Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915CF84/7CBC0DEE3C3211F18C21D46EBF833773/mpXY8Mq1144dbKm5o7JX446MfVs.mft
File:                     mpXY8Mq1144dbKm5o7JX446MfVs.mft (raw, json)
Hash identifier:          OZteDtjEDpadVATpgeyjPaCvFnj3h/NQQj1U0Q1P/Vo=
Subject key identifier:   20:66:62:C1:37:17:30:46:1F:66:CB:E9:21:BF:17:2A:3C:F4:90:5D
Authority key identifier: 9A:95:D8:F0:CA:B5:D7:8E:1D:6C:A9:B9:A3:B2:57:E3:8E:8C:7D:5B
Certificate issuer:       /CN=A915CF84/serialNumber=9A95D8F0CAB5D78E1D6CA9B9A3B257E38E8C7D5B
Certificate serial:       5A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mpXY8Mq1144dbKm5o7JX446MfVs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915CF84/7CBC0DEE3C3211F18C21D46EBF833773/mpXY8Mq1144dbKm5o7JX446MfVs.mft
Manifest number:          58
Signing time:             Mon 05 Oct 2026 08:36:36 +0000
Manifest this update:     Mon 05 Oct 2026 08:36:35 +0000
Manifest next update:     Mon 12 Oct 2026 08:36:35 +0000
Files and hashes:         1: mpXY8Mq1144dbKm5o7JX446MfVs.crl (hash: gyddNImoD89Gl6yLer+j8pIRuCSwZqJDEdt82Nl6H/Y=)
                          2: E0D625A23C6A11F183CD979F90833773.roa (hash: qj9IQ2Y4YzDmdOE6yQMu07d0ie+83o7yGutlXtdHDIs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915CF84/7CBC0DEE3C3211F18C21D46EBF833773/mpXY8Mq1144dbKm5o7JX446MfVs.crl
                          rsync://rpki.apnic.net/member_repository/A915CF84/7CBC0DEE3C3211F18C21D46EBF833773/mpXY8Mq1144dbKm5o7JX446MfVs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mpXY8Mq1144dbKm5o7JX446MfVs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 08:36:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915CF84, serialNumber=9A95D8F0CAB5D78E1D6CA9B9A3B257E38E8C7D5B
        Validity
            Not Before: Oct  5 08:36:35 2026 GMT
            Not After : Oct 12 08:36:35 2026 GMT
        Subject: CN=6ac36193-0bbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ec:0f:35:6b:28:14:97:9d:29:88:da:c0:f7:
                    c3:39:09:b7:45:9a:91:7e:a9:29:7d:92:39:57:51:
                    55:db:f3:ed:a0:3c:a2:38:e3:91:b6:df:09:d6:4c:
                    80:b7:ed:c6:30:4e:cf:12:69:45:25:e8:46:5a:62:
                    1a:d3:d5:97:f0:38:82:e1:df:53:4a:79:cb:ac:70:
                    0d:e8:73:ab:dd:5d:95:eb:a1:2b:37:42:80:85:a7:
                    27:20:80:13:5f:1e:30:a6:88:e7:09:9d:3c:57:92:
                    43:44:e1:11:80:7c:d3:0a:0b:04:89:4b:c3:92:f9:
                    5e:b4:b6:c7:15:1b:c0:df:28:9a:21:1d:ae:8a:8f:
                    54:f3:d1:bd:32:a8:9b:b1:bb:8f:58:6c:1b:a4:91:
                    13:26:2e:f2:44:80:9f:b9:35:c3:3f:d0:96:33:af:
                    a2:b4:08:f9:12:c0:16:db:6e:b6:13:cf:9b:38:9d:
                    98:38:27:29:6d:27:26:75:a4:a1:d7:5b:a2:d4:95:
                    f5:76:21:82:e8:40:26:cf:57:9e:5b:0c:43:07:6d:
                    9d:a5:d9:a8:7d:5a:fc:85:7b:4f:da:b2:f8:71:c9:
                    f3:c4:b6:84:cb:2c:3c:bb:2b:6e:0b:30:bf:01:78:
                    f5:43:ea:38:4a:33:46:97:9a:d3:1f:80:a4:80:9c:
                    bc:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:66:62:C1:37:17:30:46:1F:66:CB:E9:21:BF:17:2A:3C:F4:90:5D
            X509v3 Authority Key Identifier:
                keyid:9A:95:D8:F0:CA:B5:D7:8E:1D:6C:A9:B9:A3:B2:57:E3:8E:8C:7D:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915CF84/7CBC0DEE3C3211F18C21D46EBF833773/mpXY8Mq1144dbKm5o7JX446MfVs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mpXY8Mq1144dbKm5o7JX446MfVs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CF84/7CBC0DEE3C3211F18C21D46EBF833773/mpXY8Mq1144dbKm5o7JX446MfVs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:53:c8:ad:cb:6d:86:ae:9f:fb:f8:0a:e9:fc:a8:f6:8f:26:
         cd:45:50:3a:06:80:a1:89:87:d6:a3:1d:2d:cf:bc:15:0e:39:
         71:99:2a:37:30:0f:c9:35:10:d1:4b:c6:9d:fb:b8:32:d1:97:
         70:0b:c7:9c:ea:f4:bb:b8:43:d0:e7:73:5f:13:aa:eb:f9:27:
         95:6a:f5:c4:1d:5e:e2:41:e0:eb:5e:d2:11:39:df:ab:e4:1d:
         d3:fc:72:38:1c:6a:73:e3:91:a9:30:fb:f3:6e:4a:ae:25:4f:
         e2:5a:b4:89:09:da:b7:90:e5:2a:71:3b:52:74:5d:34:fd:68:
         9f:f3:fc:e6:bf:f5:28:ff:8f:a8:71:6c:ea:33:d6:a0:38:5e:
         a4:df:c2:96:50:ef:bd:ec:74:7a:40:a8:36:cc:7a:3e:34:ed:
         fa:5e:0d:de:98:09:2b:63:65:b5:9c:72:3f:a0:ae:77:10:d3:
         ea:ef:a2:c5:5d:a5:0e:6a:f3:f3:5f:e8:81:07:27:7a:7e:8c:
         70:a6:22:76:ef:ed:a7:97:89:88:96:11:70:f5:9a:1d:f6:f2:
         00:0c:9d:d6:e3:c2:b6:35:f1:eb:72:28:d2:ac:ff:a0:6d:91:
         2e:28:9b:5b:d3:55:73:e4:c8:8d:68:c9:f5:14:d3:a4:ca:04:
         1a:c7:6e:86
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
Q0Y4NDExMC8GA1UEBRMoOUE5NUQ4RjBDQUI1RDc4RTFENkNBOUI5QTNCMjU3RTM4
RThDN0Q1QjAeFw0yNjEwMDUwODM2MzVaFw0yNjEwMTIwODM2MzVaMBgxFjAUBgNV
BAMTDTZhYzM2MTkzLTBiYmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDS7A81aygUl50piNrA98M5CbdFmpF+qSl9kjlXUVXb8+2gPKI445G23wnWTIC3
7cYwTs8SaUUl6EZaYhrT1ZfwOILh31NKecuscA3oc6vdXZXroSs3QoCFpycggBNf
HjCmiOcJnTxXkkNE4RGAfNMKCwSJS8OS+V60tscVG8DfKJohHa6Kj1Tz0b0yqJux
u49YbBukkRMmLvJEgJ+5NcM/0JYzr6K0CPkSwBbbbrYTz5s4nZg4JyltJyZ1pKHX
W6LUlfV2IYLoQCbPV55bDEMHbZ2l2ah9WvyFe0/asvhxyfPEtoTLLDy7K24LML8B
ePVD6jhKM0aXmtMfgKSAnLzrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUIGZiwTcX
MEYfZsvpIb8XKjz0kF0wHwYDVR0jBBgwFoAUmpXY8Mq1144dbKm5o7JX446MfVsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVDRjg0LzdDQkMwREVFM0Mz
MjExRjE4QzIxRDQ2RUJGODMzNzczL21wWFk4TXExMTQ0ZGJLbTVvN0pYNDQ2TWZW
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvbXBYWThNcTExNDRkYkttNW83Slg0NDZNZlZzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVD
Rjg0LzdDQkMwREVFM0MzMjExRjE4QzIxRDQ2RUJGODMzNzczL21wWFk4TXExMTQ0
ZGJLbTVvN0pYNDQ2TWZWcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBaU8ity22Grp/7+Arp/Kj2jybNRVA6BoChiYfWox0tz7wVDjlxmSo3MA/JNRDR
S8ad+7gy0ZdwC8ec6vS7uEPQ53NfE6rr+SeVavXEHV7iQeDrXtIROd+r5B3T/HI4
HGpz45GpMPvzbkquJU/iWrSJCdq3kOUqcTtSdF00/Wif8/zmv/Uo/4+ocWzqM9ag
OF6k38KWUO+97HR6QKg2zHo+NO36Xg3emAkrY2W1nHI/oK53ENPq76LFXaUOavPz
X+iBByd6foxwpiJ27+2nl4mIlhFw9Zod9vIADJ3W48K2NfHrcijSrP+gbZEuKJtb
01Vz5MiNaMn1FNOkygQax26G
-----END CERTIFICATE-----
Generated at Wed Oct 7 06:19:40 2026 by rpki-client