Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft
File:                     mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft (raw, json)
Hash identifier:          OoMwMSXoIWA+SV56f+cbQQ1IQZxK9Q1roXO8j5peGkQ=
Subject key identifier:   0A:17:11:D5:1D:78:DC:B0:06:7A:0B:6D:E6:C5:E2:F2:44:B2:C2:BE
Authority key identifier: 9B:1E:81:88:CE:64:39:7E:8B:42:41:E6:75:8D:42:9D:A0:FF:2E:70
Certificate issuer:       /CN=A91CB21D/serialNumber=9B1E8188CE64397E8B4241E6758D429DA0FF2E70
Certificate serial:       02C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft
Manifest number:          02B8
Signing time:             Mon 21 Sep 2026 01:32:51 +0000
Manifest this update:     Mon 21 Sep 2026 01:32:50 +0000
Manifest next update:     Mon 28 Sep 2026 01:32:50 +0000
Files and hashes:         1: mx6BiM5kOX6LQkHmdY1CnaD_LnA.crl (hash: XLxBLoqz9XUhM4yHK6u0mcFH05UDMbSUZBTnap5BWAo=)
                          2: D8D317ACE7CE11F0AC86B9F45C6F56BC.roa (hash: 1IF3HCjLUpn5Rqg27GBvL6hXv6iteBjvIyKUpAO7Dio=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.crl
                          rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 01:32:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 713 (0x2c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB21D, serialNumber=9B1E8188CE64397E8B4241E6758D429DA0FF2E70
        Validity
            Not Before: Sep 21 01:32:50 2026 GMT
            Not After : Sep 28 01:32:50 2026 GMT
        Subject: CN=6ab08943-c804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fb:82:47:8c:c6:9f:c5:86:92:e5:57:ec:e3:
                    55:21:05:ed:e2:e4:79:23:36:74:c2:ea:72:58:d6:
                    51:14:dc:98:90:41:c3:c8:b4:b7:70:49:dc:9d:4f:
                    c9:9e:f2:fe:ec:45:62:2d:82:56:b9:0d:8a:85:14:
                    f0:2c:d6:5c:9d:8b:1e:ce:68:83:8f:cd:99:a1:a8:
                    8f:a1:18:87:58:4c:8a:db:2a:87:f0:b1:22:dd:03:
                    4e:65:93:de:b8:86:52:49:cb:60:e9:1c:71:9c:d8:
                    8f:4b:67:55:47:51:6e:cd:d7:82:72:09:36:f3:23:
                    b8:c0:c3:f6:ca:4e:3e:c8:eb:35:51:db:99:4a:57:
                    97:6b:26:23:bd:5c:f0:07:a9:93:a8:98:3f:e1:68:
                    22:31:ee:fa:75:46:f8:d2:6a:81:2c:76:9a:e9:a0:
                    90:a2:c2:32:e5:f6:33:0e:33:12:13:79:d5:07:b8:
                    66:44:e3:05:24:96:d7:0a:64:4f:86:9d:ed:b1:61:
                    fb:45:fd:01:1b:3b:77:52:6d:b2:8e:a4:c2:98:ce:
                    1e:00:52:a6:ae:fe:e6:57:48:dc:58:d5:f2:30:76:
                    66:44:60:c4:2a:86:c0:c6:8a:f6:23:41:dd:68:f2:
                    97:f0:d0:68:16:31:7a:ba:b5:1b:b6:cc:de:43:1b:
                    73:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:17:11:D5:1D:78:DC:B0:06:7A:0B:6D:E6:C5:E2:F2:44:B2:C2:BE
            X509v3 Authority Key Identifier:
                keyid:9B:1E:81:88:CE:64:39:7E:8B:42:41:E6:75:8D:42:9D:A0:FF:2E:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:28:05:fe:81:88:f3:fe:f1:e4:66:28:a2:26:f5:47:cf:4a:
         9a:77:c4:b8:13:50:72:65:39:97:7e:c0:00:5a:86:66:88:7a:
         b5:7a:d5:03:b4:d4:0c:86:51:6b:ac:62:92:88:7f:6e:1c:bf:
         e7:e6:20:16:01:54:32:f3:bc:da:ff:d2:9a:6b:ab:2e:4e:de:
         30:9b:a6:2d:cd:5a:be:e3:0c:2d:d0:62:b3:90:7c:bc:15:a7:
         e4:a0:2f:38:86:46:c0:09:bd:c2:e8:42:2f:fd:d2:d3:ff:4d:
         f1:4c:df:d2:62:3a:a8:39:7f:be:5b:cd:29:6f:c7:0e:0d:c7:
         c0:ad:73:f7:a4:c8:3d:5d:ef:87:ab:05:54:24:c4:36:6a:84:
         bb:28:c7:d9:4b:5e:d3:b3:30:64:b6:27:fc:8f:e0:cc:3f:1b:
         cf:7c:f6:47:a8:1f:ec:8c:ab:57:f0:b0:ad:0a:59:5b:5a:83:
         b4:b4:95:a4:55:8c:45:a9:19:3d:34:63:9b:2e:87:14:e0:67:
         e9:00:71:3c:19:48:3f:92:18:85:06:08:12:3d:e4:67:ba:6e:
         22:87:30:f7:c7:d6:3c:c6:62:84:73:bf:93:93:50:73:c1:a9:
         84:71:a9:47:db:e0:4a:ed:40:e4:55:c4:0f:84:a9:f7:88:ad:
         ae:7d:21:e7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0IyMUQxMTAvBgNVBAUTKDlCMUU4MTg4Q0U2NDM5N0U4QjQyNDFFNjc1OEQ0MjlE
QTBGRjJFNzAwHhcNMjYwOTIxMDEzMjUwWhcNMjYwOTI4MDEzMjUwWjAYMRYwFAYD
VQQDEw02YWIwODk0My1jODA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzPuCR4zGn8WGkuVX7ONVIQXt4uR5IzZ0wupyWNZRFNyYkEHDyLS3cEncnU/J
nvL+7EViLYJWuQ2KhRTwLNZcnYsezmiDj82ZoaiPoRiHWEyK2yqH8LEi3QNOZZPe
uIZSSctg6RxxnNiPS2dVR1FuzdeCcgk28yO4wMP2yk4+yOs1UduZSleXayYjvVzw
B6mTqJg/4WgiMe76dUb40mqBLHaa6aCQosIy5fYzDjMSE3nVB7hmROMFJJbXCmRP
hp3tsWH7Rf0BGzt3Um2yjqTCmM4eAFKmrv7mV0jcWNXyMHZmRGDEKobAxor2I0Hd
aPKX8NBoFjF6urUbtszeQxtzTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAoXEdUd
eNywBnoLbebF4vJEssK+MB8GA1UdIwQYMBaAFJsegYjOZDl+i0JB5nWNQp2g/y5w
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjIxRC82MzJDRDNFNkE3
RjYxMUVEQjlENjBDNDNDNEY5QUUwMi9teDZCaU01a09YNkxRa0htZFkxQ25hRF9M
bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL214NkJpTTVrT1g2TFFrSG1kWTFDbmFEX0xuQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QjIxRC82MzJDRDNFNkE3RjYxMUVEQjlENjBDNDNDNEY5QUUwMi9teDZCaU01a09Y
NkxRa0htZFkxQ25hRF9MbkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQygF/oGI8/7x5GYooib1R89KmnfEuBNQcmU5l37AAFqGZoh6tXrVA7TUDIZR
a6xikoh/bhy/5+YgFgFUMvO82v/SmmurLk7eMJumLc1avuMMLdBis5B8vBWn5KAv
OIZGwAm9wuhCL/3S0/9N8Uzf0mI6qDl/vlvNKW/HDg3HwK1z96TIPV3vh6sFVCTE
NmqEuyjH2Ute07MwZLYn/I/gzD8bz3z2R6gf7IyrV/CwrQpZW1qDtLSVpFWMRakZ
PTRjmy6HFOBn6QBxPBlIP5IYhQYIEj3kZ7puIocw98fWPMZihHO/k5NQc8GphHGp
R9vgSu1A5FXED4Sp94itrn0h5w==
-----END CERTIFICATE-----
Generated at Mon Sep 21 12:24:52 2026 by rpki-client