Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft
File:                     sXSj1LqbR24rMeR8cqKY0ETZh4U.mft (raw, json)
Hash identifier:          50AKrw+Qhq0j/Wwb6knkKD/1XR3MEdfvqVf5QLt0xbI=
Subject key identifier:   40:10:B5:42:EB:5B:C5:CA:86:41:9F:34:F6:4E:DF:0A:B6:53:43:EF
Authority key identifier: B1:74:A3:D4:BA:9B:47:6E:2B:31:E4:7C:72:A2:98:D0:44:D9:87:85
Certificate issuer:       /CN=A91FBC89/serialNumber=B174A3D4BA9B476E2B31E47C72A298D044D98785
Certificate serial:       0143
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXSj1LqbR24rMeR8cqKY0ETZh4U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft
Manifest number:          0131
Signing time:             Wed 19 Aug 2026 06:34:01 +0000
Manifest this update:     Wed 19 Aug 2026 06:34:00 +0000
Manifest next update:     Wed 26 Aug 2026 06:34:00 +0000
Files and hashes:         1: sXSj1LqbR24rMeR8cqKY0ETZh4U.crl (hash: 4wf7xN4/fblT3HEMh3QaHC6yC7hwAN8m5s0x62Wl8uI=)
                          2: 84E249E030D711F1A9283A38AD833773.roa (hash: aZtgUaUAy3lxVZGUWdm5XWesfC7FySUXNi8hLQd8w2w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.crl
                          rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXSj1LqbR24rMeR8cqKY0ETZh4U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 06:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 323 (0x143)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FBC89, serialNumber=B174A3D4BA9B476E2B31E47C72A298D044D98785
        Validity
            Not Before: Aug 19 06:34:00 2026 GMT
            Not After : Aug 26 06:34:00 2026 GMT
        Subject: CN=6a854e59-bdbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ec:56:15:e4:2b:b6:81:16:a4:99:9c:e2:1b:
                    eb:0c:c4:5c:e9:e7:1b:ca:98:fe:e4:3b:7f:69:01:
                    1a:1b:f0:36:bf:c3:48:5b:be:46:81:67:bd:41:19:
                    1e:4c:9d:25:ed:40:0a:57:0d:cd:15:54:58:48:69:
                    0b:b6:b1:e9:16:65:54:99:69:9d:11:68:f0:3a:be:
                    7f:88:d4:e1:68:8e:cd:94:7e:9f:dc:6a:b0:17:54:
                    2c:43:0e:a8:63:fe:b7:0a:9e:fd:c8:13:df:66:21:
                    ff:ec:96:73:61:f9:28:e7:92:bb:6f:c2:83:4f:e6:
                    9f:9d:9d:c8:ed:d8:ab:18:b8:9e:1c:2a:d0:d8:56:
                    db:35:50:37:f6:ff:0e:1d:7c:e9:3d:47:da:62:cd:
                    97:90:63:bf:75:b0:11:bf:6e:e8:0e:8a:5b:82:50:
                    7d:12:5b:33:ac:1a:45:05:d3:7b:c0:69:d4:7c:27:
                    9d:22:c3:60:0a:82:06:d0:a8:cd:9f:9a:af:b3:5d:
                    5e:74:8c:cc:21:0f:4e:3a:55:e0:fb:97:a1:c3:f0:
                    af:33:8a:70:91:88:bb:c9:6c:23:10:42:96:76:9c:
                    83:8f:41:f7:9b:b9:29:ea:14:68:7b:8f:23:a2:22:
                    71:a2:92:3b:76:dd:4b:08:31:4c:69:b0:ca:1c:84:
                    b6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:10:B5:42:EB:5B:C5:CA:86:41:9F:34:F6:4E:DF:0A:B6:53:43:EF
            X509v3 Authority Key Identifier:
                keyid:B1:74:A3:D4:BA:9B:47:6E:2B:31:E4:7C:72:A2:98:D0:44:D9:87:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXSj1LqbR24rMeR8cqKY0ETZh4U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:9c:40:0a:85:2e:90:f7:f5:af:8d:53:01:83:e4:14:b6:62:
         61:35:58:49:f2:d3:13:46:ae:d9:44:16:8f:9b:0e:70:ad:a3:
         c3:5e:fe:16:34:c9:9e:7d:9e:13:48:ca:3f:1a:64:c5:4e:56:
         05:f7:e1:c3:40:a3:a1:fd:fa:c9:27:4e:0c:08:84:28:00:9c:
         fb:3c:f5:22:df:54:d0:e9:3e:a0:97:00:75:42:53:61:53:71:
         2b:97:18:b5:a5:1d:a9:ea:94:14:62:64:54:5e:a2:fe:02:62:
         98:ce:8b:1c:85:a3:ed:33:8d:0a:49:5f:34:ed:8f:b9:22:5d:
         ed:25:d3:ff:21:92:bf:e4:fb:88:59:27:80:89:34:4e:bb:90:
         f4:41:9e:fd:cc:0d:35:7e:86:0f:ec:c4:a7:89:37:0e:d4:90:
         1d:de:80:71:73:63:c4:ee:06:04:6f:7b:77:6f:37:93:f2:9f:
         fe:6d:a7:c4:39:0f:a3:e0:80:f8:c7:d0:e8:70:a7:b2:26:92:
         b2:f9:c3:c9:5e:f0:63:1e:d6:05:21:94:ff:57:d4:b8:21:ba:
         fb:cd:e1:32:14:10:b8:26:4b:25:67:ce:31:0f:43:b9:74:96:
         46:50:25:bd:e3:53:b6:7d:15:59:a6:b7:31:e9:75:87:3a:18:
         5a:95:7f:8b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkJDODkxMTAvBgNVBAUTKEIxNzRBM0Q0QkE5QjQ3NkUyQjMxRTQ3QzcyQTI5OEQw
NDREOTg3ODUwHhcNMjYwODE5MDYzNDAwWhcNMjYwODI2MDYzNDAwWjAYMRYwFAYD
VQQDEw02YTg1NGU1OS1iZGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz+xWFeQrtoEWpJmc4hvrDMRc6ecbypj+5Dt/aQEaG/A2v8NIW75GgWe9QRke
TJ0l7UAKVw3NFVRYSGkLtrHpFmVUmWmdEWjwOr5/iNThaI7NlH6f3GqwF1QsQw6o
Y/63Cp79yBPfZiH/7JZzYfko55K7b8KDT+afnZ3I7dirGLieHCrQ2FbbNVA39v8O
HXzpPUfaYs2XkGO/dbARv27oDopbglB9ElszrBpFBdN7wGnUfCedIsNgCoIG0KjN
n5qvs11edIzMIQ9OOlXg+5ehw/CvM4pwkYi7yWwjEEKWdpyDj0H3m7kp6hRoe48j
oiJxopI7dt1LCDFMabDKHIS2TwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEAQtULr
W8XKhkGfNPZO3wq2U0PvMB8GA1UdIwQYMBaAFLF0o9S6m0duKzHkfHKimNBE2YeF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkM4OS85RTcyNjJCRUVG
Q0UxMUVGODkzRkY3MEVDNEY5QUUwMi9zWFNqMUxxYlIyNHJNZVI4Y3FLWTBFVFpo
NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NYU2oxTHFiUjI0ck1lUjhjcUtZMEVUWmg0VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QkM4OS85RTcyNjJCRUVGQ0UxMUVGODkzRkY3MEVDNEY5QUUwMi9zWFNqMUxxYlIy
NHJNZVI4Y3FLWTBFVFpoNFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALJxACoUukPf1r41TAYPkFLZiYTVYSfLTE0au2UQWj5sOcK2jw17+FjTJnn2e
E0jKPxpkxU5WBffhw0Cjof36ySdODAiEKACc+zz1It9U0Ok+oJcAdUJTYVNxK5cY
taUdqeqUFGJkVF6i/gJimM6LHIWj7TONCklfNO2PuSJd7SXT/yGSv+T7iFkngIk0
TruQ9EGe/cwNNX6GD+zEp4k3DtSQHd6AcXNjxO4GBG97d283k/Kf/m2nxDkPo+CA
+MfQ6HCnsiaSsvnDyV7wYx7WBSGU/1fUuCG6+83hMhQQuCZLJWfOMQ9DuXSWRlAl
veNTtn0VWaa3Mel1hzoYWpV/iw==
-----END CERTIFICATE-----
Generated at Wed Aug 19 17:00:59 2026 by rpki-client