Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft
File:                     xkM8SeY82SA1swfo95Y3YI_q2_U.mft (raw, json)
Hash identifier:          gNqqZiBoyynNteaJJjP/nKEYQYn3jIfsC6Izq01QDQM=
Subject key identifier:   25:ED:B9:D4:EB:26:E2:39:D3:09:AD:9F:06:96:36:12:AD:08:DF:BD
Authority key identifier: C6:43:3C:49:E6:3C:D9:20:35:B3:07:E8:F7:96:37:60:8F:EA:DB:F5
Certificate issuer:       /CN=A9164390/serialNumber=C6433C49E63CD92035B307E8F79637608FEADBF5
Certificate serial:       1DEB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft
Manifest number:          1D99
Signing time:             Sat 10 Oct 2026 16:06:43 +0000
Manifest this update:     Sat 10 Oct 2026 16:06:42 +0000
Manifest next update:     Sat 17 Oct 2026 16:06:42 +0000
Files and hashes:         1: xkM8SeY82SA1swfo95Y3YI_q2_U.crl (hash: iRQGa8N27oo7YlN+vlhPQjTgsHy0hRrOBstFfsplnsA=)
                          2: 35D40EDE9F8511ECBE806D30C4F9AE02.roa (hash: UeYjCbhpLlJLJlqOXzDkcK+yw3hLZ56FWNkCBB4H+Ew=)
                          3: SeVz8gQjPGkdw4zVIf82ObaFpY0.asa (hash: kmHeGiiqpa55vbGHg8bwUKc75USh2jaQvW3B/lxFRyI=)
                          4: BA1F21AC731111F0BD7FF574C4F9AE02.roa (hash: 7F3EV0mM/ALk4AT2S2gOquXFkNEiD0LHjF4Qz5WNCvo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.crl
                          rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 14:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7659 (0x1deb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164390, serialNumber=C6433C49E63CD92035B307E8F79637608FEADBF5
        Validity
            Not Before: Oct 10 16:06:42 2026 GMT
            Not After : Oct 17 16:06:42 2026 GMT
        Subject: CN=6aca6292-ec7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:38:00:ed:69:b1:76:5d:5c:a1:5e:5f:d1:b4:
                    a3:79:ce:f0:bb:82:c6:e2:7c:c3:e7:5a:cc:9b:a6:
                    c5:36:47:56:f7:63:04:f3:0b:88:ce:10:d9:db:34:
                    a7:7d:e0:0a:c6:5f:af:61:0b:1d:e6:6d:d9:9d:54:
                    13:80:c4:00:46:17:16:fd:29:a3:8c:bf:41:4d:29:
                    33:dd:2c:f9:89:fb:8a:86:70:72:59:be:26:81:c2:
                    30:d6:32:6c:9b:5c:5a:d8:c9:98:ae:14:f0:15:fe:
                    c1:34:cd:b4:f2:93:e3:49:56:21:74:61:c4:22:9f:
                    db:39:89:fd:79:ac:4c:a5:5b:c8:ca:86:ec:d1:a9:
                    45:a2:2b:d7:b0:df:ab:3d:d8:6e:22:70:3c:22:2c:
                    5b:f9:91:a1:c9:51:8c:df:e7:bd:62:db:28:cb:8c:
                    1b:58:48:51:9a:3e:d3:b4:0c:64:5b:99:d7:2d:b2:
                    fd:6f:13:2f:3e:71:8a:86:e3:e5:02:34:73:16:06:
                    0f:39:f6:f7:6b:d6:8c:a9:e7:a2:e7:34:27:11:d4:
                    3c:ad:1a:60:7d:6c:30:3a:a4:59:24:78:f1:85:c9:
                    e2:ab:32:79:ee:36:4f:6e:58:78:84:a0:86:c6:0a:
                    01:de:77:b6:08:ac:41:49:bd:b8:98:c6:33:7f:2e:
                    a6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:ED:B9:D4:EB:26:E2:39:D3:09:AD:9F:06:96:36:12:AD:08:DF:BD
            X509v3 Authority Key Identifier:
                keyid:C6:43:3C:49:E6:3C:D9:20:35:B3:07:E8:F7:96:37:60:8F:EA:DB:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:2e:2b:12:36:1b:5c:9b:25:e0:f8:cb:e0:5a:e4:77:04:03:
         0e:7a:6c:3a:40:3f:65:f2:02:5c:3f:11:57:0b:19:ee:4f:e0:
         1d:2a:9e:9b:06:96:a0:db:02:32:0a:d5:11:76:3d:a1:84:f7:
         f4:f4:4b:f0:b9:e5:2c:71:52:12:cc:f9:af:38:21:f0:e6:e4:
         32:de:49:16:de:05:85:f9:24:f8:a0:9a:ff:20:9f:5e:df:32:
         39:8c:f2:a7:da:78:3f:d7:c0:89:44:47:42:2a:82:88:f0:fc:
         ea:ef:fd:ed:9e:36:c3:30:3a:f9:15:da:69:26:81:a9:2e:27:
         2a:f6:0c:be:16:0a:7e:05:5f:13:a0:46:64:71:f1:d4:ce:10:
         de:d1:1a:5a:17:f7:17:82:63:36:56:b2:65:1a:39:9f:60:5f:
         ae:cd:b8:49:0c:01:23:5c:0b:df:dc:70:54:67:1a:e5:58:6e:
         21:1c:a9:23:87:14:da:9c:24:55:66:ec:11:f7:38:73:fa:2a:
         65:4d:40:94:10:0b:08:d2:de:b4:7a:e7:44:f7:39:bd:4b:5b:
         93:65:0e:44:ad:c8:48:7e:b2:ce:93:e8:2d:54:c1:ad:53:46:
         2e:8f:c0:a6:be:81:8e:d4:13:b1:ee:d9:c5:37:94:d3:9e:f1:
         71:87:c1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 21:28:08 2026 by rpki-client