Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/XoJBeVOzWp-LWaQuyUb00CTYd2s.mft
File:                     XoJBeVOzWp-LWaQuyUb00CTYd2s.mft (raw, json)
Hash identifier:          At/YeM1MrsXkZhU+4clHIHdm2heNa+D2wbwbQAf6HGw=
Subject key identifier:   36:B3:F0:D7:63:9B:70:D2:C0:07:4F:10:C9:95:63:6A:70:0E:47:82
Authority key identifier: 5E:82:41:79:53:B3:5A:9F:8B:59:A4:2E:C9:46:F4:D0:24:D8:77:6B
Certificate issuer:       /CN=A915B2F1/serialNumber=5E82417953B35A9F8B59A42EC946F4D024D8776B
Certificate serial:       074B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoJBeVOzWp-LWaQuyUb00CTYd2s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/XoJBeVOzWp-LWaQuyUb00CTYd2s.mft
Manifest number:          0743
Signing time:             Tue 06 Oct 2026 22:01:13 +0000
Manifest this update:     Tue 06 Oct 2026 22:01:12 +0000
Manifest next update:     Tue 13 Oct 2026 22:01:12 +0000
Files and hashes:         1: XoJBeVOzWp-LWaQuyUb00CTYd2s.crl (hash: A5xbOjPIDEa7HGVIi9iGzkMOaRad42HS48j8Fu4blq0=)
                          2: 9378220A8DF211EBADEDD212C4F9AE02.roa (hash: JzK+J3RZUskrLiXzKh3st2e9p5vwshKaKjNscdIfWCc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/XoJBeVOzWp-LWaQuyUb00CTYd2s.crl
                          rsync://rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/XoJBeVOzWp-LWaQuyUb00CTYd2s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoJBeVOzWp-LWaQuyUb00CTYd2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 22:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1867 (0x74b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B2F1, serialNumber=5E82417953B35A9F8B59A42EC946F4D024D8776B
        Validity
            Not Before: Oct  6 22:01:12 2026 GMT
            Not After : Oct 13 22:01:12 2026 GMT
        Subject: CN=6ac56fa8-4092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9d:70:ca:65:be:b5:66:29:35:91:8b:61:ed:
                    e5:08:a1:a1:6a:9c:fa:66:4a:5e:29:a9:b8:5a:a3:
                    ca:bb:71:68:a8:13:a9:b4:7f:a2:81:59:6c:92:28:
                    1d:07:84:82:af:be:19:57:53:a4:54:4c:92:14:ae:
                    1c:56:b2:e5:41:5d:50:ba:88:eb:0f:60:39:c7:5c:
                    73:32:ac:f6:50:23:31:dd:30:37:81:99:a4:5f:51:
                    24:cf:f0:d3:72:6d:14:1d:f9:cb:28:75:7f:55:97:
                    b7:96:8e:ea:5f:0f:be:43:11:dc:3e:93:ab:3d:4d:
                    ec:41:59:82:91:12:59:48:d0:43:17:27:53:db:4b:
                    91:1e:c9:58:da:69:c3:9f:ee:d6:c7:d8:cc:47:de:
                    9c:8f:f1:a6:1f:19:d5:13:0a:70:46:b5:bc:5b:55:
                    13:aa:8f:0f:8c:e7:25:64:36:c9:0d:bc:67:c5:8f:
                    4e:e9:d0:35:7e:60:36:6e:71:73:45:bd:8d:84:b0:
                    1b:42:03:f8:ea:89:97:ee:c2:c1:79:63:dd:ef:f4:
                    38:d8:b9:f7:fd:64:af:33:15:39:e7:e3:e7:d9:fc:
                    95:c6:03:ef:97:0a:28:15:85:0b:ed:cc:1e:98:9c:
                    44:2d:18:74:5c:90:97:30:48:86:3f:57:3e:a5:64:
                    4e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:B3:F0:D7:63:9B:70:D2:C0:07:4F:10:C9:95:63:6A:70:0E:47:82
            X509v3 Authority Key Identifier:
                keyid:5E:82:41:79:53:B3:5A:9F:8B:59:A4:2E:C9:46:F4:D0:24:D8:77:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/XoJBeVOzWp-LWaQuyUb00CTYd2s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoJBeVOzWp-LWaQuyUb00CTYd2s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/XoJBeVOzWp-LWaQuyUb00CTYd2s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:97:23:ac:c0:5a:34:a7:08:03:55:a4:3f:ff:07:22:23:9f:
         d5:ac:a2:73:2e:3f:93:78:12:61:9d:cb:99:0e:e4:7b:a6:56:
         27:c4:33:3a:e9:c8:8c:cc:b8:82:2a:9b:82:fd:55:cc:86:e8:
         13:f5:67:14:14:24:2e:27:11:ca:24:5b:fb:01:e6:77:26:c6:
         21:bd:14:3c:ac:7f:ef:f3:82:c3:ca:2c:1a:81:95:2c:25:5d:
         03:89:99:69:c8:2f:26:a8:cb:c0:2a:02:d7:86:25:ca:f0:44:
         8b:3f:d2:f1:7d:c1:3f:53:72:d4:10:e7:c1:d8:27:98:c2:d3:
         36:c8:f0:67:70:86:d9:5d:ff:f3:db:f6:93:87:e1:74:1b:8b:
         a4:36:dc:c1:54:b3:1f:39:e1:63:09:3f:f9:e5:b6:02:2c:c4:
         f5:62:b5:2f:f4:a0:66:f4:99:b0:82:ab:5e:77:f0:f9:21:78:
         58:08:6f:31:aa:f4:97:af:43:c7:64:86:d3:ca:90:bf:cc:65:
         a3:dc:88:f9:f6:ce:27:7f:ee:93:f7:1c:e1:2e:03:51:91:e0:
         02:f6:5c:c7:b4:0b:13:1c:ea:8f:04:a4:a9:86:2c:c2:75:d6:
         64:75:ad:9e:0a:c0:b9:41:df:d8:79:05:39:b4:dd:9d:e7:09:
         c7:da:56:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:41:25 2026 by rpki-client