Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft
File:                     Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft (raw, json)
Hash identifier:          tJW0zGJgPwqmi/U37c/ZdPX7KRndSlq6eyv4MhxDgsI=
Subject key identifier:   F3:AF:A2:E3:D4:0B:E9:5C:07:27:7C:8E:F8:69:A4:A9:B7:2E:A7:13
Authority key identifier: 5E:FD:E9:8C:4F:BF:8D:11:87:B6:85:8E:BC:81:F0:62:5B:29:31:60
Certificate issuer:       /CN=A9199CFF/serialNumber=5EFDE98C4FBF8D1187B6858EBC81F0625B293160
Certificate serial:       014C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft
Manifest number:          0147
Signing time:             Fri 09 Oct 2026 06:05:08 +0000
Manifest this update:     Fri 09 Oct 2026 06:05:07 +0000
Manifest next update:     Fri 16 Oct 2026 06:05:07 +0000
Files and hashes:         1: Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl (hash: g5DhFxsaRldLlg8JW05QyAMJfQ78WE6ykbXNHXwl9Ks=)
                          2: 8A941156D7E211EFBF26DA72C4F9AE02.roa (hash: UZCERNruPtgrrK+OYbHFA8i9cAcCHqIOlldjCtyuoQo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl
                          rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 06:05:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 332 (0x14c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199CFF, serialNumber=5EFDE98C4FBF8D1187B6858EBC81F0625B293160
        Validity
            Not Before: Oct  9 06:05:07 2026 GMT
            Not After : Oct 16 06:05:07 2026 GMT
        Subject: CN=6ac88414-b4cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:80:22:fc:1a:db:a5:9b:f8:40:12:28:d5:2e:
                    a7:8c:be:78:a3:9b:bb:86:b7:05:29:a5:c2:51:bf:
                    8d:16:13:b2:66:d1:b7:85:7e:e5:55:59:cc:17:01:
                    97:5f:64:5f:e4:cc:8f:5b:81:cc:74:71:41:81:35:
                    91:ac:47:6d:ed:d4:93:ae:52:b0:43:09:9d:5e:df:
                    f3:b4:0e:c4:d1:e6:70:a3:89:ad:10:f2:1c:d5:92:
                    44:ee:55:f2:dc:5c:1a:6b:cf:84:75:ba:e0:56:7c:
                    56:b6:23:60:0b:12:b5:62:7d:37:11:8e:4e:e4:18:
                    b7:83:da:27:8d:dc:08:3a:d2:b0:57:30:ac:08:f1:
                    ab:a7:8a:b2:af:ff:3e:f4:b7:1d:25:5e:d2:1d:ff:
                    48:4d:64:dd:cf:51:8c:7f:e9:a7:96:a0:45:aa:02:
                    b7:36:26:eb:a6:05:71:06:70:63:a6:29:3a:79:7c:
                    86:d3:fe:46:04:4b:6f:6b:ee:0b:80:5d:d5:ee:bd:
                    5d:28:c6:d9:0c:24:20:96:2a:ec:1f:05:48:7c:1b:
                    e2:02:65:1d:48:a5:04:7e:25:9b:9f:a1:b3:d0:75:
                    a1:dc:cd:7a:f1:f0:c6:28:f4:a1:5b:85:7f:5c:35:
                    bf:7a:df:65:75:5e:87:c4:c9:23:2f:aa:1c:68:e2:
                    e8:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:AF:A2:E3:D4:0B:E9:5C:07:27:7C:8E:F8:69:A4:A9:B7:2E:A7:13
            X509v3 Authority Key Identifier:
                keyid:5E:FD:E9:8C:4F:BF:8D:11:87:B6:85:8E:BC:81:F0:62:5B:29:31:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:04:f9:41:a6:07:b6:b4:d4:08:5a:23:b1:1d:9c:9a:5b:9b:
         95:53:93:f7:24:a3:16:7f:4b:15:e4:07:91:77:81:ec:fb:3e:
         3a:fd:5f:ec:cc:de:f6:7a:f2:b0:8a:c8:0f:73:c5:22:6e:cb:
         78:5d:7f:e7:80:e2:0c:46:f8:6a:f3:8f:fc:bf:56:c1:2c:a9:
         95:d6:8d:df:48:45:05:4b:b6:84:f1:8f:a6:16:b3:06:bb:a1:
         c1:d6:af:13:1b:06:b6:09:ce:74:80:3c:74:22:58:14:65:f7:
         53:a9:1c:9c:fb:05:71:81:d6:bc:74:7c:e5:4a:bb:a1:a3:b3:
         9e:60:be:bc:17:10:97:1f:a7:03:a8:1e:31:07:66:50:b2:d7:
         b4:16:65:18:c0:03:53:54:a7:12:e2:94:2a:9b:fb:58:9a:8b:
         2b:81:a6:86:d1:5d:1f:6c:42:35:45:45:9d:80:c6:ed:f5:15:
         c3:df:f0:17:4f:5f:65:44:de:1f:85:81:7e:de:c4:bf:eb:00:
         9c:b0:4d:2a:89:6e:33:84:0c:0f:0e:22:29:2a:77:5d:c8:f2:
         6c:a1:17:db:dc:b9:9d:f2:e6:c6:9d:18:55:fb:9b:73:00:5b:
         46:ba:d3:0d:36:5b:8d:9b:5f:b7:16:fb:7a:c1:fb:5b:7d:ed:
         bd:8c:e9:8b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTlDRkYxMTAvBgNVBAUTKDVFRkRFOThDNEZCRjhEMTE4N0I2ODU4RUJDODFGMDYy
NUIyOTMxNjAwHhcNMjYxMDA5MDYwNTA3WhcNMjYxMDE2MDYwNTA3WjAYMRYwFAYD
VQQDEw02YWM4ODQxNC1iNGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtYAi/BrbpZv4QBIo1S6njL54o5u7hrcFKaXCUb+NFhOyZtG3hX7lVVnMFwGX
X2Rf5MyPW4HMdHFBgTWRrEdt7dSTrlKwQwmdXt/ztA7E0eZwo4mtEPIc1ZJE7lXy
3Fwaa8+EdbrgVnxWtiNgCxK1Yn03EY5O5Bi3g9onjdwIOtKwVzCsCPGrp4qyr/8+
9LcdJV7SHf9ITWTdz1GMf+mnlqBFqgK3NibrpgVxBnBjpik6eXyG0/5GBEtva+4L
gF3V7r1dKMbZDCQglirsHwVIfBviAmUdSKUEfiWbn6Gz0HWh3M168fDGKPShW4V/
XDW/et9ldV6HxMkjL6ocaOLoUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPOvouPU
C+lcByd8jvhppKm3LqcTMB8GA1UdIwQYMBaAFF796YxPv40Rh7aFjryB8GJbKTFg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUNGRi8yMEJFMUEzMEQ3
RTAxMUVGOEIxNzNEMkZDNEY5QUUwMi9YdjNwakUtX2pSR0h0b1dPdklId1lsc3BN
V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1h2M3BqRS1falJHSHRvV092SUh3WWxzcE1XQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OUNGRi8yMEJFMUEzMEQ3RTAxMUVGOEIxNzNEMkZDNEY5QUUwMi9YdjNwakUtX2pS
R0h0b1dPdklId1lsc3BNV0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYgT5QaYHtrTUCFojsR2cmlublVOT9ySjFn9LFeQHkXeB7Ps+Ov1f7Mze9nry
sIrID3PFIm7LeF1/54DiDEb4avOP/L9WwSypldaN30hFBUu2hPGPphazBruhwdav
ExsGtgnOdIA8dCJYFGX3U6kcnPsFcYHWvHR85Uq7oaOznmC+vBcQlx+nA6geMQdm
ULLXtBZlGMADU1SnEuKUKpv7WJqLK4GmhtFdH2xCNUVFnYDG7fUVw9/wF09fZUTe
H4WBft7Ev+sAnLBNKoluM4QMDw4iKSp3XcjybKEX29y5nfLmxp0YVfubcwBbRrrT
DTZbjZtftxb7esH7W33tvYzpiw==
-----END CERTIFICATE-----
Generated at Sat Oct 10 15:49:10 2026 by rpki-client