Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
File:                     PXsVvXfZuXTjc1jadU3-qSkeaDo.mft (raw, json)
Hash identifier:          Hx8TiRNF0HALMiJjUPoK+xCr5qauxDmgs0JAoVB9XIE=
Subject key identifier:   56:18:03:EC:5B:0E:21:C5:F1:E5:90:92:9A:A4:F3:90:0A:C3:48:2F
Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
Certificate issuer:       /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Certificate serial:       0186
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
Manifest number:          BE
Signing time:             Fri 18 Sep 2026 18:55:34 +0000
Manifest this update:     Fri 18 Sep 2026 18:55:33 +0000
Manifest next update:     Fri 25 Sep 2026 18:55:33 +0000
Files and hashes:         1: PXsVvXfZuXTjc1jadU3-qSkeaDo.crl (hash: 5BMmaOMO5y4CF3rHzVoMQf2Ij+jgjA4JmgOwKog28LE=)
                          2: 85750E9429B911F1A805AEF28F833773.roa (hash: G0wzSj51Qp6fnFjrr4WxujUgcZN4YNZIFcMjHPdUFz4=)
                          3: 2447645A29D711F19B6521AE99833773.roa (hash: 9fh2MIgtJRRPoGpWqGsheDDuAAKoytopq3Qqh52Ib4A=)
                          4: 24DB124029D711F19B6521AE99833773.roa (hash: UqSBc8TxnJq1Jue1okvq1v9coaZmETb8TyDiU0CjCJ8=)
                          5: 9FAF6F8A29DB11F1BFD4871E9B833773.roa (hash: zdZwScXVAMNHJf/1wI64pbUMCQPblQfek4+QW6DA8h4=)
                          6: DF742E02A83511F197EEE3443611F970.roa (hash: LR/itoK/L5aRch4pJhKFTPYm9kxaZD8MEBm8uT1T9hA=)
                          7: 2E2443CE29CF11F1ADED11F996833773.roa (hash: CUdsm2mFfeKj9DQNrRmyZB/PxWbcx2rZQKOcjvWuC0Q=)
                          8: 7843AE0229EA11F19F51207DA0833773.roa (hash: 6V2DjYIx8625kqe242doUOvVQbgf+Yq45HsMphmWFZY=)
                          9: 3218652829E811F18CA8F3909F833773.roa (hash: eU5ZrLctFwDk24jAlM3+JYuAwt/fHYDYFfG92ftHrG4=)
                          10: 11749BE62DA511F1AB5ACB70A2833773.roa (hash: XiFtfljCFKD2LKcSnLJ3irXOuLI/m6SajhgaUNMIkk4=)
                          11: E67F9A6229F311F1A8F3E0E1A2833773.roa (hash: 6iDEJfborO4k4SN1+csGnEFXKfEtb5shDdu17cANAfE=)
                          12: 5CFC71B62C1411F181024EDD95833773.roa (hash: YRECKHoraOf2bWRQJUd3/Y6Ug/L3op3a4wNvo/BFtlE=)
                          13: 50DA994A29D411F1916B319D97833773.roa (hash: zD0ufAiml2itPOf8FjLNOlzmYyQ99ftWQuzKy+90VzM=)
                          14: 87758D3C2DAF11F1B56D9FADA5833773.roa (hash: bB7QmV7mgJV6zy0vXkgVW0mvcXAYiTfS8G40XLA5T0I=)
                          15: 132BB03C29F411F1A9D9FDE9A2833773.roa (hash: zAHGRDXYndBzUXQxorw1NkRKqw4rmC3oXM3Dg7Io5P8=)
                          16: 31EC6B8229D211F1942EF99297833773.roa (hash: 6GOkqgK6766kXZRb2zev1EPOhPc93N6Z7iHPDo/M9B4=)
                          17: A194680629DA11F1A7234B1B9B833773.roa (hash: KIqqySfqw8zszLlnQiMzev+Qz4Y53rJrYR9gJPmiP3I=)
                          18: 484AAA6E29E711F18BEDC2D19E833773.roa (hash: kjxZZmUEVCRj7FRfyXjI30Z+Tgg0521nzEfajA5vqcI=)
                          19: 2D9AAA0629CF11F1ADED11F996833773.roa (hash: EYgOLSFFeoawzbZSo+omPv5lcZ4eiI6uUiQ5dR5O4Iw=)
                          20: 805DF10C29D011F19183AF4C97833773.roa (hash: MNeWms1frV+694tcT4cRmQYkSMhm22Q4MBfOcgbglm0=)
                          21: 769A6D0C29EA11F19F51207DA0833773.roa (hash: XcjhinNbZJy1c41oN0q9J25LNTzXS/kfkrE7fESwpr4=)
                          22: 9F6611D029D311F184F1669A97833773.roa (hash: 7XOGs2wyUjEZQbl9lb0Bk82uyJ3XVHINwK4ItrxDuVA=)
                          23: Y0V6QTtVdDGOosHHJcYzqULjMFE.asa (hash: KwmdGtFsNvsDgdJAv4m+MNCpjlOAuKHaYCdkkRjehDo=)
                          24: 5A0D98C829F211F18AB4C1A0A2833773.roa (hash: HFd9QgZh+NAMQFqbKs0U5sBBitb9/bP74JcV2UadE8k=)
                          25: 23C5258A29D711F19B6521AE99833773.roa (hash: v++NZpvnb9ylmNbF62ghM6TfResLJGpsjAupWiltIf8=)
                          26: 666C21CA29C011F1A3F09FCF91833773.roa (hash: y9ci58U6NkZ5pJ9FGfvPElnka2mlIBg9URm+CwL1+6M=)
                          27: 670FF7B429C011F1A3F09FCF91833773.roa (hash: OlVWz8nGryBxNYRtX9LuDsIW6s2g4bCFqY9G2NVU36E=)
                          28: 37885C3229D111F18571726A97833773.roa (hash: oFWQjdEfsXo2mf9hnvk1nF/iUbWRdh1WWZienEzp0Y0=)
                          29: A03EA96629DB11F1BFD4871E9B833773.roa (hash: CeVU5F+cE/p/gIJ6n4nuOgYXAjPlizKNWh6FzWAj2VQ=)
                          30: E07EDFEAA83511F197EEE3443611F970.roa (hash: PWekMcu4+B0Oj6I8LteCLe3snhBXN0BSRYbpQA+iqFY=)
                          31: 32A3B5E229E811F18CA8F3909F833773.roa (hash: bm+D908YeL/P1T00rFim9gtV6dNznmF0Z3qK05Yc0lM=)
                          32: 771BED3C29EA11F19F51207DA0833773.roa (hash: 09sH/2B4l1dbmZUamUfC+nphrsNDUifYrBA1FqJfBVM=)
                          33: 763CCE46479911F18B6CC3CFA0833773.roa (hash: erzss31JpeWgG+Gc0xJ5SMvdJuEjcJOATd56OecuB+o=)
                          34: CD8FC3C82D1E11F191B042ACB6833773.roa (hash: NxkdL/XW0F+7NXwYBc0Km2tJxuYr4RVoLbvkjNZsOc8=)
                          35: 040DC78829EB11F18E7F1692A0833773.roa (hash: y16n6WemYHe3eFI0s7YEgjUsT6r8DekbQjKdUrOjeu4=)
                          36: 9EDDEBC029D311F184F1669A97833773.roa (hash: wTPo2kv7xMowUUg+BeWVK7kCSv8ZL5DjmUbZP36DRQU=)
                          37: 77B9A22029EA11F19F51207DA0833773.roa (hash: Xbsb6WA8kMxnLMb0002lKsDzIsPgJEDCspvcDzL/trA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
                          rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 390 (0x186)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
        Validity
            Not Before: Sep 18 18:55:33 2026 GMT
            Not After : Sep 25 18:55:33 2026 GMT
        Subject: CN=6aad8925-7ae1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:22:2c:5f:46:73:fd:67:f4:68:60:f5:b3:be:
                    c3:08:d8:19:ea:4c:17:d6:6c:55:dc:41:78:46:de:
                    af:aa:fc:17:c7:8b:5b:89:23:55:1c:d1:a5:d3:df:
                    dd:41:b4:79:2a:37:4d:52:38:78:1f:ed:e2:c4:69:
                    2d:ca:e1:6e:8b:63:92:95:39:86:d7:db:4f:2f:c3:
                    ae:5e:6a:9f:02:39:ca:d6:c3:44:c5:c9:30:29:ee:
                    43:40:20:60:d5:1b:8e:3e:17:05:db:aa:6e:8d:f0:
                    ae:98:df:fa:ac:6a:db:0a:41:70:8c:7d:46:cb:9f:
                    a6:f9:ee:a7:0f:a1:1d:e5:82:5c:c0:bf:fe:ad:ea:
                    f6:78:e1:13:9f:ae:7b:15:fa:39:ee:6c:f0:1f:4f:
                    26:41:81:a8:4d:0c:6e:99:11:12:9c:46:93:3c:d6:
                    c6:c7:68:5d:4c:ca:44:87:38:38:23:e0:44:87:2e:
                    e8:1b:e7:21:42:06:47:9e:b6:f3:77:db:a9:da:55:
                    58:9b:a9:ba:39:39:44:40:d0:51:8b:78:8f:13:f4:
                    b4:a5:4f:e3:28:e6:d1:1a:ba:16:d9:bd:b0:4f:8d:
                    85:f9:4a:43:7d:c2:29:07:65:39:92:a0:11:45:89:
                    5a:88:76:0c:8c:b1:04:78:9d:52:88:60:e6:29:4a:
                    4d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:18:03:EC:5B:0E:21:C5:F1:E5:90:92:9A:A4:F3:90:0A:C3:48:2F
            X509v3 Authority Key Identifier:
                keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:e6:bd:b8:83:03:49:ae:07:e4:f4:da:5a:d2:1f:9f:86:6c:
         0c:81:37:d7:f7:3c:6b:94:20:ec:e9:5f:71:f6:ce:b7:61:9a:
         f5:72:26:e3:f3:a2:70:ae:f3:26:6d:d5:bc:78:97:cc:b9:db:
         39:2e:9e:5c:e2:b0:a4:37:ec:66:7d:04:59:c0:9e:97:28:78:
         de:03:ef:10:c2:a2:98:d1:41:c8:f6:31:6e:2d:96:3d:ec:d1:
         83:31:96:38:b6:53:e0:91:d0:40:f7:d1:c1:4c:14:f0:27:d8:
         e3:e6:48:13:3c:a0:a9:5d:79:49:03:e7:a9:cf:4a:58:83:84:
         3f:da:ed:d2:b5:e9:b7:01:10:07:01:3b:c3:5c:29:c3:63:0d:
         25:33:c6:f1:6e:0c:4b:8b:39:77:47:43:a7:43:33:89:d4:16:
         f6:51:46:24:b2:35:58:f2:a0:3b:d4:73:31:21:0c:bf:c2:8e:
         40:62:b8:11:6b:08:b8:ea:33:3d:7d:e2:cf:db:74:7f:ae:88:
         b1:41:ce:71:34:c0:bd:7b:fe:92:85:79:61:a2:91:f5:15:19:
         21:bf:e5:c6:f9:49:76:96:7a:ff:f7:06:b1:d6:c4:b4:0e:5d:
         e3:ee:c8:ab:7a:a2:27:b8:b6:c7:72:94:2d:da:f7:0c:11:c8:
         7d:28:1c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:37:57 2026 by rpki-client