Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
File:                     xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft (raw, json)
Hash identifier:          zK8lY6bJPM1993bcVaDU8A3iCzXStPPvgFsxcJ2zpZI=
Subject key identifier:   F8:54:85:EC:A1:C4:C7:2B:20:64:9F:3B:F3:34:F9:6B:68:96:A1:0F
Authority key identifier: C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B
Certificate issuer:       /CN=A91955C8/serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B
Certificate serial:       31DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
Manifest number:          3150
Signing time:             Thu 22 Oct 2026 15:26:54 +0000
Manifest this update:     Thu 22 Oct 2026 15:26:53 +0000
Manifest next update:     Thu 29 Oct 2026 15:26:53 +0000
Files and hashes:         1: xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl (hash: vXqQKAA37D8FJn1vonBOemuzfjnP4YIvCE02gxI/C2E=)
                          2: 13065E72E09911EAB8D3B833C4F9AE02.roa (hash: Bh0KOlYAcUWAXt3WdoXHJOCw2Q1uBx39GJDLv8eD0T8=)
                          3: 3503A838EA9911EDA6A36E18C4F9AE02.roa (hash: 0AZBDmh8J9l8VOqehLNqWYnMqjkmPYEkpVJJP0YL/UM=)
                          4: FBFEBECA10B211EEA9B11345C4F9AE02.roa (hash: LToWIQ1COMbsBcEbH54cRu/d6HNi0lrBivKKu1OeKJk=)
                          5: F1A29F32843111F18303D56C65A30FBC.roa (hash: 5a8O9Z1V3ja/5ztqSfJLuOOFIOZvUJHqD1otnk0gm90=)
                          6: 11BAFC08E09911EAB8D3B833C4F9AE02.roa (hash: /ot5DoHQF40alQvvcmtFXp57ebCwbLGHhRnrByVbsDA=)
                          7: 7DDA28EC8D9511EB9ECE6042C4F9AE02.roa (hash: U3Ln4yzn8NQ06p1eFYCEFA90g6K7BH94tZxVPn7SxXk=)
                          8: B9286BC4F33711EEAAA34C78C4F9AE02.roa (hash: I9JABl6/gzx03qs1VThcdC1FmK2YJXn7jMmQPHfDYxU=)
                          9: E6B6BC0AE02E11EAA16EAA59C4F9AE02.roa (hash: aSXWB68fSWHHDo5FqMadmbWywQoiETk4RCpEwtCS3cM=)
                          10: 004E48CA008611EEA0F2B440C4F9AE02.roa (hash: JmBQKGLMvG7nf7IFULuzTixXWs552SXmenXllwOUSdI=)
                          11: A4A3FAEAEDE811EFA5767A5DC4F9AE02.roa (hash: NR3htRP9a6F2ckA37vX/zVJgydrhk/y6ALKCOIGQr/c=)
                          12: 3590603EEA9911EDA6A36E18C4F9AE02.roa (hash: KAOajreZKNs6OhlZEEuG6IUQi2eX+xK6ACMq1TNvAF4=)
                          13: CECE54DE1BC611ECAE421168C4F9AE02.roa (hash: YJa/B3fmbY+Mqk52HoaoOUWCKj3EPvHiwST21gkBP+U=)
                          14: 12483942E09911EAB8D3B833C4F9AE02.roa (hash: MZaVNf7iRFX1/H8g/r1VAgxVC7qDm+ZemPCzX1+//wM=)
                          15: AF6D4D44B73311EC8392922AC4F9AE02.roa (hash: 4oLyl9NCifHRKBU2NyGCAhBn5eVA7LF6waY1+/Z8kf0=)
                          16: 13A1C0BAE09911EAB8D3B833C4F9AE02.roa (hash: 7qL24XtJJGYddBNzZ1f8/6sYDORXFfhTRLN+KXoF1UE=)
                          17: 5B58485AB9DC11EEA6B2DC1DC4F9AE02.roa (hash: Hl3h+xajA6uyUcgR+szgYx0GkKpSQx8UaQOMAFI5mWs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl
                          rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 29 Oct 2026 15:26:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12765 (0x31dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91955C8, serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B
        Validity
            Not Before: Oct 22 15:26:53 2026 GMT
            Not After : Oct 29 15:26:53 2026 GMT
        Subject: CN=6ada2b3e-1c33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a6:dd:19:01:84:d8:29:6d:aa:59:18:c9:2d:
                    31:58:da:ea:ec:6a:02:53:49:b9:06:bc:f4:61:55:
                    f2:7d:19:72:a4:7e:5d:42:13:52:60:24:6e:f9:e2:
                    4b:a9:6f:e4:d5:fb:cc:2c:b1:6e:d0:36:ee:ee:68:
                    45:af:58:54:7b:07:20:d9:72:46:09:96:0a:98:da:
                    a0:2a:7e:b3:2c:95:c2:48:47:74:7b:9e:65:8e:a4:
                    fb:25:44:bd:9f:6b:ee:48:9e:34:73:9d:37:ba:38:
                    fa:aa:bb:17:97:f8:5a:db:59:a0:2d:e8:a7:a3:f0:
                    9e:ad:02:b1:c2:04:b4:ee:7d:59:ba:54:0a:24:99:
                    82:cc:89:ee:46:c6:c7:7c:ca:4d:78:cf:98:fd:03:
                    54:a6:ee:a7:af:22:99:30:fa:1d:f6:90:73:f5:78:
                    79:0d:4c:e6:cf:49:5c:00:8f:f2:81:df:bd:40:7d:
                    c4:09:81:d2:98:40:02:2e:f8:b7:18:3b:77:4f:67:
                    1e:8a:23:b6:a5:9b:56:fa:e2:ed:b7:f1:60:10:a8:
                    b7:f7:ce:a0:09:9a:da:18:fb:fa:d5:af:80:72:c6:
                    01:43:1d:ed:6d:fd:98:c2:65:cf:77:8e:d7:b9:3b:
                    46:5b:9e:62:c8:4a:be:55:1a:aa:68:84:b9:57:14:
                    7c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:54:85:EC:A1:C4:C7:2B:20:64:9F:3B:F3:34:F9:6B:68:96:A1:0F
            X509v3 Authority Key Identifier:
                keyid:C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:5f:7f:38:bf:42:bb:4e:6c:78:c1:2d:60:98:14:c5:fa:58:
         72:93:d6:35:7a:8b:57:1d:c9:89:a9:1b:07:e8:d8:57:ac:c4:
         c8:42:06:58:79:53:0c:fb:f3:ce:87:48:f1:e1:fb:46:e3:bd:
         4b:67:36:84:f5:ce:b8:03:51:d0:0d:87:ad:90:96:66:09:13:
         25:e3:a5:a0:15:bc:d9:6a:3e:1f:1a:8a:7c:1a:7f:67:91:1d:
         ca:04:64:8d:57:3e:13:ea:81:ac:fe:25:1f:39:d3:b1:b0:b5:
         1f:21:49:42:e9:87:d5:64:c1:a3:70:84:92:e9:b9:4a:80:01:
         53:49:4a:a7:f5:54:13:d6:09:d3:8b:f3:ea:2b:cc:75:1b:ef:
         0a:84:ad:3a:1a:be:98:f6:02:20:a1:d2:94:11:44:a6:e5:20:
         9a:fd:c7:19:dd:d6:08:a8:27:d0:85:3a:a8:c0:7f:ab:0e:a3:
         e1:ca:38:1f:22:be:13:dd:1a:37:8a:33:d4:88:27:71:51:86:
         5f:af:9f:90:23:30:00:b1:06:fa:80:e0:3c:7e:d7:9e:51:eb:
         84:29:98:27:eb:19:43:c3:76:2b:30:24:76:77:d4:4c:f3:66:
         22:b1:fe:7e:ac:67:5a:ca:f3:14:3d:69:a7:2f:ba:8f:98:74:
         26:8d:4b:77
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICMd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTU1QzgxMTAvBgNVBAUTKEM2NjczRDM2NDhGNDNGNDY3NEY1RjVFQkZDQkZBMzFC
Qjk2NEY2NEIwHhcNMjYxMDIyMTUyNjUzWhcNMjYxMDI5MTUyNjUzWjAYMRYwFAYD
VQQDEw02YWRhMmIzZS0xYzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvKbdGQGE2CltqlkYyS0xWNrq7GoCU0m5Brz0YVXyfRlypH5dQhNSYCRu+eJL
qW/k1fvMLLFu0Dbu7mhFr1hUewcg2XJGCZYKmNqgKn6zLJXCSEd0e55ljqT7JUS9
n2vuSJ40c503ujj6qrsXl/ha21mgLeino/CerQKxwgS07n1ZulQKJJmCzInuRsbH
fMpNeM+Y/QNUpu6nryKZMPod9pBz9Xh5DUzmz0lcAI/ygd+9QH3ECYHSmEACLvi3
GDt3T2ceiiO2pZtW+uLtt/FgEKi3986gCZraGPv61a+AcsYBQx3tbf2YwmXPd47X
uTtGW55iyEq+VRqqaIS5VxR8kQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPhUheyh
xMcrIGSfO/M0+WtolqEPMB8GA1UdIwQYMBaAFMZnPTZI9D9GdPX16/y/oxu5ZPZL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTVDOC85Q0QzRThGNkZG
NTgxMUUyQkI0QjJFM0Y1OTExRUEzMi94bWM5TmtqMFAwWjA5ZlhyX0wtakc3bGs5
a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3htYzlOa2owUDBaMDlmWHJfTC1qRzdsazlrcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NTVDOC85Q0QzRThGNkZGNTgxMUUyQkI0QjJFM0Y1OTExRUEzMi94bWM5TmtqMFAw
WjA5ZlhyX0wtakc3bGs5a3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMl9/OL9Cu05seMEtYJgUxfpYcpPWNXqLVx3JiakbB+jYV6zEyEIGWHlTDPvz
zodI8eH7RuO9S2c2hPXOuANR0A2HrZCWZgkTJeOloBW82Wo+HxqKfBp/Z5EdygRk
jVc+E+qBrP4lHznTsbC1HyFJQumH1WTBo3CEkum5SoABU0lKp/VUE9YJ04vz6ivM
dRvvCoStOhq+mPYCIKHSlBFEpuUgmv3HGd3WCKgn0IU6qMB/qw6j4co4HyK+E90a
N4oz1IgncVGGX6+fkCMwALEG+oDgPH7XnlHrhCmYJ+sZQ8N2KzAkdnfUTPNmIrH+
fqxnWsrzFD1ppy+6j5h0Jo1Ldw==
-----END CERTIFICATE-----
Generated at Sat Oct 24 04:17:13 2026 by rpki-client