Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft
File:                     xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft (raw, json)
Hash identifier:          zc8jiJcoT00SLgpqseDOObIj9lEZi5ZY2Fu6O5EaGt8=
Subject key identifier:   06:E8:1D:44:EE:44:4F:E2:88:EA:F2:3A:DD:16:FC:00:75:F1:B8:DE
Authority key identifier: C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D
Certificate issuer:       /CN=A914CA5C/serialNumber=C43D19C6D397112A2AFED4666122FC576B47886D
Certificate serial:       049F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft
Manifest number:          048C
Signing time:             Wed 07 Oct 2026 00:10:23 +0000
Manifest this update:     Wed 07 Oct 2026 00:10:23 +0000
Manifest next update:     Wed 14 Oct 2026 00:10:23 +0000
Files and hashes:         1: xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl (hash: kWAWp8sumTIrINyvA8tqC58+o0XVH+qmed65ET4edz8=)
                          2: 892F26B4EEF411F0A51D99D83B6F56BC.roa (hash: C2xe2xSt+zG2ZuMpvD0jHOEIkW1+AE92r/FDO/VZFwY=)
                          3: 0663DADAEEF511F0AEB0B1D83B6F56BC.roa (hash: US3zQpwIIKbs6wAdZrpkun85NZn/CcgVmY5RXTFLp6U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl
                          rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 00:10:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1183 (0x49f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CA5C, serialNumber=C43D19C6D397112A2AFED4666122FC576B47886D
        Validity
            Not Before: Oct  7 00:10:23 2026 GMT
            Not After : Oct 14 00:10:23 2026 GMT
        Subject: CN=6ac58def-2bb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:14:e1:b8:d5:fe:18:6a:a8:3e:8d:bc:fb:59:
                    bf:b9:02:e4:9a:23:10:a1:34:75:fe:16:1f:aa:b8:
                    9e:92:7e:d9:cb:85:2a:ef:46:fe:85:60:fa:41:d4:
                    63:97:60:06:22:76:aa:ff:0e:cf:cc:b4:5a:17:4c:
                    53:77:a2:cf:7b:b9:56:e1:8b:ec:2d:2b:c7:fe:a0:
                    6b:1f:8f:d0:c1:61:cf:56:95:03:82:5a:50:bd:96:
                    35:a5:fc:f4:51:b5:df:8a:4a:a1:99:5d:64:f5:b6:
                    b3:ce:6a:25:46:cf:28:1b:35:17:bb:82:fa:ea:20:
                    5d:84:28:8e:61:ad:50:15:62:73:2e:b7:a0:37:e5:
                    b6:67:35:06:fc:d4:46:4a:de:95:37:f2:ea:0c:4e:
                    f8:06:df:79:43:58:84:2c:70:f5:1a:4f:2e:ad:6c:
                    ae:9f:56:0f:5e:cf:84:fe:34:d8:60:cc:63:f3:75:
                    ef:97:60:62:89:b7:50:1a:1e:c9:9f:28:bf:60:9d:
                    aa:88:46:72:36:87:67:52:aa:df:64:bf:2b:23:12:
                    f6:40:b7:41:e2:cb:7a:dc:1f:84:d8:d3:f6:83:f1:
                    92:03:3e:b8:d1:61:e8:74:97:72:69:90:24:87:38:
                    15:74:0a:12:69:d4:c1:bb:4d:33:be:5c:52:5d:b0:
                    76:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:E8:1D:44:EE:44:4F:E2:88:EA:F2:3A:DD:16:FC:00:75:F1:B8:DE
            X509v3 Authority Key Identifier:
                keyid:C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:a5:2e:9f:9d:79:ec:f1:ab:4d:4e:a0:24:0d:e6:03:86:cf:
         8d:8c:15:50:35:14:73:ce:ce:df:16:62:cc:7e:02:a3:7a:f1:
         cf:23:9c:dc:62:49:33:8e:af:2a:06:72:75:df:45:40:84:13:
         ba:74:7d:3b:99:c6:75:39:66:4f:79:cb:a4:75:32:aa:4c:db:
         5c:53:14:56:87:46:5f:ef:24:ce:9e:25:50:39:27:9a:eb:33:
         d3:2d:db:1f:4e:5c:09:47:db:81:c9:5e:90:ec:17:e2:6c:e3:
         cd:be:8e:a1:47:26:54:a6:92:0f:83:fd:af:8e:00:a7:83:21:
         46:3b:4d:83:e6:c4:88:05:21:6c:58:90:bd:64:f1:b5:8d:07:
         3d:a0:ce:cd:eb:88:f9:44:de:5e:32:25:66:f0:87:9c:a2:1d:
         85:a5:c6:59:70:e1:99:77:fc:52:e8:22:45:7f:13:ae:8d:d1:
         d0:92:14:e8:8f:e1:4c:43:49:97:20:79:5d:74:05:55:9a:9a:
         27:9d:85:02:ff:74:41:47:cc:8d:b6:29:1a:3d:c3:ed:89:23:
         38:3c:f1:2c:66:89:78:16:3e:4d:7a:e3:e0:1a:bd:1c:0c:34:
         58:bf:f0:12:2a:22:39:7f:5b:0a:ff:1f:eb:de:01:04:19:3e:
         79:04:a8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 19:24:52 2026 by rpki-client