Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.mft
File:                     xPbJMOCbga9ejADnmlhCqnJz0Q8.mft (raw, json)
Hash identifier:          4mi44wzOlozAh8wLoyJOFVJX7GZKEL6vq8gd04xSw1g=
Subject key identifier:   19:D3:52:46:23:FE:27:94:E7:E6:0A:60:57:A2:68:E9:D7:70:FE:88
Authority key identifier: C4:F6:C9:30:E0:9B:81:AF:5E:8C:00:E7:9A:58:42:AA:72:73:D1:0F
Certificate issuer:       /CN=A9180488/serialNumber=C4F6C930E09B81AF5E8C00E79A5842AA7273D10F
Certificate serial:       08FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPbJMOCbga9ejADnmlhCqnJz0Q8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.mft
Manifest number:          08E2
Signing time:             Tue 20 Oct 2026 20:31:56 +0000
Manifest this update:     Tue 20 Oct 2026 20:31:55 +0000
Manifest next update:     Tue 27 Oct 2026 20:31:55 +0000
Files and hashes:         1: xPbJMOCbga9ejADnmlhCqnJz0Q8.crl (hash: j6bGF0bCJ8+p3QXGs8kNvxP8tlYUpst4plgWpIVxdUE=)
                          2: E2E11B669E5811EEAFEC8E0EC4F9AE02.roa (hash: 2TgfBfhOOoIyM12+TZJ7XblTrgTmkcAVE7khTXWQBZQ=)
                          3: 15EF5C1ADD8C11F0AEC3F5743D6F56BC.roa (hash: lW0V6WYErMqZpOUyrSaUuEYDrwDoolUj9qHLNFcmwRY=)
                          4: 15335506DD8C11F0AEC3F5743D6F56BC.roa (hash: gciponRU5LQPwd+P6GuMTYYEycCclNTYnTsaEBR8bYM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.crl
                          rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPbJMOCbga9ejADnmlhCqnJz0Q8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Oct 2026 20:31:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2299 (0x8fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180488, serialNumber=C4F6C930E09B81AF5E8C00E79A5842AA7273D10F
        Validity
            Not Before: Oct 20 20:31:55 2026 GMT
            Not After : Oct 27 20:31:55 2026 GMT
        Subject: CN=6ad7cfbb-dcf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:37:78:76:60:34:a8:9f:d7:c3:c2:2a:5d:86:
                    67:46:0c:51:6c:5f:28:67:ae:2d:1a:5f:61:c5:2e:
                    74:95:4f:80:5f:df:e7:98:5b:a2:db:83:16:72:0d:
                    c5:e4:12:8f:27:09:3d:a2:ba:39:ab:7a:50:fb:fa:
                    5f:2a:21:a0:a2:39:3f:49:9c:35:12:6e:03:bd:45:
                    85:38:88:0c:3f:c1:6d:2f:5a:6c:40:9a:8c:69:58:
                    a6:c6:57:01:d7:ef:ed:60:3d:8d:9e:28:27:65:9a:
                    a2:54:b8:54:70:95:b1:6e:c0:64:22:db:d2:bb:32:
                    6d:3c:8b:3d:61:aa:be:af:9b:cb:a4:dc:fd:5c:4e:
                    a4:e6:39:a7:6e:d4:f9:a8:fd:09:9c:53:0b:2f:d4:
                    c3:ac:fe:1b:5f:dc:f8:3c:88:52:d6:96:86:dc:ad:
                    83:54:46:9b:13:a8:49:4b:8c:1c:83:74:cf:cf:21:
                    a3:83:35:0c:b9:3b:6a:d9:5a:27:c5:34:c5:0e:60:
                    8b:09:d9:e0:70:75:b2:68:7e:9b:70:d5:ae:99:a5:
                    83:33:a0:e4:d6:36:6d:4a:ba:00:25:30:81:79:f7:
                    9c:c3:95:d1:eb:ea:48:a1:d0:1a:15:1a:e8:5a:6a:
                    83:50:17:19:e9:db:d6:6a:db:09:ba:9f:fe:99:8d:
                    ed:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:D3:52:46:23:FE:27:94:E7:E6:0A:60:57:A2:68:E9:D7:70:FE:88
            X509v3 Authority Key Identifier:
                keyid:C4:F6:C9:30:E0:9B:81:AF:5E:8C:00:E7:9A:58:42:AA:72:73:D1:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPbJMOCbga9ejADnmlhCqnJz0Q8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180488/6520FF08F1D011EAA48CEE6FC4F9AE02/xPbJMOCbga9ejADnmlhCqnJz0Q8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:f7:3d:0a:47:c4:b8:4c:15:a4:c5:7b:b2:a0:fb:94:87:53:
         66:9d:bf:93:de:ed:33:2f:7d:cb:7f:a1:6a:46:55:3c:d6:d7:
         5f:2c:b5:da:b7:d7:11:04:53:ac:7d:2a:5a:b2:16:18:4d:38:
         c2:28:66:99:ca:1a:33:52:1b:d8:27:b4:0b:3c:05:21:b7:56:
         79:b7:12:9d:25:51:aa:da:b9:03:e7:60:a0:54:7c:62:8d:0a:
         b1:1f:20:1d:bb:16:ab:2b:14:4d:90:88:b2:c4:08:a0:cf:87:
         28:ca:c1:4d:96:dd:f4:45:ae:58:48:9d:3e:00:24:50:c9:5b:
         32:71:fc:d0:e8:c9:56:54:f3:96:34:48:8a:14:01:27:06:e6:
         02:b1:d0:a4:a3:de:cf:9c:52:1b:39:71:8d:58:bf:36:fa:bc:
         70:ac:54:9d:87:be:fe:cc:a1:07:15:9e:32:bb:18:02:15:e0:
         a9:b7:89:9e:c4:0e:81:29:90:70:b4:56:6a:48:1b:cc:07:ef:
         d6:5c:d2:38:d1:b9:4c:c1:99:d2:46:bc:11:ad:0a:da:df:82:
         a5:29:37:65:79:2a:76:50:18:a5:fd:74:1c:70:c0:fd:77:8d:
         5a:5d:c5:0d:de:be:ba:a6:d0:68:12:62:f8:e4:96:67:83:9a:
         ea:ff:7c:2a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODA0ODgxMTAvBgNVBAUTKEM0RjZDOTMwRTA5QjgxQUY1RThDMDBFNzlBNTg0MkFB
NzI3M0QxMEYwHhcNMjYxMDIwMjAzMTU1WhcNMjYxMDI3MjAzMTU1WjAYMRYwFAYD
VQQDEw02YWQ3Y2ZiYi1kY2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvDd4dmA0qJ/Xw8IqXYZnRgxRbF8oZ64tGl9hxS50lU+AX9/nmFui24MWcg3F
5BKPJwk9oro5q3pQ+/pfKiGgojk/SZw1Em4DvUWFOIgMP8FtL1psQJqMaVimxlcB
1+/tYD2NnignZZqiVLhUcJWxbsBkItvSuzJtPIs9Yaq+r5vLpNz9XE6k5jmnbtT5
qP0JnFMLL9TDrP4bX9z4PIhS1paG3K2DVEabE6hJS4wcg3TPzyGjgzUMuTtq2Von
xTTFDmCLCdngcHWyaH6bcNWumaWDM6Dk1jZtSroAJTCBefecw5XR6+pIodAaFRro
WmqDUBcZ6dvWatsJup/+mY3tQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBnTUkYj
/ieU5+YKYFeiaOnXcP6IMB8GA1UdIwQYMBaAFMT2yTDgm4GvXowA55pYQqpyc9EP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDQ4OC82NTIwRkYwOEYx
RDAxMUVBQTQ4Q0VFNkZDNEY5QUUwMi94UGJKTU9DYmdhOWVqQURubWxoQ3FuSnow
UTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hQYkpNT0NiZ2E5ZWpBRG5tbGhDcW5KejBROC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MDQ4OC82NTIwRkYwOEYxRDAxMUVBQTQ4Q0VFNkZDNEY5QUUwMi94UGJKTU9DYmdh
OWVqQURubWxoQ3FuSnowUTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAa/c9CkfEuEwVpMV7sqD7lIdTZp2/k97tMy99y3+hakZVPNbXXyy12rfXEQRT
rH0qWrIWGE04wihmmcoaM1Ib2Ce0CzwFIbdWebcSnSVRqtq5A+dgoFR8Yo0KsR8g
HbsWqysUTZCIssQIoM+HKMrBTZbd9EWuWEidPgAkUMlbMnH80OjJVlTzljRIihQB
JwbmArHQpKPez5xSGzlxjVi/Nvq8cKxUnYe+/syhBxWeMrsYAhXgqbeJnsQOgSmQ
cLRWakgbzAfv1lzSONG5TMGZ0ka8Ea0K2t+CpSk3ZXkqdlAYpf10HHDA/XeNWl3F
Dd6+uqbQaBJi+OSWZ4Oa6v98Kg==
-----END CERTIFICATE-----
Generated at Wed Oct 21 10:09:33 2026 by rpki-client