Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft
File:                     xiZYMphXjR1K9yc-vXkccjCjdEk.mft (raw, json)
Hash identifier:          evlJjXzNvvjdgdrlxTS7+Y68v0KR0lgHE7SVj477cj0=
Subject key identifier:   4D:A5:88:C2:76:F8:79:23:FF:4D:6C:3C:D7:59:F7:06:34:C5:AB:42
Authority key identifier: C6:26:58:32:98:57:8D:1D:4A:F7:27:3E:BD:79:1C:72:30:A3:74:49
Certificate issuer:       /CN=A91186C2/serialNumber=C626583298578D1D4AF7273EBD791C7230A37449
Certificate serial:       0147
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiZYMphXjR1K9yc-vXkccjCjdEk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft
Manifest number:          013F
Signing time:             Fri 25 Sep 2026 05:30:37 +0000
Manifest this update:     Fri 25 Sep 2026 05:30:37 +0000
Manifest next update:     Fri 02 Oct 2026 05:30:37 +0000
Files and hashes:         1: xiZYMphXjR1K9yc-vXkccjCjdEk.crl (hash: Wa2/N8ujLIzFTyi4FKrwM8cqwB3qRIOUQqfnz1MxCJ0=)
                          2: 7DFFCDA4D17F11EF8FAE452BC4F9AE02.roa (hash: 88RG+IBp3+3IKje/6h9nyZS5YfSLYuAiRdPmohXdymE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.crl
                          rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiZYMphXjR1K9yc-vXkccjCjdEk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 05:30:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 327 (0x147)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91186C2, serialNumber=C626583298578D1D4AF7273EBD791C7230A37449
        Validity
            Not Before: Sep 25 05:30:37 2026 GMT
            Not After : Oct  2 05:30:37 2026 GMT
        Subject: CN=6ab606fd-f3a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9c:24:d5:cf:ae:ee:58:dc:c2:cc:be:a2:e9:
                    d9:c3:b4:43:90:c5:65:40:b5:7b:6d:4e:23:8f:a4:
                    f3:24:f4:b3:48:22:d5:dc:57:d5:64:4b:1e:ee:f1:
                    76:27:2c:69:0c:83:ee:73:b7:4e:97:b4:7e:90:4c:
                    a4:3f:72:43:c1:6c:be:03:53:c0:46:0e:1c:56:8b:
                    ee:51:8e:37:d8:f5:b4:64:61:ef:9c:92:67:39:d4:
                    9f:9e:b0:88:7f:83:a1:de:22:25:0c:af:5c:bd:70:
                    ab:b7:fb:50:66:75:7b:63:da:7c:63:5c:bf:e5:85:
                    23:97:13:ab:96:2e:a1:c7:c2:a5:a5:e4:2c:30:1a:
                    51:d6:63:fe:15:49:20:55:2f:2d:d3:f4:b1:bb:fb:
                    25:fd:17:32:8c:72:22:93:a0:38:c8:07:0b:b9:e4:
                    0d:72:2c:aa:47:15:b5:78:6e:a0:8e:3b:37:9c:c9:
                    39:20:28:50:f3:c3:75:82:ff:0e:38:48:df:a2:7d:
                    18:fc:ad:61:32:ba:a2:9d:af:36:03:59:de:f4:84:
                    12:02:71:ed:37:0c:51:3a:ac:8d:4f:a1:f5:84:53:
                    aa:d0:ff:80:b1:d8:59:d1:e9:bd:d4:68:de:86:27:
                    94:48:57:c4:73:21:68:63:d4:48:2b:21:cf:60:b0:
                    4c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:A5:88:C2:76:F8:79:23:FF:4D:6C:3C:D7:59:F7:06:34:C5:AB:42
            X509v3 Authority Key Identifier:
                keyid:C6:26:58:32:98:57:8D:1D:4A:F7:27:3E:BD:79:1C:72:30:A3:74:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiZYMphXjR1K9yc-vXkccjCjdEk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:0c:1c:fa:bf:45:55:40:bb:19:ad:59:69:d8:ed:81:6b:27:
         88:16:e5:d6:f7:c0:d5:07:dd:f1:c5:8f:b6:45:ce:ae:67:19:
         bb:d3:28:4d:d3:10:21:30:3d:fa:a6:7a:e4:d4:de:64:f8:e9:
         88:66:35:5e:72:93:1a:c5:5d:02:0a:be:55:61:34:b7:33:df:
         48:b3:ff:d6:25:7e:f2:e5:cc:de:a6:4a:9a:6a:36:f6:37:67:
         e8:ad:61:93:38:df:1c:46:7c:71:8a:9c:f5:ca:34:b1:db:f2:
         c6:20:a3:0f:f9:72:63:ed:a8:97:76:83:32:55:ee:97:dd:57:
         85:b8:af:39:b7:98:cc:21:ca:c0:d4:a7:af:f9:af:9c:fb:3a:
         01:b1:12:d9:f3:7d:ae:a0:a2:ce:33:ad:d4:34:8e:da:35:5b:
         36:91:6e:d4:40:41:92:c9:44:db:c9:17:0e:d8:bc:44:55:c8:
         13:4c:71:c9:3e:42:94:c3:e5:f1:da:f5:69:3c:38:f4:7c:20:
         a0:c4:de:33:1a:d1:25:7f:5a:d3:b0:5b:d4:1c:ba:7c:df:c3:
         a9:6f:ad:0c:57:e6:f3:cb:66:53:93:10:0b:da:48:27:e1:d9:
         6d:7f:52:0e:87:80:98:42:5c:a7:37:68:d9:35:29:6d:87:f7:
         5f:f8:d3:ba
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTg2QzIxMTAvBgNVBAUTKEM2MjY1ODMyOTg1NzhEMUQ0QUY3MjczRUJENzkxQzcy
MzBBMzc0NDkwHhcNMjYwOTI1MDUzMDM3WhcNMjYxMDAyMDUzMDM3WjAYMRYwFAYD
VQQDEw02YWI2MDZmZC1mM2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp5wk1c+u7ljcwsy+ounZw7RDkMVlQLV7bU4jj6TzJPSzSCLV3FfVZEse7vF2
JyxpDIPuc7dOl7R+kEykP3JDwWy+A1PARg4cVovuUY432PW0ZGHvnJJnOdSfnrCI
f4Oh3iIlDK9cvXCrt/tQZnV7Y9p8Y1y/5YUjlxOrli6hx8KlpeQsMBpR1mP+FUkg
VS8t0/Sxu/sl/RcyjHIik6A4yAcLueQNciyqRxW1eG6gjjs3nMk5IChQ88N1gv8O
OEjfon0Y/K1hMrqina82A1ne9IQSAnHtNwxROqyNT6H1hFOq0P+AsdhZ0em91Gje
hieUSFfEcyFoY9RIKyHPYLBMlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE2liMJ2
+Hkj/01sPNdZ9wY0xatCMB8GA1UdIwQYMBaAFMYmWDKYV40dSvcnPr15HHIwo3RJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODZDMi8xRDJGMDcyNEQx
N0YxMUVGQjM4NDY5MjhDNEY5QUUwMi94aVpZTXBoWGpSMUs5eWMtdlhrY2NqQ2pk
RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3hpWllNcGhYalIxSzl5Yy12WGtjY2pDamRFay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
ODZDMi8xRDJGMDcyNEQxN0YxMUVGQjM4NDY5MjhDNEY5QUUwMi94aVpZTXBoWGpS
MUs5eWMtdlhrY2NqQ2pkRWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZQwc+r9FVUC7Ga1ZadjtgWsniBbl1vfA1Qfd8cWPtkXOrmcZu9MoTdMQITA9
+qZ65NTeZPjpiGY1XnKTGsVdAgq+VWE0tzPfSLP/1iV+8uXM3qZKmmo29jdn6K1h
kzjfHEZ8cYqc9co0sdvyxiCjD/lyY+2ol3aDMlXul91XhbivObeYzCHKwNSnr/mv
nPs6AbES2fN9rqCizjOt1DSO2jVbNpFu1EBBkslE28kXDti8RFXIE0xxyT5ClMPl
8dr1aTw49HwgoMTeMxrRJX9a07Bb1By6fN/DqW+tDFfm88tmU5MQC9pIJ+HZbX9S
DoeAmEJcpzdo2TUpbYf3X/jTug==
-----END CERTIFICATE-----
Generated at Fri Sep 25 22:14:15 2026 by rpki-client