Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/xKTDVDWP1II_bsUxMnZ0hUyGxt8.mft
File:                     xKTDVDWP1II_bsUxMnZ0hUyGxt8.mft (raw, json)
Hash identifier:          YmnljR8eTiyQNW4iQFbRl3D1IiyxIzBzuj8QK9R/f48=
Subject key identifier:   65:B5:3B:29:B4:DD:79:60:E9:71:94:10:49:99:9A:70:3D:C4:68:74
Authority key identifier: C4:A4:C3:54:35:8F:D4:82:3F:6E:C5:31:32:76:74:85:4C:86:C6:DF
Certificate issuer:       /CN=A918FD04/serialNumber=C4A4C354358FD4823F6EC531327674854C86C6DF
Certificate serial:       0997
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xKTDVDWP1II_bsUxMnZ0hUyGxt8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/xKTDVDWP1II_bsUxMnZ0hUyGxt8.mft
Manifest number:          16CE
Signing time:             Sun 04 Oct 2026 18:23:39 +0000
Manifest this update:     Sun 04 Oct 2026 18:23:39 +0000
Manifest next update:     Sun 11 Oct 2026 18:23:39 +0000
Files and hashes:         1: xKTDVDWP1II_bsUxMnZ0hUyGxt8.crl (hash: KDmwRbH+lw8yVJSQGFRTm8xgVLlT5l+f1meEpbhJuco=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/xKTDVDWP1II_bsUxMnZ0hUyGxt8.crl
                          rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/xKTDVDWP1II_bsUxMnZ0hUyGxt8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xKTDVDWP1II_bsUxMnZ0hUyGxt8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 18:23:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2455 (0x997)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FD04, serialNumber=C4A4C354358FD4823F6EC531327674854C86C6DF
        Validity
            Not Before: Oct  4 18:23:39 2026 GMT
            Not After : Oct 11 18:23:39 2026 GMT
        Subject: CN=6ac299ab-38fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7d:81:76:f2:d5:56:ee:15:f8:e1:19:04:8e:
                    3e:8d:b5:3e:07:67:fc:91:35:70:46:3e:6c:36:8e:
                    be:21:1e:64:e7:b6:a8:51:77:ac:42:4f:23:45:5b:
                    67:ae:01:8f:e8:a2:74:6e:3a:e1:37:b6:4a:57:1e:
                    75:33:8d:9b:ef:3e:ae:9a:ab:3a:ed:70:e8:9d:44:
                    2e:aa:33:14:36:03:25:3b:d4:88:83:9b:ed:f0:9b:
                    2d:83:ce:e9:d3:c5:1d:c6:1b:42:bd:12:64:f0:8e:
                    03:ec:b4:89:51:fd:26:8e:59:1c:05:a2:ef:3a:a4:
                    0c:d7:11:75:d9:eb:f2:e9:0a:c5:13:56:f7:b5:76:
                    5f:1a:b9:a1:41:85:41:75:d0:57:d9:ec:08:e8:19:
                    16:73:11:f5:d9:d7:f6:62:be:a9:6f:af:9e:de:94:
                    24:3b:cb:50:09:d2:a2:e7:53:28:f6:b1:b9:d2:92:
                    be:c0:db:24:3e:07:53:b6:f0:22:8c:27:fd:3f:42:
                    fa:25:34:96:e4:41:ec:4a:1d:72:47:11:5f:c7:78:
                    e1:e7:6c:14:46:7b:31:fa:27:e4:1f:83:19:d6:7c:
                    2d:3b:15:ea:5b:b3:51:47:e6:81:82:98:f7:fa:a9:
                    8d:39:96:b6:43:bf:27:48:68:6b:90:a4:3a:18:e3:
                    86:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:B5:3B:29:B4:DD:79:60:E9:71:94:10:49:99:9A:70:3D:C4:68:74
            X509v3 Authority Key Identifier:
                keyid:C4:A4:C3:54:35:8F:D4:82:3F:6E:C5:31:32:76:74:85:4C:86:C6:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/xKTDVDWP1II_bsUxMnZ0hUyGxt8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xKTDVDWP1II_bsUxMnZ0hUyGxt8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/xKTDVDWP1II_bsUxMnZ0hUyGxt8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:10:e8:cf:9c:5e:54:0c:2e:5c:f4:0b:5f:84:f3:e9:c0:45:
         fc:bb:e6:b8:97:9a:fd:ec:84:bf:2c:98:ea:cd:d7:3d:71:e0:
         86:c0:73:48:8f:b3:dc:70:15:c7:ed:ac:1b:bc:6f:ee:8e:ae:
         36:80:20:48:79:53:55:1f:4c:57:71:0e:8b:d5:08:bd:c3:ac:
         2c:be:70:04:db:d7:3c:20:24:c0:1d:52:07:95:52:0c:c8:27:
         fd:59:3e:c0:ae:e0:f5:b4:e0:ab:c9:b1:13:da:c1:2d:fe:62:
         57:af:af:1d:c0:68:dc:08:ec:0a:35:1b:c3:fe:13:a6:c7:8e:
         0f:da:0c:07:17:d4:37:25:27:83:c9:45:84:5a:0f:47:9a:6a:
         55:8b:23:41:d1:1a:03:42:74:35:8f:2e:00:30:a7:bd:4d:f9:
         e3:ee:b5:95:b1:d3:7e:d1:20:72:b8:66:cb:79:6d:31:f6:0e:
         cc:d9:13:5f:f6:92:a2:ac:06:c7:b6:7d:57:b2:b6:ca:d4:16:
         a0:c7:13:d9:30:72:3c:48:3b:45:96:a9:dc:2d:16:cc:71:c3:
         d8:ed:a8:7e:f3:6f:4b:51:a2:bd:ef:e2:31:66:98:5c:fd:c9:
         bc:5b:79:f0:e4:a2:0f:32:81:8b:d1:ff:a2:fd:c5:32:ef:0d:
         62:a7:0e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 05:31:40 2026 by rpki-client