Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft
File:                     xsGRae6n0Ga8m8py3YgwvBg6EmY.mft (raw, json)
Hash identifier:          t1+EGFpBJYc/qzTGVNEVnelwxO6eyCFKphXfQq/bqT0=
Subject key identifier:   99:31:52:B9:84:87:B9:58:12:DA:3E:AF:61:B8:DA:02:DC:91:D3:6F
Authority key identifier: C6:C1:91:69:EE:A7:D0:66:BC:9B:CA:72:DD:88:30:BC:18:3A:12:66
Certificate issuer:       /CN=A91F1C46/serialNumber=C6C19169EEA7D066BC9BCA72DD8830BC183A1266
Certificate serial:       08DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xsGRae6n0Ga8m8py3YgwvBg6EmY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft
Manifest number:          08CF
Signing time:             Sun 20 Sep 2026 20:21:55 +0000
Manifest this update:     Sun 20 Sep 2026 20:21:55 +0000
Manifest next update:     Sun 27 Sep 2026 20:21:55 +0000
Files and hashes:         1: xsGRae6n0Ga8m8py3YgwvBg6EmY.crl (hash: PbrN8SKbUB+yiIVUGDZVq2QipYfqITkGqBwefnYY6RY=)
                          2: D3EA977EF32D11EA8498822CC4F9AE02.roa (hash: 0bOv1at0Vcb3GxsjET0li4ANb9C2Voi1AUcj6Mhivug=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.crl
                          rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xsGRae6n0Ga8m8py3YgwvBg6EmY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 20:21:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2266 (0x8da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1C46, serialNumber=C6C19169EEA7D066BC9BCA72DD8830BC183A1266
        Validity
            Not Before: Sep 20 20:21:55 2026 GMT
            Not After : Sep 27 20:21:55 2026 GMT
        Subject: CN=6ab04063-55be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:97:95:59:69:8d:75:ea:a0:74:22:8f:74:71:
                    cd:b4:5c:6e:85:02:d9:61:6c:b4:5c:9d:6f:67:02:
                    0a:91:c1:d2:1d:38:ae:64:73:dd:49:d4:8b:2f:c1:
                    b3:83:72:2a:b5:3b:35:1f:fa:78:87:d0:a5:9d:88:
                    98:08:17:4c:4c:9d:4d:04:51:f4:2e:ab:e8:1a:d0:
                    42:bf:5e:12:d0:85:98:ba:48:c1:d9:79:82:65:9a:
                    ee:e5:f4:4d:dc:c9:c2:fd:91:46:0b:f4:ab:b9:1d:
                    d4:b6:b7:2d:0f:7e:17:14:f0:87:74:fb:69:0b:c4:
                    ca:83:60:0e:d5:d8:b2:db:16:cc:ee:8c:ac:d0:5e:
                    16:2a:26:20:1d:00:f8:6b:e7:e9:37:e3:2f:8c:89:
                    c6:a8:d0:54:b6:19:53:76:d1:97:57:cb:e4:9b:da:
                    fe:f0:46:92:06:b4:7e:5b:c8:42:e7:18:41:57:8b:
                    ec:75:a6:28:44:fc:68:9b:a3:0e:a6:81:98:aa:0d:
                    e2:7b:63:3b:82:36:b1:62:40:30:84:01:32:f5:08:
                    23:03:e8:d8:12:e2:1b:d9:26:37:02:2f:fb:07:28:
                    6a:54:6b:71:69:49:11:59:4e:79:c6:a5:31:41:eb:
                    3d:ca:d4:60:c5:95:ba:35:d8:08:4f:b2:d2:6d:bb:
                    5f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:31:52:B9:84:87:B9:58:12:DA:3E:AF:61:B8:DA:02:DC:91:D3:6F
            X509v3 Authority Key Identifier:
                keyid:C6:C1:91:69:EE:A7:D0:66:BC:9B:CA:72:DD:88:30:BC:18:3A:12:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xsGRae6n0Ga8m8py3YgwvBg6EmY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:17:09:68:a5:a3:3d:4a:a2:c2:aa:3f:b6:1e:cb:8c:44:a8:
         55:54:c0:42:2e:66:f6:cd:d2:0a:41:e0:76:78:3b:7e:a0:87:
         9b:b6:3b:b8:d1:45:d0:a5:8f:1e:39:0e:87:35:de:7a:bf:d5:
         99:37:f3:ea:70:a0:e2:ce:f3:a2:90:19:c3:9f:04:2d:c3:11:
         29:d3:7b:a7:72:c2:5d:2c:71:35:86:1e:04:8b:64:b5:4d:d0:
         bc:54:d9:32:ea:76:10:1e:f6:c0:a8:70:51:53:c7:c5:6f:14:
         b7:3e:73:74:56:80:dc:79:a3:c4:c6:e2:ae:c0:d1:7a:2c:32:
         b8:75:ac:4e:ac:27:a4:22:db:73:50:c8:9a:94:48:e3:31:b0:
         29:0e:26:d6:6e:a6:0d:96:7f:c8:35:f5:d0:5b:21:a9:1e:19:
         88:f1:4a:11:fe:b5:b1:03:82:02:a5:35:ee:10:42:74:20:b1:
         c0:4e:cf:1c:0a:37:3d:77:a9:4a:8b:3c:85:47:53:3a:18:4e:
         3d:2a:67:d8:8c:7e:fb:79:94:96:ea:58:13:da:15:71:82:bd:
         9b:ce:56:dc:35:8a:7f:1b:b2:43:aa:21:9e:55:5b:fc:77:3a:
         c9:23:e0:1a:d2:4f:c7:1b:dc:cb:21:8d:af:da:69:e6:40:13:
         17:ad:c2:2a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCNowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjFDNDYxMTAvBgNVBAUTKEM2QzE5MTY5RUVBN0QwNjZCQzlCQ0E3MkREODgzMEJD
MTgzQTEyNjYwHhcNMjYwOTIwMjAyMTU1WhcNMjYwOTI3MjAyMTU1WjAYMRYwFAYD
VQQDEw02YWIwNDA2My01NWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp5eVWWmNdeqgdCKPdHHNtFxuhQLZYWy0XJ1vZwIKkcHSHTiuZHPdSdSLL8Gz
g3IqtTs1H/p4h9ClnYiYCBdMTJ1NBFH0LqvoGtBCv14S0IWYukjB2XmCZZru5fRN
3MnC/ZFGC/SruR3UtrctD34XFPCHdPtpC8TKg2AO1diy2xbM7oys0F4WKiYgHQD4
a+fpN+MvjInGqNBUthlTdtGXV8vkm9r+8EaSBrR+W8hC5xhBV4vsdaYoRPxom6MO
poGYqg3ie2M7gjaxYkAwhAEy9QgjA+jYEuIb2SY3Ai/7ByhqVGtxaUkRWU55xqUx
Qes9ytRgxZW6NdgIT7LSbbtf1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJkxUrmE
h7lYEto+r2G42gLckdNvMB8GA1UdIwQYMBaAFMbBkWnup9BmvJvKct2IMLwYOhJm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUM0Ni8wNUNBREQxNkYx
ODYxMUVBOERFQzNDMTRDNEY5QUUwMi94c0dSYWU2bjBHYThtOHB5M1lnd3ZCZzZF
bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hzR1JhZTZuMEdhOG04cHkzWWd3dkJnNkVtWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MUM0Ni8wNUNBREQxNkYxODYxMUVBOERFQzNDMTRDNEY5QUUwMi94c0dSYWU2bjBH
YThtOHB5M1lnd3ZCZzZFbVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAshcJaKWjPUqiwqo/th7LjESoVVTAQi5m9s3SCkHgdng7fqCHm7Y7uNFF0KWP
HjkOhzXeer/VmTfz6nCg4s7zopAZw58ELcMRKdN7p3LCXSxxNYYeBItktU3QvFTZ
Mup2EB72wKhwUVPHxW8Utz5zdFaA3HmjxMbirsDReiwyuHWsTqwnpCLbc1DImpRI
4zGwKQ4m1m6mDZZ/yDX10FshqR4ZiPFKEf61sQOCAqU17hBCdCCxwE7PHAo3PXep
Sos8hUdTOhhOPSpn2Ix++3mUlupYE9oVcYK9m85W3DWKfxuyQ6ohnlVb/Hc6ySPg
GtJPxxvcyyGNr9pp5kATF63CKg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 21:04:36 2026 by rpki-client