Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft
File:                     X8Poba5DUxWI6wFdUB4xcSBfCFE.mft (raw, json)
Hash identifier:          Lu7ZB3Zbdbf5j47Ot/x4G2Omivm5p9VgjrXqOpeQrgo=
Subject key identifier:   A3:F3:DA:CC:B7:66:A2:36:0D:B6:AF:12:1D:18:E4:A3:21:76:03:8C
Authority key identifier: 5F:C3:E8:6D:AE:43:53:15:88:EB:01:5D:50:1E:31:71:20:5F:08:51
Certificate issuer:       /CN=A9190491/serialNumber=5FC3E86DAE43531588EB015D501E3171205F0851
Certificate serial:       0829
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Poba5DUxWI6wFdUB4xcSBfCFE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft
Manifest number:          0818
Signing time:             Sun 20 Sep 2026 21:05:35 +0000
Manifest this update:     Sun 20 Sep 2026 21:05:34 +0000
Manifest next update:     Sun 27 Sep 2026 21:05:34 +0000
Files and hashes:         1: X8Poba5DUxWI6wFdUB4xcSBfCFE.crl (hash: 78yUZpNQh/APbn2/O9b/Jgo9bUUzaRSkttzoM5FdqjA=)
                          2: 59C3EE36683611EBAF38B01FC4F9AE02.roa (hash: FiJS4cFwnxf/JxN138pQZVaNHd2K178xuIIaltslIoU=)
                          3: FA93793637C011EB97405947C4F9AE02.roa (hash: ldXQuS9J+x+tniCGZo6XJVyJ4zu+DPyHUrx89zjZ/Vc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.crl
                          rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Poba5DUxWI6wFdUB4xcSBfCFE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 21:05:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2089 (0x829)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190491, serialNumber=5FC3E86DAE43531588EB015D501E3171205F0851
        Validity
            Not Before: Sep 20 21:05:34 2026 GMT
            Not After : Sep 27 21:05:34 2026 GMT
        Subject: CN=6ab04a9f-284e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8b:63:17:90:9b:c8:d8:94:9d:94:12:29:2f:
                    28:65:ed:4e:2d:0e:bb:d2:70:6e:da:17:b9:8b:60:
                    ca:66:73:db:89:df:87:6e:cb:e8:c4:ba:c7:ee:a3:
                    4e:61:c2:fd:aa:1f:18:68:3c:99:65:42:a3:e4:fe:
                    ec:38:b4:1a:76:bf:f5:db:4b:ac:2e:7d:6f:92:a1:
                    29:88:79:11:14:ea:f2:be:af:0e:e5:e0:3d:f1:48:
                    6b:9b:4d:ba:0b:2e:39:23:ab:bc:8e:45:c9:ba:67:
                    65:7e:d2:81:e7:d6:0a:83:9d:e9:41:10:88:67:3f:
                    7a:59:8a:55:07:b9:42:c5:32:bd:34:8f:3d:33:a0:
                    5d:bc:d0:ba:09:61:ae:d6:3b:b8:e6:02:e8:60:37:
                    4f:d7:73:31:ce:a6:6a:ab:0a:f9:d4:3a:86:d2:19:
                    9d:f4:b4:b8:32:a4:b7:50:89:ad:cb:11:f3:5f:e7:
                    f1:0a:4e:e2:5a:a2:ca:08:bd:78:46:4d:2f:50:74:
                    f1:10:56:2a:82:54:3a:13:06:ed:07:5f:e6:53:80:
                    11:6e:e0:73:bc:d4:a7:74:37:1a:61:86:e5:6f:4e:
                    5c:95:b2:85:f4:27:33:f7:93:37:7e:e6:ea:df:c1:
                    a9:f1:04:66:ec:4e:18:19:6b:f1:ff:7c:0a:e5:76:
                    f5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:F3:DA:CC:B7:66:A2:36:0D:B6:AF:12:1D:18:E4:A3:21:76:03:8C
            X509v3 Authority Key Identifier:
                keyid:5F:C3:E8:6D:AE:43:53:15:88:EB:01:5D:50:1E:31:71:20:5F:08:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Poba5DUxWI6wFdUB4xcSBfCFE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:55:08:27:86:81:81:f5:60:80:ed:c7:66:98:a8:06:b4:f0:
         a7:4a:31:29:63:b1:d4:a2:b9:23:48:a3:51:a0:17:b9:3f:ae:
         f5:ff:00:c9:6f:e9:f9:d0:51:6d:40:b0:9d:5b:4d:91:51:16:
         dc:3a:ff:7b:f6:db:82:3a:81:50:7c:fb:65:65:e5:df:47:83:
         9e:6c:40:9d:e7:eb:40:41:52:f7:e1:fd:f9:b7:01:8e:f7:78:
         c0:8e:20:cc:5e:b9:ab:2a:ac:63:42:57:6d:8c:47:df:3d:4f:
         30:da:0a:00:57:be:6f:75:2d:e5:45:ab:ea:ad:e2:50:77:d9:
         d3:f7:08:97:0b:29:dd:22:01:59:92:93:b6:41:77:63:04:ef:
         83:15:d3:af:18:02:75:ba:0c:81:b6:00:29:13:e6:8a:c6:e1:
         4a:fb:6e:49:8c:f6:f3:d8:fb:b1:89:f5:28:ea:75:fd:15:55:
         83:e9:ef:fc:cd:37:48:cc:0b:bb:41:14:03:f1:be:2d:b2:42:
         21:17:97:f7:64:99:b4:47:26:9e:4d:f3:cc:5c:9d:07:67:99:
         e9:e9:9f:e2:3e:01:6b:73:85:e8:05:a0:02:2f:e1:c3:67:80:
         5e:18:e9:2e:87:d0:6a:c5:7a:bd:e3:b0:61:ef:59:38:56:b7:
         39:97:c5:fb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTA0OTExMTAvBgNVBAUTKDVGQzNFODZEQUU0MzUzMTU4OEVCMDE1RDUwMUUzMTcx
MjA1RjA4NTEwHhcNMjYwOTIwMjEwNTM0WhcNMjYwOTI3MjEwNTM0WjAYMRYwFAYD
VQQDEw02YWIwNGE5Zi0yODRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2ItjF5CbyNiUnZQSKS8oZe1OLQ670nBu2he5i2DKZnPbid+HbsvoxLrH7qNO
YcL9qh8YaDyZZUKj5P7sOLQadr/120usLn1vkqEpiHkRFOryvq8O5eA98Uhrm026
Cy45I6u8jkXJumdlftKB59YKg53pQRCIZz96WYpVB7lCxTK9NI89M6BdvNC6CWGu
1ju45gLoYDdP13MxzqZqqwr51DqG0hmd9LS4MqS3UImtyxHzX+fxCk7iWqLKCL14
Rk0vUHTxEFYqglQ6EwbtB1/mU4ARbuBzvNSndDcaYYblb05clbKF9Ccz95M3fubq
38Gp8QRm7E4YGWvx/3wK5Xb1XwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKPz2sy3
ZqI2DbavEh0Y5KMhdgOMMB8GA1UdIwQYMBaAFF/D6G2uQ1MViOsBXVAeMXEgXwhR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDQ5MS85MjlCREJDMjM3
QkUxMUVCODNBRTE4NDRDNEY5QUUwMi9YOFBvYmE1RFV4V0k2d0ZkVUI0eGNTQmZD
RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1g4UG9iYTVEVXhXSTZ3RmRVQjR4Y1NCZkNGRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MDQ5MS85MjlCREJDMjM3QkUxMUVCODNBRTE4NDRDNEY5QUUwMi9YOFBvYmE1RFV4
V0k2d0ZkVUI0eGNTQmZDRkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoFUIJ4aBgfVggO3HZpioBrTwp0oxKWOx1KK5I0ijUaAXuT+u9f8AyW/p+dBR
bUCwnVtNkVEW3Dr/e/bbgjqBUHz7ZWXl30eDnmxAnefrQEFS9+H9+bcBjvd4wI4g
zF65qyqsY0JXbYxH3z1PMNoKAFe+b3Ut5UWr6q3iUHfZ0/cIlwsp3SIBWZKTtkF3
YwTvgxXTrxgCdboMgbYAKRPmisbhSvtuSYz289j7sYn1KOp1/RVVg+nv/M03SMwL
u0EUA/G+LbJCIReX92SZtEcmnk3zzFydB2eZ6emf4j4Ba3OF6AWgAi/hw2eAXhjp
LofQasV6veOwYe9ZOFa3OZfF+w==
-----END CERTIFICATE-----
Generated at Tue Sep 22 05:41:56 2026 by rpki-client