Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft
File:                     CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft (raw, json)
Hash identifier:          4FufjzpNVhlRQjEqeXxnO7ffUfWEY7Nn2R/+E0i25Jk=
Subject key identifier:   08:20:07:67:FF:4E:B4:66:5E:14:DB:20:08:E6:0F:0D:64:7E:C6:DE
Authority key identifier: 0B:10:E5:EF:EF:30:F8:CE:04:ED:4C:5B:8F:48:A9:CD:24:BC:BA:14
Certificate issuer:       /CN=A91886CC/serialNumber=0B10E5EFEF30F8CE04ED4C5B8F48A9CD24BCBA14
Certificate serial:       01F4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft
Manifest number:          01EC
Signing time:             Wed 23 Sep 2026 01:45:44 +0000
Manifest this update:     Wed 23 Sep 2026 01:45:44 +0000
Manifest next update:     Wed 30 Sep 2026 01:45:44 +0000
Files and hashes:         1: CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl (hash: TCVH5MVpK4RiKkehiyqgfnufoV0kmaeFgPldtYvHvH8=)
                          2: 6DAC44BAA91E11F0B822717EC4F9AE02.roa (hash: U/DEuDwRwhqtKgxxnucO+fNicfaNI7xpxs1zj8ALIgg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl
                          rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 01:45:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 500 (0x1f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91886CC, serialNumber=0B10E5EFEF30F8CE04ED4C5B8F48A9CD24BCBA14
        Validity
            Not Before: Sep 23 01:45:44 2026 GMT
            Not After : Sep 30 01:45:44 2026 GMT
        Subject: CN=6ab32f48-5d75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:50:ed:29:78:2e:5c:21:1d:fd:dc:1e:69:65:
                    89:3d:5d:67:20:9a:98:20:c9:8a:0f:0b:f1:34:fc:
                    c3:fb:ea:de:4b:00:f8:3b:20:d9:ab:e6:15:5a:95:
                    cc:99:22:13:55:cb:bb:59:59:55:a2:fc:b5:33:75:
                    1b:ee:c1:68:a9:c9:8e:3a:17:22:5e:c9:09:79:f7:
                    80:8b:b6:15:42:b6:10:f8:93:ab:48:3c:6d:a7:b3:
                    ab:39:ab:fd:31:18:57:be:e5:9f:15:52:6b:b7:4c:
                    90:0c:71:91:2f:6e:24:95:f7:28:e5:41:1e:4e:18:
                    d1:8b:5c:c7:63:92:0f:bc:10:a7:ef:79:f3:9a:de:
                    33:d6:a7:8a:99:17:79:37:59:bf:d0:b1:89:e2:fc:
                    87:30:8c:ac:c9:5b:c9:bf:fd:0a:52:de:3f:93:da:
                    25:70:b7:37:f6:6b:c1:ce:07:e2:f0:a5:0f:b3:fb:
                    df:b8:13:ac:0e:80:34:0f:ed:bb:75:6b:1c:21:71:
                    e8:49:bf:3d:9c:cf:1a:dc:e9:95:c1:5f:3e:21:b0:
                    66:a0:ff:9d:57:2d:66:b6:62:46:56:ab:da:47:7f:
                    f0:16:8e:6d:e1:06:3f:f0:7b:8b:99:fa:d0:98:ab:
                    25:92:83:7c:2c:93:fb:25:79:65:39:1b:7c:1b:d6:
                    ef:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:20:07:67:FF:4E:B4:66:5E:14:DB:20:08:E6:0F:0D:64:7E:C6:DE
            X509v3 Authority Key Identifier:
                keyid:0B:10:E5:EF:EF:30:F8:CE:04:ED:4C:5B:8F:48:A9:CD:24:BC:BA:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:94:76:72:fb:d5:e8:66:0b:9e:d8:77:f8:d6:a3:f2:ae:7b:
         47:96:61:61:0c:81:28:4a:56:36:60:01:e9:e9:eb:89:8e:16:
         cb:97:e2:d4:5c:c5:92:61:98:9f:55:25:5a:f4:4d:6d:3b:9f:
         a3:d6:65:41:53:2a:f1:91:8c:cb:aa:d8:34:9b:e1:40:3d:dc:
         cc:7c:39:a6:32:b6:c9:98:37:b0:7a:0b:50:84:c1:23:76:70:
         f9:b9:79:4c:2d:2c:a5:cd:f5:fb:96:84:20:4f:58:4f:c2:94:
         ec:6b:8b:aa:20:5e:a7:42:f9:e3:c0:c3:a6:d4:ae:bf:93:7c:
         38:92:80:4a:58:cc:68:2d:53:d9:16:2a:af:b4:21:ca:8e:6f:
         04:b8:94:0d:a1:ae:d4:6a:7d:41:fa:29:6a:3f:54:ba:12:48:
         67:37:d2:98:fa:40:46:09:df:d9:2a:52:0b:21:da:73:97:54:
         82:a5:bc:ff:de:6a:c2:ce:72:01:29:42:41:8b:9b:b4:54:c0:
         f9:a9:33:75:b9:c1:d8:33:97:ed:3c:7d:48:76:83:04:7b:69:
         ae:4a:81:13:0a:08:e6:86:26:3b:f7:4b:ff:83:65:42:51:c5:
         c6:f2:1a:09:fa:ea:65:01:2f:ea:41:48:9a:ce:67:f9:79:56:
         2a:f5:43:ed
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODg2Q0MxMTAvBgNVBAUTKDBCMTBFNUVGRUYzMEY4Q0UwNEVENEM1QjhGNDhBOUNE
MjRCQ0JBMTQwHhcNMjYwOTIzMDE0NTQ0WhcNMjYwOTMwMDE0NTQ0WjAYMRYwFAYD
VQQDEw02YWIzMmY0OC01ZDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoFDtKXguXCEd/dweaWWJPV1nIJqYIMmKDwvxNPzD++reSwD4OyDZq+YVWpXM
mSITVcu7WVlVovy1M3Ub7sFoqcmOOhciXskJefeAi7YVQrYQ+JOrSDxtp7OrOav9
MRhXvuWfFVJrt0yQDHGRL24klfco5UEeThjRi1zHY5IPvBCn73nzmt4z1qeKmRd5
N1m/0LGJ4vyHMIysyVvJv/0KUt4/k9olcLc39mvBzgfi8KUPs/vfuBOsDoA0D+27
dWscIXHoSb89nM8a3OmVwV8+IbBmoP+dVy1mtmJGVqvaR3/wFo5t4QY/8HuLmfrQ
mKslkoN8LJP7JXllORt8G9bv3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAggB2f/
TrRmXhTbIAjmDw1kfsbeMB8GA1UdIwQYMBaAFAsQ5e/vMPjOBO1MW49Iqc0kvLoU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODZDQy81MTIxNDE1RUQ1
RjUxMUVFQjBGQTYwNUJDNEY5QUUwMi9DeERsNy04dy1NNEU3VXhiajBpcHpTUzh1
aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0N4RGw3LTh3LU00RTdVeGJqMGlwelNTOHVoUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
ODZDQy81MTIxNDE1RUQ1RjUxMUVFQjBGQTYwNUJDNEY5QUUwMi9DeERsNy04dy1N
NEU3VXhiajBpcHpTUzh1aFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAapR2cvvV6GYLnth3+Naj8q57R5ZhYQyBKEpWNmAB6enriY4Wy5fi1FzFkmGY
n1UlWvRNbTufo9ZlQVMq8ZGMy6rYNJvhQD3czHw5pjK2yZg3sHoLUITBI3Zw+bl5
TC0spc31+5aEIE9YT8KU7GuLqiBep0L548DDptSuv5N8OJKASljMaC1T2RYqr7Qh
yo5vBLiUDaGu1Gp9Qfopaj9UuhJIZzfSmPpARgnf2SpSCyHac5dUgqW8/95qws5y
ASlCQYubtFTA+akzdbnB2DOX7Tx9SHaDBHtprkqBEwoI5oYmO/dL/4NlQlHFxvIa
CfrqZQEv6kFIms5n+XlWKvVD7Q==
-----END CERTIFICATE-----
Generated at Thu Sep 24 04:03:49 2026 by rpki-client