Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft
File:                     XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft (raw, json)
Hash identifier:          1mqxBrDgRZZhe3UY4H0o6VSiV3AbIaqkcWPeH6LQyKw=
Subject key identifier:   1D:01:AA:D0:3D:EA:8A:A3:6A:36:AF:20:A8:FA:61:76:4B:A8:2B:14
Authority key identifier: 5D:B7:5B:2D:F9:4D:04:47:4A:6E:5E:2D:4B:78:CC:08:4B:FC:2A:6C
Certificate issuer:       /CN=A912698E/serialNumber=5DB75B2DF94D04474A6E5E2D4B78CC084BFC2A6C
Certificate serial:       0114
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft
Manifest number:          010C
Signing time:             Sun 20 Sep 2026 17:30:33 +0000
Manifest this update:     Sun 20 Sep 2026 17:30:32 +0000
Manifest next update:     Sun 27 Sep 2026 17:30:32 +0000
Files and hashes:         1: XbdbLflNBEdKbl4tS3jMCEv8Kmw.crl (hash: TLn633p6XctALogOYwoOd2c0P9ieLI9392bu7WleQoE=)
                          2: D5271A183ADB11F0BC52A042C4F9AE02.roa (hash: 4a6PLPW/gOHUVu6+aFebgQ5/qx4vCQg4zTQoTmjp9Rk=)
                          3: 87087F00267E11F09183092AC4F9AE02.roa (hash: ZonpCT+5ZZuP5erM6WjI5zX2DJGXZb7/2jDh35lgn00=)
                          4: 79FB87E45BE811F1A1050E64C6833773.roa (hash: NWwclcZCcPG2TS1pQpW1RR20GoSP1Iy5BozZgf751Lw=)
                          5: E7E8471858BB11F1BAE21C4D9A833773.roa (hash: Tc3fcqpoYCzH1k3AQYmkHoaNjc5Waq991d+rce3j0bg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.crl
                          rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 17:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 276 (0x114)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912698E, serialNumber=5DB75B2DF94D04474A6E5E2D4B78CC084BFC2A6C
        Validity
            Not Before: Sep 20 17:30:32 2026 GMT
            Not After : Sep 27 17:30:32 2026 GMT
        Subject: CN=6ab01839-1357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:89:8b:e8:c8:f7:7f:a5:54:3c:87:97:d9:6d:
                    6b:ae:1c:71:b8:d5:e9:2e:64:63:82:2d:a5:28:d1:
                    a2:a8:b0:10:0d:6c:5c:bc:c2:84:75:ec:d9:52:8d:
                    66:ee:34:0b:23:d3:0c:bf:28:9e:7b:72:f4:3f:7a:
                    ce:4d:c8:48:bd:34:fc:a8:7d:f0:9f:cf:15:07:12:
                    3a:75:ff:f7:ae:34:6f:31:9e:50:dc:ab:ee:fe:14:
                    fe:46:64:94:31:aa:e1:19:0e:e5:58:1d:76:67:8d:
                    dc:73:6a:26:16:00:3d:98:f0:df:e0:73:9e:74:81:
                    2b:8d:c6:2c:ed:7c:24:99:b9:a7:8b:a0:2b:e7:4a:
                    1b:88:81:d7:3f:a2:e0:af:d1:6a:40:7b:ac:d6:02:
                    d7:5d:23:11:f1:86:b9:60:d7:38:16:49:f4:79:32:
                    62:3a:87:27:b7:89:c4:5f:8a:8f:9a:14:17:09:42:
                    4b:43:a1:11:a2:75:83:a0:1e:b2:3a:ff:ef:68:05:
                    f0:8b:e4:77:96:58:d7:bf:2e:e3:86:46:47:b1:38:
                    cd:30:b2:58:d7:9f:07:3c:9d:0b:c4:17:62:3d:f8:
                    ea:5f:d4:05:3f:d6:19:52:d6:13:17:51:05:e2:c0:
                    8c:9d:68:e0:07:8e:d1:a6:6f:95:53:43:c5:6a:0c:
                    8f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:01:AA:D0:3D:EA:8A:A3:6A:36:AF:20:A8:FA:61:76:4B:A8:2B:14
            X509v3 Authority Key Identifier:
                keyid:5D:B7:5B:2D:F9:4D:04:47:4A:6E:5E:2D:4B:78:CC:08:4B:FC:2A:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:96:a1:54:34:72:94:41:06:35:81:44:87:8c:da:39:78:91:
         db:fc:b6:a5:9f:75:0d:ef:f4:f2:46:1e:90:b4:73:d3:ca:96:
         16:e1:18:04:e2:c0:82:fb:db:9e:a0:90:e8:b7:d8:cf:d5:03:
         c0:25:16:e4:d8:b1:2c:e5:4c:25:d5:ce:08:c2:b4:5d:ab:98:
         19:45:52:13:36:77:95:22:76:5a:03:f3:7a:b0:31:02:ec:df:
         7f:81:46:86:f6:b2:9d:10:d6:84:a6:0e:10:8f:a6:12:f1:de:
         2f:bf:b8:ca:b2:30:0d:a3:e9:d1:95:9a:45:b3:4f:05:5a:37:
         6b:f2:b9:81:da:3f:8d:85:19:af:cb:bd:f9:ea:70:bf:ae:41:
         c0:dc:6f:fb:f4:33:7e:9f:1f:fa:eb:0e:8d:2e:0c:10:6a:5c:
         d9:bb:e7:8e:76:ab:19:83:2b:b0:71:b0:78:cf:91:b5:3d:ae:
         71:df:74:03:ab:97:79:52:b8:4a:19:c6:70:c4:22:a7:22:34:
         ec:a3:22:e1:6d:8a:ea:0a:92:ee:de:98:03:27:3e:63:e7:d2:
         06:b4:37:2b:67:0a:bf:11:cf:e6:3a:5c:4d:63:70:44:f8:22:
         67:58:8b:4b:9c:36:6b:50:60:3b:f9:e0:0e:89:4b:52:d6:dc:
         b9:6f:8d:b2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjY5OEUxMTAvBgNVBAUTKDVEQjc1QjJERjk0RDA0NDc0QTZFNUUyRDRCNzhDQzA4
NEJGQzJBNkMwHhcNMjYwOTIwMTczMDMyWhcNMjYwOTI3MTczMDMyWjAYMRYwFAYD
VQQDEw02YWIwMTgzOS0xMzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArYmL6Mj3f6VUPIeX2W1rrhxxuNXpLmRjgi2lKNGiqLAQDWxcvMKEdezZUo1m
7jQLI9MMvyiee3L0P3rOTchIvTT8qH3wn88VBxI6df/3rjRvMZ5Q3Kvu/hT+RmSU
MarhGQ7lWB12Z43cc2omFgA9mPDf4HOedIErjcYs7Xwkmbmni6Ar50obiIHXP6Lg
r9FqQHus1gLXXSMR8Ya5YNc4Fkn0eTJiOocnt4nEX4qPmhQXCUJLQ6ERonWDoB6y
Ov/vaAXwi+R3lljXvy7jhkZHsTjNMLJY158HPJ0LxBdiPfjqX9QFP9YZUtYTF1EF
4sCMnWjgB47Rpm+VU0PFagyPRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB0BqtA9
6oqjajavIKj6YXZLqCsUMB8GA1UdIwQYMBaAFF23Wy35TQRHSm5eLUt4zAhL/Cps
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjk4RS8wOTVGNkM4QzI2
N0MxMUYwOTY3N0Y4MEJDNEY5QUUwMi9YYmRiTGZsTkJFZEtibDR0UzNqTUNFdjhL
bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1hiZGJMZmxOQkVkS2JsNHRTM2pNQ0V2OEttdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
Njk4RS8wOTVGNkM4QzI2N0MxMUYwOTY3N0Y4MEJDNEY5QUUwMi9YYmRiTGZsTkJF
ZEtibDR0UzNqTUNFdjhLbXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAX5ahVDRylEEGNYFEh4zaOXiR2/y2pZ91De/08kYekLRz08qWFuEYBOLAgvvb
nqCQ6LfYz9UDwCUW5NixLOVMJdXOCMK0XauYGUVSEzZ3lSJ2WgPzerAxAuzff4FG
hvaynRDWhKYOEI+mEvHeL7+4yrIwDaPp0ZWaRbNPBVo3a/K5gdo/jYUZr8u9+epw
v65BwNxv+/Qzfp8f+usOjS4MEGpc2bvnjnarGYMrsHGweM+RtT2ucd90A6uXeVK4
ShnGcMQipyI07KMi4W2K6gqS7t6YAyc+Y+fSBrQ3K2cKvxHP5jpcTWNwRPgiZ1iL
S5w2a1BgO/ngDolLUtbcuW+Nsg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 15:04:33 2026 by rpki-client