Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.mft
File:                     xEWgBPxE11F5WpGduE8UoWBFOJE.mft (raw, json)
Hash identifier:          70eibaEqx6MX7fGtWzZvcircPgFtmiEefOf7K+D9MNU=
Subject key identifier:   74:B9:9E:E2:38:B9:0B:6B:86:A4:84:65:7E:3E:9A:66:E3:0A:7E:F3
Authority key identifier: C4:45:A0:04:FC:44:D7:51:79:5A:91:9D:B8:4F:14:A1:60:45:38:91
Certificate issuer:       /CN=A91A7F3D/serialNumber=C445A004FC44D751795A919DB84F14A160453891
Certificate serial:       9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEWgBPxE11F5WpGduE8UoWBFOJE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.mft
Manifest number:          9F
Signing time:             Mon 21 Sep 2026 07:19:10 +0000
Manifest this update:     Mon 21 Sep 2026 07:19:09 +0000
Manifest next update:     Mon 28 Sep 2026 07:19:09 +0000
Files and hashes:         1: xEWgBPxE11F5WpGduE8UoWBFOJE.crl (hash: euXB7h++6MGv8sJXvR9MvSty5ubgxQjKP8LGZUN3QdI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.crl
                          rsync://rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEWgBPxE11F5WpGduE8UoWBFOJE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:19:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 159 (0x9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7F3D, serialNumber=C445A004FC44D751795A919DB84F14A160453891
        Validity
            Not Before: Sep 21 07:19:09 2026 GMT
            Not After : Sep 28 07:19:09 2026 GMT
        Subject: CN=6ab0da6e-85bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e7:5d:e2:fb:24:a6:11:53:1a:ff:a2:53:14:
                    cb:a8:23:65:07:9c:3c:52:ad:30:a9:4a:6e:52:77:
                    a5:17:ef:a8:f8:db:56:c8:95:7b:dd:c6:bc:ee:36:
                    57:19:80:a3:42:1d:ed:ac:96:ac:3a:9c:96:ec:44:
                    4c:5c:b4:67:97:6e:a6:cb:e7:39:ea:60:6f:05:97:
                    1d:db:58:55:24:dc:75:4d:13:67:fb:62:e0:1d:fd:
                    ed:2a:a9:f4:4a:93:77:05:0b:cf:65:ce:84:a3:de:
                    ac:d4:db:28:a7:20:e5:e1:22:cc:ae:88:9c:4f:5e:
                    18:86:5e:f4:5e:e4:a1:c0:5d:13:ad:f7:d0:43:2c:
                    3a:31:54:0b:db:f3:94:e1:e1:03:78:13:fd:6c:59:
                    1f:0a:58:ca:f1:98:59:72:53:fa:15:38:58:26:73:
                    dc:05:3d:5f:2d:ce:88:50:a8:61:e5:50:c2:14:5b:
                    55:c2:62:54:b1:64:a6:6c:6b:1f:92:17:e4:05:d6:
                    39:38:bb:50:84:0a:58:e8:90:87:cd:e4:fd:75:11:
                    58:77:68:e3:1a:36:f4:56:90:0a:3d:a0:cb:ca:92:
                    9d:16:0f:ba:ba:22:93:42:0d:5c:5a:79:db:69:67:
                    a2:3f:b4:56:fb:ef:af:3b:1c:73:87:44:4b:93:ad:
                    25:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B9:9E:E2:38:B9:0B:6B:86:A4:84:65:7E:3E:9A:66:E3:0A:7E:F3
            X509v3 Authority Key Identifier:
                keyid:C4:45:A0:04:FC:44:D7:51:79:5A:91:9D:B8:4F:14:A1:60:45:38:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEWgBPxE11F5WpGduE8UoWBFOJE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:e4:b3:7c:64:9f:a5:87:69:a9:ed:58:91:48:df:9a:30:42:
         7b:1a:83:6e:99:4b:dc:8e:9b:53:b7:f9:3f:74:74:aa:0d:b9:
         c9:63:03:aa:af:51:62:a4:a9:07:a2:23:d0:d4:51:7b:1f:ed:
         bd:2c:e2:44:52:bf:7c:92:f5:b4:ec:0c:23:eb:0a:3a:20:46:
         77:51:62:7f:26:17:cf:94:0a:4c:50:8c:72:77:37:ed:9c:6c:
         0c:27:bb:44:3b:8c:70:c6:31:90:09:00:ff:de:35:1c:a1:ee:
         06:66:80:5b:43:a4:39:59:af:67:62:fc:22:45:25:62:a1:50:
         54:38:37:fc:93:c6:bb:a2:5c:59:30:8c:88:5a:1c:2f:5d:84:
         16:a8:be:5d:e1:17:51:eb:0c:7d:e0:a3:82:6e:06:94:15:6e:
         83:8d:f4:e1:ef:e2:89:b5:ec:e1:56:9a:2f:11:4a:b1:60:eb:
         3e:95:f0:35:0b:14:db:08:4f:fd:fc:1e:c3:49:ca:f8:7b:f7:
         2e:18:8a:1f:22:41:ae:5c:dd:81:99:a1:79:24:67:bd:57:f0:
         64:70:72:c6:dc:f0:16:5c:00:88:eb:7a:d7:26:67:4d:47:29:
         e0:92:81:02:66:8f:13:08:51:3d:f9:a8:22:34:cb:f4:18:3e:
         64:2d:dd:67
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTdGM0QxMTAvBgNVBAUTKEM0NDVBMDA0RkM0NEQ3NTE3OTVBOTE5REI4NEYxNEEx
NjA0NTM4OTEwHhcNMjYwOTIxMDcxOTA5WhcNMjYwOTI4MDcxOTA5WjAYMRYwFAYD
VQQDEw02YWIwZGE2ZS04NWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnedd4vskphFTGv+iUxTLqCNlB5w8Uq0wqUpuUnelF++o+NtWyJV73ca87jZX
GYCjQh3trJasOpyW7ERMXLRnl26my+c56mBvBZcd21hVJNx1TRNn+2LgHf3tKqn0
SpN3BQvPZc6Eo96s1NsopyDl4SLMroicT14Yhl70XuShwF0TrffQQyw6MVQL2/OU
4eEDeBP9bFkfCljK8ZhZclP6FThYJnPcBT1fLc6IUKhh5VDCFFtVwmJUsWSmbGsf
khfkBdY5OLtQhApY6JCHzeT9dRFYd2jjGjb0VpAKPaDLypKdFg+6uiKTQg1cWnnb
aWeiP7RW+++vOxxzh0RLk60ldQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHS5nuI4
uQtrhqSEZX4+mmbjCn7zMB8GA1UdIwQYMBaAFMRFoAT8RNdReVqRnbhPFKFgRTiR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0YzRC84OEVEMjA0RUM2
QTMxMUYwQjY5QUM5NTVDNEY5QUUwMi94RVdnQlB4RTExRjVXcEdkdUU4VW9XQkZP
SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hFV2dCUHhFMTFGNVdwR2R1RThVb1dCRk9KRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
N0YzRC84OEVEMjA0RUM2QTMxMUYwQjY5QUM5NTVDNEY5QUUwMi94RVdnQlB4RTEx
RjVXcEdkdUU4VW9XQkZPSkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQuSzfGSfpYdpqe1YkUjfmjBCexqDbplL3I6bU7f5P3R0qg25yWMDqq9RYqSp
B6Ij0NRRex/tvSziRFK/fJL1tOwMI+sKOiBGd1FifyYXz5QKTFCMcnc37ZxsDCe7
RDuMcMYxkAkA/941HKHuBmaAW0OkOVmvZ2L8IkUlYqFQVDg3/JPGu6JcWTCMiFoc
L12EFqi+XeEXUesMfeCjgm4GlBVug4304e/iibXs4VaaLxFKsWDrPpXwNQsU2whP
/fwew0nK+Hv3LhiKHyJBrlzdgZmheSRnvVfwZHByxtzwFlwAiOt61yZnTUcp4JKB
AmaPEwhRPfmoIjTL9Bg+ZC3dZw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 22:17:23 2026 by rpki-client