Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.mft
File:                     xPuRgT57oJnZHpxIFyCUuZBcDxE.mft (raw, json)
Hash identifier:          oFdMYF7sQNbvFTiGEtmvcz5KpvXhYCjm3E/aE5gQ8tc=
Subject key identifier:   35:77:5E:18:FF:C7:02:B1:05:5F:1D:32:B0:81:E6:71:6E:BB:17:4E
Authority key identifier: C4:FB:91:81:3E:7B:A0:99:D9:1E:9C:48:17:20:94:B9:90:5C:0F:11
Certificate issuer:       /CN=A919B3BC/serialNumber=C4FB91813E7BA099D91E9C48172094B9905C0F11
Certificate serial:       1F32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPuRgT57oJnZHpxIFyCUuZBcDxE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.mft
Manifest number:          1F11
Signing time:             Thu 08 Oct 2026 16:04:43 +0000
Manifest this update:     Thu 08 Oct 2026 16:04:42 +0000
Manifest next update:     Thu 15 Oct 2026 16:04:42 +0000
Files and hashes:         1: xPuRgT57oJnZHpxIFyCUuZBcDxE.crl (hash: o/04X1rebrNiR/x/fuR8scQU+9zV4rF4zpgmJhkZcfk=)
                          2: 6553E9461A0611F08E7AD42AC4F9AE02.roa (hash: HxzSJQ72nx6phfJVkbYAuQ4gq7ZAkIN3NRVxvU93nY0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.crl
                          rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPuRgT57oJnZHpxIFyCUuZBcDxE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 16:04:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7986 (0x1f32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B3BC, serialNumber=C4FB91813E7BA099D91E9C48172094B9905C0F11
        Validity
            Not Before: Oct  8 16:04:42 2026 GMT
            Not After : Oct 15 16:04:42 2026 GMT
        Subject: CN=6ac7bf1a-12a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:b9:24:e5:53:bb:77:bf:0d:25:93:cc:24:dc:
                    2f:91:ce:79:1d:52:07:6b:db:8e:e1:c7:81:4c:9c:
                    b1:a4:33:63:1e:c1:33:9c:5e:8c:2e:4b:59:99:95:
                    91:19:16:1d:2f:34:ac:a2:2a:2b:35:66:2e:bf:ad:
                    13:30:1f:f6:ff:fe:be:62:34:ef:d8:19:47:bb:59:
                    3a:97:9a:06:5c:96:66:76:db:99:05:3b:59:2f:a7:
                    56:44:69:75:f4:54:42:84:53:7f:62:f9:2b:2f:c5:
                    61:c9:ba:23:56:81:c0:f1:c8:c1:31:24:f3:95:8e:
                    6d:54:1c:13:62:24:b2:6f:1c:68:51:66:f4:fa:35:
                    eb:c9:d6:74:ae:bd:73:41:f7:6f:89:ac:47:e4:89:
                    82:c2:50:59:6c:5f:cb:4e:e8:95:c3:4b:9a:7b:b2:
                    74:7c:5b:6f:57:7a:ec:1b:2a:e6:73:3e:2b:3d:4e:
                    60:59:92:25:b8:be:f8:bc:d9:bd:94:a9:5f:29:99:
                    72:1f:60:42:df:f5:89:a5:9a:8d:7b:76:18:f8:3a:
                    e7:9b:57:83:de:42:7e:2e:23:86:47:5b:2a:0e:23:
                    d1:ca:23:25:b3:6d:c6:d7:54:e9:74:6a:57:af:08:
                    23:4f:61:ea:3d:4e:dd:55:bf:85:a4:82:50:3d:df:
                    8a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:77:5E:18:FF:C7:02:B1:05:5F:1D:32:B0:81:E6:71:6E:BB:17:4E
            X509v3 Authority Key Identifier:
                keyid:C4:FB:91:81:3E:7B:A0:99:D9:1E:9C:48:17:20:94:B9:90:5C:0F:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPuRgT57oJnZHpxIFyCUuZBcDxE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:b9:6a:1f:4b:da:91:0d:6b:6f:f8:59:b6:c7:5d:6a:b0:87:
         df:88:0b:e3:df:5c:fb:0b:ef:93:3e:d3:69:4d:8d:a6:ce:8a:
         e1:25:3f:06:dd:f2:0f:47:14:da:1f:41:b8:0c:ad:d4:d3:3f:
         e0:0d:d2:fb:ba:ae:52:f6:82:f0:8f:5a:40:47:11:5f:72:d9:
         f3:56:9d:a6:c4:f5:4b:5a:63:0c:ec:10:92:03:da:9f:0f:f6:
         f6:84:ce:3d:f1:ab:68:db:22:49:9f:78:cb:8d:c8:c0:be:33:
         91:d0:47:ca:66:6f:18:68:71:39:25:51:29:c5:6e:ce:f9:55:
         81:32:74:eb:83:28:e2:db:8c:10:da:59:89:b2:aa:56:72:3f:
         90:22:e6:64:d0:d7:be:11:10:50:86:7d:6e:48:79:9d:81:19:
         4e:94:ab:5c:97:1d:33:ba:62:2c:b5:ec:d9:2a:fe:a2:1f:95:
         96:fd:5d:d0:9f:28:0f:26:08:34:30:7a:ed:bd:4f:c9:75:ac:
         f7:24:e4:d9:6e:d2:e2:e4:8c:f1:f0:c1:dd:57:7a:77:fb:7f:
         df:8b:2e:84:40:c7:1b:67:c9:8e:f9:10:3c:a1:24:3c:77:d9:
         70:0e:dd:a3:bb:44:1e:25:2a:03:ef:b4:83:ad:6d:e8:40:a6:
         3b:10:7f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 00:45:08 2026 by rpki-client