Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft
File:                     XwTABfKMKFbHu_R2uRxioC8vxRw.mft (raw, json)
Hash identifier:          Xp0NQXFBRLjVXains/6QTPMh+TCpWyzKcfr9lbFX/jg=
Subject key identifier:   1A:51:2A:6E:19:77:0F:A4:97:1A:9B:1E:3C:BF:70:1D:07:D5:67:1D
Authority key identifier: 5F:04:C0:05:F2:8C:28:56:C7:BB:F4:76:B9:1C:62:A0:2F:2F:C5:1C
Certificate issuer:       /CN=A915A0FB/serialNumber=5F04C005F28C2856C7BBF476B91C62A02F2FC51C
Certificate serial:       01B7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XwTABfKMKFbHu_R2uRxioC8vxRw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft
Manifest number:          01AE
Signing time:             Sat 17 Oct 2026 04:17:25 +0000
Manifest this update:     Sat 17 Oct 2026 04:17:24 +0000
Manifest next update:     Sat 24 Oct 2026 04:17:24 +0000
Files and hashes:         1: XwTABfKMKFbHu_R2uRxioC8vxRw.crl (hash: 7VJC+PqBdRk9z5/JuCcIYQuDJIctzv7xFTBJ6cc31Yk=)
                          2: 900F4ADA440611EF85166C30C4F9AE02.roa (hash: Wxf+pnMbRXmK89KrT1cPFUY8XepsRf7BgNp3XpkASBg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.crl
                          rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XwTABfKMKFbHu_R2uRxioC8vxRw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Oct 2026 04:17:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 439 (0x1b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0FB, serialNumber=5F04C005F28C2856C7BBF476B91C62A02F2FC51C
        Validity
            Not Before: Oct 17 04:17:24 2026 GMT
            Not After : Oct 24 04:17:24 2026 GMT
        Subject: CN=6ad2f6d5-690b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8f:f6:ed:f9:e3:20:4a:9c:45:13:84:94:e2:
                    e6:e8:59:24:99:6a:49:74:c3:e7:b9:4f:55:0c:a0:
                    18:e7:9c:96:20:70:84:c0:81:2d:c3:22:63:4c:23:
                    0d:1d:5c:98:1a:8a:97:56:4d:af:69:19:90:21:cc:
                    f9:26:53:ae:c9:61:68:23:87:95:2f:a3:f8:09:6c:
                    41:c3:35:0e:87:a6:24:3d:92:72:9e:0f:1d:bf:16:
                    9c:2a:b9:61:0d:c7:87:27:fd:8f:76:00:ae:25:75:
                    71:b9:37:72:50:44:f5:b9:ae:9a:38:46:03:39:f9:
                    24:21:c0:3f:38:2b:a6:9f:36:27:fc:9f:74:3c:c8:
                    40:bc:a9:3e:42:ef:05:c0:f2:bd:21:6b:a5:e3:f7:
                    15:73:68:83:25:ab:a7:2f:5d:74:f4:9c:ce:89:d3:
                    91:ed:58:4b:42:8f:0f:6c:80:52:55:c3:04:ee:a2:
                    c2:3b:59:5b:f9:4a:8b:db:b8:d8:9d:68:77:fb:13:
                    88:16:ca:e3:11:77:5e:00:c7:31:d3:0b:ce:06:04:
                    25:28:fe:b9:ae:25:f6:22:a6:d9:99:7c:4f:92:54:
                    84:05:33:98:d3:15:22:36:d5:08:9c:5c:fa:f4:12:
                    9a:f3:d0:a8:28:ce:55:27:7e:f9:41:9b:8e:9f:fe:
                    b0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:51:2A:6E:19:77:0F:A4:97:1A:9B:1E:3C:BF:70:1D:07:D5:67:1D
            X509v3 Authority Key Identifier:
                keyid:5F:04:C0:05:F2:8C:28:56:C7:BB:F4:76:B9:1C:62:A0:2F:2F:C5:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XwTABfKMKFbHu_R2uRxioC8vxRw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:83:d6:cb:6d:b2:d3:a7:55:7f:ba:90:a2:0b:ab:38:d5:98:
         cb:35:ad:b5:49:92:a7:2d:21:ab:cb:48:30:49:2f:83:e5:e6:
         ed:aa:2d:6c:79:28:41:09:6c:ec:c5:89:1c:ef:6f:76:fa:41:
         4c:47:8a:ee:7c:33:1b:ad:a3:d7:a4:15:cd:4e:d4:02:12:a3:
         35:f6:28:d2:46:b5:0a:d5:4c:9b:73:cd:ef:ff:fc:06:67:b0:
         42:59:4e:16:1b:45:c9:0e:19:03:ee:68:c9:17:ff:8b:8a:e5:
         ff:f0:b8:38:8f:e7:75:77:c4:2b:76:2b:cd:2f:f1:96:d4:9c:
         51:a1:53:5f:72:3b:78:d7:00:e1:e9:1e:38:32:9a:b8:a8:52:
         92:19:a3:2b:cb:f7:8b:04:21:1c:07:1b:87:62:d6:c1:93:f6:
         bc:b2:b7:77:cf:d7:a0:07:e4:de:57:8b:be:1d:70:d9:a4:74:
         01:be:2c:3d:ed:07:ab:8a:7c:99:ac:93:bf:bc:9b:7d:2e:49:
         8e:22:2a:4c:a1:a2:9e:34:a6:f1:38:a1:d4:a6:70:b5:f5:06:
         26:33:06:29:1e:20:97:03:ef:2c:66:cc:80:63:f5:4a:09:40:
         a5:bd:3d:8d:69:1c:a8:5a:9c:76:e0:63:49:d8:f6:37:3e:71:
         f3:85:bc:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 00:13:41 2026 by rpki-client