Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.mft
File:                     xHI5__XPeIUhf8bKkBt6MngIMfA.mft (raw, json)
Hash identifier:          2sgDlcf5n4qkfHWqxAulooYHVz0D+AK0sDBboODFqMs=
Subject key identifier:   AA:7F:05:39:FB:35:F1:CD:56:0E:6C:36:F7:FA:40:C7:BC:C6:83:F0
Authority key identifier: C4:72:39:FF:F5:CF:78:85:21:7F:C6:CA:90:1B:7A:32:78:08:31:F0
Certificate issuer:       /CN=A91761A9/serialNumber=C47239FFF5CF7885217FC6CA901B7A32780831F0
Certificate serial:       9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHI5__XPeIUhf8bKkBt6MngIMfA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.mft
Manifest number:          9B
Signing time:             Wed 07 Oct 2026 07:56:56 +0000
Manifest this update:     Wed 07 Oct 2026 07:56:55 +0000
Manifest next update:     Wed 14 Oct 2026 07:56:55 +0000
Files and hashes:         1: xHI5__XPeIUhf8bKkBt6MngIMfA.crl (hash: 33chmUMqY/lflyjXa0MKh2eNvAm2362qF0b+AdeRj9w=)
                          2: 1B831C724A1811F1A8A9712CC9833773.roa (hash: u4Y6CGErEsB0B7gfACiMg7sntGtE2KvV4PDqZ7u1hQM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.crl
                          rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHI5__XPeIUhf8bKkBt6MngIMfA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 07:56:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 159 (0x9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91761A9, serialNumber=C47239FFF5CF7885217FC6CA901B7A32780831F0
        Validity
            Not Before: Oct  7 07:56:55 2026 GMT
            Not After : Oct 14 07:56:55 2026 GMT
        Subject: CN=6ac5fb48-99f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a2:7a:81:54:f3:6b:d1:3c:e7:ba:6b:30:42:
                    d9:a3:64:7c:82:28:3d:05:22:24:ef:63:8b:6b:c8:
                    0e:9c:9b:8b:06:ac:aa:8e:13:7f:89:e2:b4:13:dd:
                    1f:73:69:58:6b:64:42:46:36:be:11:cd:8b:2a:7c:
                    94:c8:dd:c9:79:24:20:43:f7:6b:5c:bd:8e:9a:17:
                    ae:8e:f4:e7:09:68:3f:c8:2a:14:24:d6:ea:40:76:
                    ae:89:e8:59:c1:16:80:62:e9:5b:90:35:4d:66:a2:
                    70:70:c5:9c:73:4f:c5:a6:2e:af:71:00:ff:0f:8f:
                    c7:a5:01:1b:70:d2:6d:d8:60:ac:52:67:57:09:6b:
                    94:cb:c0:ca:1c:d3:ed:77:b2:11:99:f6:1e:ae:81:
                    0b:19:8f:ca:2b:05:82:4b:07:6c:dc:18:31:75:1f:
                    5e:13:40:bf:99:11:09:b1:3f:35:b8:74:68:08:7b:
                    b1:fc:ee:22:73:54:dc:b8:20:5b:3f:74:f6:cc:66:
                    55:48:92:ad:fa:0a:58:c5:56:a6:b2:14:13:21:2f:
                    39:04:57:d2:93:ca:ed:e7:99:6a:b9:52:80:fc:bc:
                    36:69:b8:08:97:52:6e:0d:2e:fb:14:65:bd:0f:df:
                    8d:5a:96:df:95:25:03:e0:b4:6a:13:c5:58:1a:87:
                    29:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:7F:05:39:FB:35:F1:CD:56:0E:6C:36:F7:FA:40:C7:BC:C6:83:F0
            X509v3 Authority Key Identifier:
                keyid:C4:72:39:FF:F5:CF:78:85:21:7F:C6:CA:90:1B:7A:32:78:08:31:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHI5__XPeIUhf8bKkBt6MngIMfA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:8d:98:31:6e:ac:cd:e5:8b:6b:ad:19:06:36:10:d0:89:1b:
         3c:45:78:b7:b2:a9:05:ad:75:fa:75:cd:8d:e1:93:6e:ff:3b:
         62:0b:19:03:fe:30:5c:df:ec:0f:36:ec:b3:db:6e:9a:01:6b:
         68:5a:36:dd:e2:d6:99:ce:eb:b8:6e:3f:ce:80:b9:65:63:69:
         10:8b:35:f1:dd:70:7d:e6:6f:e8:bd:6e:b7:c6:a5:52:51:91:
         3d:f5:17:33:35:4f:9f:bb:ce:36:43:1e:a1:94:12:cb:ad:59:
         7d:2f:a5:41:0a:06:75:e9:df:e7:3d:72:9e:fd:88:37:5c:72:
         e8:be:8c:da:05:2e:36:c8:fe:47:ec:7e:d6:65:55:a1:c5:8d:
         0b:f9:bb:fc:40:5b:4c:74:21:76:97:24:ff:f0:ad:14:af:cc:
         e1:6f:97:83:7a:fd:26:d2:5c:5f:ca:ee:2d:8b:40:f0:90:23:
         8e:09:ce:17:6a:44:7b:d1:69:60:80:74:83:6c:5c:37:0e:ef:
         c1:e1:a2:6c:5e:3f:0a:a0:1b:1b:b9:eb:43:a5:af:28:fc:67:
         c1:08:7a:4f:05:fc:fe:3d:89:7f:74:1c:a8:82:81:6d:50:aa:
         4c:53:60:c8:1b:ab:52:24:b4:aa:55:00:c8:85:3c:21:0e:31:
         9e:5b:cb:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 01:07:25 2026 by rpki-client