Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft
File:                     xlk2W58uMddajSCpuY4VOklvRJk.mft (raw, json)
Hash identifier:          gjTxBzQqnMQeppP21CCAbHnsoPSZKKByJPU6IhtywOk=
Subject key identifier:   F7:EE:22:20:26:DF:AA:07:6F:48:99:F5:31:6A:29:4F:93:7C:4C:78
Authority key identifier: C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99
Certificate issuer:       /CN=A91954A0/serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499
Certificate serial:       0270
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft
Manifest number:          0257
Signing time:             Mon 31 Aug 2026 02:45:47 +0000
Manifest this update:     Mon 31 Aug 2026 02:45:47 +0000
Manifest next update:     Mon 07 Sep 2026 02:45:47 +0000
Files and hashes:         1: xlk2W58uMddajSCpuY4VOklvRJk.crl (hash: mWOcpdZ1K+sO7NAQh4Q19EJH5WJyfx/DDQS7g8rPkzQ=)
                          2: 36333AA6928111F0AA95D96AC4F9AE02.roa (hash: zYrmifFyXf8eyAWgav1JJc7uPLea+6me2PDJlPHyfws=)
                          3: 6CAF60F0296011EEB0606446C4F9AE02.roa (hash: mxZONybayBYjT/wE5ER2yG5aHXpF0N7OGPjQ6melKBE=)
                          4: 6810784CC56F11F0836DEB12C4F9AE02.roa (hash: vDv+eD+OfMVa33qvWILzbZ7BF93e5A2vMNwg9cii/zI=)
                          5: 94FF257E8F5F11F0A46A7259C4F9AE02.roa (hash: WQFzmtRcnRTzLa+owzbcIOOpVzi5EXn6wMZBFZmtrx0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl
                          rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Sep 2026 02:45:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 624 (0x270)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91954A0, serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499
        Validity
            Not Before: Aug 31 02:45:47 2026 GMT
            Not After : Sep  7 02:45:47 2026 GMT
        Subject: CN=6a94eadb-ba67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ce:01:e1:09:e7:0f:f4:f4:e8:77:b8:d8:3e:
                    59:be:14:a8:fa:3a:1b:d4:c4:c1:1a:25:7e:49:75:
                    4e:94:1c:5f:d2:18:b6:30:09:e9:85:15:da:86:cd:
                    ff:c6:fa:a7:04:98:0d:f8:3d:58:4e:2f:64:e5:73:
                    44:f4:27:9a:4c:62:82:b0:26:b9:70:17:6e:a9:88:
                    b9:01:8c:b4:af:b9:3d:65:7f:34:b9:a2:af:ba:74:
                    ff:3d:b1:d5:00:74:80:09:87:b4:5f:75:e2:ca:9a:
                    07:c2:f4:11:72:68:79:b5:fc:f9:a8:f1:83:6f:af:
                    46:a6:48:20:45:9c:31:30:c1:27:8c:bc:42:09:d2:
                    73:2c:cb:71:3a:7c:91:c1:2d:7f:1d:10:b2:28:6a:
                    83:1d:98:15:a5:41:2d:b7:ff:3c:74:3f:04:25:7d:
                    39:c9:92:db:66:44:3e:2e:ac:d4:08:17:77:67:7d:
                    a7:fd:65:80:fd:0b:b8:d4:a2:b5:07:14:16:be:82:
                    fe:8a:93:c1:10:92:67:9e:0a:6d:03:21:54:f1:0c:
                    cb:c5:f1:56:11:4c:bb:93:58:30:6f:76:27:8a:f2:
                    ad:ff:25:c2:20:99:79:df:5b:1f:57:88:97:de:fc:
                    c3:a1:2c:6c:2c:7c:13:d0:9b:22:85:2e:ed:31:fb:
                    67:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:EE:22:20:26:DF:AA:07:6F:48:99:F5:31:6A:29:4F:93:7C:4C:78
            X509v3 Authority Key Identifier:
                keyid:C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:dc:36:ec:71:12:7f:32:aa:cf:37:a1:73:31:dc:5d:c7:95:
         16:d7:c4:80:25:69:4a:1d:74:05:97:4f:64:73:b2:8a:0d:62:
         fb:61:3b:e1:e3:6d:ea:fd:f5:f5:e3:43:6f:e0:46:46:e6:31:
         68:3e:5d:7b:bb:26:82:5d:67:c8:52:8b:f7:8a:b5:5f:63:a6:
         65:9b:40:ce:fa:05:7b:e8:c6:92:51:91:58:c8:d0:5d:e4:a1:
         78:93:e7:01:a1:23:f9:e2:19:12:87:61:1f:33:dc:8b:3d:07:
         d0:19:ca:2e:6f:77:dd:aa:5c:87:1a:66:21:04:a8:f2:2d:b0:
         6f:15:4f:58:39:ac:cf:0a:9e:af:7a:0a:2a:84:c8:33:6f:f2:
         73:ad:96:30:ea:f2:ec:e8:8f:1e:02:f9:df:f8:28:9d:50:06:
         b7:ab:87:91:c8:e9:eb:c3:f9:01:9d:1f:f0:e3:42:27:ae:82:
         5e:36:9a:60:02:cf:7a:16:d1:dc:5d:33:81:4a:29:b2:74:af:
         2c:79:ff:63:af:dc:5d:57:11:c3:6c:ed:13:34:95:ec:87:04:
         e9:e7:ac:fb:27:44:94:f4:bf:9d:30:23:04:0a:f7:60:2d:52:
         ca:51:9c:5f:de:28:b0:ca:dd:9c:f2:d7:33:53:94:02:87:85:
         51:ef:5e:9d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTU0QTAxMTAvBgNVBAUTKEM2NTkzNjVCOUYyRTMxRDc1QThEMjBBOUI5OEUxNTNB
NDk2RjQ0OTkwHhcNMjYwODMxMDI0NTQ3WhcNMjYwOTA3MDI0NTQ3WjAYMRYwFAYD
VQQDEw02YTk0ZWFkYi1iYTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs84B4QnnD/T06He42D5ZvhSo+job1MTBGiV+SXVOlBxf0hi2MAnphRXahs3/
xvqnBJgN+D1YTi9k5XNE9CeaTGKCsCa5cBduqYi5AYy0r7k9ZX80uaKvunT/PbHV
AHSACYe0X3XiypoHwvQRcmh5tfz5qPGDb69GpkggRZwxMMEnjLxCCdJzLMtxOnyR
wS1/HRCyKGqDHZgVpUEtt/88dD8EJX05yZLbZkQ+LqzUCBd3Z32n/WWA/Qu41KK1
BxQWvoL+ipPBEJJnngptAyFU8QzLxfFWEUy7k1gwb3YnivKt/yXCIJl531sfV4iX
3vzDoSxsLHwT0JsihS7tMftnMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPfuIiAm
36oHb0iZ9TFqKU+TfEx4MB8GA1UdIwQYMBaAFMZZNlufLjHXWo0gqbmOFTpJb0SZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTRBMC85MEI3QTc5QTI3
MEUxMUVFQUFBNUI3NkZDNEY5QUUwMi94bGsyVzU4dU1kZGFqU0NwdVk0Vk9rbHZS
SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hsazJXNTh1TWRkYWpTQ3B1WTRWT2tsdlJKay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NTRBMC85MEI3QTc5QTI3MEUxMUVFQUFBNUI3NkZDNEY5QUUwMi94bGsyVzU4dU1k
ZGFqU0NwdVk0Vk9rbHZSSmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXdw27HESfzKqzzehczHcXceVFtfEgCVpSh10BZdPZHOyig1i+2E74eNt6v31
9eNDb+BGRuYxaD5de7smgl1nyFKL94q1X2OmZZtAzvoFe+jGklGRWMjQXeSheJPn
AaEj+eIZEodhHzPciz0H0BnKLm933apchxpmIQSo8i2wbxVPWDmszwqer3oKKoTI
M2/yc62WMOry7OiPHgL53/gonVAGt6uHkcjp68P5AZ0f8ONCJ66CXjaaYALPehbR
3F0zgUopsnSvLHn/Y6/cXVcRw2ztEzSV7IcE6ees+ydElPS/nTAjBAr3YC1SylGc
X94osMrdnPLXM1OUAoeFUe9enQ==
-----END CERTIFICATE-----
Generated at Tue Sep 1 03:54:26 2026 by rpki-client