Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918190B/A140C152C5C511F0AAA4CF0FC4F9AE02/xT8GoF_V8dkjXh-VMPLNPOMREOI.mft
File:                     xT8GoF_V8dkjXh-VMPLNPOMREOI.mft (raw, json)
Hash identifier:          kxEinhQy5AG4Cv5Q4njV6gHOw6zdS3aV3eHfFcAT814=
Subject key identifier:   D7:A6:DA:0F:12:CB:16:52:1A:08:3F:A1:EF:21:73:F7:8F:E8:A3:DB
Authority key identifier: C5:3F:06:A0:5F:D5:F1:D9:23:5E:1F:95:30:F2:CD:3C:E3:11:10:E2
Certificate issuer:       /CN=A918190B/serialNumber=C53F06A05FD5F1D9235E1F9530F2CD3CE31110E2
Certificate serial:       C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xT8GoF_V8dkjXh-VMPLNPOMREOI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918190B/A140C152C5C511F0AAA4CF0FC4F9AE02/xT8GoF_V8dkjXh-VMPLNPOMREOI.mft
Manifest number:          BB
Signing time:             Mon 09 Nov 2026 07:05:05 +0000
Manifest this update:     Mon 09 Nov 2026 07:05:05 +0000
Manifest next update:     Mon 16 Nov 2026 07:05:05 +0000
Files and hashes:         1: xT8GoF_V8dkjXh-VMPLNPOMREOI.crl (hash: Gd9PV7yhZ3tPbxV9lHJeHipSPb7lnwSgacA9L7SixAY=)
                          2: 329CC664C5C611F0A1D9E964C4F9AE02.roa (hash: lnx8KdODc8Z9IvWXfKLFt+dyZtSETllR99xleqZrHjg=)
                          3: 3461A67021A811F182436258153D8C67.roa (hash: CnfvhJ3PR3mpLZc/i3GDghVF6JL2JkcdlNGKt7tvH9k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918190B/A140C152C5C511F0AAA4CF0FC4F9AE02/xT8GoF_V8dkjXh-VMPLNPOMREOI.crl
                          rsync://rpki.apnic.net/member_repository/A918190B/A140C152C5C511F0AAA4CF0FC4F9AE02/xT8GoF_V8dkjXh-VMPLNPOMREOI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xT8GoF_V8dkjXh-VMPLNPOMREOI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Nov 2026 07:05:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 192 (0xc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918190B, serialNumber=C53F06A05FD5F1D9235E1F9530F2CD3CE31110E2
        Validity
            Not Before: Nov  9 07:05:05 2026 GMT
            Not After : Nov 16 07:05:05 2026 GMT
        Subject: CN=6af170a1-820b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cc:47:9c:14:2a:fe:ae:e2:b2:a1:59:6e:f6:
                    6c:50:44:d5:b1:12:d6:af:b4:75:64:ce:a4:88:64:
                    2c:aa:1c:ed:10:6f:aa:92:7a:0b:bb:34:f0:3b:8d:
                    bd:a0:10:6b:71:32:fc:f0:93:47:e5:85:25:4f:57:
                    10:26:5e:42:95:3b:43:eb:e5:30:3b:f1:ca:15:44:
                    50:8a:ce:41:9e:4c:fc:6d:fd:2b:f3:d7:20:c4:ca:
                    b2:f7:2d:1d:4b:36:23:8b:62:95:81:fe:79:72:f4:
                    b9:ed:3c:75:bc:7c:c3:cd:22:06:44:b3:b8:f0:af:
                    64:e0:8b:87:ed:9b:1c:60:52:fa:93:c8:7b:b2:81:
                    99:3f:26:a8:41:46:c2:3f:0c:a5:07:e4:76:9f:9e:
                    a2:3d:7e:cb:7a:22:44:b2:5d:30:d1:3e:57:fd:bb:
                    ff:a4:6d:17:f3:70:73:8d:77:49:b9:bb:7f:9b:63:
                    d5:f6:18:83:f0:fb:a1:8d:14:f1:bc:59:4b:d9:75:
                    56:40:b1:89:3d:88:0a:bd:2e:3a:96:b8:3b:cb:d8:
                    71:39:eb:0f:b1:20:6c:d2:75:dc:62:82:c0:9f:8a:
                    11:e0:79:6c:dc:f0:e4:8d:85:1b:4c:f7:23:9a:35:
                    08:33:48:5a:77:a0:6d:0c:de:bb:9d:8d:b5:af:4c:
                    e7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A6:DA:0F:12:CB:16:52:1A:08:3F:A1:EF:21:73:F7:8F:E8:A3:DB
            X509v3 Authority Key Identifier:
                keyid:C5:3F:06:A0:5F:D5:F1:D9:23:5E:1F:95:30:F2:CD:3C:E3:11:10:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918190B/A140C152C5C511F0AAA4CF0FC4F9AE02/xT8GoF_V8dkjXh-VMPLNPOMREOI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xT8GoF_V8dkjXh-VMPLNPOMREOI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918190B/A140C152C5C511F0AAA4CF0FC4F9AE02/xT8GoF_V8dkjXh-VMPLNPOMREOI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:1f:55:69:02:6d:d5:da:ef:7b:1e:e6:24:d9:d6:d6:ca:27:
         a6:34:ad:38:3d:b1:b3:52:74:95:38:a4:d5:da:71:b9:51:17:
         4a:6d:09:d9:6e:22:81:85:4c:12:64:a9:9e:87:a8:d9:a0:6f:
         67:f8:1f:cf:ff:e6:9f:e2:19:a4:c2:f1:98:d6:69:24:85:d2:
         89:fb:99:54:36:89:fb:d3:fe:32:3a:38:fe:a4:20:33:9b:7d:
         76:bd:f1:bc:54:63:10:6d:3a:46:9c:a9:df:f9:f3:87:67:38:
         a1:0c:6b:43:11:ff:d4:2b:fc:1a:93:03:3e:4b:e9:e5:42:08:
         29:60:66:3c:f3:78:12:14:e7:8d:91:88:88:a4:51:58:67:b3:
         a8:0d:8b:1c:34:00:6f:49:74:20:49:9c:aa:28:79:22:a2:71:
         f6:ca:20:a1:2a:17:da:41:dc:ad:19:cf:f0:24:2a:1d:25:d0:
         89:a2:36:bc:07:cf:79:e2:76:37:3d:a7:4e:b0:ba:0d:22:b4:
         45:57:00:62:14:0c:ce:47:fd:0e:95:b5:fc:45:e0:d8:cb:43:
         d7:d4:81:41:60:66:ff:c1:e3:71:58:7a:27:31:ae:10:b0:3a:
         df:87:f9:94:9e:69:42:21:75:48:48:ae:9e:e4:4e:bf:59:6c:
         82:cc:f1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 22:49:29 2026 by rpki-client