:7d:7b:ba:1c:56:d8:74:33:3a:
                    35:c3:33:91:31:1a:41:5e:88:e0:a2:07:5a:bb:43:
                    5a:1c:41:12:22:f4:85:eb:20:59:fc:b4:20:d7:55:
                    30:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F8:39:72:15:8C:28:5D:57:F1:E1:75:40:71:E7:2C:10:1E:D7:A8
            X509v3 Authority Key Identifier:
                keyid:C4:6C:43:BA:27:7D:2C:10:EE:7D:1E:FF:3D:F0:E2:EF:C8:85:1A:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:f1:ba:8b:e3:b3:cd:d0:3c:94:1d:17:31:e5:af:e6:c5:24:
         2d:e6:38:84:42:19:0a:9b:ff:a4:f1:0b:90:1d:a8:67:63:6d:
         58:18:73:76:ff:ee:ad:b8:df:37:b2:8c:7a:66:99:7c:9e:ff:
         81:aa:ec:c5:df:32:e4:a6:2a:7c:a5:3e:e4:7a:db:e8:e2:d2:
         18:d8:d9:a9:5a:2b:ad:1d:e7:10:fb:b4:a3:cb:5e:bc:41:db:
         05:25:c7:0f:18:3b:d9:fe:e2:bb:38:c9:54:18:c5:6d:dd:4e:
         08:66:34:bc:9a:64:d3:0c:6b:9e:1d:7a:c0:fa:d4:b5:9b:8a:
         84:45:55:20:69:1b:e9:78:de:ec:14:9e:ae:d1:26:86:35:2d:
         a8:6d:b4:7e:23:09:ef:65:42:4f:f8:e7:49:b1:97:b8:15:10:
         11:a3:27:a8:2e:aa:7f:aa:32:45:83:58:cd:0f:12:68:d0:a8:
         12:7c:7a:75:44:71:bc:1f:e7:f3:8d:7a:78:6e:45:8a:ae:6a:
         2e:53:55:65:83:e6:66:ec:72:34:0a:78:43:fa:91:60:c6:c6:
         b7:88:64:4b:b4:f7:2b:d4:9e:19:24:b8:e4:db:b4:a0:93:d2:
         68:8d:00:d4:64:09:c4:9a:c9:6e:49:0e:dc:4e:8e:cd:e1:ee:
         96:9d:40:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:54:09 2026 by rpki-client