Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/X8G2OMzN_5nWRFZVKcgHCGhomzE.mft
File:                     X8G2OMzN_5nWRFZVKcgHCGhomzE.mft (raw, json)
Hash identifier:          QBip0qnC7xWLOmV0M9L1+AD56eNnCL875oPIWjyP8r0=
Subject key identifier:   AA:60:91:1B:62:D4:8F:94:17:65:93:B4:E0:CD:3A:07:33:00:81:F3
Authority key identifier: 5F:C1:B6:38:CC:CD:FF:99:D6:44:56:55:29:C8:07:08:68:68:9B:31
Certificate issuer:       /CN=A918E28E/serialNumber=5FC1B638CCCDFF99D644565529C8070868689B31
Certificate serial:       013B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8G2OMzN_5nWRFZVKcgHCGhomzE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/X8G2OMzN_5nWRFZVKcgHCGhomzE.mft
Manifest number:          0132
Signing time:             Wed 07 Oct 2026 06:09:01 +0000
Manifest this update:     Wed 07 Oct 2026 06:09:00 +0000
Manifest next update:     Wed 14 Oct 2026 06:09:00 +0000
Files and hashes:         1: X8G2OMzN_5nWRFZVKcgHCGhomzE.crl (hash: THtDh7GcFbRxgaumQxJ1+pDh7k0DH57wumAioYPLCtc=)
                          2: AA456842107211F09A9E631FC4F9AE02.roa (hash: f6Cvx3N7h4aMk1PWUAl7FuI3n29BObBDdjQTOWyJ4SU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/X8G2OMzN_5nWRFZVKcgHCGhomzE.crl
                          rsync://rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/X8G2OMzN_5nWRFZVKcgHCGhomzE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8G2OMzN_5nWRFZVKcgHCGhomzE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 06:08:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 315 (0x13b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E28E, serialNumber=5FC1B638CCCDFF99D644565529C8070868689B31
        Validity
            Not Before: Oct  7 06:09:00 2026 GMT
            Not After : Oct 14 06:09:00 2026 GMT
        Subject: CN=6ac5e1fc-a8fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4c:4c:c1:f0:ff:1e:64:ab:01:a3:c0:05:e0:
                    7a:02:18:62:aa:34:8a:1b:1f:f0:76:c3:a2:4d:37:
                    db:f7:63:6e:14:ab:6a:03:e8:f9:e8:e9:c7:cb:56:
                    6f:9b:79:91:68:05:98:32:06:67:36:50:97:71:a0:
                    2d:7c:5a:dd:8a:47:f7:49:10:55:4b:05:5f:af:55:
                    ce:38:16:ca:3f:99:ce:48:0c:10:76:40:f3:18:6a:
                    04:5f:b9:b8:78:dc:ce:d0:60:9b:63:e4:90:67:c3:
                    b5:92:15:92:26:c1:8f:e2:53:e7:d4:eb:53:3b:fd:
                    c7:3f:31:13:0c:ac:03:1b:94:0f:aa:1f:5f:4d:61:
                    59:d5:e5:08:0d:fa:e4:d8:05:78:48:99:b7:da:65:
                    00:06:15:09:af:4b:9b:9b:ca:59:61:87:00:18:1f:
                    ae:33:42:a7:ea:df:ba:65:40:90:eb:e7:37:87:65:
                    d9:8a:bf:96:5b:d9:0c:19:f9:6b:57:b3:c9:7a:e4:
                    73:2a:2c:8c:64:fa:91:b7:8b:77:99:03:d0:69:df:
                    0d:c9:cc:b3:e8:7e:1a:28:9f:68:43:aa:f0:9a:4b:
                    56:41:69:03:2f:11:36:2d:f6:78:22:f3:2f:de:ef:
                    e7:97:8f:bb:13:33:71:d5:7b:f8:17:fd:93:14:55:
                    c7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:60:91:1B:62:D4:8F:94:17:65:93:B4:E0:CD:3A:07:33:00:81:F3
            X509v3 Authority Key Identifier:
                keyid:5F:C1:B6:38:CC:CD:FF:99:D6:44:56:55:29:C8:07:08:68:68:9B:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/X8G2OMzN_5nWRFZVKcgHCGhomzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8G2OMzN_5nWRFZVKcgHCGhomzE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/X8G2OMzN_5nWRFZVKcgHCGhomzE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:66:8e:e2:fb:83:c1:6f:65:36:14:f9:47:4f:6f:ff:84:5a:
         a5:65:a1:82:91:77:b2:31:14:40:49:63:cb:52:14:9d:15:df:
         30:06:1a:83:70:9c:4e:83:e9:6e:f0:94:4b:87:88:65:69:9f:
         3e:50:94:10:f7:12:89:43:34:9b:58:ef:90:85:f7:74:35:30:
         f4:51:22:02:f6:86:13:56:52:f8:96:68:e4:20:fc:58:09:90:
         ca:70:98:23:1b:0c:d4:de:8f:68:fd:56:ef:a7:ba:0b:ed:32:
         1f:cd:d5:27:c7:52:bd:c0:6a:42:a9:b8:ed:72:db:88:16:58:
         19:a4:2d:88:53:4d:33:ec:1f:bf:d0:61:c1:7a:86:f7:b8:61:
         1f:4a:c8:8c:83:19:0f:73:21:03:3e:9d:68:be:22:75:37:38:
         a0:83:7c:df:3d:ca:44:9d:b4:43:27:75:3d:0d:c2:64:96:c5:
         88:a5:72:ed:25:c5:d7:cd:55:87:10:99:92:dd:51:3d:8c:0a:
         8f:5a:c2:34:81:f7:31:d6:ca:16:6c:78:4b:5d:3f:eb:66:12:
         da:97:a4:1b:32:a9:03:57:5f:15:f2:c8:1b:72:35:cd:48:c6:
         b1:d2:da:a7:75:79:31:a5:16:2a:72:bb:58:00:d3:6c:7c:8a:
         1b:47:9a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 08:52:28 2026 by rpki-client