Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft
File:                     xHWJli7Q04kmIr5be4vu_ozniKc.mft (raw, json)
Hash identifier:          67Sd8zrbk5Rbzt+zMN8iRlUgVmyWU6FdnOHwQrzAwA8=
Subject key identifier:   37:62:E6:1B:3D:53:09:C6:E7:F1:7E:F9:60:58:29:57:48:38:98:04
Authority key identifier: C4:75:89:96:2E:D0:D3:89:26:22:BE:5B:7B:8B:EE:FE:8C:E7:88:A7
Certificate issuer:       /CN=A91A13A6/serialNumber=C47589962ED0D3892622BE5B7B8BEEFE8CE788A7
Certificate serial:       0204
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft
Manifest number:          01F5
Signing time:             Mon 07 Sep 2026 03:15:46 +0000
Manifest this update:     Mon 07 Sep 2026 03:15:45 +0000
Manifest next update:     Mon 14 Sep 2026 03:15:45 +0000
Files and hashes:         1: xHWJli7Q04kmIr5be4vu_ozniKc.crl (hash: 5zwqiwmYy+n5lZiJ7Kzw1kumJ9+CwNJIjhQrTZozS9k=)
                          2: 8C7D223C2DAB11EF88127264C4F9AE02.roa (hash: X6aIaG1zQqgDiSqMFiuqRqeQ5WZkrDJTEHFLzyOj2LU=)
                          3: 4E2CAC386E8711EF8521ED6FC4F9AE02.roa (hash: eKVOlBNn+5WuwNFphnK/oDxQ3aByduRE2UhfBxYvHBw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.crl
                          rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Sep 2026 03:15:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 516 (0x204)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A13A6, serialNumber=C47589962ED0D3892622BE5B7B8BEEFE8CE788A7
        Validity
            Not Before: Sep  7 03:15:45 2026 GMT
            Not After : Sep 14 03:15:45 2026 GMT
        Subject: CN=6a9e2c62-16b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:89:cb:ca:0c:d3:05:9b:62:08:3c:8d:66:8c:
                    38:58:d8:fe:51:b0:32:53:be:d5:e0:58:95:97:21:
                    b8:56:2e:f5:00:af:b2:82:ba:ca:4f:f9:9e:1c:b1:
                    73:e3:fd:ab:ab:71:af:fd:5a:bc:08:92:56:f8:4b:
                    d9:7c:5b:d2:42:c9:ef:d3:a8:b6:6f:dd:48:a3:ad:
                    46:d5:77:44:56:70:7b:fc:92:a0:8d:96:e3:1e:88:
                    9c:d9:32:e0:2b:5b:0a:97:33:8b:54:4f:3c:c1:d8:
                    a3:a2:34:4e:a4:42:17:a8:f9:c4:ba:57:28:3f:6d:
                    50:45:c4:3d:a6:a0:57:a3:15:5b:da:6a:42:99:32:
                    15:cc:da:2a:f8:04:9b:fc:fd:e6:31:f0:4d:90:b1:
                    b7:9a:4f:03:22:df:61:83:15:53:e2:1a:79:8f:63:
                    02:cd:25:5c:d3:c1:19:2b:37:f8:04:d5:69:c2:b9:
                    ef:2b:73:96:59:84:32:fb:37:bc:da:35:e7:9f:ab:
                    7c:39:37:89:23:a7:8d:3c:69:54:f6:e8:a1:69:0f:
                    2a:8a:fa:bd:36:04:2d:6f:30:b3:fe:34:50:a5:eb:
                    40:dc:ca:9c:24:2a:f1:e1:ba:23:8a:59:eb:e0:72:
                    3e:bd:7b:0c:3b:78:74:57:ac:42:48:48:61:09:ed:
                    03:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:62:E6:1B:3D:53:09:C6:E7:F1:7E:F9:60:58:29:57:48:38:98:04
            X509v3 Authority Key Identifier:
                keyid:C4:75:89:96:2E:D0:D3:89:26:22:BE:5B:7B:8B:EE:FE:8C:E7:88:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:42:fc:63:48:41:9a:86:63:5f:56:fa:76:eb:4e:28:fd:33:
         22:25:e2:d9:e5:f0:ec:94:2b:d1:b0:6a:ef:a9:b6:e8:06:75:
         ec:35:13:e7:62:be:64:88:a3:13:7f:7f:f1:c5:0c:96:02:8b:
         4a:51:07:cf:8f:ee:d1:ee:31:f8:cd:80:5c:28:55:b8:96:81:
         03:bf:ba:a8:2a:2f:0f:65:6b:c9:d4:7d:2d:83:8e:cf:da:cc:
         d7:5d:c2:80:f7:3d:de:ec:27:0d:bd:1a:76:22:29:94:22:2c:
         a9:ce:7d:40:6a:85:d9:29:a0:f4:4a:52:7b:6b:81:c7:a1:3f:
         75:ef:7f:e2:40:c3:3c:49:b7:3c:e2:6a:84:b9:80:a0:67:e1:
         21:27:5b:77:e3:dc:16:57:82:d9:b1:3d:e8:3a:26:22:7e:c6:
         e4:9f:80:fa:3e:47:42:74:1b:88:0f:a4:8d:7f:9f:37:16:99:
         46:95:af:6a:13:43:97:5c:8b:71:11:b4:26:3a:d9:99:8d:e1:
         90:ae:98:cf:6c:85:65:1d:c6:0f:28:69:ec:bc:c5:7e:4a:fc:
         96:41:be:8d:5e:2f:0f:60:4d:a9:a0:a7:6e:a6:f3:38:3b:ba:
         38:ff:13:39:e2:29:38:21:f8:0f:b6:ab:ef:52:d3:61:31:74:
         a7:c7:66:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 04:06:10 2026 by rpki-client