Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft
File:                     XCJQF8zJYrDnOQswzwpWIvfN-u0.mft (raw, json)
Hash identifier:          0MOLsRjcB/zgah96omtPiQTgUlRiUOUcjtNYyJT4TPQ=
Subject key identifier:   74:81:84:48:97:C2:0F:0A:AE:6F:56:C3:C7:C5:57:AA:7F:F9:4F:BF
Authority key identifier: 5C:22:50:17:CC:C9:62:B0:E7:39:0B:30:CF:0A:56:22:F7:CD:FA:ED
Certificate issuer:       /CN=A9154330/serialNumber=5C225017CCC962B0E7390B30CF0A5622F7CDFAED
Certificate serial:       13B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCJQF8zJYrDnOQswzwpWIvfN-u0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft
Manifest number:          13B3
Signing time:             Fri 02 Oct 2026 17:05:19 +0000
Manifest this update:     Fri 02 Oct 2026 17:05:19 +0000
Manifest next update:     Fri 09 Oct 2026 17:05:19 +0000
Files and hashes:         1: XCJQF8zJYrDnOQswzwpWIvfN-u0.crl (hash: yZRupKs1oc3bE5nz/TR4YVEeJbUkjvXSCsZaoHGVhgI=)
                          2: E2B16FF23C8911F1A9897A359C833773.roa (hash: i8XPRUIqEgeLZapEq2D3+tp+3ktjcE4ag35fN0jDU5c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.crl
                          rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCJQF8zJYrDnOQswzwpWIvfN-u0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 17:05:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5048 (0x13b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154330, serialNumber=5C225017CCC962B0E7390B30CF0A5622F7CDFAED
        Validity
            Not Before: Oct  2 17:05:19 2026 GMT
            Not After : Oct  9 17:05:19 2026 GMT
        Subject: CN=6abfe44f-07db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1c:6b:73:9c:12:ab:34:09:59:8c:e8:34:8e:
                    4d:96:d3:66:41:14:eb:54:63:e8:89:9b:02:19:48:
                    ab:4c:c0:5c:f5:1e:04:92:00:92:37:df:14:7c:56:
                    a8:10:6e:c0:80:8d:c4:c4:32:d0:7c:69:d2:69:95:
                    1d:56:23:7a:b4:92:00:ff:3d:33:39:22:61:e0:dc:
                    84:1b:59:b1:bd:12:73:c7:eb:97:3c:93:a9:f5:48:
                    76:5d:6e:49:9a:93:7a:64:28:a3:9c:fd:8c:fa:d5:
                    70:6f:68:76:9f:26:f1:5a:03:de:01:4a:dd:92:39:
                    24:c9:de:3c:e2:a5:05:f8:71:7c:e1:05:5a:f0:77:
                    8a:bc:e9:13:4e:b9:43:b3:9c:68:26:3f:bb:78:d1:
                    5c:bd:f1:9a:c8:a5:30:db:9d:25:b1:0a:75:f1:23:
                    f7:4e:be:3d:11:83:29:c3:cb:3a:d7:9d:e7:a2:15:
                    f7:a2:d9:76:fe:0a:c4:22:5a:1c:e9:18:ae:2e:fc:
                    89:77:5c:de:96:a5:9d:01:e2:be:cf:04:e9:fb:f5:
                    47:df:73:c4:62:13:53:d5:a2:af:be:95:19:96:02:
                    d2:4f:67:09:a4:96:4b:f2:44:79:f5:51:7a:98:d8:
                    43:51:be:33:ea:3b:22:fd:56:bc:93:c4:f6:49:09:
                    c4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:81:84:48:97:C2:0F:0A:AE:6F:56:C3:C7:C5:57:AA:7F:F9:4F:BF
            X509v3 Authority Key Identifier:
                keyid:5C:22:50:17:CC:C9:62:B0:E7:39:0B:30:CF:0A:56:22:F7:CD:FA:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCJQF8zJYrDnOQswzwpWIvfN-u0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:9a:d3:ee:b6:2f:30:f2:91:0c:3b:ba:43:b2:1f:41:06:bc:
         31:54:e0:ed:f4:e4:46:37:4e:32:f8:d5:e7:a3:5e:d7:6d:5d:
         a1:64:0d:80:50:d0:86:52:44:ef:52:ae:4f:e4:e5:18:62:fb:
         93:dc:7d:31:3c:90:f0:ba:a0:13:1c:a9:24:8b:42:87:1c:10:
         a1:84:8f:53:c3:e3:e1:6c:14:6a:3d:6e:33:5c:e8:c0:c6:02:
         57:5e:9e:b7:ed:7a:e2:ae:41:52:78:55:e1:62:f5:0a:5a:93:
         ee:df:f3:09:85:39:a1:ac:2f:4d:5e:3e:01:d8:27:94:94:b7:
         0b:9b:fa:38:15:ef:5b:b0:f9:07:e9:e4:e0:de:f1:12:8a:da:
         c5:3a:0f:9f:91:98:89:88:ee:b7:e6:a8:34:e4:9f:b9:0c:6f:
         c1:a9:0c:1c:e2:dd:8b:1d:6d:d6:bc:dd:a2:cc:90:89:29:09:
         5d:15:33:f6:7d:e3:6e:17:e8:f7:71:4b:da:9f:49:35:a7:fc:
         5c:d6:9c:8c:c3:a6:c1:b2:81:f0:91:3c:ab:03:30:81:43:04:
         d8:cb:27:00:91:4e:f4:7a:83:d9:e4:d2:60:fe:44:92:d5:43:
         f8:d0:c1:22:6f:18:1c:ef:3a:ac:87:e9:50:2a:ce:e8:0d:b1:
         a2:18:92:f8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICE7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTQzMzAxMTAvBgNVBAUTKDVDMjI1MDE3Q0NDOTYyQjBFNzM5MEIzMENGMEE1NjIy
RjdDREZBRUQwHhcNMjYxMDAyMTcwNTE5WhcNMjYxMDA5MTcwNTE5WjAYMRYwFAYD
VQQDEw02YWJmZTQ0Zi0wN2RiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwhxrc5wSqzQJWYzoNI5NltNmQRTrVGPoiZsCGUirTMBc9R4EkgCSN98UfFao
EG7AgI3ExDLQfGnSaZUdViN6tJIA/z0zOSJh4NyEG1mxvRJzx+uXPJOp9Uh2XW5J
mpN6ZCijnP2M+tVwb2h2nybxWgPeAUrdkjkkyd484qUF+HF84QVa8HeKvOkTTrlD
s5xoJj+7eNFcvfGayKUw250lsQp18SP3Tr49EYMpw8s6153nohX3otl2/grEIloc
6RiuLvyJd1zelqWdAeK+zwTp+/VH33PEYhNT1aKvvpUZlgLST2cJpJZL8kR59VF6
mNhDUb4z6jsi/Va8k8T2SQnEFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHSBhEiX
wg8Krm9Ww8fFV6p/+U+/MB8GA1UdIwQYMBaAFFwiUBfMyWKw5zkLMM8KViL3zfrt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDMzMC9FQUQ4NzYzQ0Mw
OTMxMUU4ODBFNTJEMjNDNEY5QUUwMi9YQ0pRRjh6SllyRG5PUXN3endwV0l2Zk4t
dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hDSlFGOHpKWXJEbk9Rc3d6d3BXSXZmTi11MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NDMzMC9FQUQ4NzYzQ0MwOTMxMUU4ODBFNTJEMjNDNEY5QUUwMi9YQ0pRRjh6Slly
RG5PUXN3endwV0l2Zk4tdTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaJrT7rYvMPKRDDu6Q7IfQQa8MVTg7fTkRjdOMvjV56Ne121doWQNgFDQhlJE
71KuT+TlGGL7k9x9MTyQ8LqgExypJItChxwQoYSPU8Pj4WwUaj1uM1zowMYCV16e
t+164q5BUnhV4WL1ClqT7t/zCYU5oawvTV4+AdgnlJS3C5v6OBXvW7D5B+nk4N7x
EoraxToPn5GYiYjut+aoNOSfuQxvwakMHOLdix1t1rzdosyQiSkJXRUz9n3jbhfo
93FL2p9JNaf8XNacjMOmwbKB8JE8qwMwgUME2MsnAJFO9HqD2eTSYP5EktVD+NDB
Im8YHO86rIfpUCrO6A2xohiS+A==
-----END CERTIFICATE-----
Generated at Sun Oct 4 15:23:25 2026 by rpki-client