Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917D488/8D733ACAC11E11F08DDE8787C4F9AE02/xDyP7aRVEFkimLW5U-J5-6zkWmQ.mft
File:                     xDyP7aRVEFkimLW5U-J5-6zkWmQ.mft (raw, json)
Hash identifier:          JQDTD/TJlqv1eZVnfLl+Dh/FNWSraHwdc46/KwqbOyw=
Subject key identifier:   72:B5:DA:6A:99:1F:04:7B:2F:55:62:13:55:42:EF:A7:5A:9F:C8:F7
Authority key identifier: C4:3C:8F:ED:A4:55:10:59:22:98:B5:B9:53:E2:79:FB:AC:E4:5A:64
Certificate issuer:       /CN=A917D488/serialNumber=C43C8FEDA45510592298B5B953E279FBACE45A64
Certificate serial:       AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDyP7aRVEFkimLW5U-J5-6zkWmQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D488/8D733ACAC11E11F08DDE8787C4F9AE02/xDyP7aRVEFkimLW5U-J5-6zkWmQ.mft
Manifest number:          A9
Signing time:             Wed 07 Oct 2026 07:38:45 +0000
Manifest this update:     Wed 07 Oct 2026 07:38:45 +0000
Manifest next update:     Wed 14 Oct 2026 07:38:45 +0000
Files and hashes:         1: xDyP7aRVEFkimLW5U-J5-6zkWmQ.crl (hash: o/ZNh8PZJx0zNLRXiZWHkd1sktApbeRjDEhwUUTJGX0=)
                          2: 038304DEC11F11F0A9F08209C4F9AE02.roa (hash: Y37EvjA3svHQwyGXd0a+TXPBLOFhRYmTcbPi/KdjSGw=)
                          3: QfIB1Tp0Yj9p9LJeFUUelEFbLq0.asa (hash: GkhLzDGRs/A1L85iShH707jEFkgYyufS017a1D4GInc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D488/8D733ACAC11E11F08DDE8787C4F9AE02/xDyP7aRVEFkimLW5U-J5-6zkWmQ.crl
                          rsync://rpki.apnic.net/member_repository/A917D488/8D733ACAC11E11F08DDE8787C4F9AE02/xDyP7aRVEFkimLW5U-J5-6zkWmQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDyP7aRVEFkimLW5U-J5-6zkWmQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 07:38:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 172 (0xac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D488, serialNumber=C43C8FEDA45510592298B5B953E279FBACE45A64
        Validity
            Not Before: Oct  7 07:38:45 2026 GMT
            Not After : Oct 14 07:38:45 2026 GMT
        Subject: CN=6ac5f705-1257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fe:5d:e9:3b:77:ac:04:cd:23:90:d2:8f:4e:
                    1a:59:86:aa:aa:ee:59:27:93:d8:dd:f1:1b:97:36:
                    19:a2:d2:2b:30:9e:c4:d1:c0:62:53:b8:64:5f:20:
                    40:56:f3:18:af:ea:3e:8c:f2:49:9d:d2:8d:55:17:
                    72:7d:04:50:72:d8:16:cb:e9:5e:db:b9:15:f9:09:
                    a1:2b:f2:05:ef:d7:e4:43:41:bd:ee:36:63:e4:d7:
                    d9:d8:0b:7c:a9:6d:fe:14:8d:ad:fa:34:da:a8:40:
                    15:eb:8b:6a:f4:96:f2:fb:ec:70:8d:53:ee:a4:b2:
                    12:ec:66:05:a3:72:06:ec:b6:65:ed:8b:28:11:28:
                    a0:4e:20:37:ed:41:a8:31:c4:1b:16:69:6b:fb:fa:
                    d0:8b:91:54:62:e3:52:f6:2d:75:84:3a:d7:71:e2:
                    d2:7a:5c:76:66:ca:28:25:43:77:d7:5f:b5:8a:d7:
                    f8:19:82:5d:a4:c3:8e:ad:4c:22:1f:9d:9d:3d:64:
                    1a:69:8e:a5:67:34:b0:dc:f1:19:0d:16:25:7c:03:
                    06:80:56:a1:f0:3f:68:8b:33:30:7e:fd:2a:8b:3e:
                    42:b3:23:d1:87:5d:90:43:87:53:75:1b:e3:c6:df:
                    39:90:9b:af:c6:50:52:ab:7f:c5:d6:3d:8e:d4:62:
                    c7:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B5:DA:6A:99:1F:04:7B:2F:55:62:13:55:42:EF:A7:5A:9F:C8:F7
            X509v3 Authority Key Identifier:
                keyid:C4:3C:8F:ED:A4:55:10:59:22:98:B5:B9:53:E2:79:FB:AC:E4:5A:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D488/8D733ACAC11E11F08DDE8787C4F9AE02/xDyP7aRVEFkimLW5U-J5-6zkWmQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDyP7aRVEFkimLW5U-J5-6zkWmQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D488/8D733ACAC11E11F08DDE8787C4F9AE02/xDyP7aRVEFkimLW5U-J5-6zkWmQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:90:7f:f4:fb:1b:0d:e8:8d:ea:4c:c1:85:7d:cc:3a:12:51:
         12:d3:e7:d9:17:ac:cb:d3:7e:7e:37:4a:81:79:f3:66:ef:42:
         de:fa:22:2e:f7:b9:f4:99:c5:f2:17:c5:39:d9:a9:bb:ea:a6:
         4b:d6:ee:9b:ec:a4:10:0c:21:82:5d:f7:ef:cf:08:dd:90:36:
         8b:4c:e8:94:f4:c7:2f:e0:50:ab:3e:36:17:ee:d9:cb:13:78:
         cc:03:38:8a:a1:e9:2d:79:23:66:48:54:38:17:a4:de:d0:b2:
         66:fb:a8:b3:2b:15:2b:54:c2:50:a1:63:5d:8d:88:7c:7e:18:
         73:a8:a6:72:4e:b5:e3:16:54:be:f9:29:47:2d:7a:1f:58:6e:
         f9:6b:de:5e:1f:12:41:31:82:bf:83:d3:bc:c8:b2:75:67:49:
         eb:af:2b:18:d7:1f:54:01:8d:60:0d:50:5d:20:b8:27:29:26:
         6f:a8:1d:fc:c0:e2:5b:41:b2:bd:8e:99:c6:bb:98:a9:f8:eb:
         31:b5:aa:cd:d0:4d:57:80:27:5a:4a:0d:ff:31:3d:65:f7:48:
         d8:07:74:ab:39:44:74:69:89:7f:4a:5b:71:e1:e0:a5:5c:65:
         11:a4:0c:ed:23:a4:d2:43:64:1a:49:fd:8a:ef:9d:4f:f2:b3:
         bf:75:9a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:18:23 2026 by rpki-client