Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
File:                     PXsVvXfZuXTjc1jadU3-qSkeaDo.mft (raw, json)
Hash identifier:          4hNkNlp0Pk58flpSej/g37vHkYBY9sDBIwz14Tsm3qI=
Subject key identifier:   65:19:7D:AB:77:F7:6F:17:B5:C4:44:22:20:49:07:29:89:AB:95:54
Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
Certificate issuer:       /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Certificate serial:       018A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
Manifest number:          C2
Signing time:             Sat 26 Sep 2026 19:01:52 +0000
Manifest this update:     Sat 26 Sep 2026 19:01:51 +0000
Manifest next update:     Sat 03 Oct 2026 19:01:51 +0000
Files and hashes:         1: PXsVvXfZuXTjc1jadU3-qSkeaDo.crl (hash: rgjmSdWwwIvKBcNTe/5Y1amBs533pyggnMTvaSBVhcg=)
                          2: 3218652829E811F18CA8F3909F833773.roa (hash: eU5ZrLctFwDk24jAlM3+JYuAwt/fHYDYFfG92ftHrG4=)
                          3: 5A0D98C829F211F18AB4C1A0A2833773.roa (hash: HFd9QgZh+NAMQFqbKs0U5sBBitb9/bP74JcV2UadE8k=)
                          4: Y0V6QTtVdDGOosHHJcYzqULjMFE.asa (hash: KwmdGtFsNvsDgdJAv4m+MNCpjlOAuKHaYCdkkRjehDo=)
                          5: 77B9A22029EA11F19F51207DA0833773.roa (hash: Xbsb6WA8kMxnLMb0002lKsDzIsPgJEDCspvcDzL/trA=)
                          6: 85750E9429B911F1A805AEF28F833773.roa (hash: G0wzSj51Qp6fnFjrr4WxujUgcZN4YNZIFcMjHPdUFz4=)
                          7: 771BED3C29EA11F19F51207DA0833773.roa (hash: 09sH/2B4l1dbmZUamUfC+nphrsNDUifYrBA1FqJfBVM=)
                          8: 763CCE46479911F18B6CC3CFA0833773.roa (hash: erzss31JpeWgG+Gc0xJ5SMvdJuEjcJOATd56OecuB+o=)
                          9: 805DF10C29D011F19183AF4C97833773.roa (hash: MNeWms1frV+694tcT4cRmQYkSMhm22Q4MBfOcgbglm0=)
                          10: 32A3B5E229E811F18CA8F3909F833773.roa (hash: bm+D908YeL/P1T00rFim9gtV6dNznmF0Z3qK05Yc0lM=)
                          11: 9EDDEBC029D311F184F1669A97833773.roa (hash: wTPo2kv7xMowUUg+BeWVK7kCSv8ZL5DjmUbZP36DRQU=)
                          12: DF742E02A83511F197EEE3443611F970.roa (hash: LR/itoK/L5aRch4pJhKFTPYm9kxaZD8MEBm8uT1T9hA=)
                          13: 7843AE0229EA11F19F51207DA0833773.roa (hash: 6V2DjYIx8625kqe242doUOvVQbgf+Yq45HsMphmWFZY=)
                          14: 2D9AAA0629CF11F1ADED11F996833773.roa (hash: EYgOLSFFeoawzbZSo+omPv5lcZ4eiI6uUiQ5dR5O4Iw=)
                          15: 24DB124029D711F19B6521AE99833773.roa (hash: UqSBc8TxnJq1Jue1okvq1v9coaZmETb8TyDiU0CjCJ8=)
                          16: 484AAA6E29E711F18BEDC2D19E833773.roa (hash: kjxZZmUEVCRj7FRfyXjI30Z+Tgg0521nzEfajA5vqcI=)
                          17: 31EC6B8229D211F1942EF99297833773.roa (hash: 6GOkqgK6766kXZRb2zev1EPOhPc93N6Z7iHPDo/M9B4=)
                          18: 9F6611D029D311F184F1669A97833773.roa (hash: 7XOGs2wyUjEZQbl9lb0Bk82uyJ3XVHINwK4ItrxDuVA=)
                          19: E07EDFEAA83511F197EEE3443611F970.roa (hash: PWekMcu4+B0Oj6I8LteCLe3snhBXN0BSRYbpQA+iqFY=)
                          20: 5CFC71B62C1411F181024EDD95833773.roa (hash: YRECKHoraOf2bWRQJUd3/Y6Ug/L3op3a4wNvo/BFtlE=)
                          21: E67F9A6229F311F1A8F3E0E1A2833773.roa (hash: 6iDEJfborO4k4SN1+csGnEFXKfEtb5shDdu17cANAfE=)
                          22: 11749BE62DA511F1AB5ACB70A2833773.roa (hash: XiFtfljCFKD2LKcSnLJ3irXOuLI/m6SajhgaUNMIkk4=)
                          23: 9FAF6F8A29DB11F1BFD4871E9B833773.roa (hash: zdZwScXVAMNHJf/1wI64pbUMCQPblQfek4+QW6DA8h4=)
                          24: 670FF7B429C011F1A3F09FCF91833773.roa (hash: OlVWz8nGryBxNYRtX9LuDsIW6s2g4bCFqY9G2NVU36E=)
                          25: A03EA96629DB11F1BFD4871E9B833773.roa (hash: CeVU5F+cE/p/gIJ6n4nuOgYXAjPlizKNWh6FzWAj2VQ=)
                          26: 37885C3229D111F18571726A97833773.roa (hash: oFWQjdEfsXo2mf9hnvk1nF/iUbWRdh1WWZienEzp0Y0=)
                          27: A194680629DA11F1A7234B1B9B833773.roa (hash: KIqqySfqw8zszLlnQiMzev+Qz4Y53rJrYR9gJPmiP3I=)
                          28: 23C5258A29D711F19B6521AE99833773.roa (hash: v++NZpvnb9ylmNbF62ghM6TfResLJGpsjAupWiltIf8=)
                          29: 666C21CA29C011F1A3F09FCF91833773.roa (hash: y9ci58U6NkZ5pJ9FGfvPElnka2mlIBg9URm+CwL1+6M=)
                          30: 2E2443CE29CF11F1ADED11F996833773.roa (hash: CUdsm2mFfeKj9DQNrRmyZB/PxWbcx2rZQKOcjvWuC0Q=)
                          31: 769A6D0C29EA11F19F51207DA0833773.roa (hash: XcjhinNbZJy1c41oN0q9J25LNTzXS/kfkrE7fESwpr4=)
                          32: 2447645A29D711F19B6521AE99833773.roa (hash: 9fh2MIgtJRRPoGpWqGsheDDuAAKoytopq3Qqh52Ib4A=)
                          33: 50DA994A29D411F1916B319D97833773.roa (hash: zD0ufAiml2itPOf8FjLNOlzmYyQ99ftWQuzKy+90VzM=)
                          34: 132BB03C29F411F1A9D9FDE9A2833773.roa (hash: zAHGRDXYndBzUXQxorw1NkRKqw4rmC3oXM3Dg7Io5P8=)
                          35: 040DC78829EB11F18E7F1692A0833773.roa (hash: y16n6WemYHe3eFI0s7YEgjUsT6r8DekbQjKdUrOjeu4=)
                          36: 87758D3C2DAF11F1B56D9FADA5833773.roa (hash: bB7QmV7mgJV6zy0vXkgVW0mvcXAYiTfS8G40XLA5T0I=)
                          37: CD8FC3C82D1E11F191B042ACB6833773.roa (hash: NxkdL/XW0F+7NXwYBc0Km2tJxuYr4RVoLbvkjNZsOc8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
                          rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 19:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 394 (0x18a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
        Validity
            Not Before: Sep 26 19:01:51 2026 GMT
            Not After : Oct  3 19:01:51 2026 GMT
        Subject: CN=6ab816a0-709e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ca:da:43:82:74:57:c0:c0:9f:85:ca:d1:3e:
                    b3:e7:ff:09:2f:d4:82:28:e6:0b:6b:3b:7e:ce:3d:
                    9c:db:2e:89:a5:41:3f:f8:56:4c:da:15:57:9f:96:
                    6b:81:af:7c:4f:a6:db:38:73:09:b3:15:92:10:61:
                    7a:72:f0:69:4a:a4:9a:ce:21:5b:47:7d:cf:83:51:
                    e9:a9:f2:79:c5:d6:5c:50:13:e9:a7:1b:63:82:14:
                    34:62:f0:dd:24:8e:82:51:3c:7f:3b:4c:ca:ab:19:
                    85:36:f5:76:b4:e5:02:9a:24:4f:d9:e3:ff:09:4d:
                    78:d9:f0:29:a4:5a:18:93:fd:d0:2f:bf:0e:8d:67:
                    30:fd:00:e7:aa:bb:c4:20:d4:95:a6:f9:e6:a5:35:
                    e2:e9:62:c3:dc:f0:b2:db:0b:e2:fe:6c:5c:a5:71:
                    b7:66:80:80:07:09:34:65:43:11:63:e0:43:1d:37:
                    4e:18:67:5f:57:49:be:af:a1:c8:35:c3:23:7c:63:
                    c6:62:20:aa:a9:c5:a7:83:80:c8:99:1a:7a:66:6a:
                    f6:ae:27:95:27:85:bc:d6:0a:b1:bb:ee:92:e5:a1:
                    c4:76:35:c1:37:c3:41:9d:51:ee:7d:5d:5a:69:33:
                    be:31:84:d1:35:b7:82:43:f7:c8:b6:b4:95:19:5b:
                    ad:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:19:7D:AB:77:F7:6F:17:B5:C4:44:22:20:49:07:29:89:AB:95:54
            X509v3 Authority Key Identifier:
                keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:57:5d:cc:9d:0d:3b:1d:63:64:27:df:e3:eb:27:be:55:09:
         78:5d:d3:a0:c0:7e:e6:7a:f2:53:67:f2:e5:10:20:95:fe:2a:
         86:2c:d7:db:53:11:b4:52:d0:cc:e4:87:c0:6f:19:34:69:0c:
         fa:eb:e2:f7:d5:b5:b0:13:22:b1:ec:79:f7:b0:26:7f:42:59:
         40:e7:95:45:e2:df:6a:e6:7e:f5:9e:4c:76:74:11:09:38:9f:
         fa:f8:ed:e8:17:66:dd:c9:62:b2:92:b0:4e:df:7b:27:0a:89:
         26:00:73:17:e8:41:09:09:f0:d9:bc:09:88:a0:01:87:92:db:
         af:c4:51:63:7f:56:c6:ed:ae:7c:89:be:98:60:b5:49:24:a2:
         3c:f4:29:e4:00:ef:24:95:05:47:fe:5e:10:51:81:95:13:d0:
         b2:22:e7:30:c6:04:f6:7d:56:e8:84:93:66:67:dd:cb:a6:09:
         17:36:47:5d:41:c2:30:e2:2f:aa:97:fd:f6:fb:26:ca:17:87:
         f5:5c:e0:cb:0b:13:2a:2f:51:12:3b:25:5e:13:9b:c0:9c:04:
         f2:08:60:0e:82:b8:d8:ed:0f:25:02:5c:d2:dd:ae:58:9e:67:
         b7:64:ea:49:26:87:3b:1e:bc:93:9d:c1:52:49:1f:fe:9d:ee:
         77:e2:b3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 16:30:30 2026 by rpki-client