Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.mft
File:                     8XiofFRzBDe6WfqpzhhP-HkP5PE.mft (raw, json)
Hash identifier:          YXlM+BwloDugcPvz3uOibOXK1gL0KGXqxVTROP4C5GA=
Subject key identifier:   D0:8A:36:D7:14:77:B8:E8:8C:9C:6A:A8:D7:07:49:A7:15:5A:0F:67
Authority key identifier: F1:78:A8:7C:54:73:04:37:BA:59:FA:A9:CE:18:4F:F8:79:0F:E4:F1
Certificate issuer:       /CN=A91D6792/serialNumber=F178A87C54730437BA59FAA9CE184FF8790FE4F1
Certificate serial:       05D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XiofFRzBDe6WfqpzhhP-HkP5PE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.mft
Manifest number:          05C9
Signing time:             Fri 18 Sep 2026 22:58:12 +0000
Manifest this update:     Fri 18 Sep 2026 22:58:11 +0000
Manifest next update:     Fri 25 Sep 2026 22:58:11 +0000
Files and hashes:         1: 8XiofFRzBDe6WfqpzhhP-HkP5PE.crl (hash: Eg+A+zJ9GS6CBjkNYZwJ8FJ23M1E32sL72JVd7lSWzQ=)
                          2: CB89040A73EA11EC8A823312C4F9AE02.roa (hash: JC7lbeFnRnICzkSYuKq2WaMSqXlPZ3bBUzx31GKWCuw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.crl
                          rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XiofFRzBDe6WfqpzhhP-HkP5PE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1493 (0x5d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6792, serialNumber=F178A87C54730437BA59FAA9CE184FF8790FE4F1
        Validity
            Not Before: Sep 18 22:58:11 2026 GMT
            Not After : Sep 25 22:58:11 2026 GMT
        Subject: CN=6aadc203-7935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0e:75:88:e7:34:e6:1b:5e:35:00:00:b9:76:
                    56:74:89:51:d0:47:9b:69:fe:44:de:da:aa:2a:ec:
                    ca:e1:df:ff:ea:87:7c:a1:4f:3a:7f:89:08:66:dc:
                    b1:66:04:b2:44:0e:fa:e1:5c:79:79:7e:85:51:2e:
                    53:60:45:f3:d1:30:af:d9:0e:8f:1e:12:58:a7:21:
                    a8:00:79:30:07:b6:fd:38:df:93:8f:92:46:d0:6c:
                    64:66:5c:67:dc:57:d5:09:91:c3:4d:f4:ce:e5:30:
                    1b:9f:51:0c:87:07:9b:fa:3c:80:cb:e5:0a:89:06:
                    ef:a9:ac:b4:51:c0:f2:32:dc:8b:5b:f1:e3:38:a5:
                    f3:09:2d:ad:d7:46:ee:45:0e:a3:45:21:ca:29:f0:
                    c1:a4:8d:b9:66:80:1c:3a:d4:b6:20:84:21:72:f7:
                    03:d3:82:2b:74:f0:4a:aa:07:e9:bb:82:c3:1b:45:
                    3e:51:7f:2a:a2:3a:74:3c:78:52:66:03:73:a0:f1:
                    11:b6:e3:b3:7e:74:1c:b0:a8:97:97:2c:d6:f7:71:
                    47:26:f4:a5:4d:f2:02:3a:ad:ef:06:b5:48:82:53:
                    f2:73:d9:2e:26:43:39:ad:42:a4:57:6b:83:fb:7b:
                    15:3b:96:26:78:cd:46:60:83:3c:ee:ea:a5:8a:a7:
                    58:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:8A:36:D7:14:77:B8:E8:8C:9C:6A:A8:D7:07:49:A7:15:5A:0F:67
            X509v3 Authority Key Identifier:
                keyid:F1:78:A8:7C:54:73:04:37:BA:59:FA:A9:CE:18:4F:F8:79:0F:E4:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XiofFRzBDe6WfqpzhhP-HkP5PE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:9f:39:f7:34:9b:23:bf:7e:07:d2:34:cf:29:ec:11:5c:85:
         80:f0:83:55:9a:67:0a:56:ba:7e:26:1d:de:bc:7c:31:a7:27:
         69:db:26:94:c0:b2:82:7d:61:18:85:a8:ed:20:1f:00:b1:4c:
         80:f8:79:f1:2b:85:3c:27:af:e5:b1:6c:75:49:05:5e:18:41:
         4d:43:1b:66:dd:f4:7b:88:5c:bc:a3:30:fc:ed:86:62:44:9e:
         b7:da:ee:30:33:b7:03:02:2a:27:65:ef:91:25:2b:ba:3c:98:
         93:8e:b0:14:29:39:3c:5d:68:b9:64:e5:ec:55:73:af:5d:9e:
         76:07:31:d3:9f:38:fa:09:7e:1b:68:88:74:69:f0:b5:4f:76:
         4f:d9:09:ac:68:cd:9e:30:c7:9d:3e:0b:8c:b3:4e:3b:e4:08:
         64:04:bf:a8:12:1f:4e:52:27:36:c8:4a:10:1c:d1:25:4f:55:
         b1:5e:3c:4e:cf:2c:1a:d1:45:51:5a:d3:74:70:c2:87:e8:bd:
         e8:93:ac:fc:1e:cb:46:79:52:22:9e:4d:45:83:ec:8d:89:10:
         d8:34:a6:b3:9f:c9:a7:6d:56:a4:31:89:f5:91:e7:c4:20:96:
         2f:f8:00:49:09:43:9d:b6:fd:39:89:da:ae:39:56:57:f4:8c:
         87:bc:a4:9e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDY3OTIxMTAvBgNVBAUTKEYxNzhBODdDNTQ3MzA0MzdCQTU5RkFBOUNFMTg0RkY4
NzkwRkU0RjEwHhcNMjYwOTE4MjI1ODExWhcNMjYwOTI1MjI1ODExWjAYMRYwFAYD
VQQDEw02YWFkYzIwMy03OTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxQ51iOc05hteNQAAuXZWdIlR0Eebaf5E3tqqKuzK4d//6od8oU86f4kIZtyx
ZgSyRA764Vx5eX6FUS5TYEXz0TCv2Q6PHhJYpyGoAHkwB7b9ON+Tj5JG0GxkZlxn
3FfVCZHDTfTO5TAbn1EMhweb+jyAy+UKiQbvqay0UcDyMtyLW/HjOKXzCS2t10bu
RQ6jRSHKKfDBpI25ZoAcOtS2IIQhcvcD04IrdPBKqgfpu4LDG0U+UX8qojp0PHhS
ZgNzoPERtuOzfnQcsKiXlyzW93FHJvSlTfICOq3vBrVIglPyc9kuJkM5rUKkV2uD
+3sVO5YmeM1GYIM87uqliqdYqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNCKNtcU
d7jojJxqqNcHSacVWg9nMB8GA1UdIwQYMBaAFPF4qHxUcwQ3uln6qc4YT/h5D+Tx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjc5Mi9EQkYxQzc3MjIx
RUQxMUVDQkU5QzlBMUNDNEY5QUUwMi84WGlvZkZSekJEZTZXZnFwemhoUC1Ia1A1
UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhYaW9mRlJ6QkRlNldmcXB6aGhQLUhrUDVQRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
Njc5Mi9EQkYxQzc3MjIxRUQxMUVDQkU5QzlBMUNDNEY5QUUwMi84WGlvZkZSekJE
ZTZXZnFwemhoUC1Ia1A1UEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALp859zSbI79+B9I0zynsEVyFgPCDVZpnCla6fiYd3rx8MacnadsmlMCygn1h
GIWo7SAfALFMgPh58SuFPCev5bFsdUkFXhhBTUMbZt30e4hcvKMw/O2GYkSet9ru
MDO3AwIqJ2XvkSUrujyYk46wFCk5PF1ouWTl7FVzr12edgcx0584+gl+G2iIdGnw
tU92T9kJrGjNnjDHnT4LjLNOO+QIZAS/qBIfTlInNshKEBzRJU9VsV48Ts8sGtFF
UVrTdHDCh+i96JOs/B7LRnlSIp5NRYPsjYkQ2DSms5/Jp21WpDGJ9ZHnxCCWL/gA
SQlDnbb9OYnarjlWV/SMh7ykng==
-----END CERTIFICATE-----
Generated at Sun Sep 20 21:57:04 2026 by rpki-client