Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft
File:                     cxfXd72qYzPNlqgQS5TeD6R1IRM.mft (raw, json)
Hash identifier:          eYFGMx/FSLT+YnM/zs+2oZQsycrua5Yr/4cF3jFC32I=
Subject key identifier:   F9:A6:2A:7F:48:39:8D:39:11:C5:39:0B:61:5A:30:A7:8A:C0:74:5E
Authority key identifier: 73:17:D7:77:BD:AA:63:33:CD:96:A8:10:4B:94:DE:0F:A4:75:21:13
Certificate issuer:       /CN=A91BA941/serialNumber=7317D777BDAA6333CD96A8104B94DE0FA4752113
Certificate serial:       016C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxfXd72qYzPNlqgQS5TeD6R1IRM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft
Manifest number:          0162
Signing time:             Wed 23 Sep 2026 04:51:49 +0000
Manifest this update:     Wed 23 Sep 2026 04:51:48 +0000
Manifest next update:     Wed 30 Sep 2026 04:51:48 +0000
Files and hashes:         1: cxfXd72qYzPNlqgQS5TeD6R1IRM.crl (hash: pc8y3GI5Wdh34E0dB3n0cnLXtDLRvUGC53Q7o6hx+ss=)
                          2: 48A5FCA4A0A211EF81FA6876C4F9AE02.roa (hash: eZlsZmk8/ekeyqy6I3i3ZeeEd5v4ZHZyH6nwRwpqrDc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.crl
                          rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxfXd72qYzPNlqgQS5TeD6R1IRM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 04:51:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 364 (0x16c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA941, serialNumber=7317D777BDAA6333CD96A8104B94DE0FA4752113
        Validity
            Not Before: Sep 23 04:51:48 2026 GMT
            Not After : Sep 30 04:51:48 2026 GMT
        Subject: CN=6ab35ae5-0d3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f4:bf:0d:4e:b4:db:34:5a:04:9b:ac:ef:f9:
                    f4:31:30:54:30:43:85:26:37:c6:15:86:e2:ca:02:
                    c9:46:ac:36:5b:c1:b1:07:94:6b:df:2c:47:de:64:
                    e2:9a:7d:c1:be:84:56:da:4e:a4:b8:73:f2:c1:00:
                    bd:01:6e:94:97:b1:d2:09:cc:67:f0:c5:d7:a8:53:
                    dd:de:f2:ce:3f:89:0f:74:90:71:59:1b:d8:53:ee:
                    6d:f3:68:df:a0:86:af:d2:8b:1b:11:d1:54:5a:de:
                    87:e3:7a:be:ab:8b:83:e9:de:16:4e:73:18:1b:b0:
                    72:e0:a5:bf:71:f7:70:17:d5:44:e1:13:f5:03:bd:
                    16:ce:4b:f7:b3:56:e6:4f:74:e0:fa:49:9b:37:93:
                    da:98:3e:4a:39:2e:c0:e2:8e:0b:61:35:a1:1b:4a:
                    cc:47:bf:bf:a5:c5:ed:d5:e1:46:66:fd:b1:c7:a9:
                    46:1a:22:5c:23:50:d1:ef:5c:cf:ce:1b:a6:67:c7:
                    85:ed:c8:dd:72:2d:72:b3:ed:45:78:c6:25:b8:c5:
                    19:9f:7b:48:4e:89:bb:f7:0e:52:67:3c:78:1d:4e:
                    6e:1c:ba:07:9b:56:5e:8d:d6:24:52:7e:e1:b1:3b:
                    c8:cf:6b:4d:73:ea:f0:31:1d:68:fd:8d:0f:e9:30:
                    8b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A6:2A:7F:48:39:8D:39:11:C5:39:0B:61:5A:30:A7:8A:C0:74:5E
            X509v3 Authority Key Identifier:
                keyid:73:17:D7:77:BD:AA:63:33:CD:96:A8:10:4B:94:DE:0F:A4:75:21:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxfXd72qYzPNlqgQS5TeD6R1IRM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:ca:76:0c:9c:1c:bc:c3:da:54:c0:db:13:c2:24:e0:76:9a:
         5e:3e:c7:54:34:33:f2:5b:cb:8d:a2:d8:99:63:8e:9d:bd:a0:
         24:dd:26:9d:71:76:62:e5:db:88:e6:f4:a2:c1:0f:3c:17:fd:
         5f:96:b6:82:28:04:08:dc:a5:05:05:75:46:13:16:04:a4:5b:
         e8:67:22:35:2d:6d:68:4b:62:de:3a:81:2d:14:fc:13:10:4b:
         c3:19:fa:50:f1:15:0f:73:3e:55:85:69:b9:15:26:7e:4c:41:
         44:0f:4c:51:3c:27:78:af:75:4a:64:d7:d5:04:b0:8c:fe:c6:
         80:9e:8a:9a:a0:e7:a8:df:21:66:3a:32:82:c8:d8:a3:55:81:
         94:68:03:e1:a0:0c:2b:7d:5e:45:da:06:d4:15:50:da:0e:1b:
         b4:ba:70:6d:a3:ea:96:11:d1:83:52:c6:37:67:46:f0:4a:ce:
         f8:14:5a:46:f4:bc:cc:e8:17:4d:9d:21:7a:34:3d:9c:6a:f3:
         cd:bc:8d:c0:9a:b6:f0:dd:af:45:d4:e2:a4:28:30:a7:6f:53:
         b0:df:35:22:44:6e:86:57:a6:53:15:95:33:df:55:7f:f1:e7:
         1b:38:13:96:ff:bd:ff:b6:17:8d:0f:84:72:8d:27:d6:73:b0:
         c0:1e:10:fa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkE5NDExMTAvBgNVBAUTKDczMTdENzc3QkRBQTYzMzNDRDk2QTgxMDRCOTRERTBG
QTQ3NTIxMTMwHhcNMjYwOTIzMDQ1MTQ4WhcNMjYwOTMwMDQ1MTQ4WjAYMRYwFAYD
VQQDEw02YWIzNWFlNS0wZDNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwvS/DU602zRaBJus7/n0MTBUMEOFJjfGFYbiygLJRqw2W8GxB5Rr3yxH3mTi
mn3BvoRW2k6kuHPywQC9AW6Ul7HSCcxn8MXXqFPd3vLOP4kPdJBxWRvYU+5t82jf
oIav0osbEdFUWt6H43q+q4uD6d4WTnMYG7By4KW/cfdwF9VE4RP1A70Wzkv3s1bm
T3Tg+kmbN5PamD5KOS7A4o4LYTWhG0rMR7+/pcXt1eFGZv2xx6lGGiJcI1DR71zP
zhumZ8eF7cjdci1ys+1FeMYluMUZn3tITom79w5SZzx4HU5uHLoHm1ZejdYkUn7h
sTvIz2tNc+rwMR1o/Y0P6TCL2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPmmKn9I
OY05EcU5C2FaMKeKwHReMB8GA1UdIwQYMBaAFHMX13e9qmMzzZaoEEuU3g+kdSET
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTk0MS85QjNEMjU0OEEw
QTAxMUVGOTA1MjMyNUZDNEY5QUUwMi9jeGZYZDcycVl6UE5scWdRUzVUZUQ2UjFJ
Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2N4ZlhkNzJxWXpQTmxxZ1FTNVRlRDZSMUlSTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QTk0MS85QjNEMjU0OEEwQTAxMUVGOTA1MjMyNUZDNEY5QUUwMi9jeGZYZDcycVl6
UE5scWdRUzVUZUQ2UjFJUk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAN8p2DJwcvMPaVMDbE8Ik4HaaXj7HVDQz8lvLjaLYmWOOnb2gJN0mnXF2YuXb
iOb0osEPPBf9X5a2gigECNylBQV1RhMWBKRb6GciNS1taEti3jqBLRT8ExBLwxn6
UPEVD3M+VYVpuRUmfkxBRA9MUTwneK91SmTX1QSwjP7GgJ6KmqDnqN8hZjoygsjY
o1WBlGgD4aAMK31eRdoG1BVQ2g4btLpwbaPqlhHRg1LGN2dG8ErO+BRaRvS8zOgX
TZ0hejQ9nGrzzbyNwJq28N2vRdTipCgwp29TsN81IkRuhlemUxWVM99Vf/HnGzgT
lv+9/7YXjQ+Eco0n1nOwwB4Q+g==
-----END CERTIFICATE-----
Generated at Wed Sep 23 12:04:55 2026 by rpki-client