Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft
File:                     XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft (raw, json)
Hash identifier:          yGIAsMELdXM9aQKD5IW6EokTBTEpzsvMqRTLMaOYorw=
Subject key identifier:   81:AF:9D:2B:62:7F:41:F9:5A:F6:AB:25:B0:10:41:0C:0E:33:19:D1
Authority key identifier: 5E:70:99:49:BA:A4:0A:7D:47:D4:4D:21:16:90:B3:77:E0:51:C4:5F
Certificate issuer:       /CN=A91F0C73/serialNumber=5E709949BAA40A7D47D44D211690B377E051C45F
Certificate serial:       03CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnCZSbqkCn1H1E0hFpCzd-BRxF8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft
Manifest number:          03C3
Signing time:             Sat 03 Oct 2026 00:52:55 +0000
Manifest this update:     Sat 03 Oct 2026 00:52:55 +0000
Manifest next update:     Sat 10 Oct 2026 00:52:55 +0000
Files and hashes:         1: XnCZSbqkCn1H1E0hFpCzd-BRxF8.crl (hash: J9YWNmTBi2NgZDXluxQPzHtUfdprfj2k/lilFsSEiF0=)
                          2: FA3FF1D4F13D11EC9B673A2AC4F9AE02.roa (hash: 8YdQLsUZCKBzraMiXXqY3e6CtfbysTpmjgszsI0exrg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.crl
                          rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnCZSbqkCn1H1E0hFpCzd-BRxF8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 00:52:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 972 (0x3cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0C73, serialNumber=5E709949BAA40A7D47D44D211690B377E051C45F
        Validity
            Not Before: Oct  3 00:52:55 2026 GMT
            Not After : Oct 10 00:52:55 2026 GMT
        Subject: CN=6ac051e7-6d23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c9:aa:b3:63:ab:05:79:77:f8:6c:7c:82:92:
                    4c:24:3d:a1:10:3e:ee:59:a1:b3:c9:b7:a4:67:16:
                    d2:e4:9a:77:7a:15:81:8f:e1:84:7e:66:03:5d:2c:
                    de:2f:88:ac:91:dd:a6:05:3d:c4:58:72:19:31:de:
                    e1:8c:5f:d7:b3:ec:41:a3:a6:ec:2a:62:af:7b:67:
                    4f:22:07:31:83:8b:0b:ef:2b:be:b4:71:6a:95:bf:
                    ae:07:d0:18:63:5a:80:2e:4f:ae:5a:ab:c9:b4:88:
                    e5:8c:a7:5c:aa:84:89:13:64:2a:b9:9c:6e:77:d7:
                    52:e4:2a:58:46:d9:00:dd:c8:3f:92:e6:50:c1:b7:
                    dc:6a:dd:ee:b7:cc:0e:dd:53:e1:d2:b0:cf:95:51:
                    c1:8c:39:d1:e9:08:0d:5f:26:57:29:66:c4:92:45:
                    62:b1:5c:b7:1b:4e:4e:57:d4:e9:5b:a1:c8:1e:c0:
                    8d:4d:b6:9d:d1:6f:70:3b:58:f0:74:14:73:95:8f:
                    83:0c:25:e5:55:63:28:3d:05:62:8a:5a:61:85:8b:
                    6d:fd:ae:e1:fc:d3:29:21:3a:22:88:c1:ed:ea:5b:
                    af:3c:b6:3a:6b:51:06:63:ad:96:52:e1:97:2e:1b:
                    02:dd:4d:1f:ea:79:38:a9:2f:6a:56:16:ea:4f:05:
                    61:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:AF:9D:2B:62:7F:41:F9:5A:F6:AB:25:B0:10:41:0C:0E:33:19:D1
            X509v3 Authority Key Identifier:
                keyid:5E:70:99:49:BA:A4:0A:7D:47:D4:4D:21:16:90:B3:77:E0:51:C4:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnCZSbqkCn1H1E0hFpCzd-BRxF8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:76:a3:d5:7b:dd:fb:8d:a0:6a:6a:01:35:21:fc:f8:43:4e:
         d0:ac:96:fb:99:90:5f:e3:8d:f4:53:96:61:d0:db:9f:55:2e:
         30:ea:7f:00:32:11:81:c7:21:f1:18:01:fd:fe:e4:35:6e:4a:
         4d:e9:14:13:4c:98:55:10:06:63:fc:db:3a:d3:bc:47:58:8b:
         ce:8a:aa:4c:43:66:be:47:f2:da:d2:84:58:15:56:dd:78:c8:
         9f:14:95:93:6b:90:03:ac:13:7d:84:9a:82:5a:68:49:eb:e2:
         ca:72:ae:83:36:35:c4:f9:d9:a2:42:22:db:50:fc:a0:dc:43:
         df:09:1f:cd:06:84:47:18:0f:ce:a9:c3:f1:79:55:77:55:2f:
         54:8b:2e:f5:be:b7:d5:6b:b0:aa:41:31:38:2e:0b:36:14:68:
         44:c2:a7:8a:2a:78:d2:83:d2:cd:ba:e3:17:18:15:28:6c:e7:
         3f:0c:84:63:22:da:76:41:85:95:ed:7f:b9:de:fb:12:f2:41:
         21:2e:d5:60:36:cf:5e:b2:6d:ff:d6:7a:80:65:5d:86:10:ed:
         9e:d9:cc:d6:84:b0:ea:1b:ff:af:a7:6a:ed:51:b3:84:da:1f:
         55:dc:aa:44:cf:0f:b2:55:3b:15:26:47:f8:54:e3:1f:5d:4d:
         f4:d6:17:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:38:42 2026 by rpki-client