Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft
File:                     X322UMrENFF2rD8H3vyZGtT-3rg.mft (raw, json)
Hash identifier:          jor+TRrO24qc/BEgP2OZHSLH0RmG9KPgaAZWHX9vYN0=
Subject key identifier:   4D:6C:5B:67:15:05:DC:F4:7C:5B:FC:80:F7:25:27:00:13:00:3E:98
Authority key identifier: 5F:7D:B6:50:CA:C4:34:51:76:AC:3F:07:DE:FC:99:1A:D4:FE:DE:B8
Certificate issuer:       /CN=A919470F/serialNumber=5F7DB650CAC4345176AC3F07DEFC991AD4FEDEB8
Certificate serial:       05B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft
Manifest number:          05AF
Signing time:             Sun 04 Oct 2026 23:08:59 +0000
Manifest this update:     Sun 04 Oct 2026 23:08:59 +0000
Manifest next update:     Sun 11 Oct 2026 23:08:59 +0000
Files and hashes:         1: X322UMrENFF2rD8H3vyZGtT-3rg.crl (hash: xibb6SZUw/LI8bEFxi04OCsO5c6598Ps28blNZhUJ2g=)
                          2: 026757CA3E2A11F19724AD26B6833773.roa (hash: yGLqEyfKOhCLMSX2whrGvvy8lUSZ6kp3DgyqhvORmyU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.crl
                          rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 23:08:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1456 (0x5b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919470F, serialNumber=5F7DB650CAC4345176AC3F07DEFC991AD4FEDEB8
        Validity
            Not Before: Oct  4 23:08:59 2026 GMT
            Not After : Oct 11 23:08:59 2026 GMT
        Subject: CN=6ac2dc8b-69bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f0:ca:27:23:56:31:f4:66:7d:99:4a:21:a5:
                    6a:fa:c6:f0:81:21:8c:be:42:f4:12:f2:14:6a:d3:
                    62:ae:51:b2:c7:50:62:10:6b:92:df:bf:78:97:db:
                    19:71:e5:24:57:60:c4:ce:73:00:cf:84:14:c8:62:
                    c4:91:06:84:af:a3:a4:d4:04:fe:19:5d:ab:84:4e:
                    d7:4a:4f:1d:ba:a5:11:69:69:27:cb:64:ff:cd:02:
                    c1:97:02:1d:90:a0:5c:9b:70:e2:4a:1e:d7:f3:da:
                    59:2e:7e:ec:54:e0:33:c8:74:69:ac:e7:c5:67:6d:
                    d1:05:bb:d5:9f:4e:e6:89:0a:b4:fd:69:7c:4a:f5:
                    3b:b2:e0:2d:62:ff:0e:f7:be:3b:7c:61:c5:39:c1:
                    28:3a:ac:82:84:7d:59:b2:a5:32:08:71:80:90:b2:
                    d3:5b:dc:20:2a:68:6a:e3:21:57:56:a4:27:33:0e:
                    ad:1f:14:95:d8:a4:6f:44:55:3c:38:6b:7a:7b:19:
                    d6:85:99:86:71:15:8c:50:03:f2:7f:13:f9:c4:84:
                    c6:56:cb:97:e0:e8:2d:ce:da:d9:9b:b6:0f:a8:97:
                    83:16:71:38:b8:90:c7:2e:ee:21:1e:ca:6d:cc:18:
                    6a:4c:e0:93:db:e9:e8:59:c0:e8:42:f2:87:bb:83:
                    1f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:6C:5B:67:15:05:DC:F4:7C:5B:FC:80:F7:25:27:00:13:00:3E:98
            X509v3 Authority Key Identifier:
                keyid:5F:7D:B6:50:CA:C4:34:51:76:AC:3F:07:DE:FC:99:1A:D4:FE:DE:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:ac:92:41:f9:2b:d8:0d:5b:a2:50:fb:1b:3a:f7:43:97:2b:
         48:1a:b8:df:88:8b:0b:4a:95:22:46:f0:e5:85:9b:f2:f9:af:
         81:63:dc:9b:a7:c7:f9:5b:ef:11:41:f6:3b:f1:3a:8b:1b:c8:
         c8:75:b2:05:4b:5c:34:4c:ff:9a:c9:3f:6f:8c:18:38:1d:a5:
         bf:9d:56:40:f5:7d:32:82:d3:49:e4:77:9b:da:55:bf:bb:05:
         be:b6:d9:5f:1c:27:71:73:bc:33:90:7f:d6:4d:ac:9c:d0:1a:
         17:05:7e:84:9e:8e:97:fa:07:0a:64:f7:1f:6f:df:c9:fe:48:
         cb:ae:4f:e2:05:ed:4e:64:5d:34:e7:cd:a8:cc:57:38:f3:2b:
         66:c9:88:e7:b8:e0:9b:df:2a:99:e5:f9:44:7b:7f:87:89:84:
         3c:aa:6e:db:05:d4:08:7d:34:da:03:5e:f0:59:81:71:ae:4f:
         a5:1a:66:b6:62:41:48:e6:63:1b:4b:b9:c4:85:a9:07:82:ae:
         cc:a3:a4:b2:98:89:b4:f5:1c:13:4d:87:5b:ab:a5:ff:ae:24:
         7f:ed:bf:ec:f5:12:9c:6d:cc:14:d1:a8:f1:24:7f:90:8b:a3:
         23:00:77:d7:7c:c7:60:89:e4:a9:a7:f9:69:45:14:bc:da:83:
         9f:13:56:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:29:37 2026 by rpki-client