Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft
File:                     XS3RVLXc4h-3hsUm297xsEWSirg.mft (raw, json)
Hash identifier:          ZBweGFGIjHCGATaTV2gAeVVX1WbFTLxAZ16ZR4cnf1I=
Subject key identifier:   8F:03:0E:04:F5:F0:1F:10:11:5B:5E:25:13:74:4F:A3:B5:C0:D6:F7
Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8
Certificate issuer:       /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
Certificate serial:       2929
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft
Manifest number:          2648
Signing time:             Thu 22 Oct 2026 15:47:38 +0000
Manifest this update:     Thu 22 Oct 2026 15:47:37 +0000
Manifest next update:     Thu 29 Oct 2026 15:47:37 +0000
Files and hashes:         1: XS3RVLXc4h-3hsUm297xsEWSirg.crl (hash: LgykwuJzt1pW9gC+8aiyB5d5PzGdEB0cLLoz6ayFyO4=)
                          2: F3DC1FD08C5611E792848B4AC4F9AE02.roa (hash: j51cLfGITBXR/xee14Rv6rfJpCWZzT3Rfl0VvL2R5/I=)
                          3: 543386248C5811E782F42951C4F9AE02.roa (hash: n3uqup7GQBgv1FQz4tcE6zqiYYLPHwkPhVC8sJy/BDw=)
                          4: A293EE844BFB11EAADB0780AC4F9AE02.roa (hash: Bf1VexJZ8ePZKh8sXCKZqIgTsDNhulqFPVDnqdnEaj0=)
                          5: F47B5B188C5611E792848B4AC4F9AE02.roa (hash: 9rwvDynWMk6qsy3E/KYOqtc0csn9No217jDY1XnUZzc=)
                          6: 743ABB72997011EAB50D6934C4F9AE02.roa (hash: TgloTHCWPURsO/1k0p40DWKdaGHNBtdJOfoMLcQC4gA=)
                          7: DB3E929E199611EF9EBFBF4AC4F9AE02.roa (hash: yniPMcdgFbwNhplTc+rydNjzQLU8O29V8C25W4mTbeU=)
                          8: 6DBD2412C9EB11EC886A6D51C4F9AE02.roa (hash: X4W8KPzkD6jrY8LiA2LHjxX8s0fpYowcQUXXGe2/Dfo=)
                          9: F721F6B08C5611E792848B4AC4F9AE02.roa (hash: 9gIlVUVnVNmYm0bLzGl5b38yoqx/v/vATXeAALoSuAs=)
                          10: F1C092BC8C5611E792848B4AC4F9AE02.roa (hash: qRXk9dzH9yzccBqYsDfVw2E8u5nyXXCoXpdl1ASSh24=)
                          11: 586845003D5B11F1BC7D03E3A9833773.roa (hash: bksTinMhSZQ6iaAs+xQLVJBbYxr1WgrHFBPOHrnAF48=)
                          12: 7271CAB217D711EA90BA7F4EC4F9AE02.roa (hash: yO9FNu/9OHp6I+wCsbe7slCX+CdTGzP0ftlr5EH77RY=)
                          13: 5366509AC63511EAAC843455C4F9AE02.roa (hash: 2dGdHKeMcuIvSTX7iFjfVdensV8pnXlc8bJBe8kDDVc=)
                          14: EFBF37208C5611E792848B4AC4F9AE02.roa (hash: QMEMNFl/Jl1WfdjUzvj9WgadU2H5AGalIKmrTUa6R+g=)
                          15: F688FE388C5611E792848B4AC4F9AE02.roa (hash: t6f1Kosop/CbP7AwXXw0yAnoWx86X0b95L/+s+Yi+WE=)
                          16: E0CC1C58235911ECAB7C7661C4F9AE02.roa (hash: tYH203EuDB6n9E6nUVPwIVfHVAXXBv2Io3OA+Ey8sS8=)
                          17: EDA1B0D8A1CE11EDA692F359C4F9AE02.roa (hash: f0nSJ61GA5QPVsLKjddcC0wfT/tT/FK1nC1PrxX8MeQ=)
                          18: B4C0B17CC94E11EDB5018458C4F9AE02.roa (hash: v18fC46MYs+2IjS6va5v9tqHDD2ALPl/gY1gvz9Tbm0=)
                          19: CAC3390AD30E11EB98AEFF45C4F9AE02.roa (hash: sgw4Va5xBAbvxEnA80g+uDGNNw3JilHTbxgmChJswfI=)
                          20: B6D7E1547EEE11EF8B38A43BC4F9AE02.roa (hash: aRK8QB1JQ1E7tEOryxg9vqmCGo1+++BBG/tSU9uGFOQ=)
                          21: 8A8C093A42E311F1B93532028F833773.roa (hash: 9m8Dvq8GVyNZk2cbyrBZleTZzmMEk1mdl6ftuO3mqFA=)
                          22: B61774A4D9DF11EFB722C742C4F9AE02.roa (hash: UrzW/ghTReXDIIXXuUNwm0r5S8hfMJ1iOmM4g5cXqO0=)
                          23: 62F6493EE3BE11EE933A0461C4F9AE02.roa (hash: 5ldMM2cJXLvn3rFlQhmNWhHj8IBemlnHR9gxFxzEiLw=)
                          24: F5F86ADA8C5611E792848B4AC4F9AE02.roa (hash: wnYTp3fsOW2HQITJ5FlOwfrkiKlWT5LLwinFPfnjQu0=)
                          25: 19A3CD9E4B7011EC8E9FCB48C4F9AE02.roa (hash: +ezEBpxkY8f4PY2reVhjPmzVyzhmj21Jd5Qr+MbJDt0=)
                          26: EF3B21E28C5611E792848B4AC4F9AE02.roa (hash: sL6rlhwT2LpkTZEnGwa+sTT6+sRP4qeJqtLHhVBZMAA=)
                          27: 7BFDDDB8D42E11EB8E13801EC4F9AE02.roa (hash: VtV1xShyMh9sjenS152zbiOl5v/xr19d8+vqjj03D0M=)
                          28: 82C395EE774811F1801EADB45DA30FBC.roa (hash: BQd8XglJvUSBxzaCM0mJw6hZt6pmwUg9idBpdBZ3C/E=)
                          29: BE5DA1A0E3BE11EEAEC5E061C4F9AE02.roa (hash: VJCnaf5Klg6jmYuqx2mGsqpPv1Kkhc3IprBxsydE49k=)
                          30: F1475E928C5611E792848B4AC4F9AE02.roa (hash: 31VZpJVWKNF5mab4XZ5JTLuEycfyZELw3YTbEtHVoIE=)
                          31: F04860C28C5611E792848B4AC4F9AE02.roa (hash: t1OURYtTlAtfNdWLrnHxkvZF4FFX+C17Jb19CIwfihg=)
                          32: 6jWcWxbLmIGW9yKAkUAV-ks4XIo.asa (hash: ysWDmmS+s9G0WQn9ucmEdjG6GKg/JZ+dcMamf3pRAho=)
                          33: C82D6ACC969A11EB9BC1FA1BC4F9AE02.roa (hash: 8hJseycbUR3zK2+zXkoIB6I2ViNeMkJgkdW6VsK7qO0=)
                          34: F15AD0CE544E11ED9C5E2F3AC4F9AE02.roa (hash: V0Bxe9pvCdmpHFNAup44+kDyfw/tamlGcA2MYQmUsO0=)
                          35: B1E3B88C81B511F19B8C01DE60A30FBC.roa (hash: dx7DvWfirCJZBr5eZJEHjm/706Q8/9o4UK2W9LgRjMo=)
                          36: F55175EA8C5611E792848B4AC4F9AE02.roa (hash: kFQioVNwia+/qizEhlyCPhiOpzPpIkRHCfZvLOC7QmI=)
                          37: EEBDFBB88C5611E792848B4AC4F9AE02.roa (hash: 38VxGKNTIqjI7WmYVTAs2Vk4XEsvNHdC+sfnVA/u1Zk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl
                          rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 29 Oct 2026 15:47:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10537 (0x2929)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFB70, serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
        Validity
            Not Before: Oct 22 15:47:37 2026 GMT
            Not After : Oct 29 15:47:37 2026 GMT
        Subject: CN=6ada3019-aedb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:87:ce:76:65:20:2f:74:48:7d:b7:4c:75:f6:
                    48:f6:6b:5b:88:1f:55:86:4b:fe:ce:9d:a8:3b:e3:
                    42:24:54:0a:ec:cf:e7:31:a6:2b:80:db:fa:72:fd:
                    24:df:50:80:bf:83:70:1f:95:0a:46:01:c7:90:8c:
                    3e:6a:a2:0a:e2:42:23:a2:f0:9a:35:43:9b:73:78:
                    d7:4b:9d:ff:89:97:f0:6b:5c:39:00:90:a8:bb:d8:
                    8b:ea:34:b8:b6:bf:ad:56:14:1e:58:71:12:30:e5:
                    f6:c1:94:ab:2e:1c:d4:b8:54:95:5d:1d:50:e9:71:
                    63:01:e0:e5:fd:52:15:d4:b4:b3:f0:05:2e:11:02:
                    94:53:c2:60:88:d3:e3:14:56:67:5d:72:14:52:49:
                    ae:1a:a7:05:1e:18:96:ab:1e:9b:35:3c:3b:b0:63:
                    de:cf:7f:04:25:1e:81:65:e4:1d:fa:39:56:18:aa:
                    38:3a:65:f2:47:4b:9b:09:81:99:56:2f:68:c1:22:
                    03:b9:51:9d:db:81:47:39:63:0e:53:57:66:aa:65:
                    71:30:84:d5:3b:50:bd:09:73:05:88:7d:b6:0c:14:
                    64:a2:2d:df:da:b4:bc:a8:9f:70:55:24:28:ca:84:
                    67:8a:ee:d4:15:cd:f3:43:3d:05:3f:4f:ed:21:53:
                    a3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:03:0E:04:F5:F0:1F:10:11:5B:5E:25:13:74:4F:A3:B5:C0:D6:F7
            X509v3 Authority Key Identifier:
                keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:0b:8e:41:ea:89:85:4c:9c:33:e1:82:f0:58:13:c2:ac:81:
         72:16:83:f9:c5:0d:f6:8b:7e:da:33:b1:de:74:42:96:f5:1e:
         f2:17:ed:67:46:a1:43:40:5c:b9:72:58:d2:88:54:32:de:db:
         d3:60:da:13:8d:67:94:72:4c:c7:56:bc:90:96:24:f8:85:2f:
         4e:99:71:d0:38:09:4f:fc:c0:df:d5:83:dd:fe:1f:f6:c7:ac:
         b3:fd:bc:5b:56:a4:c7:e9:67:13:e0:71:5a:a0:31:08:aa:d1:
         cf:d3:4e:12:1f:60:e0:1c:69:01:81:af:9b:72:53:c4:a8:78:
         99:a9:7f:d7:ea:a2:c5:aa:fd:f8:04:d3:ea:78:c3:c7:dd:4d:
         90:09:2d:00:92:c8:13:fc:d5:9b:2c:71:4d:c5:3e:6d:ab:fb:
         1f:da:de:f8:1b:4e:c8:8f:d6:6e:d9:2e:b8:80:79:43:59:a4:
         d0:af:fc:58:18:0a:0b:00:85:95:6a:74:db:f6:59:9f:c5:a6:
         2d:a5:63:c9:4f:ba:89:48:f5:d4:5a:65:06:f4:81:75:1c:51:
         d2:49:1d:de:06:be:87:95:55:99:a1:aa:70:43:87:71:9f:23:
         c0:d6:65:f0:b5:35:38:d8:ce:ff:95:15:37:07:35:4f:15:d0:
         46:3a:9a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 12:54:06 2026 by rpki-client