Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft
File:                     xt42pOReepkfxET4yxtFXxdGLI0.mft (raw, json)
Hash identifier:          Vu2GW+wJG4LTD7aW8UV940iXUZG7BKqgv2vix/M9ZbI=
Subject key identifier:   86:CC:31:E5:13:C3:B4:4D:89:E2:48:14:82:99:44:39:FA:7E:1C:FB
Authority key identifier: C6:DE:36:A4:E4:5E:7A:99:1F:C4:44:F8:CB:1B:45:5F:17:46:2C:8D
Certificate issuer:       /CN=A913C311/serialNumber=C6DE36A4E45E7A991FC444F8CB1B455F17462C8D
Certificate serial:       0109
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xt42pOReepkfxET4yxtFXxdGLI0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft
Manifest number:          0106
Signing time:             Mon 05 Oct 2026 06:29:04 +0000
Manifest this update:     Mon 05 Oct 2026 06:29:03 +0000
Manifest next update:     Mon 12 Oct 2026 06:29:03 +0000
Files and hashes:         1: xt42pOReepkfxET4yxtFXxdGLI0.crl (hash: a9GYq6pLWAmtfWLTQ6DwXTF0VMJAFOtcz+FGnksLY+Y=)
                          2: AEE8CD702FCC11F09626645EC4F9AE02.roa (hash: D4Fh/NIHj7fZ34zloZMh/akkaTIXbYqXpUa5vCDjjrU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.crl
                          rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xt42pOReepkfxET4yxtFXxdGLI0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 06:29:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 265 (0x109)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C311, serialNumber=C6DE36A4E45E7A991FC444F8CB1B455F17462C8D
        Validity
            Not Before: Oct  5 06:29:03 2026 GMT
            Not After : Oct 12 06:29:03 2026 GMT
        Subject: CN=6ac343af-7023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c8:0e:3c:df:30:6c:d7:16:ef:be:4c:67:ee:
                    96:c6:a0:f5:83:7b:57:11:cf:90:a9:c0:40:19:e8:
                    19:52:45:d9:fd:cf:d5:6a:0c:00:3a:9f:fc:59:7a:
                    4f:a4:37:9a:5d:39:06:39:5c:9a:17:a2:e1:2c:ab:
                    8b:af:c2:c1:30:a8:3f:5e:0d:91:a5:4d:4d:4b:04:
                    0a:03:90:1b:22:a3:0a:1e:7f:47:df:1b:b8:8a:40:
                    8b:61:21:ca:6b:27:56:15:a1:a7:4e:39:7c:17:78:
                    7d:e6:68:4f:c1:2a:92:61:80:40:dd:57:0d:1d:8a:
                    81:95:c7:c0:37:60:9c:c8:59:98:3c:fc:dc:ff:f8:
                    4d:3e:82:ea:5c:59:55:c3:b3:b0:db:74:ae:4f:12:
                    1a:4a:5f:5e:9c:c7:20:48:05:97:40:73:74:7b:9f:
                    a2:bb:1b:74:01:1d:a2:2f:44:fb:40:18:d4:24:88:
                    ba:4f:56:48:78:92:7c:e3:cb:09:0f:49:96:f5:16:
                    22:ba:9e:2f:c6:9a:4b:73:37:95:71:01:62:07:fb:
                    8a:34:58:4f:01:58:85:d5:24:4f:f0:39:be:95:91:
                    7c:92:9e:a1:99:74:c5:1d:7d:29:59:f6:db:21:55:
                    3a:5d:be:06:77:6c:38:cb:80:52:fd:e9:9a:41:3a:
                    ef:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:CC:31:E5:13:C3:B4:4D:89:E2:48:14:82:99:44:39:FA:7E:1C:FB
            X509v3 Authority Key Identifier:
                keyid:C6:DE:36:A4:E4:5E:7A:99:1F:C4:44:F8:CB:1B:45:5F:17:46:2C:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xt42pOReepkfxET4yxtFXxdGLI0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:a5:5f:94:8b:13:86:cc:e8:dc:54:b8:a6:4f:21:b4:41:ac:
         65:ce:b0:c5:8b:a7:86:fd:05:31:28:8b:24:76:87:f2:7f:50:
         39:cc:b0:11:13:be:06:41:53:f2:a6:10:94:7e:39:20:52:c2:
         e7:7e:6a:85:bc:29:b5:65:b4:63:90:16:c2:a5:c8:03:30:aa:
         f9:c1:fd:72:5c:0b:e2:08:60:19:fc:ab:fe:b8:e6:c5:62:6b:
         87:80:01:3d:f9:16:c4:ed:a3:13:23:78:a5:ca:d5:13:79:df:
         0f:a3:0e:3b:4b:7f:d4:d3:36:dd:c3:65:bb:d5:fb:a0:db:d9:
         15:67:5c:0f:b5:27:ca:aa:b4:33:67:ea:84:8f:6c:46:5f:7f:
         0a:bd:09:e3:4d:86:1a:de:41:05:d1:30:58:ab:c1:ae:dc:56:
         08:27:eb:f8:e5:96:b4:39:af:3b:a2:71:d6:62:aa:61:fd:65:
         9d:c4:73:61:4c:b6:de:6d:d3:9f:b0:59:e1:0c:f1:fd:af:3a:
         dc:97:22:d0:6c:49:13:48:c3:bb:91:11:c3:38:e7:74:f7:7c:
         48:a0:b4:65:13:e7:67:f4:26:b9:63:df:a5:7b:47:09:f7:3b:
         0d:c3:3c:d3:ea:bf:aa:59:c1:54:33:55:b9:b3:91:fd:30:c7:
         34:8e:26:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:23:20 2026 by rpki-client