Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91582DF/9501E2464A1C11F1AAFBA6B1C9833773/xz0GwFqHVeyG868ZQO6Q2kmuPmQ.mft
File:                     xz0GwFqHVeyG868ZQO6Q2kmuPmQ.mft (raw, json)
Hash identifier:          NBwH7qQpSRcgpYAqlTGIGw6NpgLMqeQEaiDGpLa2ydw=
Subject key identifier:   1E:2A:CE:29:67:3D:7D:CA:8C:7B:62:70:45:AC:98:DA:98:6E:74:2C
Authority key identifier: C7:3D:06:C0:5A:87:55:EC:86:F3:AF:19:40:EE:90:DA:49:AE:3E:64
Certificate issuer:       /CN=A91582DF/serialNumber=C73D06C05A8755EC86F3AF1940EE90DA49AE3E64
Certificate serial:       4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xz0GwFqHVeyG868ZQO6Q2kmuPmQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91582DF/9501E2464A1C11F1AAFBA6B1C9833773/xz0GwFqHVeyG868ZQO6Q2kmuPmQ.mft
Manifest number:          4D
Signing time:             Sat 03 Oct 2026 09:05:33 +0000
Manifest this update:     Sat 03 Oct 2026 09:05:32 +0000
Manifest next update:     Sat 10 Oct 2026 09:05:32 +0000
Files and hashes:         1: xz0GwFqHVeyG868ZQO6Q2kmuPmQ.crl (hash: f4UW73wdzf55JJoeZBu817PmaRbrrJUgWYjijHEZqjo=)
                          2: A0AA3CC84A1D11F1B98DEBB6C9833773.roa (hash: vg1YeXy7A3skRrMrzsOzoL6vwmPs9b3WJpIatWza3uI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91582DF/9501E2464A1C11F1AAFBA6B1C9833773/xz0GwFqHVeyG868ZQO6Q2kmuPmQ.crl
                          rsync://rpki.apnic.net/member_repository/A91582DF/9501E2464A1C11F1AAFBA6B1C9833773/xz0GwFqHVeyG868ZQO6Q2kmuPmQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xz0GwFqHVeyG868ZQO6Q2kmuPmQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 09:05:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91582DF, serialNumber=C73D06C05A8755EC86F3AF1940EE90DA49AE3E64
        Validity
            Not Before: Oct  3 09:05:32 2026 GMT
            Not After : Oct 10 09:05:32 2026 GMT
        Subject: CN=6ac0c55d-7a5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1d:2a:66:6a:bc:29:6e:7b:d1:8d:84:4b:77:
                    2a:80:f2:a3:7e:68:04:5a:4e:c2:a0:30:3b:08:ea:
                    e4:27:94:59:c5:81:f1:6e:cc:77:3e:62:d1:07:a0:
                    fd:de:da:b3:1d:8f:f7:d5:7e:36:14:c7:72:f8:41:
                    c9:35:c1:7e:80:60:9e:3d:17:99:d9:7e:85:cc:0b:
                    53:6a:6e:ab:11:d1:af:58:aa:23:5e:2a:96:35:ac:
                    a5:ad:43:1c:ef:25:29:43:80:35:86:df:6d:ef:74:
                    21:18:f3:bb:23:06:23:e8:c7:22:b2:53:c0:c7:35:
                    d6:59:be:53:da:be:27:6e:f5:16:15:81:35:9d:3b:
                    42:05:07:b2:82:56:47:3a:b4:b8:de:22:83:38:c3:
                    72:61:39:a7:40:93:da:d5:b6:b8:e9:97:93:7e:41:
                    b6:dc:08:48:c2:ad:58:85:d5:1c:89:86:d8:45:64:
                    2f:0b:61:42:ca:24:8a:a4:13:85:38:6c:b9:7d:a9:
                    e4:ff:cd:97:57:3d:52:9c:9c:50:74:39:10:76:14:
                    0c:cc:fb:77:46:4d:18:1c:e8:2b:a3:eb:1f:36:c3:
                    76:34:b0:3b:b4:df:49:d3:8c:f1:9f:84:12:de:b5:
                    0e:7e:b6:d8:ad:c8:0a:1e:71:fe:9d:98:46:e4:e2:
                    c5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:2A:CE:29:67:3D:7D:CA:8C:7B:62:70:45:AC:98:DA:98:6E:74:2C
            X509v3 Authority Key Identifier:
                keyid:C7:3D:06:C0:5A:87:55:EC:86:F3:AF:19:40:EE:90:DA:49:AE:3E:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91582DF/9501E2464A1C11F1AAFBA6B1C9833773/xz0GwFqHVeyG868ZQO6Q2kmuPmQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xz0GwFqHVeyG868ZQO6Q2kmuPmQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91582DF/9501E2464A1C11F1AAFBA6B1C9833773/xz0GwFqHVeyG868ZQO6Q2kmuPmQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:a7:77:b0:ee:b3:7e:b9:95:c8:5e:7f:a0:2e:a2:04:f9:de:
         71:42:d8:33:d7:85:06:aa:a5:73:ef:86:48:0c:10:e7:9d:05:
         1b:7f:ff:68:b9:77:e5:2d:f2:8e:92:48:5c:a8:bd:e1:0e:62:
         56:a0:fc:ea:9c:4e:50:6f:5d:4f:16:08:1a:b3:36:2f:be:2b:
         3c:0d:9a:b4:11:32:df:d3:77:a6:a9:6b:19:1b:9d:36:39:65:
         1f:4e:51:72:59:98:32:f8:4d:bb:55:a7:fb:54:f3:af:da:53:
         ee:be:dd:67:31:0f:e5:c3:dd:21:21:da:19:35:da:8b:dd:bd:
         77:f9:9d:4c:73:14:b3:88:a9:85:ba:1f:76:78:af:0a:b9:05:
         5c:5f:dc:a5:3a:de:55:de:66:8a:0d:49:83:7c:63:dd:30:ea:
         25:cc:73:da:21:54:13:85:bb:f0:15:74:b6:74:cd:3b:bd:ad:
         2d:2d:f5:72:c7:e7:c0:d0:07:b7:12:1e:2f:7a:26:4b:23:f2:
         8c:ef:2b:39:bc:da:18:bf:fd:6f:01:38:92:9f:47:f6:7e:07:
         94:7d:08:40:08:00:c3:a9:02:89:a3:31:34:cc:9a:2e:5b:ba:
         53:c8:14:aa:4b:39:84:dd:f9:d8:87:2f:91:f3:99:c7:2e:a0:
         2a:4a:01:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 02:41:48 2026 by rpki-client