Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.mft
File:                     XMqY-HjJJALi8QTiuL2rgZCx-qI.mft (raw, json)
Hash identifier:          TcmyMwRJvbVUonnH8qzOUtDNZo88ZT1l79+vuz+IDIg=
Subject key identifier:   EE:BF:B4:04:8F:57:23:E3:7E:79:E3:20:D6:EB:23:5A:23:1C:93:32
Authority key identifier: 5C:CA:98:F8:78:C9:24:02:E2:F1:04:E2:B8:BD:AB:81:90:B1:FA:A2
Certificate issuer:       /CN=A91BCFC5/serialNumber=5CCA98F878C92402E2F104E2B8BDAB8190B1FAA2
Certificate serial:       95
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMqY-HjJJALi8QTiuL2rgZCx-qI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.mft
Manifest number:          8F
Signing time:             Wed 19 Aug 2026 08:10:55 +0000
Manifest this update:     Wed 19 Aug 2026 08:10:55 +0000
Manifest next update:     Wed 26 Aug 2026 08:10:55 +0000
Files and hashes:         1: XMqY-HjJJALi8QTiuL2rgZCx-qI.crl (hash: bQNAVEJKeE4p6EF8nQ09AZyh8w/ZapwvCoGGAcg9jAA=)
                          2: 7407D8E2C5AC11F0AF286222C4F9AE02.roa (hash: e6p12F49PX7qCkcwZNgn+CaOt0/TImrLuvnCu7Vczvc=)
                          3: 20928024C9BA11F09F21BD27C4F9AE02.roa (hash: 11c8TK/vLAQyKDtxVuKGgv22tCaQip5k8q75oDTrT4s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.crl
                          rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMqY-HjJJALi8QTiuL2rgZCx-qI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 08:10:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149 (0x95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BCFC5, serialNumber=5CCA98F878C92402E2F104E2B8BDAB8190B1FAA2
        Validity
            Not Before: Aug 19 08:10:55 2026 GMT
            Not After : Aug 26 08:10:55 2026 GMT
        Subject: CN=6a85650f-50df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c5:9b:56:59:63:33:e8:41:d3:ae:11:4a:cc:
                    c8:04:20:ae:ab:05:f7:41:e1:fd:b7:61:5c:ec:30:
                    94:3c:91:64:02:c8:72:9d:32:8e:b4:ec:0e:a9:7a:
                    74:95:e1:1a:55:fc:5e:03:0f:87:0f:af:84:2d:96:
                    ef:35:60:ea:f8:c2:5d:47:72:c4:da:f6:26:cc:20:
                    84:6e:e6:c0:1b:df:af:e8:90:f0:9d:a7:fa:2e:f9:
                    58:89:59:eb:c0:7a:4e:73:70:7e:f0:10:ba:b3:ea:
                    d6:da:5c:e7:75:03:5a:1b:23:40:d9:af:b9:50:1a:
                    a3:b5:bd:31:6f:c7:29:36:1a:8e:0d:b5:54:2a:60:
                    b8:54:d2:6e:9e:5e:07:96:4c:ee:d5:27:80:a6:8d:
                    56:3e:01:1a:d4:ce:ee:94:e6:a3:29:a1:73:dc:24:
                    8d:0f:a0:ca:22:af:eb:0c:a3:f1:ce:b2:f8:6f:51:
                    ba:b5:a3:7c:f5:43:bd:f6:be:cb:2c:d0:45:f5:e6:
                    e2:7c:0f:17:3a:5c:52:1a:2f:8a:67:59:f2:68:f0:
                    68:67:8d:31:4d:01:59:87:6c:e5:e0:94:3a:b9:6f:
                    d1:5e:45:1f:8b:5d:fd:9c:37:84:1f:23:23:9a:37:
                    12:a9:2d:bb:57:fb:5e:34:38:03:ce:30:60:98:4f:
                    8c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:BF:B4:04:8F:57:23:E3:7E:79:E3:20:D6:EB:23:5A:23:1C:93:32
            X509v3 Authority Key Identifier:
                keyid:5C:CA:98:F8:78:C9:24:02:E2:F1:04:E2:B8:BD:AB:81:90:B1:FA:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMqY-HjJJALi8QTiuL2rgZCx-qI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:86:7c:18:ce:34:a0:1a:4c:42:02:96:e6:06:8c:c0:69:47:
         ab:5e:5f:57:7a:45:ae:8d:ce:68:4a:da:4a:0d:43:e5:69:4e:
         91:05:aa:6f:30:70:00:71:b2:0c:2d:5d:d7:8a:3e:9d:7d:a6:
         0a:47:f2:31:52:94:3e:20:d2:0e:53:7c:5c:19:30:5d:b3:ab:
         c0:06:3e:c7:89:9a:5a:14:3f:a2:74:2d:b3:80:0d:03:39:42:
         f1:7e:8c:7a:87:92:2a:3c:f4:8b:96:11:e6:e4:4c:11:32:b9:
         3a:cf:c5:18:c5:98:e0:f7:64:ab:50:93:17:98:5f:24:b2:d5:
         da:db:89:0e:6d:f4:a6:59:f6:e4:18:c5:e8:d4:fc:0c:93:4c:
         5c:f9:84:a4:fd:d1:9d:a5:e7:b9:26:5d:b5:4b:b6:5b:f4:e8:
         cc:c6:34:75:6e:76:f0:6b:0d:35:99:36:8d:a3:4b:b6:12:df:
         98:14:33:1c:90:bd:58:e5:c0:14:9f:3f:75:00:c4:b0:b2:4f:
         ac:75:7a:51:49:d0:e4:9a:f6:cc:0f:ef:22:e5:f3:07:40:15:
         18:e6:60:02:30:0e:79:1f:fe:a0:d4:ae:61:75:23:b3:f4:b5:
         69:d5:d9:08:56:1a:0d:31:80:17:02:9b:3a:b4:54:23:a5:c2:
         74:4d:5a:37
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkNGQzUxMTAvBgNVBAUTKDVDQ0E5OEY4NzhDOTI0MDJFMkYxMDRFMkI4QkRBQjgx
OTBCMUZBQTIwHhcNMjYwODE5MDgxMDU1WhcNMjYwODI2MDgxMDU1WjAYMRYwFAYD
VQQDEw02YTg1NjUwZi01MGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArcWbVlljM+hB064RSszIBCCuqwX3QeH9t2Fc7DCUPJFkAshynTKOtOwOqXp0
leEaVfxeAw+HD6+ELZbvNWDq+MJdR3LE2vYmzCCEbubAG9+v6JDwnaf6LvlYiVnr
wHpOc3B+8BC6s+rW2lzndQNaGyNA2a+5UBqjtb0xb8cpNhqODbVUKmC4VNJunl4H
lkzu1SeApo1WPgEa1M7ulOajKaFz3CSND6DKIq/rDKPxzrL4b1G6taN89UO99r7L
LNBF9ebifA8XOlxSGi+KZ1nyaPBoZ40xTQFZh2zl4JQ6uW/RXkUfi139nDeEHyMj
mjcSqS27V/teNDgDzjBgmE+MwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO6/tASP
VyPjfnnjINbrI1ojHJMyMB8GA1UdIwQYMBaAFFzKmPh4ySQC4vEE4ri9q4GQsfqi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0ZDNS85OTlGMDI0OEM1
QUIxMUYwOEEyMDM1NERDNEY5QUUwMi9YTXFZLUhqSkpBTGk4UVRpdUwycmdaQ3gt
cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hNcVktSGpKSkFMaThRVGl1TDJyZ1pDeC1xSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
Q0ZDNS85OTlGMDI0OEM1QUIxMUYwOEEyMDM1NERDNEY5QUUwMi9YTXFZLUhqSkpB
TGk4UVRpdUwycmdaQ3gtcUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfYZ8GM40oBpMQgKW5gaMwGlHq15fV3pFro3OaEraSg1D5WlOkQWqbzBwAHGy
DC1d14o+nX2mCkfyMVKUPiDSDlN8XBkwXbOrwAY+x4maWhQ/onQts4ANAzlC8X6M
eoeSKjz0i5YR5uRMETK5Os/FGMWY4Pdkq1CTF5hfJLLV2tuJDm30pln25BjF6NT8
DJNMXPmEpP3RnaXnuSZdtUu2W/TozMY0dW528GsNNZk2jaNLthLfmBQzHJC9WOXA
FJ8/dQDEsLJPrHV6UUnQ5Jr2zA/vIuXzB0AVGOZgAjAOeR/+oNSuYXUjs/S1adXZ
CFYaDTGAFwKbOrRUI6XCdE1aNw==
-----END CERTIFICATE-----
Generated at Wed Aug 19 21:41:35 2026 by rpki-client