Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft
File:                     SrvXMBz_f7SstqBKFPCjbM6FYRw.mft (raw, json)
Hash identifier:          lz5kuoR5V0dl46gzfuoRd19rY1MUQYbyKOUPf75EwNs=
Subject key identifier:   0A:F2:39:A4:73:03:DA:DE:86:5E:C7:FC:E2:30:64:E8:F7:A8:AA:F0
Authority key identifier: 4A:BB:D7:30:1C:FF:7F:B4:AC:B6:A0:4A:14:F0:A3:6C:CE:85:61:1C
Certificate issuer:       /CN=A91FA9BC/serialNumber=4ABBD7301CFF7FB4ACB6A04A14F0A36CCE85611C
Certificate serial:       0303
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft
Manifest number:          02E0
Signing time:             Mon 09 Nov 2026 01:29:22 +0000
Manifest this update:     Mon 09 Nov 2026 01:29:21 +0000
Manifest next update:     Mon 16 Nov 2026 01:29:21 +0000
Files and hashes:         1: SrvXMBz_f7SstqBKFPCjbM6FYRw.crl (hash: CWOKgHlBAGhVB+mVOeqAbdnxLOsFOQ+fipA0DCpsKq4=)
                          2: txYL9xLYE4OkgXQPNwl-B6l9eWY.asa (hash: FFm2kLw7F5ymtTgOsRPktZl6Qc75MMZebJHsWprqRlk=)
                          3: XfBFQ21cfrf3rmkmaZDWj7smFsg.asa (hash: IBxJXK8Fheg/ZyRnflH84N3NEJrP9+H4dacMnY+xLl0=)
                          4: 106F283CB74311EDB0C38030C4F9AE02.roa (hash: hpocYvDPf9bP8lk8bw2eWDBV0MmWUMrFYAIPH3SFhGE=)
                          5: 688B6F18355811F0AF79910EC4F9AE02.roa (hash: jEiZeVVR7YqvSOsTkuwgvg/YfncERr5FCAvit7Yi2lw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.crl
                          rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Nov 2026 01:29:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 771 (0x303)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA9BC, serialNumber=4ABBD7301CFF7FB4ACB6A04A14F0A36CCE85611C
        Validity
            Not Before: Nov  9 01:29:21 2026 GMT
            Not After : Nov 16 01:29:21 2026 GMT
        Subject: CN=6af121f2-c94f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f9:27:e0:e6:5e:6e:9d:78:59:5a:ff:c2:92:
                    74:c7:2b:9d:f2:95:3e:84:3d:9f:b4:6b:fb:66:f7:
                    ee:f0:ce:33:27:28:e7:bf:16:7c:35:5d:a6:88:00:
                    7a:cb:3e:af:87:56:cc:2c:2f:17:12:ed:b8:a4:d6:
                    7f:e9:f4:9d:aa:aa:5a:9c:df:88:06:28:54:7e:f4:
                    60:33:a7:77:13:30:7e:0e:c3:c0:aa:7b:b9:33:86:
                    b2:4c:a1:ba:ad:cc:04:e5:c7:ff:8a:7e:43:7b:59:
                    72:7a:1c:c3:4e:1f:29:c5:ea:bf:76:a4:0f:fa:b1:
                    d8:7e:30:25:d7:ad:d5:72:fd:0b:66:54:9c:54:b5:
                    34:cd:98:99:ef:62:0c:cf:d5:14:f9:4f:30:3f:c2:
                    9d:09:1e:0b:27:d2:ab:c2:d9:9a:16:8f:42:ef:b6:
                    1c:19:f0:04:3e:d7:ad:8c:13:e8:d3:30:4b:4d:72:
                    81:11:b5:6a:16:8c:8f:92:d9:5e:18:19:1c:4a:e8:
                    9b:bd:c4:41:83:f4:08:fb:8c:0c:ec:42:ce:45:2c:
                    c3:f5:20:d5:20:35:aa:34:cb:c6:9a:88:51:fd:3a:
                    85:51:27:57:ba:07:11:36:53:2c:4f:6d:07:88:e4:
                    d9:5f:48:c1:3b:89:34:05:4b:38:ac:3f:fc:72:88:
                    65:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F2:39:A4:73:03:DA:DE:86:5E:C7:FC:E2:30:64:E8:F7:A8:AA:F0
            X509v3 Authority Key Identifier:
                keyid:4A:BB:D7:30:1C:FF:7F:B4:AC:B6:A0:4A:14:F0:A3:6C:CE:85:61:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:cd:6c:4d:6d:9f:df:20:71:aa:cf:45:8d:ea:fd:2a:43:b0:
         c2:5b:1f:56:f6:74:9a:bb:d7:0e:b2:76:c4:ac:b3:86:9d:ad:
         a3:28:15:2d:34:9d:31:11:aa:ee:ab:3e:c3:88:0d:7f:66:0c:
         9a:78:82:2c:b1:e5:1f:7d:35:dd:ea:e4:f0:ce:aa:be:88:1d:
         e9:8e:7a:a4:8a:c2:61:4a:fe:66:aa:ae:57:da:fb:82:10:a9:
         ac:24:6f:02:e6:4c:3a:e1:25:4b:f2:14:96:46:2a:d9:46:62:
         2d:12:a8:d8:14:bb:cb:8b:46:ec:da:8b:6f:99:f3:5f:41:0e:
         38:ce:1a:3e:a1:09:f6:a1:03:7d:f5:a6:e7:e5:8e:1b:e8:fe:
         57:7d:c1:86:40:83:97:af:41:c9:6d:46:a1:d0:15:fd:5d:25:
         aa:13:6c:23:dd:cd:9c:29:10:5b:e2:dd:7d:ed:d8:51:af:27:
         42:0d:de:81:4a:69:3f:db:0f:ee:79:04:38:ad:5c:7c:ab:8e:
         0e:57:e3:61:2d:af:85:36:8d:44:3e:01:97:d5:7a:00:85:c8:
         9a:af:50:56:d8:7e:d7:0b:13:20:9e:5d:e8:9a:c9:9c:92:f8:
         77:23:cc:f1:f8:a1:d4:c6:8d:94:24:2e:62:bb:70:c0:52:86:
         0f:0c:b2:67
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAwMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkE5QkMxMTAvBgNVBAUTKDRBQkJENzMwMUNGRjdGQjRBQ0I2QTA0QTE0RjBBMzZD
Q0U4NTYxMUMwHhcNMjYxMTA5MDEyOTIxWhcNMjYxMTE2MDEyOTIxWjAYMRYwFAYD
VQQDEw02YWYxMjFmMi1jOTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArvkn4OZebp14WVr/wpJ0xyud8pU+hD2ftGv7Zvfu8M4zJyjnvxZ8NV2miAB6
yz6vh1bMLC8XEu24pNZ/6fSdqqpanN+IBihUfvRgM6d3EzB+DsPAqnu5M4ayTKG6
rcwE5cf/in5De1lyehzDTh8pxeq/dqQP+rHYfjAl163Vcv0LZlScVLU0zZiZ72IM
z9UU+U8wP8KdCR4LJ9KrwtmaFo9C77YcGfAEPtetjBPo0zBLTXKBEbVqFoyPktle
GBkcSuibvcRBg/QI+4wM7ELORSzD9SDVIDWqNMvGmohR/TqFUSdXugcRNlMsT20H
iOTZX0jBO4k0BUs4rD/8cohl/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAryOaRz
A9rehl7H/OIwZOj3qKrwMB8GA1UdIwQYMBaAFEq71zAc/3+0rLagShTwo2zOhWEc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTlCQy9CRTJDRUZGMEIz
QUExMUVEQUYzMTYyM0ZDNEY5QUUwMi9TcnZYTUJ6X2Y3U3N0cUJLRlBDamJNNkZZ
UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NydlhNQnpfZjdTc3RxQktGUENqYk02RllSdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QTlCQy9CRTJDRUZGMEIzQUExMUVEQUYzMTYyM0ZDNEY5QUUwMi9TcnZYTUJ6X2Y3
U3N0cUJLRlBDamJNNkZZUncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJc1sTW2f3yBxqs9Fjer9KkOwwlsfVvZ0mrvXDrJ2xKyzhp2toygVLTSdMRGq
7qs+w4gNf2YMmniCLLHlH3013erk8M6qvogd6Y56pIrCYUr+ZqquV9r7ghCprCRv
AuZMOuElS/IUlkYq2UZiLRKo2BS7y4tG7NqLb5nzX0EOOM4aPqEJ9qEDffWm5+WO
G+j+V33BhkCDl69ByW1GodAV/V0lqhNsI93NnCkQW+Ldfe3YUa8nQg3egUppP9sP
7nkEOK1cfKuODlfjYS2vhTaNRD4Bl9V6AIXImq9QVth+1wsTIJ5d6JrJnJL4dyPM
8fih1MaNlCQuYrtwwFKGDwyyZw==
-----END CERTIFICATE-----
Generated at Mon Nov 9 11:40:04 2026 by rpki-client