Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft
File:                     xCkJXLK5d7BnGRGTtDubL14Zyug.mft (raw, json)
Hash identifier:          irvbyJ+sHANQiygHJEF48D2ndc+qe4PboFzbHrtfozA=
Subject key identifier:   CE:BD:10:E6:C3:7E:B9:E7:68:AC:39:67:86:14:E6:CB:D1:3E:82:03
Authority key identifier: C4:29:09:5C:B2:B9:77:B0:67:19:11:93:B4:3B:9B:2F:5E:19:CA:E8
Certificate issuer:       /CN=A91CDBF5/serialNumber=C429095CB2B977B067191193B43B9B2F5E19CAE8
Certificate serial:       014B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft
Manifest number:          0149
Signing time:             Tue 29 Sep 2026 05:50:25 +0000
Manifest this update:     Tue 29 Sep 2026 05:50:24 +0000
Manifest next update:     Tue 06 Oct 2026 05:50:24 +0000
Files and hashes:         1: xCkJXLK5d7BnGRGTtDubL14Zyug.crl (hash: lGbsbOHdX8t1FAj6/7pa/wTXg5JBhFOuol3wNfthL9g=)
                          2: 51AEB7D2836811F1A730906667A30FBC.roa (hash: w/8aO2cFZ6PvgX1rLpRaspZazjaxpcImO3eTh4c/56M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.crl
                          rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 05:50:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 331 (0x14b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDBF5, serialNumber=C429095CB2B977B067191193B43B9B2F5E19CAE8
        Validity
            Not Before: Sep 29 05:50:24 2026 GMT
            Not After : Oct  6 05:50:24 2026 GMT
        Subject: CN=6abb51a1-4160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a4:25:c0:62:69:ab:0e:94:85:98:53:6c:17:
                    25:2c:5a:30:d4:3e:6e:8e:4e:0a:46:71:ea:ad:b8:
                    0e:ed:1e:95:d0:64:84:ad:08:05:f5:bb:86:a1:96:
                    ae:8b:3f:df:e4:51:5d:71:9e:a8:68:76:6e:fa:e6:
                    04:c5:52:61:fa:41:ac:f2:76:be:5a:74:3d:c9:ae:
                    f6:79:27:6f:b8:e1:dd:9d:57:fa:19:bc:4c:1e:46:
                    f1:65:bb:bd:8d:2d:28:6a:0a:bb:ea:99:b6:5b:fb:
                    80:96:76:6b:9a:5e:d8:ae:44:bd:8f:b6:f9:28:6a:
                    6d:81:e1:0c:2b:bf:e4:46:76:73:7b:22:c8:81:e5:
                    89:4d:ea:d2:21:57:d7:ea:9d:60:56:9b:90:c4:b1:
                    c2:7e:3f:d4:61:d3:6d:5d:11:b2:69:a4:73:b2:38:
                    77:f4:c7:57:18:2e:2b:4a:ac:0b:d0:f4:dc:20:ab:
                    76:f8:1e:10:9f:b6:77:91:60:35:0e:ff:15:24:12:
                    1a:92:c2:7a:8a:9d:bc:1a:3a:8a:80:2a:27:24:79:
                    16:9b:f8:ea:37:b4:cd:b8:eb:d4:38:87:77:bd:7f:
                    48:79:66:64:62:ec:5c:6e:c1:ee:62:47:28:d6:95:
                    79:b5:ce:b3:5c:a7:09:c5:9e:c2:35:bd:46:8c:2c:
                    ea:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:BD:10:E6:C3:7E:B9:E7:68:AC:39:67:86:14:E6:CB:D1:3E:82:03
            X509v3 Authority Key Identifier:
                keyid:C4:29:09:5C:B2:B9:77:B0:67:19:11:93:B4:3B:9B:2F:5E:19:CA:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:55:91:a5:92:e5:82:7d:00:8c:d3:01:70:b5:7c:c6:01:f6:
         9f:f8:d8:e3:52:04:c5:b5:65:f0:db:80:65:d6:94:f4:89:d7:
         6f:80:20:d5:d2:62:8d:e9:9c:c6:85:39:02:91:4b:d6:ad:fb:
         64:0c:33:6c:c3:0c:9d:97:6d:a9:63:74:cc:c2:18:eb:17:70:
         6b:d2:76:01:1a:b6:c1:86:ef:12:97:67:01:c7:71:72:d7:ec:
         8d:5b:7f:38:56:60:91:cc:f2:59:e8:e6:1c:c9:03:c6:bc:d9:
         ee:07:0e:55:d7:34:15:f2:1e:61:95:5f:81:60:78:dc:3f:fb:
         8b:65:9a:f1:4f:21:a5:05:39:01:4b:5b:dd:7e:64:10:49:df:
         ff:65:4f:32:07:cb:67:dd:54:4a:36:7c:d1:4d:c3:16:6e:c8:
         9a:4a:f1:57:05:7d:0e:7b:b9:20:5f:5b:5b:6f:f3:1d:a0:26:
         f7:60:94:4b:80:4c:6f:fd:b8:80:e9:e9:ad:30:fb:b7:4d:63:
         5c:62:51:4b:79:84:5b:33:9e:ac:42:cc:64:5a:92:d5:80:bb:
         ca:18:3a:e5:9a:08:98:4e:4c:1c:74:56:0b:e9:cd:e7:33:3d:
         2b:77:ea:d6:87:cb:e0:8e:45:0c:06:f3:22:1d:d1:a4:79:d8:
         14:f6:f4:19
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0RCRjUxMTAvBgNVBAUTKEM0MjkwOTVDQjJCOTc3QjA2NzE5MTE5M0I0M0I5QjJG
NUUxOUNBRTgwHhcNMjYwOTI5MDU1MDI0WhcNMjYxMDA2MDU1MDI0WjAYMRYwFAYD
VQQDEw02YWJiNTFhMS00MTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxaQlwGJpqw6UhZhTbBclLFow1D5ujk4KRnHqrbgO7R6V0GSErQgF9buGoZau
iz/f5FFdcZ6oaHZu+uYExVJh+kGs8na+WnQ9ya72eSdvuOHdnVf6GbxMHkbxZbu9
jS0oagq76pm2W/uAlnZrml7YrkS9j7b5KGptgeEMK7/kRnZzeyLIgeWJTerSIVfX
6p1gVpuQxLHCfj/UYdNtXRGyaaRzsjh39MdXGC4rSqwL0PTcIKt2+B4Qn7Z3kWA1
Dv8VJBIaksJ6ip28GjqKgConJHkWm/jqN7TNuOvUOId3vX9IeWZkYuxcbsHuYkco
1pV5tc6zXKcJxZ7CNb1GjCzqxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM69EObD
frnnaKw5Z4YU5svRPoIDMB8GA1UdIwQYMBaAFMQpCVyyuXewZxkRk7Q7my9eGcro
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREJGNS82NjU5RjUxRUNC
NTExMUVGOTA0MDBEMTdDNEY5QUUwMi94Q2tKWExLNWQ3Qm5HUkdUdER1YkwxNFp5
dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hDa0pYTEs1ZDdCbkdSR1R0RHViTDE0Wnl1Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
REJGNS82NjU5RjUxRUNCNTExMUVGOTA0MDBEMTdDNEY5QUUwMi94Q2tKWExLNWQ3
Qm5HUkdUdER1YkwxNFp5dWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANlWRpZLlgn0AjNMBcLV8xgH2n/jY41IExbVl8NuAZdaU9InXb4Ag1dJijemc
xoU5ApFL1q37ZAwzbMMMnZdtqWN0zMIY6xdwa9J2ARq2wYbvEpdnAcdxctfsjVt/
OFZgkczyWejmHMkDxrzZ7gcOVdc0FfIeYZVfgWB43D/7i2Wa8U8hpQU5AUtb3X5k
EEnf/2VPMgfLZ91USjZ80U3DFm7ImkrxVwV9Dnu5IF9bW2/zHaAm92CUS4BMb/24
gOnprTD7t01jXGJRS3mEWzOerELMZFqS1YC7yhg65ZoImE5MHHRWC+nN5zM9K3fq
1ofL4I5FDAbzIh3RpHnYFPb0GQ==
-----END CERTIFICATE-----
Generated at Tue Sep 29 11:57:30 2026 by rpki-client