Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft
File:                     Xx7oK_cJomzAAJlbR0geVPbzgG4.mft (raw, json)
Hash identifier:          JX1+/7oL5LCqC17IeV5F0093fWs5CSWErIgaKWYgouU=
Subject key identifier:   62:57:8E:BD:3C:9C:E3:61:CD:FD:2C:6D:A1:C2:61:8B:1F:75:51:66
Authority key identifier: 5F:1E:E8:2B:F7:09:A2:6C:C0:00:99:5B:47:48:1E:54:F6:F3:80:6E
Certificate issuer:       /CN=A91F9E0A/serialNumber=5F1EE82BF709A26CC000995B47481E54F6F3806E
Certificate serial:       01AD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xx7oK_cJomzAAJlbR0geVPbzgG4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft
Manifest number:          01A5
Signing time:             Wed 09 Sep 2026 04:36:13 +0000
Manifest this update:     Wed 09 Sep 2026 04:36:13 +0000
Manifest next update:     Wed 16 Sep 2026 04:36:13 +0000
Files and hashes:         1: Xx7oK_cJomzAAJlbR0geVPbzgG4.crl (hash: 3UDF5oTiCMNvq7JSeTL200+TRJ4gvPkREH8N7ISYZcA=)
                          2: 9F4A37143EA511EF882FE276C4F9AE02.roa (hash: bmVhAOvV7UXJ9islZHC9bY2mkqwPn0tjhiLeKB5QXHw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.crl
                          rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xx7oK_cJomzAAJlbR0geVPbzgG4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Sep 2026 04:36:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 429 (0x1ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9E0A, serialNumber=5F1EE82BF709A26CC000995B47481E54F6F3806E
        Validity
            Not Before: Sep  9 04:36:13 2026 GMT
            Not After : Sep 16 04:36:13 2026 GMT
        Subject: CN=6aa0e23d-53e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b1:80:c9:d4:ab:c9:35:f7:e6:f6:1b:bc:ca:
                    db:68:d2:8b:54:12:3a:27:02:6e:c3:39:e3:25:c6:
                    2f:7e:63:44:79:f6:50:00:ac:83:07:f3:4e:dc:e0:
                    9f:83:47:34:69:86:04:7b:a2:4f:1c:ba:a4:24:c9:
                    5c:96:f5:67:ed:d7:0f:47:f3:59:3f:4c:e5:9f:fd:
                    6b:e6:e2:d7:92:f1:6c:31:41:a7:9a:b4:94:be:f2:
                    37:54:3b:11:c3:d8:18:c8:f7:48:e4:7d:6c:f3:83:
                    99:da:66:0b:2a:18:b0:5c:53:02:1b:a6:80:d3:f6:
                    d3:2d:70:81:87:ae:0d:f1:d3:3e:9f:ad:b5:bc:d3:
                    94:e3:28:11:20:59:09:ac:bc:df:5f:25:6f:3e:93:
                    a7:7b:06:0a:68:04:58:32:75:03:22:73:c1:06:09:
                    61:5a:42:30:63:b8:e8:20:79:28:a3:ca:5a:aa:f8:
                    a6:d5:a5:07:2f:8d:aa:7d:25:d3:67:80:18:21:78:
                    d7:9a:99:fd:0e:b7:70:c2:74:13:50:35:e7:88:1e:
                    16:05:53:8c:ad:b9:3c:8c:5a:05:46:97:4f:3a:19:
                    90:68:54:16:83:7a:03:8c:e1:14:03:58:fe:d9:2e:
                    74:cd:a9:1a:ad:97:e8:bf:31:71:88:41:ba:60:27:
                    af:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:57:8E:BD:3C:9C:E3:61:CD:FD:2C:6D:A1:C2:61:8B:1F:75:51:66
            X509v3 Authority Key Identifier:
                keyid:5F:1E:E8:2B:F7:09:A2:6C:C0:00:99:5B:47:48:1E:54:F6:F3:80:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xx7oK_cJomzAAJlbR0geVPbzgG4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:1a:0c:c1:4c:7c:92:de:7b:52:3a:3c:fe:4a:b8:fa:b9:3a:
         d9:54:7b:ce:4a:db:77:79:a6:35:25:2f:21:f8:5f:9c:7b:c7:
         7a:4f:0f:55:d2:e4:f4:e5:01:17:96:58:40:62:74:f2:bd:fe:
         ee:cb:b4:81:ba:42:ef:d9:a2:d7:33:1a:08:f2:96:6a:b3:b4:
         a1:62:c2:17:72:b7:04:b9:05:ee:40:50:43:a2:d4:6f:68:75:
         81:19:86:38:89:6e:c9:41:39:b7:dd:3d:a4:da:a5:d5:cc:30:
         02:80:e2:b8:bf:0f:8c:20:7b:40:12:b6:4c:c4:fe:c5:60:69:
         bc:98:6f:68:b6:6b:1f:1a:e1:81:fe:fb:f2:5d:a6:f8:9a:c4:
         0b:37:72:6b:79:b4:64:35:07:9c:3b:c9:e1:57:3d:59:ba:b8:
         66:6f:f6:ad:f1:e1:62:0a:af:9a:30:69:21:47:e2:f1:14:33:
         c4:27:86:d5:e3:21:c5:f6:38:a6:2b:33:d3:71:c2:7e:38:01:
         64:10:bc:90:6e:77:32:59:e9:60:7e:2a:75:19:cc:f0:4c:93:
         6a:e3:19:a3:39:36:48:01:fc:93:71:68:08:db:03:36:62:6f:
         30:ff:ce:4f:ac:64:07:9f:d7:9e:39:b4:da:a8:b0:ec:19:ac:
         8d:aa:e3:6f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjlFMEExMTAvBgNVBAUTKDVGMUVFODJCRjcwOUEyNkNDMDAwOTk1QjQ3NDgxRTU0
RjZGMzgwNkUwHhcNMjYwOTA5MDQzNjEzWhcNMjYwOTE2MDQzNjEzWjAYMRYwFAYD
VQQDEw02YWEwZTIzZC01M2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2LGAydSryTX35vYbvMrbaNKLVBI6JwJuwznjJcYvfmNEefZQAKyDB/NO3OCf
g0c0aYYEe6JPHLqkJMlclvVn7dcPR/NZP0zln/1r5uLXkvFsMUGnmrSUvvI3VDsR
w9gYyPdI5H1s84OZ2mYLKhiwXFMCG6aA0/bTLXCBh64N8dM+n621vNOU4ygRIFkJ
rLzfXyVvPpOnewYKaARYMnUDInPBBglhWkIwY7joIHkoo8paqvim1aUHL42qfSXT
Z4AYIXjXmpn9DrdwwnQTUDXniB4WBVOMrbk8jFoFRpdPOhmQaFQWg3oDjOEUA1j+
2S50zakarZfovzFxiEG6YCevlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGJXjr08
nONhzf0sbaHCYYsfdVFmMB8GA1UdIwQYMBaAFF8e6Cv3CaJswACZW0dIHlT284Bu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUUwQS8wM0IwNTJENDNF
NjkxMUVGQTJDRTY3NkFDNEY5QUUwMi9YeDdvS19jSm9tekFBSmxiUjBnZVZQYnpn
RzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1h4N29LX2NKb216QUFKbGJSMGdlVlBiemdHNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
OUUwQS8wM0IwNTJENDNFNjkxMUVGQTJDRTY3NkFDNEY5QUUwMi9YeDdvS19jSm9t
ekFBSmxiUjBnZVZQYnpnRzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEBoMwUx8kt57Ujo8/kq4+rk62VR7zkrbd3mmNSUvIfhfnHvHek8PVdLk9OUB
F5ZYQGJ08r3+7su0gbpC79mi1zMaCPKWarO0oWLCF3K3BLkF7kBQQ6LUb2h1gRmG
OIluyUE5t909pNql1cwwAoDiuL8PjCB7QBK2TMT+xWBpvJhvaLZrHxrhgf778l2m
+JrECzdya3m0ZDUHnDvJ4Vc9Wbq4Zm/2rfHhYgqvmjBpIUfi8RQzxCeG1eMhxfY4
pisz03HCfjgBZBC8kG53MlnpYH4qdRnM8EyTauMZozk2SAH8k3FoCNsDNmJvMP/O
T6xkB5/Xnjm02qiw7Bmsjarjbw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 20:35:37 2026 by rpki-client