Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E78B5/C0E1253C9FC311F185E331305311F970/xzzR1KOVMbsSy-v8HkDk1NsFkp0.mft
File:                     xzzR1KOVMbsSy-v8HkDk1NsFkp0.mft (raw, json)
Hash identifier:          soNYrzklOg4Wp3DGKjbUMqKjqI911EPzmnDA2iJikWE=
Subject key identifier:   5F:61:AE:CB:78:2C:DF:79:34:EC:A2:32:0F:3E:2E:74:17:61:18:16
Authority key identifier: C7:3C:D1:D4:A3:95:31:BB:12:CB:EB:FC:1E:40:E4:D4:DB:05:92:9D
Certificate issuer:       /CN=A91E78B5/serialNumber=C73CD1D4A39531BB12CBEBFC1E40E4D4DB05929D
Certificate serial:       1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xzzR1KOVMbsSy-v8HkDk1NsFkp0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E78B5/C0E1253C9FC311F185E331305311F970/xzzR1KOVMbsSy-v8HkDk1NsFkp0.mft
Manifest number:          18
Signing time:             Thu 01 Oct 2026 10:28:38 +0000
Manifest this update:     Thu 01 Oct 2026 10:28:38 +0000
Manifest next update:     Thu 08 Oct 2026 10:28:38 +0000
Files and hashes:         1: xzzR1KOVMbsSy-v8HkDk1NsFkp0.crl (hash: ZZrkPWzCtkddXDEmf//UCdL+Pu4QE8WrjAWcbIx6L2w=)
                          2: 2F09D8DCA03D11F1ACAFAFF83911F970.roa (hash: iSOyyo5mav1l9HpQwTOIdfMcOvVhaxQGyBb2UEsq09U=)
                          3: EETTppjEYUf_m8voifsJ8sVQbnc.asa (hash: Cgu9fsEEcet/RCuYUFKNrT86EyCVpyYdWfbU51GWOhc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E78B5/C0E1253C9FC311F185E331305311F970/xzzR1KOVMbsSy-v8HkDk1NsFkp0.crl
                          rsync://rpki.apnic.net/member_repository/A91E78B5/C0E1253C9FC311F185E331305311F970/xzzR1KOVMbsSy-v8HkDk1NsFkp0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xzzR1KOVMbsSy-v8HkDk1NsFkp0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Oct 2026 10:28:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E78B5, serialNumber=C73CD1D4A39531BB12CBEBFC1E40E4D4DB05929D
        Validity
            Not Before: Oct  1 10:28:38 2026 GMT
            Not After : Oct  8 10:28:38 2026 GMT
        Subject: CN=6abe35d6-c11b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7d:a4:ff:35:cc:37:6d:90:18:da:d1:62:c9:
                    94:9f:7e:d4:63:f2:20:1e:1b:6b:63:de:2d:d5:4e:
                    54:e4:7c:a2:5b:c3:32:44:30:24:04:c0:59:fc:0a:
                    08:a9:ea:f6:97:a7:48:b1:e8:28:7a:40:28:df:bd:
                    8f:cb:6a:f9:5d:c7:90:1e:cd:8a:6d:e3:a8:d2:50:
                    b8:52:d5:46:18:2a:54:9f:b5:42:4d:7d:70:fe:a6:
                    75:09:02:7e:2e:09:00:c0:f3:13:60:c6:a5:09:56:
                    ba:3b:da:66:02:d3:af:e1:be:ee:ef:7c:62:04:75:
                    81:67:9f:63:94:1f:4d:51:1b:12:16:a3:c6:25:9d:
                    dd:25:07:b8:04:31:d2:51:e3:32:6a:69:ab:00:55:
                    a3:25:22:bf:4c:74:d4:0c:f6:bf:a3:59:4b:19:82:
                    56:f0:f8:cc:75:3f:dc:97:83:dc:7e:39:b2:53:2e:
                    54:62:cd:19:4d:01:01:14:3b:f5:a0:2e:3e:b3:a8:
                    1a:fb:3a:8b:4b:8a:fa:dc:ff:5e:53:9b:21:30:e1:
                    8a:8f:b9:12:ce:51:53:f7:6f:a4:7e:6a:4f:19:ac:
                    24:a1:bd:46:b6:a2:41:40:da:3c:4d:dc:56:be:dd:
                    6c:2f:a0:1d:b2:32:97:68:d9:6d:1a:87:4c:dc:19:
                    a5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:61:AE:CB:78:2C:DF:79:34:EC:A2:32:0F:3E:2E:74:17:61:18:16
            X509v3 Authority Key Identifier:
                keyid:C7:3C:D1:D4:A3:95:31:BB:12:CB:EB:FC:1E:40:E4:D4:DB:05:92:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E78B5/C0E1253C9FC311F185E331305311F970/xzzR1KOVMbsSy-v8HkDk1NsFkp0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xzzR1KOVMbsSy-v8HkDk1NsFkp0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E78B5/C0E1253C9FC311F185E331305311F970/xzzR1KOVMbsSy-v8HkDk1NsFkp0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:bc:b6:23:d4:27:13:7e:5f:99:bc:a6:6d:90:b3:7d:67:c8:
         c0:c5:48:7c:78:b5:2f:9c:c0:61:ed:d1:b8:d8:b8:5f:ff:44:
         df:e5:38:d5:23:2d:18:64:b4:3e:16:78:cd:2c:c1:04:f8:3f:
         6e:4f:4b:99:67:6f:05:3c:7a:5a:6f:90:c1:2c:d0:bb:84:bc:
         c4:eb:37:8f:43:45:2d:72:6e:2d:24:72:29:59:2a:bc:46:1c:
         cc:24:dd:78:c2:3a:c1:ea:12:fe:9f:de:e2:e4:e5:9f:c3:c9:
         d2:33:6f:be:d6:d8:5f:bb:e5:c3:2e:18:38:3e:2b:ff:5c:44:
         7c:99:91:2b:d8:34:03:a9:cb:fe:b0:db:4e:03:2f:bd:30:1d:
         8c:93:df:84:8c:0d:e2:1e:8c:26:62:58:15:54:8b:02:65:7b:
         4e:29:e2:16:4f:d5:73:07:fb:39:64:44:92:6e:6e:a8:89:49:
         fb:90:84:44:16:c0:91:2a:80:c2:b0:d7:9b:7e:4c:6a:30:81:
         9f:27:3a:1d:69:53:05:bf:18:c9:6e:52:32:a2:2d:f3:dd:e8:
         c5:1b:05:b9:17:88:ba:87:ad:ff:0d:0d:31:6c:d0:ce:99:8c:
         0d:73:89:fd:1c:33:52:b3:18:1d:c9:f9:df:c8:0d:b7:71:2c:
         45:af:8b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 23:28:48 2026 by rpki-client