Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915BD82/AE210ED809A211F19E5C68091C3D8C67/xjZVadKEkQKf5Efl8-v2jxMB1bs.mft
File:                     xjZVadKEkQKf5Efl8-v2jxMB1bs.mft (raw, json)
Hash identifier:          hvN7xy2WqWfPHP3nVdDAqczw1p2mxtpW4QepHcA72gA=
Subject key identifier:   B3:63:E6:CA:45:29:F3:AB:D7:8E:6D:0D:41:7D:DE:74:65:64:B0:C8
Authority key identifier: C6:36:55:69:D2:84:91:02:9F:E4:47:E5:F3:EB:F6:8F:13:01:D5:BB
Certificate issuer:       /CN=A915BD82/serialNumber=C6365569D28491029FE447E5F3EBF68F1301D5BB
Certificate serial:       8B
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xjZVadKEkQKf5Efl8-v2jxMB1bs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BD82/AE210ED809A211F19E5C68091C3D8C67/xjZVadKEkQKf5Efl8-v2jxMB1bs.mft
Manifest number:          87
Signing time:             Fri 23 Oct 2026 08:17:15 +0000
Manifest this update:     Fri 23 Oct 2026 08:17:15 +0000
Manifest next update:     Fri 30 Oct 2026 08:17:15 +0000
Files and hashes:         1: xjZVadKEkQKf5Efl8-v2jxMB1bs.crl (hash: 8kuuJXy4KaLsBXREji1bzY6Ix1SycE3ykIycj9Oowmc=)
                          2: 4167035C0B3B11F1969C9C36063D8C67.roa (hash: XxHQrpq2A4gp2n4mp6ShFZAo+USW06IQITe4p2NcCiY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BD82/AE210ED809A211F19E5C68091C3D8C67/xjZVadKEkQKf5Efl8-v2jxMB1bs.crl
                          rsync://rpki.apnic.net/member_repository/A915BD82/AE210ED809A211F19E5C68091C3D8C67/xjZVadKEkQKf5Efl8-v2jxMB1bs.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xjZVadKEkQKf5Efl8-v2jxMB1bs.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Oct 2026 08:17:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139 (0x8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BD82, serialNumber=C6365569D28491029FE447E5F3EBF68F1301D5BB
        Validity
            Not Before: Oct 23 08:17:15 2026 GMT
            Not After : Oct 30 08:17:15 2026 GMT
        Subject: CN=6adb180b-7fb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9d:dd:64:56:e7:36:93:1e:33:e8:c2:09:b9:
                    70:ce:77:11:1b:74:83:6c:20:f9:b7:a3:85:d0:de:
                    f1:ce:25:6f:1b:61:3a:85:e0:6a:29:4e:7d:2f:6b:
                    80:c1:bb:c1:ac:f3:c1:0c:c4:96:fb:f5:81:15:fd:
                    53:e3:e0:76:63:f1:40:d7:7f:8a:39:aa:f1:22:72:
                    13:96:ae:a9:e9:ec:99:d8:f4:94:e3:0c:75:c9:ce:
                    0e:c0:89:af:43:40:42:b5:4e:8c:3c:1f:5c:b7:39:
                    a6:7f:b7:63:05:5f:b2:b9:d9:65:f9:10:78:e2:18:
                    e6:33:8f:a2:18:d2:a6:3e:0f:66:a3:be:ef:57:76:
                    ec:a1:86:75:46:c8:75:3f:da:99:f7:65:8d:07:c1:
                    4a:1b:74:de:87:9a:79:44:e7:9b:8f:44:ca:ac:74:
                    c2:34:79:fb:63:eb:7f:c7:d8:63:7b:ac:30:2c:ca:
                    42:72:ed:48:b9:cc:19:d0:82:cf:c8:c0:53:3c:34:
                    fd:79:46:ae:f9:fc:af:ab:2a:52:dd:13:c6:93:8e:
                    d8:66:6e:79:3d:5c:91:e7:58:84:13:75:fe:37:00:
                    02:6b:57:51:bf:ba:63:43:d6:5e:b4:87:0c:85:e0:
                    99:90:ce:0a:f0:3d:61:21:71:dd:ff:20:e6:7b:42:
                    89:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:63:E6:CA:45:29:F3:AB:D7:8E:6D:0D:41:7D:DE:74:65:64:B0:C8
            X509v3 Authority Key Identifier:
                keyid:C6:36:55:69:D2:84:91:02:9F:E4:47:E5:F3:EB:F6:8F:13:01:D5:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BD82/AE210ED809A211F19E5C68091C3D8C67/xjZVadKEkQKf5Efl8-v2jxMB1bs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xjZVadKEkQKf5Efl8-v2jxMB1bs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BD82/AE210ED809A211F19E5C68091C3D8C67/xjZVadKEkQKf5Efl8-v2jxMB1bs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:6a:a4:ff:80:81:75:86:23:c7:41:5c:9f:26:6a:94:90:9f:
         70:02:17:00:a6:ec:f8:f8:c5:e1:3f:3d:1f:a5:fa:09:eb:13:
         8e:2b:83:6f:c3:21:de:f0:3d:7a:6e:0b:b4:52:22:00:18:e4:
         d0:72:4e:89:29:ce:96:02:7d:fb:57:1c:c8:4c:f8:6e:01:09:
         47:e5:c0:79:08:ae:89:09:e7:e9:7a:01:30:db:92:7a:06:bc:
         94:86:1f:56:1b:e8:28:47:85:ab:47:57:f3:33:1e:62:cd:d9:
         b7:04:0c:28:54:d6:1c:ea:a0:4e:cf:5c:2e:e3:14:ca:03:fd:
         a2:66:b0:a5:2e:03:47:21:98:21:36:0e:eb:cf:de:cf:a2:f8:
         a7:8d:4b:4d:51:82:70:4d:1e:31:2a:75:df:bd:e3:fd:9f:2b:
         1b:dd:91:46:38:d4:04:0f:21:71:18:35:96:a6:ea:64:a1:c3:
         4e:e4:7a:26:13:fa:38:59:31:41:1b:3c:4e:98:63:44:c5:af:
         db:22:b7:df:9d:d6:3e:67:f0:9c:e4:5d:e2:a8:9a:5a:07:b8:
         f7:77:d2:c6:64:8d:ae:36:c1:22:31:0a:9e:36:df:57:68:73:
         cf:2c:41:bb:4e:94:8e:d2:31:4c:3f:f6:8e:99:ee:1a:bf:04:
         76:3a:ab:1d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUJEODIxMTAvBgNVBAUTKEM2MzY1NTY5RDI4NDkxMDI5RkU0NDdFNUYzRUJGNjhG
MTMwMUQ1QkIwHhcNMjYxMDIzMDgxNzE1WhcNMjYxMDMwMDgxNzE1WjAYMRYwFAYD
VQQDEw02YWRiMTgwYi03ZmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArZ3dZFbnNpMeM+jCCblwzncRG3SDbCD5t6OF0N7xziVvG2E6heBqKU59L2uA
wbvBrPPBDMSW+/WBFf1T4+B2Y/FA13+KOarxInITlq6p6eyZ2PSU4wx1yc4OwImv
Q0BCtU6MPB9ctzmmf7djBV+yudll+RB44hjmM4+iGNKmPg9mo77vV3bsoYZ1Rsh1
P9qZ92WNB8FKG3Teh5p5ROebj0TKrHTCNHn7Y+t/x9hje6wwLMpCcu1IucwZ0ILP
yMBTPDT9eUau+fyvqypS3RPGk47YZm55PVyR51iEE3X+NwACa1dRv7pjQ9ZetIcM
heCZkM4K8D1hIXHd/yDme0KJ8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLNj5spF
KfOr145tDUF93nRlZLDIMB8GA1UdIwQYMBaAFMY2VWnShJECn+RH5fPr9o8TAdW7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkQ4Mi9BRTIxMEVEODA5
QTIxMUYxOUU1QzY4MDkxQzNEOEM2Ny94alpWYWRLRWtRS2Y1RWZsOC12Mmp4TUIx
YnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL3hqWlZhZEtFa1FLZjVFZmw4LXYyanhNQjFicy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QkQ4Mi9BRTIxMEVEODA5QTIxMUYxOUU1QzY4MDkxQzNEOEM2Ny94alpWYWRLRWtR
S2Y1RWZsOC12Mmp4TUIxYnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhmqk/4CBdYYjx0FcnyZqlJCfcAIXAKbs+PjF4T89H6X6CesTjiuDb8Mh3vA9
em4LtFIiABjk0HJOiSnOlgJ9+1ccyEz4bgEJR+XAeQiuiQnn6XoBMNuSega8lIYf
VhvoKEeFq0dX8zMeYs3ZtwQMKFTWHOqgTs9cLuMUygP9omawpS4DRyGYITYO68/e
z6L4p41LTVGCcE0eMSp1373j/Z8rG92RRjjUBA8hcRg1lqbqZKHDTuR6JhP6OFkx
QRs8TphjRMWv2yK3353WPmfwnORd4qiaWge493fSxmSNrjbBIjEKnjbfV2hzzyxB
u06UjtIxTD/2jpnuGr8EdjqrHQ==
-----END CERTIFICATE-----
Generated at Sat Oct 24 02:07:23 2026 by rpki-client