Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.mft
File:                     XU9BKuSAEP5Uh_AY8XGpxkadmsU.mft (raw, json)
Hash identifier:          SBJeBMmi380rvPJ7up18JvMUfTc/JRcRn/znXqwQ4p4=
Subject key identifier:   AF:D9:DB:30:65:4C:EF:DC:A0:93:CC:9B:50:48:8C:6C:62:12:9A:70
Authority key identifier: 5D:4F:41:2A:E4:80:10:FE:54:87:F0:18:F1:71:A9:C6:46:9D:9A:C5
Certificate issuer:       /CN=A91BCA5B/serialNumber=5D4F412AE48010FE5487F018F171A9C6469D9AC5
Certificate serial:       B7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XU9BKuSAEP5Uh_AY8XGpxkadmsU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.mft
Manifest number:          B1
Signing time:             Sun 11 Oct 2026 07:42:44 +0000
Manifest this update:     Sun 11 Oct 2026 07:42:44 +0000
Manifest next update:     Sun 18 Oct 2026 07:42:44 +0000
Files and hashes:         1: XU9BKuSAEP5Uh_AY8XGpxkadmsU.crl (hash: E64YEe1HrGx2XfNyOpNbvYNWYyos5yFfxQ+msJ63CWo=)
                          2: 40506BD64F6311F1B33586E9C4833773.roa (hash: /xujX/eflt5wRcWaBi7MbQ6JbnMkzZt1Nfl3vZK9gwA=)
                          3: 6273B5964F6411F1B5990A8BC5833773.roa (hash: y3V7Ac3VRTVKkf/zwxo2Yj3w4U6T8D7jfnzMbqhRIFA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.crl
                          rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XU9BKuSAEP5Uh_AY8XGpxkadmsU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 07:42:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183 (0xb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BCA5B, serialNumber=5D4F412AE48010FE5487F018F171A9C6469D9AC5
        Validity
            Not Before: Oct 11 07:42:44 2026 GMT
            Not After : Oct 18 07:42:44 2026 GMT
        Subject: CN=6acb3df4-d0d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:37:d1:7c:a5:95:ab:61:f2:60:dc:e7:60:d5:
                    4b:25:5b:7a:c8:17:43:c2:97:e9:55:ac:f4:e4:d1:
                    b1:18:30:50:ea:91:9e:9b:ea:7f:70:30:e9:14:fb:
                    96:91:b9:9e:3c:54:bf:1b:f3:15:58:40:c0:40:a9:
                    8a:7b:4b:2c:da:3b:fb:b8:96:55:7f:0e:c5:98:18:
                    d0:79:59:d7:e5:60:6d:70:16:ad:b4:bf:fc:f5:7b:
                    ed:e0:9f:6e:34:83:82:d8:92:db:cd:ad:52:6e:d8:
                    86:b4:f9:bc:0d:ca:21:a0:0f:41:a4:bc:84:24:c0:
                    44:b1:aa:73:de:94:46:d2:cb:e5:6d:a8:f0:35:81:
                    c3:b6:88:74:34:95:de:2f:76:01:87:6e:bb:03:5d:
                    34:96:78:59:28:f8:d2:63:99:77:f3:7f:58:6c:4a:
                    65:87:05:75:c8:b5:c0:30:20:f5:45:7c:d7:bf:44:
                    b8:49:b9:92:67:e5:0b:6e:26:40:7e:07:7e:55:0e:
                    91:19:0e:d5:ce:eb:6d:2d:30:30:d6:e3:88:0a:75:
                    7d:f8:39:2d:82:71:56:08:66:bd:99:54:b3:32:e3:
                    5d:ca:5a:38:ed:cb:f1:63:34:ea:5d:83:fd:67:35:
                    0b:5b:8a:ea:73:23:b3:96:91:43:ef:89:5b:d9:90:
                    1a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:D9:DB:30:65:4C:EF:DC:A0:93:CC:9B:50:48:8C:6C:62:12:9A:70
            X509v3 Authority Key Identifier:
                keyid:5D:4F:41:2A:E4:80:10:FE:54:87:F0:18:F1:71:A9:C6:46:9D:9A:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XU9BKuSAEP5Uh_AY8XGpxkadmsU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:83:91:73:61:35:2f:53:ff:19:85:9d:2a:62:77:5b:56:6b:
         6b:91:01:c7:1f:24:09:00:78:de:7a:71:af:6d:42:e1:a6:a8:
         0f:91:a1:e0:29:7f:c6:b3:bb:8c:74:83:a6:07:f0:15:b0:4d:
         ae:8b:8b:ef:c9:2c:f1:51:8b:fb:eb:0d:95:7d:b8:cd:09:30:
         6d:bd:be:fe:7e:c2:24:07:7b:c7:c3:d1:52:eb:ea:3a:71:67:
         71:f0:d9:5f:2d:3f:1e:6a:3f:44:7a:04:62:33:32:e0:9a:0f:
         f2:10:67:8f:e5:42:d9:d3:81:0e:89:93:d6:cc:2a:4d:d8:c7:
         3e:ac:ee:25:6a:6f:3d:cd:56:18:82:ea:1c:3a:9e:f2:1a:d1:
         39:5b:31:24:03:66:64:7f:f5:a6:d6:00:be:ae:82:3e:a5:28:
         76:5f:95:f6:22:1f:fa:3f:09:95:8f:43:a8:34:c3:f9:96:77:
         63:38:b0:4b:02:a3:a7:d7:b5:ee:3f:b7:74:35:f6:19:18:07:
         c6:e3:b1:13:77:1c:81:94:19:e2:27:93:4f:6e:e0:ff:fe:2c:
         58:ee:83:b1:e6:32:8e:64:71:b2:14:0f:c5:d5:e6:89:72:46:
         b1:3e:6e:33:9f:b1:14:67:ee:55:f1:e1:96:cd:d7:3e:e2:36:
         2b:d4:36:4b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkNBNUIxMTAvBgNVBAUTKDVENEY0MTJBRTQ4MDEwRkU1NDg3RjAxOEYxNzFBOUM2
NDY5RDlBQzUwHhcNMjYxMDExMDc0MjQ0WhcNMjYxMDE4MDc0MjQ0WjAYMRYwFAYD
VQQDEw02YWNiM2RmNC1kMGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtTfRfKWVq2HyYNznYNVLJVt6yBdDwpfpVaz05NGxGDBQ6pGem+p/cDDpFPuW
kbmePFS/G/MVWEDAQKmKe0ss2jv7uJZVfw7FmBjQeVnX5WBtcBattL/89Xvt4J9u
NIOC2JLbza1SbtiGtPm8DcohoA9BpLyEJMBEsapz3pRG0svlbajwNYHDtoh0NJXe
L3YBh267A100lnhZKPjSY5l3839YbEplhwV1yLXAMCD1RXzXv0S4SbmSZ+ULbiZA
fgd+VQ6RGQ7VzuttLTAw1uOICnV9+DktgnFWCGa9mVSzMuNdylo47cvxYzTqXYP9
ZzULW4rqcyOzlpFD74lb2ZAa9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK/Z2zBl
TO/coJPMm1BIjGxiEppwMB8GA1UdIwQYMBaAFF1PQSrkgBD+VIfwGPFxqcZGnZrF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0E1Qi9EMjVEODY4RUMw
M0ExMUYwODhBMzQ2MkNDNEY5QUUwMi9YVTlCS3VTQUVQNVVoX0FZOFhHcHhrYWRt
c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1hVOUJLdVNBRVA1VWhfQVk4WEdweGthZG1zVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
Q0E1Qi9EMjVEODY4RUMwM0ExMUYwODhBMzQ2MkNDNEY5QUUwMi9YVTlCS3VTQUVQ
NVVoX0FZOFhHcHhrYWRtc1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAxYORc2E1L1P/GYWdKmJ3W1Zra5EBxx8kCQB43npxr21C4aaoD5Gh4Cl/xrO7
jHSDpgfwFbBNrouL78ks8VGL++sNlX24zQkwbb2+/n7CJAd7x8PRUuvqOnFncfDZ
Xy0/Hmo/RHoEYjMy4JoP8hBnj+VC2dOBDomT1swqTdjHPqzuJWpvPc1WGILqHDqe
8hrROVsxJANmZH/1ptYAvq6CPqUodl+V9iIf+j8JlY9DqDTD+ZZ3YziwSwKjp9e1
7j+3dDX2GRgHxuOxE3ccgZQZ4ieTT27g//4sWO6DseYyjmRxshQPxdXmiXJGsT5u
M5+xFGfuVfHhls3XPuI2K9Q2Sw==
-----END CERTIFICATE-----
Generated at Tue Oct 13 02:22:09 2026 by rpki-client