Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft
File:                     MxG_l-IbcmqcAFa75KhbH38pXzU.mft (raw, json)
Hash identifier:          E0mYPoznUvGJTxAjGETmVxizVcro8gP18DXILk6QKXU=
Subject key identifier:   0F:FB:A2:47:23:28:94:AB:F6:47:3A:F3:6B:34:AB:CE:72:97:AA:44
Authority key identifier: 33:11:BF:97:E2:1B:72:6A:9C:00:56:BB:E4:A8:5B:1F:7F:29:5F:35
Certificate issuer:       /CN=A91D7454/serialNumber=3311BF97E21B726A9C0056BBE4A85B1F7F295F35
Certificate serial:       1256
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft
Manifest number:          1248
Signing time:             Fri 02 Oct 2026 17:16:07 +0000
Manifest this update:     Fri 02 Oct 2026 17:16:07 +0000
Manifest next update:     Fri 09 Oct 2026 17:16:07 +0000
Files and hashes:         1: MxG_l-IbcmqcAFa75KhbH38pXzU.crl (hash: pfQgin8t3iKfX58ydCQE6m4x5cbEcuB4iav2MH+oYX0=)
                          2: 51273D9A08EE11E99E30172AC4F9AE02.roa (hash: /gFPuZArkGe71y+RmxZKgGm693+bY0y50nJRlydDJi4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.crl
                          rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 17:16:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4694 (0x1256)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D7454, serialNumber=3311BF97E21B726A9C0056BBE4A85B1F7F295F35
        Validity
            Not Before: Oct  2 17:16:07 2026 GMT
            Not After : Oct  9 17:16:07 2026 GMT
        Subject: CN=6abfe6d7-8af6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:09:ec:a8:94:aa:14:13:e1:f4:d9:25:f4:24:
                    91:03:75:db:79:da:49:9a:bb:51:e2:f1:02:bc:11:
                    06:7c:b7:a5:4e:6c:29:02:aa:fb:f4:23:1b:b7:70:
                    4e:4d:0a:48:1f:ea:29:0c:28:6f:08:98:44:bd:29:
                    ab:ae:86:89:89:ad:9e:91:e6:22:e2:d6:89:ef:44:
                    ca:ab:c5:6e:2a:28:86:6e:a8:7e:a9:60:34:f6:19:
                    12:53:9c:a1:d7:1b:62:39:8c:94:03:18:ea:26:64:
                    f3:a4:b6:63:12:74:3c:18:28:17:fc:e9:28:62:1d:
                    d2:01:05:37:0b:4d:b3:3c:0e:fc:56:7f:6b:68:57:
                    0e:41:06:31:34:c0:61:06:33:17:81:d6:1e:39:a9:
                    0d:0c:9e:d0:85:03:d6:6f:e7:03:0f:87:e7:f2:86:
                    8a:79:1f:d2:f0:81:62:e5:99:12:bb:d2:aa:81:79:
                    d5:b5:d1:a7:0f:80:38:2c:78:43:87:10:d0:48:d5:
                    60:b7:ee:fe:8b:3f:a8:b2:93:f5:ab:0e:be:ef:d1:
                    fb:c1:6f:17:db:e1:2c:a3:97:c5:4e:81:6a:93:cb:
                    16:0a:6e:bd:c9:49:78:3b:2b:c1:c9:8e:eb:da:4b:
                    7b:b0:0e:0c:fd:3f:77:b3:a0:8a:b1:88:2d:f8:1d:
                    41:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:FB:A2:47:23:28:94:AB:F6:47:3A:F3:6B:34:AB:CE:72:97:AA:44
            X509v3 Authority Key Identifier:
                keyid:33:11:BF:97:E2:1B:72:6A:9C:00:56:BB:E4:A8:5B:1F:7F:29:5F:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:97:c9:93:0f:23:c3:0f:84:be:f6:7e:b6:0e:c1:3d:38:60:
         1b:db:08:cf:38:4d:1a:d7:75:41:e0:c2:22:80:7f:50:b9:df:
         a2:06:80:3f:ae:f6:a3:ea:8c:09:1a:b0:b3:91:fe:98:67:3b:
         94:a5:1e:c2:ec:28:4e:cf:f4:3f:aa:47:db:df:d6:8e:79:e3:
         dd:cc:f6:98:2b:f7:b7:47:4d:dd:0e:b4:fe:96:f5:70:f6:1b:
         5b:9e:ab:aa:27:06:0b:a0:00:ac:4c:6b:e3:3b:f3:00:d6:34:
         76:c9:61:a3:6c:a8:d9:a7:b2:31:89:52:c3:f7:2e:c1:68:6e:
         ed:10:36:17:cd:20:3f:27:af:f5:02:18:ac:ea:64:8a:17:39:
         54:f4:1c:aa:53:dc:f1:34:1e:98:07:7d:86:22:3e:9d:8c:0d:
         27:ba:f4:6f:99:fc:03:2c:26:c7:ab:1a:36:20:d0:da:0d:b3:
         fc:a1:a2:a6:43:cc:e7:bc:8a:77:49:5a:05:b1:8e:30:ee:f7:
         50:56:b1:5a:7b:93:a2:25:b8:5a:5f:3d:71:0d:2d:85:cf:7e:
         36:83:48:58:18:27:34:5f:cb:e7:d8:b9:e8:53:a6:56:62:ea:
         d7:c6:ec:cd:32:9b:93:fa:64:e5:aa:bc:2f:cc:b6:86:19:d2:
         f9:18:99:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 11:20:32 2026 by rpki-client