Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft
File:                     XPuiiRbqwHsjWQlIVdieFqCBS6w.mft (raw, json)
Hash identifier:          b5Zc7YWB7DvGa96IXNAaYw7+/4N5DJV/iFC+iRyBJH8=
Subject key identifier:   AF:33:5E:05:1D:9B:8B:7A:6A:BF:EE:04:A3:02:8D:15:28:30:42:4E
Authority key identifier: 5C:FB:A2:89:16:EA:C0:7B:23:59:09:48:55:D8:9E:16:A0:81:4B:AC
Certificate issuer:       /CN=A918E843/serialNumber=5CFBA28916EAC07B2359094855D89E16A0814BAC
Certificate serial:       0C31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft
Manifest number:          0C1E
Signing time:             Fri 14 Aug 2026 18:50:43 +0000
Manifest this update:     Fri 14 Aug 2026 18:50:43 +0000
Manifest next update:     Fri 21 Aug 2026 18:50:43 +0000
Files and hashes:         1: XPuiiRbqwHsjWQlIVdieFqCBS6w.crl (hash: 3n7BUIu0HaUyfoY0rbXTFXLe03IOndVFeZf5Nzd2Jjg=)
                          2: 3EA26CE6396011EABC88BD55C4F9AE02.roa (hash: ZfN47QZk1I0stKKG/PcylN3pXvV6tmE6VzGmQ9cZBhw=)
                          3: 01553E10396311EAB24C5A5FC4F9AE02.roa (hash: WrULTRVyC0CP0la8trGFB188cSwiC+Ug49Ju1Bs+OYc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.crl
                          rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Aug 2026 18:50:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3121 (0xc31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E843, serialNumber=5CFBA28916EAC07B2359094855D89E16A0814BAC
        Validity
            Not Before: Aug 14 18:50:43 2026 GMT
            Not After : Aug 21 18:50:43 2026 GMT
        Subject: CN=6a7f6383-6001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b4:66:c9:67:1f:d8:13:7b:c9:f4:6a:59:74:
                    6f:60:bd:59:9c:e8:a8:cd:72:6b:94:da:52:42:c0:
                    70:b2:9f:10:0a:45:e5:32:12:ef:42:4e:c1:4b:8a:
                    57:9f:48:bf:de:59:c3:f2:e6:7c:95:f0:aa:71:6c:
                    78:fe:b5:bc:4e:ef:b2:85:ee:04:72:68:da:db:43:
                    75:7b:b5:6e:fe:ad:e8:f0:35:e2:67:a8:50:21:c3:
                    cd:db:f8:b3:e2:b3:c2:db:bd:96:82:79:d2:29:d3:
                    33:a9:ce:d3:af:0f:15:5d:7c:74:f3:7c:19:7a:df:
                    7e:39:5a:02:69:26:3f:40:a9:f6:59:48:fb:99:95:
                    21:7a:2c:1d:50:ee:b9:03:01:1b:eb:88:97:47:3a:
                    73:21:01:ff:2f:ea:2d:f3:3a:98:14:b3:ca:17:45:
                    62:5b:8f:04:91:33:b8:e5:06:4a:4c:d0:b6:fa:e5:
                    36:d6:b3:37:6f:c6:5d:0c:ab:48:6e:69:78:25:45:
                    a9:66:6f:a0:9c:ec:61:65:db:8b:10:4a:e5:c7:96:
                    c9:03:d1:42:86:e9:42:f6:42:80:61:e0:bb:f6:35:
                    d4:e4:75:e1:3b:7d:7a:9f:97:bd:43:79:9d:90:e3:
                    b3:6b:46:8e:56:a1:95:f9:15:f2:b0:e7:3c:a8:53:
                    9b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:33:5E:05:1D:9B:8B:7A:6A:BF:EE:04:A3:02:8D:15:28:30:42:4E
            X509v3 Authority Key Identifier:
                keyid:5C:FB:A2:89:16:EA:C0:7B:23:59:09:48:55:D8:9E:16:A0:81:4B:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:69:3e:f6:d6:45:15:ca:32:aa:8f:f7:90:7e:1b:43:5c:71:
         5e:47:d5:71:4b:32:a1:1f:cb:17:92:74:f9:cb:6b:a8:c1:6a:
         7c:a7:b6:34:15:4a:c7:7b:c5:f6:64:0c:2a:29:f6:12:3b:42:
         5f:24:d9:5b:20:c7:15:b8:65:16:5f:06:86:00:8f:b9:12:56:
         fb:d0:c8:e7:32:33:01:50:42:5b:1e:4c:74:6e:64:c0:c2:04:
         5c:58:7e:79:8d:ca:72:f1:ec:c6:df:10:b0:e1:bc:5f:90:25:
         36:43:5c:48:4c:99:2d:5a:8c:28:91:db:63:31:c9:e5:46:d9:
         b6:bf:1f:5b:3e:33:a8:b6:f6:84:5b:07:95:3e:28:be:a2:63:
         30:53:41:51:e8:84:b0:7b:90:79:eb:51:78:38:35:6a:2a:df:
         63:cf:f6:2c:5b:ee:05:f5:b2:9e:e3:a3:23:8d:fa:2c:68:8c:
         26:da:b9:d4:77:26:c0:dc:3a:5b:9b:8d:ec:42:23:a2:c6:68:
         b5:0c:45:e1:be:13:fa:8c:5e:08:c2:1f:d6:fc:38:60:10:a9:
         c4:a2:72:d5:bd:76:a3:d1:e1:9a:cc:68:1a:28:53:5b:0b:e9:
         08:ad:17:66:22:97:64:40:0f:4f:f6:8b:72:61:d5:a5:05:31:
         8a:b0:be:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:45:04 2026 by rpki-client