Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.mft
File:                     XcpFKLnkDIjkZ6Q_3BK3jys1ReM.mft (raw, json)
Hash identifier:          /vXjz/At0E1u/ooJxvsA+lgEE4RmhDIJ6/fF88YwNLU=
Subject key identifier:   90:B1:FC:E7:5B:48:3C:59:A9:26:E8:D1:7D:B1:F9:83:77:2B:E3:B7
Authority key identifier: 5D:CA:45:28:B9:E4:0C:88:E4:67:A4:3F:DC:12:B7:8F:2B:35:45:E3
Certificate issuer:       /CN=A91E4BD2/serialNumber=5DCA4528B9E40C88E467A43FDC12B78F2B3545E3
Certificate serial:       09FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.mft
Manifest number:          09F5
Signing time:             Sun 04 Oct 2026 19:51:13 +0000
Manifest this update:     Sun 04 Oct 2026 19:51:12 +0000
Manifest next update:     Sun 11 Oct 2026 19:51:12 +0000
Files and hashes:         1: XcpFKLnkDIjkZ6Q_3BK3jys1ReM.crl (hash: QoMmOHQOFnHDOgfxxkpZFYlDhO0QRXndabDAG3CgESM=)
                          2: A862F866AA3111EA9E08C324C4F9AE02.roa (hash: /iSHCrcBHYNHKFSx10qXjyornrh9oW58iGZxMDR9DOg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.crl
                          rsync://rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 19:51:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2558 (0x9fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4BD2, serialNumber=5DCA4528B9E40C88E467A43FDC12B78F2B3545E3
        Validity
            Not Before: Oct  4 19:51:12 2026 GMT
            Not After : Oct 11 19:51:12 2026 GMT
        Subject: CN=6ac2ae31-5fea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:41:f7:e7:6a:77:bf:7a:0e:2c:14:fa:2b:a5:
                    2d:4f:c4:d9:f4:b5:66:2a:a1:c2:f3:80:01:69:ec:
                    50:22:ba:c1:8f:ce:96:29:b2:f9:0b:05:c6:b2:17:
                    9b:95:30:f5:bc:8c:67:9d:19:37:33:31:1d:0b:88:
                    46:1a:0b:a9:b4:f8:9a:c8:ed:2d:40:46:a7:be:eb:
                    76:9c:3f:96:57:7a:dd:80:c4:67:95:8a:15:b8:2a:
                    d8:1f:34:56:03:d3:1c:1f:d0:60:5f:90:35:4d:ef:
                    c3:4d:49:a1:e4:8f:ba:fb:2e:9c:35:54:b0:74:2a:
                    91:c3:b1:f7:90:4e:c1:2d:57:05:86:c4:8e:66:d0:
                    f2:1d:fa:11:16:d9:32:0b:9e:ba:be:18:6e:9a:dd:
                    5b:55:da:f7:ef:e6:59:cc:5b:60:f6:4a:cc:93:1e:
                    96:89:4c:d5:8f:ff:8d:77:92:7b:2a:e6:78:cd:d9:
                    f7:d1:3e:44:c5:1d:2c:39:6a:94:c3:d8:a2:69:22:
                    02:fb:2c:94:d2:25:97:5d:fc:2f:f1:79:1d:49:6d:
                    68:42:23:12:f4:8b:56:79:1a:15:9c:80:67:1b:c7:
                    15:3a:7a:c1:0d:04:cb:84:ea:c3:bd:d9:39:67:68:
                    7c:cc:6d:26:18:82:41:ed:ed:2f:5f:0c:b7:a8:d5:
                    bc:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:B1:FC:E7:5B:48:3C:59:A9:26:E8:D1:7D:B1:F9:83:77:2B:E3:B7
            X509v3 Authority Key Identifier:
                keyid:5D:CA:45:28:B9:E4:0C:88:E4:67:A4:3F:DC:12:B7:8F:2B:35:45:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:f4:22:89:ff:2c:e8:b1:1a:d7:8f:f0:18:ac:5e:cf:b6:bc:
         ed:45:f0:06:05:92:47:ff:68:d0:87:d0:dc:d3:93:c6:2c:ed:
         d5:ea:29:93:7a:20:bc:10:aa:ec:79:33:94:bf:b0:29:39:0e:
         79:23:45:9e:6a:a9:24:22:d8:2e:8b:b5:56:6d:8b:1e:2d:53:
         dc:06:ad:9b:f5:7c:e0:44:00:18:a7:8b:1e:7f:df:0b:c8:49:
         15:39:1c:ef:df:ed:c6:de:cc:a5:87:c2:c5:43:d1:54:6d:41:
         aa:95:c8:d6:01:f9:f6:78:ab:89:d1:10:4e:00:68:0b:0f:5a:
         0c:41:c3:8e:ab:2f:84:b2:d0:5e:90:a4:ae:62:f2:f4:3f:e7:
         8f:5c:9d:60:47:c9:99:52:10:c5:8e:03:a2:83:e6:c8:82:eb:
         ab:12:6f:eb:40:65:58:9c:dc:88:00:72:68:d1:25:6b:f3:06:
         c6:8c:0f:d5:da:ee:84:f4:be:34:5f:ff:0f:d5:a7:4a:1f:a4:
         d7:b2:51:3b:1b:f8:5c:21:ba:aa:05:c5:58:d6:21:5b:9f:08:
         82:6c:9a:8e:b9:ab:1b:b7:18:69:d9:44:56:1d:1c:6d:47:9e:
         ad:63:8a:fe:f9:59:e0:6f:b9:73:16:8e:bb:9d:52:48:81:a5:
         af:8f:e4:54
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTRCRDIxMTAvBgNVBAUTKDVEQ0E0NTI4QjlFNDBDODhFNDY3QTQzRkRDMTJCNzhG
MkIzNTQ1RTMwHhcNMjYxMDA0MTk1MTEyWhcNMjYxMDExMTk1MTEyWjAYMRYwFAYD
VQQDEw02YWMyYWUzMS01ZmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArkH352p3v3oOLBT6K6UtT8TZ9LVmKqHC84ABaexQIrrBj86WKbL5CwXGsheb
lTD1vIxnnRk3MzEdC4hGGguptPiayO0tQEanvut2nD+WV3rdgMRnlYoVuCrYHzRW
A9McH9BgX5A1Te/DTUmh5I+6+y6cNVSwdCqRw7H3kE7BLVcFhsSOZtDyHfoRFtky
C566vhhumt1bVdr37+ZZzFtg9krMkx6WiUzVj/+Nd5J7KuZ4zdn30T5ExR0sOWqU
w9iiaSIC+yyU0iWXXfwv8XkdSW1oQiMS9ItWeRoVnIBnG8cVOnrBDQTLhOrDvdk5
Z2h8zG0mGIJB7e0vXwy3qNW8qQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJCx/Odb
SDxZqSbo0X2x+YN3K+O3MB8GA1UdIwQYMBaAFF3KRSi55AyI5GekP9wSt48rNUXj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEJEMi9GNDBCMTE2QUFB
MkYxMUVBOUMyOTU5MUVDNEY5QUUwMi9YY3BGS0xua0RJamtaNlFfM0JLM2p5czFS
ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hjcEZLTG5rRElqa1o2UV8zQkszanlzMVJlTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NEJEMi9GNDBCMTE2QUFBMkYxMUVBOUMyOTU5MUVDNEY5QUUwMi9YY3BGS0xua0RJ
amtaNlFfM0JLM2p5czFSZU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAs/Qiif8s6LEa14/wGKxez7a87UXwBgWSR/9o0IfQ3NOTxizt1eopk3ogvBCq
7HkzlL+wKTkOeSNFnmqpJCLYLou1Vm2LHi1T3Aatm/V84EQAGKeLHn/fC8hJFTkc
79/txt7MpYfCxUPRVG1BqpXI1gH59niridEQTgBoCw9aDEHDjqsvhLLQXpCkrmLy
9D/nj1ydYEfJmVIQxY4DooPmyILrqxJv60BlWJzciAByaNEla/MGxowP1druhPS+
NF//D9WnSh+k17JROxv4XCG6qgXFWNYhW58IgmyajrmrG7cYadlEVh0cbUeerWOK
/vlZ4G+5cxaOu51SSIGlr4/kVA==
-----END CERTIFICATE-----
Generated at Sun Oct 4 22:56:37 2026 by rpki-client