Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.mft
File:                     xeslRrtzrOaT4ZqxB9g_JmYyzug.mft (raw, json)
Hash identifier:          Gb+uml8Xd6dT1BAb+zOEh72PDdL9DY43lBtZQNwxfOU=
Subject key identifier:   56:32:3D:49:97:C4:CA:F9:16:66:AF:7E:22:04:BD:73:B3:2D:8C:43
Authority key identifier: C5:EB:25:46:BB:73:AC:E6:93:E1:9A:B1:07:D8:3F:26:66:32:CE:E8
Certificate issuer:       /CN=A9197A55/serialNumber=C5EB2546BB73ACE693E19AB107D83F266632CEE8
Certificate serial:       9D
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xeslRrtzrOaT4ZqxB9g_JmYyzug.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.mft
Manifest number:          95
Signing time:             Sun 25 Oct 2026 07:54:29 +0000
Manifest this update:     Sun 25 Oct 2026 07:54:29 +0000
Manifest next update:     Sun 01 Nov 2026 07:54:29 +0000
Files and hashes:         1: xeslRrtzrOaT4ZqxB9g_JmYyzug.crl (hash: jX6oHF7P59iBsCAKBJt9Pf/ZNjjOiAFnVKnWvxHgQhw=)
                          2: 40E6AE74FAAA11F0BBD6BD435A6F56BC.roa (hash: rFUINwctLdCKpeYymZBC+HyAkWIaWkc+ZM7j+MzLgis=)
                          3: 21DB5BC4FAAA11F0A3B995435A6F56BC.roa (hash: LbeaZF1XRjLI75LU93fIN8JRsM753tbKTBrRQHfA4hk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.crl
                          rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xeslRrtzrOaT4ZqxB9g_JmYyzug.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 07:54:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 157 (0x9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197A55, serialNumber=C5EB2546BB73ACE693E19AB107D83F266632CEE8
        Validity
            Not Before: Oct 25 07:54:29 2026 GMT
            Not After : Nov  1 07:54:29 2026 GMT
        Subject: CN=6addb5b5-4aa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:24:1b:0a:13:7d:03:a9:40:97:77:4e:f6:60:
                    28:73:5c:97:6e:dc:91:ec:ac:ef:e7:ad:5e:61:b7:
                    b8:8d:fe:65:57:08:c1:8e:5c:2e:2a:fd:39:7d:82:
                    da:ea:80:d1:79:0e:c0:a4:22:77:11:95:64:51:a4:
                    97:74:e2:80:69:32:ea:7a:72:b0:88:65:80:61:b0:
                    81:5c:66:26:05:d3:9b:ca:10:05:9b:5e:de:bf:86:
                    27:47:5a:71:71:2a:0c:10:6d:ea:88:9e:02:0f:c1:
                    f4:69:dc:ef:f2:cd:3a:fc:79:11:3b:a4:dd:88:0f:
                    f4:a6:2c:53:39:9c:fa:6a:bc:fa:8d:14:12:6a:c0:
                    e7:8c:97:59:eb:bd:32:05:04:d8:0b:98:8f:a1:17:
                    66:43:09:c8:7b:40:34:1a:4b:7c:4f:46:b3:d3:da:
                    16:35:17:b9:1c:5c:70:e6:32:d0:1e:62:a9:42:ea:
                    9b:b5:43:56:98:47:ac:8f:20:df:b2:0c:78:06:89:
                    ae:f7:09:e1:27:a9:44:f9:3c:c0:74:65:1a:4a:65:
                    77:5a:ae:b0:50:b0:e4:01:31:c0:d0:b0:14:3a:3c:
                    a3:fb:a1:bd:a7:61:1d:e7:2c:a9:1c:5e:a3:2d:81:
                    0f:e2:86:23:dc:2d:ba:e0:a4:39:31:04:c2:26:ae:
                    f6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:32:3D:49:97:C4:CA:F9:16:66:AF:7E:22:04:BD:73:B3:2D:8C:43
            X509v3 Authority Key Identifier:
                keyid:C5:EB:25:46:BB:73:AC:E6:93:E1:9A:B1:07:D8:3F:26:66:32:CE:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xeslRrtzrOaT4ZqxB9g_JmYyzug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:3c:f7:6a:1d:7e:c0:92:ab:35:30:1e:9c:ff:70:a6:ce:1d:
         ef:6c:0f:29:50:a8:b7:9d:4f:89:f3:dc:09:ef:18:73:c3:03:
         25:d9:00:65:7e:0e:bb:66:ad:ab:c8:32:30:83:03:ec:5b:5f:
         10:6c:54:d3:86:d5:e4:ef:2e:db:7d:f5:4e:72:e2:2b:2e:f0:
         34:fa:20:2f:59:47:58:37:8d:51:12:2b:08:0e:7b:39:c2:0c:
         80:fd:08:f2:46:b5:89:22:4a:9f:38:65:c9:83:b7:0c:b8:41:
         38:16:fb:6d:57:7f:b3:91:44:57:61:c3:34:65:35:11:84:c1:
         ee:43:15:b1:e1:31:ad:25:ec:9c:a2:23:e2:31:46:ae:af:cb:
         a3:b6:22:c5:50:04:e5:a1:60:af:c7:29:74:72:b8:60:4e:36:
         54:b8:94:8c:46:82:71:ca:0e:da:1e:7c:d3:ca:d3:32:c3:53:
         98:bd:58:11:c6:e5:1e:ca:8f:5e:d7:4b:87:5e:17:6c:1f:c0:
         14:bf:dd:b5:92:c0:85:4b:a9:60:54:1f:26:35:e2:ed:44:59:
         e6:ed:34:27:52:44:d1:05:d1:0b:cd:92:5f:c1:cd:ef:82:1d:
         2a:f4:be:77:78:03:67:26:df:48:c0:f0:77:0c:01:5e:fd:0f:
         f9:7f:12:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:03:09 2026 by rpki-client