Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft
File:                     xgie68VWt39k5EJJpouV1b2UHkA.mft (raw, json)
Hash identifier:          Wvv4UgpNO1xP/yjuv0TEVUK1A2k+zr4WLUalO201ayM=
Subject key identifier:   70:38:A2:95:0F:8A:4C:FF:39:8E:75:6C:A6:6A:51:4F:A9:93:D4:D5
Authority key identifier: C6:08:9E:EB:C5:56:B7:7F:64:E4:42:49:A6:8B:95:D5:BD:94:1E:40
Certificate issuer:       /CN=A91ADFD3/serialNumber=C6089EEBC556B77F64E44249A68B95D5BD941E40
Certificate serial:       2445
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft
Manifest number:          2411
Signing time:             Wed 28 Oct 2026 15:49:58 +0000
Manifest this update:     Wed 28 Oct 2026 15:49:58 +0000
Manifest next update:     Wed 04 Nov 2026 15:49:58 +0000
Files and hashes:         1: xgie68VWt39k5EJJpouV1b2UHkA.crl (hash: MEOkfG9IBqopTDI8iHnFP0FFx5BOAvu+uwCanEL5R40=)
                          2: 6880FA2C59D211EAB77C8C13C4F9AE02.roa (hash: hJzT/XLLbMceVkg1RnXkgd5dOl16o+CTb6P8jS+3k+A=)
                          3: 678DA8FE59D211EAB77C8C13C4F9AE02.roa (hash: uilr/VzadspQ9DLCCiVVicEIdw3R/zCYDu3WsWsjhCg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.crl
                          rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Nov 2026 15:49:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9285 (0x2445)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADFD3, serialNumber=C6089EEBC556B77F64E44249A68B95D5BD941E40
        Validity
            Not Before: Oct 28 15:49:58 2026 GMT
            Not After : Nov  4 15:49:58 2026 GMT
        Subject: CN=6ae219a6-3898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:cb:df:6d:18:89:1e:60:88:37:f7:4b:1c:58:
                    30:c6:16:04:db:15:9e:9b:4e:c3:6a:18:28:a8:50:
                    2f:2f:53:c1:76:9d:d3:f7:cc:d2:aa:b6:05:d5:84:
                    9d:14:80:51:a0:bb:fe:be:c7:01:45:0a:49:2a:04:
                    b6:0c:e6:7c:34:b8:d5:21:d6:cd:59:bc:99:aa:22:
                    66:cd:af:7e:f8:1a:24:61:1b:c1:91:8e:af:44:c6:
                    86:82:a5:df:06:ec:6d:bf:78:fa:38:7a:60:be:66:
                    49:5a:1d:7b:39:c8:10:9c:89:62:83:52:24:b2:b8:
                    b2:d2:45:71:2f:16:31:3c:c4:1c:04:0e:8f:f7:47:
                    fe:b6:03:05:d8:86:cf:9f:e4:84:57:67:05:f6:80:
                    46:f4:b9:d9:3f:52:48:aa:5a:64:f4:8e:0b:27:79:
                    1a:7f:53:80:7c:b9:80:e9:37:e7:63:83:be:55:ed:
                    7d:69:53:12:da:3d:3a:4a:21:11:6d:6e:54:da:bb:
                    a9:5c:c3:4a:44:a9:65:08:b3:60:33:c3:a2:cc:2b:
                    81:34:e0:72:f4:0f:49:31:9d:d1:a3:c2:20:9b:92:
                    c3:61:ec:41:11:d0:8c:8d:ad:fe:87:b6:52:42:fd:
                    16:94:75:51:77:05:cf:79:48:be:55:8d:ea:6b:50:
                    d3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:38:A2:95:0F:8A:4C:FF:39:8E:75:6C:A6:6A:51:4F:A9:93:D4:D5
            X509v3 Authority Key Identifier:
                keyid:C6:08:9E:EB:C5:56:B7:7F:64:E4:42:49:A6:8B:95:D5:BD:94:1E:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:3e:18:ec:9e:b0:e2:8f:07:c1:8c:a2:ed:c3:20:fb:90:44:
         13:62:b5:82:25:af:46:0e:ff:e3:57:3b:19:fe:f8:70:fa:6b:
         40:40:77:c4:fa:b4:00:3f:6d:9c:62:0a:a6:e5:cf:67:77:8c:
         82:3c:30:ad:25:8e:82:9d:7b:d6:a0:fd:b3:3e:ec:dc:de:c9:
         1d:a8:07:78:2b:87:7e:30:c5:3e:1f:4c:0b:93:48:4a:55:c1:
         92:98:15:b9:0d:dc:5c:c6:a6:8f:f8:ce:6d:0b:31:9e:33:12:
         29:13:31:31:93:59:a1:bd:92:63:15:f7:f5:73:e3:75:18:05:
         6b:cb:c2:b4:fc:ee:5f:0c:d8:64:1d:6f:c7:36:76:e8:c4:4c:
         87:9b:ad:14:7f:1f:aa:85:e4:73:c8:ed:4b:c5:2e:a8:d1:43:
         26:76:bc:ef:2a:fd:6e:72:af:b8:dd:41:ac:b6:9e:36:40:1a:
         34:41:a1:13:76:72:43:d7:fb:cc:bc:d9:8e:b5:44:6b:4a:23:
         3e:29:68:ec:6a:d6:c1:31:82:8f:bc:29:bb:75:85:0a:14:3d:
         c9:10:ac:da:52:2e:99:4c:79:17:0e:0d:52:92:32:fd:6c:57:
         2d:58:3b:98:9a:22:70:a5:11:11:b0:28:3b:36:06:1c:cc:3f:
         3e:0b:ae:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 18:16:05 2026 by rpki-client