Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft
File:                     XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft (raw, json)
Hash identifier:          /IUJYjLLfRqFJjLNHHF/BpaaZNiiPS8eLugGsPbsCyg=
Subject key identifier:   76:B8:E2:3E:CD:03:9F:60:81:51:18:B7:CA:06:31:36:E2:07:0B:FD
Authority key identifier: 5D:1E:68:1F:14:4C:85:E7:26:75:24:3A:80:47:F8:09:C6:34:C7:C1
Certificate issuer:       /CN=A9136E69/serialNumber=5D1E681F144C85E72675243A8047F809C634C7C1
Certificate serial:       023F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XR5oHxRMhecmdSQ6gEf4CcY0x8E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft
Manifest number:          023A
Signing time:             Sat 03 Oct 2026 03:09:40 +0000
Manifest this update:     Sat 03 Oct 2026 03:09:39 +0000
Manifest next update:     Sat 10 Oct 2026 03:09:39 +0000
Files and hashes:         1: XR5oHxRMhecmdSQ6gEf4CcY0x8E.crl (hash: YQZb2rjG1AM9lurYK5FZLpVas4vDyZtEVITBY6GUGkc=)
                          2: 7ABDC516537B11EEBBB89E5DC4F9AE02.roa (hash: O9lCjMQypdSGWG3ll22zLdodDNP/53eTRSGfWnDPLFI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.crl
                          rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XR5oHxRMhecmdSQ6gEf4CcY0x8E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 03:09:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 575 (0x23f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136E69, serialNumber=5D1E681F144C85E72675243A8047F809C634C7C1
        Validity
            Not Before: Oct  3 03:09:39 2026 GMT
            Not After : Oct 10 03:09:39 2026 GMT
        Subject: CN=6ac071f4-c7b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4b:d8:f2:5f:07:cc:ba:61:33:03:4f:51:41:
                    c2:e9:02:ee:37:13:2c:fb:fd:82:d5:50:a4:d0:72:
                    09:3e:d1:a0:10:94:62:19:1f:de:ee:e3:fe:f0:89:
                    99:9c:6e:dd:b1:fa:21:4d:02:20:36:86:43:eb:c0:
                    e7:5c:ca:94:4c:89:55:a5:cc:d7:5f:e1:9a:9e:df:
                    7d:d7:b7:86:91:fa:ca:a8:24:ce:f9:55:92:6f:d0:
                    0a:fa:e1:0a:a3:91:18:c9:58:92:64:cf:42:be:9f:
                    f2:05:9b:e6:5d:47:c9:84:00:31:1a:eb:ce:96:4c:
                    a2:92:e4:9f:aa:5f:e9:26:c3:16:e7:da:45:4b:90:
                    b6:bd:8b:e1:34:f6:95:a7:31:ef:e6:6e:72:7c:3d:
                    c0:d7:18:70:9d:bf:9f:42:b0:b8:37:c9:8f:c4:da:
                    16:54:9a:17:fa:64:db:da:94:8f:be:2a:17:a2:f4:
                    99:d2:bc:1e:03:a4:43:85:35:17:b3:a4:b7:de:70:
                    68:31:34:61:33:45:df:1f:4e:91:89:7d:20:37:9e:
                    43:1b:f9:c4:05:a9:6b:32:3e:c8:d8:73:03:a6:6a:
                    fd:22:0d:8c:c3:c6:80:00:90:b7:2d:84:9b:0b:ed:
                    e6:88:17:08:62:3d:0c:0a:9b:9f:2a:49:91:69:74:
                    07:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B8:E2:3E:CD:03:9F:60:81:51:18:B7:CA:06:31:36:E2:07:0B:FD
            X509v3 Authority Key Identifier:
                keyid:5D:1E:68:1F:14:4C:85:E7:26:75:24:3A:80:47:F8:09:C6:34:C7:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XR5oHxRMhecmdSQ6gEf4CcY0x8E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:53:d4:72:c6:de:23:74:c9:32:76:b8:5f:3c:0c:ae:72:c8:
         81:ef:a8:fa:95:19:61:6e:ad:21:01:e6:05:af:80:b7:6d:b2:
         7e:29:65:84:8a:87:1b:c8:28:c0:91:80:90:00:ce:b0:b6:89:
         47:c5:15:12:88:a6:30:e2:28:43:d3:2e:fc:86:8c:32:e3:81:
         f5:d5:47:6f:10:b8:77:7c:43:1b:b1:f4:98:da:33:94:b9:78:
         c9:9e:2e:95:b9:fe:8d:01:ef:fe:a0:59:ff:46:1e:93:dd:95:
         f5:c1:8b:f8:fb:96:b8:7c:80:85:a7:34:40:fe:f0:ef:fa:44:
         29:96:f9:bb:60:da:9f:05:90:5a:eb:d4:45:2e:67:70:62:c9:
         25:cd:85:ec:d2:d2:78:64:c2:19:36:aa:b1:62:b2:9f:f0:16:
         43:7f:e2:7f:ac:a5:de:b1:4e:62:47:ee:d7:25:ff:75:4b:52:
         d0:61:b8:b0:b5:a2:78:8b:3f:0f:21:37:86:6e:f7:b1:05:14:
         d2:85:11:9b:f0:b4:b7:a4:b9:95:4e:bd:70:cf:77:91:56:31:
         f9:92:6d:63:fc:fc:45:6e:ed:37:db:56:a7:70:e0:57:06:82:
         7c:79:dc:e7:97:38:33:c3:45:2e:6b:74:14:c5:0a:89:b2:97:
         4f:11:ca:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:40:55 2026 by rpki-client