Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft
File:                     XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft (raw, json)
Hash identifier:          nKGnuLd9fFfqCTmVt5P62mRKUZ/d9XQKw6bIMExQdHk=
Subject key identifier:   90:92:C1:58:59:CE:C5:65:4F:07:17:FE:75:E4:9A:BC:36:A2:4B:BC
Authority key identifier: 5E:84:25:16:65:70:4C:DD:DF:2F:3F:9B:E8:2E:31:FF:B0:74:A5:8E
Certificate issuer:       /CN=A9127EAD/serialNumber=5E84251665704CDDDF2F3F9BE82E31FFB074A58E
Certificate serial:       08EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoQlFmVwTN3fLz-b6C4x_7B0pY4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft
Manifest number:          08E3
Signing time:             Sat 26 Sep 2026 20:29:05 +0000
Manifest this update:     Sat 26 Sep 2026 20:29:04 +0000
Manifest next update:     Sat 03 Oct 2026 20:29:04 +0000
Files and hashes:         1: XoQlFmVwTN3fLz-b6C4x_7B0pY4.crl (hash: P/K5tg1tYNIncvvGsPhythrVNykRo3BE/FXCxj0qttY=)
                          2: 6CAC2064EA2211EA9C2F064AC4F9AE02.roa (hash: HgX4tCn4FMdl0R/ylo4Q2his11f507x0EEUUjL+i3vA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.crl
                          rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoQlFmVwTN3fLz-b6C4x_7B0pY4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 20:29:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2284 (0x8ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127EAD, serialNumber=5E84251665704CDDDF2F3F9BE82E31FFB074A58E
        Validity
            Not Before: Sep 26 20:29:04 2026 GMT
            Not After : Oct  3 20:29:04 2026 GMT
        Subject: CN=6ab82b11-9650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0d:ac:f4:5f:5d:f4:cf:dd:26:2f:a8:e2:7b:
                    96:0b:ed:fe:98:e1:ac:0a:41:61:0e:de:85:d3:d3:
                    1e:c6:32:fa:8b:34:fc:75:1b:50:6a:68:c2:a8:54:
                    4e:7e:21:ca:b8:1e:98:7e:7b:ea:1a:5c:77:a8:3e:
                    75:3a:c4:68:a6:af:83:f8:c2:e5:50:6a:72:c9:73:
                    59:16:bb:13:cf:23:e7:79:de:85:16:97:6a:a6:57:
                    38:74:9f:6a:d9:65:a3:c8:14:a5:de:b3:3a:a3:a2:
                    d4:68:86:8c:3c:e9:f0:dd:33:08:8b:ba:c1:2f:84:
                    55:6d:4b:86:1c:ac:1a:9c:78:a5:13:c7:91:c5:1a:
                    85:86:5c:3b:51:55:ca:6d:52:48:c8:f2:ac:de:68:
                    c3:0a:18:77:0b:41:78:95:3e:28:d7:7c:ce:c6:99:
                    c4:13:42:d3:29:bd:14:8f:6b:12:ab:27:b4:19:e3:
                    14:f7:25:cc:af:c7:dc:67:ad:a2:bc:a3:bc:bc:34:
                    da:b5:1c:8e:b9:d4:6c:3e:9d:fc:51:3f:e9:b5:eb:
                    b7:13:f3:c4:0e:38:d3:d1:b8:ca:9f:6c:57:e2:16:
                    77:c6:5a:9a:b8:51:b6:2d:d2:38:40:dc:65:16:7f:
                    8e:95:1e:dd:69:71:23:bb:04:18:79:52:c5:84:bf:
                    77:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:92:C1:58:59:CE:C5:65:4F:07:17:FE:75:E4:9A:BC:36:A2:4B:BC
            X509v3 Authority Key Identifier:
                keyid:5E:84:25:16:65:70:4C:DD:DF:2F:3F:9B:E8:2E:31:FF:B0:74:A5:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoQlFmVwTN3fLz-b6C4x_7B0pY4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:cc:03:5e:1a:4b:7d:ee:a5:8f:e9:ec:86:67:9c:6d:fb:18:
         cd:70:4e:98:25:8a:53:85:8c:39:ea:1d:ea:20:b0:71:31:8e:
         44:2f:7c:9f:06:ec:45:c7:7d:8a:1a:46:66:8d:5e:36:62:47:
         05:e3:d3:c3:d3:d6:2c:55:df:f2:1f:07:19:1e:ae:90:98:85:
         0b:db:ba:c9:ec:54:ba:1a:1a:c1:17:79:36:25:af:1a:43:c3:
         7e:ca:00:bf:4a:88:c6:b0:61:69:21:7e:9d:d9:d8:58:ec:a2:
         6e:2c:a1:25:da:4d:c0:d2:43:36:85:38:d6:51:63:39:eb:ce:
         f1:5f:69:98:df:00:39:6e:fd:0d:46:c2:60:bc:a4:29:55:8e:
         4a:e6:3a:70:cd:8d:d9:7e:ec:8f:40:9c:68:05:55:2b:90:5e:
         f2:0e:04:d4:56:c1:ad:2b:42:e6:e8:45:63:82:9e:95:ab:39:
         82:47:97:37:b2:8f:23:17:ad:fd:bf:6c:fa:04:5e:a6:b2:58:
         45:02:80:29:c6:43:2e:8d:59:54:10:02:d4:22:95:83:96:e1:
         25:59:8f:0f:27:04:88:51:58:27:de:e2:70:31:64:9c:f8:5a:
         7d:7e:85:f7:39:2f:fe:f3:0f:43:ea:96:74:72:42:30:f1:8c:
         36:c6:c3:80
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjdFQUQxMTAvBgNVBAUTKDVFODQyNTE2NjU3MDRDRERERjJGM0Y5QkU4MkUzMUZG
QjA3NEE1OEUwHhcNMjYwOTI2MjAyOTA0WhcNMjYxMDAzMjAyOTA0WjAYMRYwFAYD
VQQDEw02YWI4MmIxMS05NjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxw2s9F9d9M/dJi+o4nuWC+3+mOGsCkFhDt6F09MexjL6izT8dRtQamjCqFRO
fiHKuB6YfnvqGlx3qD51OsRopq+D+MLlUGpyyXNZFrsTzyPned6FFpdqplc4dJ9q
2WWjyBSl3rM6o6LUaIaMPOnw3TMIi7rBL4RVbUuGHKwanHilE8eRxRqFhlw7UVXK
bVJIyPKs3mjDChh3C0F4lT4o13zOxpnEE0LTKb0Uj2sSqye0GeMU9yXMr8fcZ62i
vKO8vDTatRyOudRsPp38UT/pteu3E/PEDjjT0bjKn2xX4hZ3xlqauFG2LdI4QNxl
Fn+OlR7daXEjuwQYeVLFhL93pQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJCSwVhZ
zsVlTwcX/nXkmrw2oku8MB8GA1UdIwQYMBaAFF6EJRZlcEzd3y8/m+guMf+wdKWO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0VBRC9FOUI3MDY2NkVB
MjAxMUVBOUNCRkFENDhDNEY5QUUwMi9Yb1FsRm1Wd1ROM2ZMei1iNkM0eF83QjBw
WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hvUWxGbVZ3VE4zZkx6LWI2QzR4XzdCMHBZNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
N0VBRC9FOUI3MDY2NkVBMjAxMUVBOUNCRkFENDhDNEY5QUUwMi9Yb1FsRm1Wd1RO
M2ZMei1iNkM0eF83QjBwWTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACcwDXhpLfe6lj+nshmecbfsYzXBOmCWKU4WMOeod6iCwcTGORC98nwbsRcd9
ihpGZo1eNmJHBePTw9PWLFXf8h8HGR6ukJiFC9u6yexUuhoawRd5NiWvGkPDfsoA
v0qIxrBhaSF+ndnYWOyibiyhJdpNwNJDNoU41lFjOevO8V9pmN8AOW79DUbCYLyk
KVWOSuY6cM2N2X7sj0CcaAVVK5Be8g4E1FbBrStC5uhFY4Kelas5gkeXN7KPIxet
/b9s+gReprJYRQKAKcZDLo1ZVBAC1CKVg5bhJVmPDycEiFFYJ97icDFknPhafX6F
9zkv/vMPQ+qWdHJCMPGMNsbDgA==
-----END CERTIFICATE-----
Generated at Mon Sep 28 14:30:14 2026 by rpki-client