Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft
File:                     xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft (raw, json)
Hash identifier:          pgaWsMzPQoQ8ADwI7Q7SAbHjlCcngi+Q1BK50WcmtV4=
Subject key identifier:   D1:C7:7F:9E:33:95:7E:55:E7:85:B8:2C:8F:0D:C3:FB:2B:34:D3:26
Authority key identifier: C6:A5:76:F0:8C:D4:A7:3E:A9:DD:97:50:3B:C9:D2:8B:05:91:1B:9C
Certificate issuer:       /CN=A91423FF/serialNumber=C6A576F08CD4A73EA9DD97503BC9D28B05911B9C
Certificate serial:       024A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqV28IzUpz6p3ZdQO8nSiwWRG5w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft
Manifest number:          0243
Signing time:             Mon 05 Oct 2026 02:47:03 +0000
Manifest this update:     Mon 05 Oct 2026 02:47:03 +0000
Manifest next update:     Mon 12 Oct 2026 02:47:03 +0000
Files and hashes:         1: xqV28IzUpz6p3ZdQO8nSiwWRG5w.crl (hash: /tD0fYE+8vJUBROiQx7gWdwVwSy2tW9YmvMBRd4fXZM=)
                          2: 278C467E4DF911EE8927F265C4F9AE02.roa (hash: Q+PqjUyyIbMBWSpORGj6TQ+PmdOe/qs7/MICLEALP84=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.crl
                          rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqV28IzUpz6p3ZdQO8nSiwWRG5w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 02:47:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 586 (0x24a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91423FF, serialNumber=C6A576F08CD4A73EA9DD97503BC9D28B05911B9C
        Validity
            Not Before: Oct  5 02:47:03 2026 GMT
            Not After : Oct 12 02:47:03 2026 GMT
        Subject: CN=6ac30fa7-fd4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e2:99:16:7f:10:90:44:07:02:74:f2:8b:54:
                    47:eb:40:2a:53:28:28:38:87:26:7e:42:db:96:a6:
                    72:39:5c:7f:ba:c2:31:15:5b:c3:4d:8e:80:5c:be:
                    4b:0d:22:ff:61:25:9b:ed:69:a9:9e:f8:21:8e:14:
                    6c:6f:00:04:b1:1a:0f:32:3a:2a:e4:00:dd:66:d1:
                    05:8d:c7:42:ed:2b:67:60:39:eb:19:54:25:e9:a7:
                    b1:16:a8:c6:39:a2:e0:4a:33:d7:0f:f1:a9:ef:f4:
                    a5:24:d7:54:1d:e2:e9:71:82:e1:18:e7:f3:06:0a:
                    96:5c:7f:85:73:8f:8d:6c:c8:7b:02:bb:a7:6d:ee:
                    e8:da:18:48:c7:a9:e9:de:a9:d8:8c:8c:c1:f7:90:
                    15:82:c2:b5:7b:7f:36:17:6d:b0:e0:9f:b1:f1:73:
                    0c:5c:1d:c4:d8:ce:3a:60:bf:0f:3f:08:28:09:e6:
                    27:2b:b2:b2:26:5e:c6:d0:3e:93:31:9f:a5:2f:df:
                    c2:51:83:d2:35:25:52:c5:f8:91:50:6a:ad:d3:c4:
                    0f:a8:fd:68:ab:d8:1c:d9:66:2a:94:06:71:56:69:
                    a1:b4:7f:f1:bc:f3:3b:00:8f:3e:e8:62:40:11:e2:
                    35:78:94:75:ce:83:84:29:4a:bd:bf:96:aa:f9:a2:
                    a3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:C7:7F:9E:33:95:7E:55:E7:85:B8:2C:8F:0D:C3:FB:2B:34:D3:26
            X509v3 Authority Key Identifier:
                keyid:C6:A5:76:F0:8C:D4:A7:3E:A9:DD:97:50:3B:C9:D2:8B:05:91:1B:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqV28IzUpz6p3ZdQO8nSiwWRG5w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:78:ac:58:8e:31:a9:fa:ab:2a:9f:b3:6d:73:3c:fe:69:98:
         51:26:31:fe:35:4b:f2:92:60:ed:30:54:2b:8c:3b:2a:a1:d3:
         20:3e:b5:83:bb:ac:16:d2:f6:7e:2f:18:85:2b:5f:11:11:c3:
         b9:09:bc:c5:b2:fe:f5:e7:30:62:88:9c:d8:88:aa:af:54:2a:
         2d:20:d1:6e:72:4a:fc:2d:a4:1e:38:58:04:8c:6b:70:70:c4:
         b2:20:3e:b7:75:8a:c2:02:ce:53:ab:95:5f:a3:57:da:44:c4:
         f9:6f:40:67:69:4a:a9:f4:04:ff:94:4d:6d:51:5c:c1:88:2c:
         2d:69:dc:0b:95:c8:4e:05:18:fd:9d:54:7e:5a:05:07:50:19:
         df:6c:40:43:23:c9:33:83:f0:ad:b2:d9:2a:8a:0e:d4:d2:77:
         62:35:6b:b6:c2:be:6c:27:1e:1b:68:48:8f:0c:d1:03:eb:bb:
         a8:1b:f9:db:86:59:57:89:5b:a5:95:d9:ff:6c:1d:75:75:18:
         2a:df:fb:85:b3:a7:5a:54:6f:aa:d9:29:63:f0:00:fa:58:ed:
         0a:43:f6:26:b9:40:66:42:d2:fa:2e:bd:fe:58:42:24:59:c3:
         27:78:81:26:23:77:39:bb:c5:e2:98:78:3f:51:88:b0:b5:7b:
         1a:5b:11:b9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDIzRkYxMTAvBgNVBAUTKEM2QTU3NkYwOENENEE3M0VBOUREOTc1MDNCQzlEMjhC
MDU5MTFCOUMwHhcNMjYxMDA1MDI0NzAzWhcNMjYxMDEyMDI0NzAzWjAYMRYwFAYD
VQQDEw02YWMzMGZhNy1mZDRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2OKZFn8QkEQHAnTyi1RH60AqUygoOIcmfkLblqZyOVx/usIxFVvDTY6AXL5L
DSL/YSWb7WmpnvghjhRsbwAEsRoPMjoq5ADdZtEFjcdC7StnYDnrGVQl6aexFqjG
OaLgSjPXD/Gp7/SlJNdUHeLpcYLhGOfzBgqWXH+Fc4+NbMh7Arunbe7o2hhIx6np
3qnYjIzB95AVgsK1e382F22w4J+x8XMMXB3E2M46YL8PPwgoCeYnK7KyJl7G0D6T
MZ+lL9/CUYPSNSVSxfiRUGqt08QPqP1oq9gc2WYqlAZxVmmhtH/xvPM7AI8+6GJA
EeI1eJR1zoOEKUq9v5aq+aKjNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNHHf54z
lX5V54W4LI8Nw/srNNMmMB8GA1UdIwQYMBaAFMaldvCM1Kc+qd2XUDvJ0osFkRuc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjNGRi9EODVBMEI3QzRE
RjgxMUVFODg2ODdCNjVDNEY5QUUwMi94cVYyOEl6VXB6NnAzWmRRTzhuU2l3V1JH
NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hxVjI4SXpVcHo2cDNaZFFPOG5TaXdXUkc1dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MjNGRi9EODVBMEI3QzRERjgxMUVFODg2ODdCNjVDNEY5QUUwMi94cVYyOEl6VXB6
NnAzWmRRTzhuU2l3V1JHNXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPXisWI4xqfqrKp+zbXM8/mmYUSYx/jVL8pJg7TBUK4w7KqHTID61g7usFtL2
fi8YhStfERHDuQm8xbL+9ecwYoic2Iiqr1QqLSDRbnJK/C2kHjhYBIxrcHDEsiA+
t3WKwgLOU6uVX6NX2kTE+W9AZ2lKqfQE/5RNbVFcwYgsLWncC5XITgUY/Z1UfloF
B1AZ32xAQyPJM4PwrbLZKooO1NJ3YjVrtsK+bCceG2hIjwzRA+u7qBv524ZZV4lb
pZXZ/2wddXUYKt/7hbOnWlRvqtkpY/AA+ljtCkP2JrlAZkLS+i69/lhCJFnDJ3iB
JiN3ObvF4ph4P1GIsLV7GlsRuQ==
-----END CERTIFICATE-----
Generated at Mon Oct 5 14:41:01 2026 by rpki-client