Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
File:                     PXsVvXfZuXTjc1jadU3-qSkeaDo.mft (raw, json)
Hash identifier:          xbmTkjch69cBIoTV9j6Vi2U4hxJsrmztL/dzAyQfFXA=
Subject key identifier:   2D:2A:57:2E:C9:C9:DA:77:EC:17:44:85:1F:AC:92:08:0B:C5:7D:9C
Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
Certificate issuer:       /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Certificate serial:       0189
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
Manifest number:          C1
Signing time:             Thu 24 Sep 2026 18:53:37 +0000
Manifest this update:     Thu 24 Sep 2026 18:53:36 +0000
Manifest next update:     Thu 01 Oct 2026 18:53:36 +0000
Files and hashes:         1: PXsVvXfZuXTjc1jadU3-qSkeaDo.crl (hash: guG1d+n8BH7NJ6CVV+5byoNJIIOMOuL224Yb1ZGuyUU=)
                          2: 9F6611D029D311F184F1669A97833773.roa (hash: 7XOGs2wyUjEZQbl9lb0Bk82uyJ3XVHINwK4ItrxDuVA=)
                          3: 3218652829E811F18CA8F3909F833773.roa (hash: eU5ZrLctFwDk24jAlM3+JYuAwt/fHYDYFfG92ftHrG4=)
                          4: 769A6D0C29EA11F19F51207DA0833773.roa (hash: XcjhinNbZJy1c41oN0q9J25LNTzXS/kfkrE7fESwpr4=)
                          5: 9EDDEBC029D311F184F1669A97833773.roa (hash: wTPo2kv7xMowUUg+BeWVK7kCSv8ZL5DjmUbZP36DRQU=)
                          6: E67F9A6229F311F1A8F3E0E1A2833773.roa (hash: 6iDEJfborO4k4SN1+csGnEFXKfEtb5shDdu17cANAfE=)
                          7: E07EDFEAA83511F197EEE3443611F970.roa (hash: PWekMcu4+B0Oj6I8LteCLe3snhBXN0BSRYbpQA+iqFY=)
                          8: 040DC78829EB11F18E7F1692A0833773.roa (hash: y16n6WemYHe3eFI0s7YEgjUsT6r8DekbQjKdUrOjeu4=)
                          9: Y0V6QTtVdDGOosHHJcYzqULjMFE.asa (hash: KwmdGtFsNvsDgdJAv4m+MNCpjlOAuKHaYCdkkRjehDo=)
                          10: 670FF7B429C011F1A3F09FCF91833773.roa (hash: OlVWz8nGryBxNYRtX9LuDsIW6s2g4bCFqY9G2NVU36E=)
                          11: 5CFC71B62C1411F181024EDD95833773.roa (hash: YRECKHoraOf2bWRQJUd3/Y6Ug/L3op3a4wNvo/BFtlE=)
                          12: 24DB124029D711F19B6521AE99833773.roa (hash: UqSBc8TxnJq1Jue1okvq1v9coaZmETb8TyDiU0CjCJ8=)
                          13: 31EC6B8229D211F1942EF99297833773.roa (hash: 6GOkqgK6766kXZRb2zev1EPOhPc93N6Z7iHPDo/M9B4=)
                          14: 23C5258A29D711F19B6521AE99833773.roa (hash: v++NZpvnb9ylmNbF62ghM6TfResLJGpsjAupWiltIf8=)
                          15: DF742E02A83511F197EEE3443611F970.roa (hash: LR/itoK/L5aRch4pJhKFTPYm9kxaZD8MEBm8uT1T9hA=)
                          16: CD8FC3C82D1E11F191B042ACB6833773.roa (hash: NxkdL/XW0F+7NXwYBc0Km2tJxuYr4RVoLbvkjNZsOc8=)
                          17: 11749BE62DA511F1AB5ACB70A2833773.roa (hash: XiFtfljCFKD2LKcSnLJ3irXOuLI/m6SajhgaUNMIkk4=)
                          18: 77B9A22029EA11F19F51207DA0833773.roa (hash: Xbsb6WA8kMxnLMb0002lKsDzIsPgJEDCspvcDzL/trA=)
                          19: 9FAF6F8A29DB11F1BFD4871E9B833773.roa (hash: zdZwScXVAMNHJf/1wI64pbUMCQPblQfek4+QW6DA8h4=)
                          20: 7843AE0229EA11F19F51207DA0833773.roa (hash: 6V2DjYIx8625kqe242doUOvVQbgf+Yq45HsMphmWFZY=)
                          21: A194680629DA11F1A7234B1B9B833773.roa (hash: KIqqySfqw8zszLlnQiMzev+Qz4Y53rJrYR9gJPmiP3I=)
                          22: 50DA994A29D411F1916B319D97833773.roa (hash: zD0ufAiml2itPOf8FjLNOlzmYyQ99ftWQuzKy+90VzM=)
                          23: 85750E9429B911F1A805AEF28F833773.roa (hash: G0wzSj51Qp6fnFjrr4WxujUgcZN4YNZIFcMjHPdUFz4=)
                          24: 132BB03C29F411F1A9D9FDE9A2833773.roa (hash: zAHGRDXYndBzUXQxorw1NkRKqw4rmC3oXM3Dg7Io5P8=)
                          25: 484AAA6E29E711F18BEDC2D19E833773.roa (hash: kjxZZmUEVCRj7FRfyXjI30Z+Tgg0521nzEfajA5vqcI=)
                          26: 771BED3C29EA11F19F51207DA0833773.roa (hash: 09sH/2B4l1dbmZUamUfC+nphrsNDUifYrBA1FqJfBVM=)
                          27: 32A3B5E229E811F18CA8F3909F833773.roa (hash: bm+D908YeL/P1T00rFim9gtV6dNznmF0Z3qK05Yc0lM=)
                          28: 2E2443CE29CF11F1ADED11F996833773.roa (hash: CUdsm2mFfeKj9DQNrRmyZB/PxWbcx2rZQKOcjvWuC0Q=)
                          29: A03EA96629DB11F1BFD4871E9B833773.roa (hash: CeVU5F+cE/p/gIJ6n4nuOgYXAjPlizKNWh6FzWAj2VQ=)
                          30: 666C21CA29C011F1A3F09FCF91833773.roa (hash: y9ci58U6NkZ5pJ9FGfvPElnka2mlIBg9URm+CwL1+6M=)
                          31: 5A0D98C829F211F18AB4C1A0A2833773.roa (hash: HFd9QgZh+NAMQFqbKs0U5sBBitb9/bP74JcV2UadE8k=)
                          32: 763CCE46479911F18B6CC3CFA0833773.roa (hash: erzss31JpeWgG+Gc0xJ5SMvdJuEjcJOATd56OecuB+o=)
                          33: 87758D3C2DAF11F1B56D9FADA5833773.roa (hash: bB7QmV7mgJV6zy0vXkgVW0mvcXAYiTfS8G40XLA5T0I=)
                          34: 2447645A29D711F19B6521AE99833773.roa (hash: 9fh2MIgtJRRPoGpWqGsheDDuAAKoytopq3Qqh52Ib4A=)
                          35: 805DF10C29D011F19183AF4C97833773.roa (hash: MNeWms1frV+694tcT4cRmQYkSMhm22Q4MBfOcgbglm0=)
                          36: 2D9AAA0629CF11F1ADED11F996833773.roa (hash: EYgOLSFFeoawzbZSo+omPv5lcZ4eiI6uUiQ5dR5O4Iw=)
                          37: 37885C3229D111F18571726A97833773.roa (hash: oFWQjdEfsXo2mf9hnvk1nF/iUbWRdh1WWZienEzp0Y0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
                          rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 18:53:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 393 (0x189)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
        Validity
            Not Before: Sep 24 18:53:36 2026 GMT
            Not After : Oct  1 18:53:36 2026 GMT
        Subject: CN=6ab571b1-caa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:48:4d:07:ca:42:7b:9d:d3:46:f1:ae:28:be:
                    3a:8b:83:aa:2f:d0:79:c5:76:c4:66:14:11:4b:82:
                    f5:8f:b3:ef:22:27:ad:3b:05:f0:34:17:a3:e9:32:
                    b3:00:2f:d3:83:b3:aa:f6:2a:0a:0a:ca:4e:e0:be:
                    67:df:cc:16:63:b6:f6:c1:0c:cc:d9:8d:d4:ee:0f:
                    00:cb:be:b9:86:aa:cc:0c:5a:61:46:ec:0f:7f:c1:
                    1b:b3:a9:17:2f:05:11:53:e4:e4:e0:d1:32:92:db:
                    4e:ca:94:42:79:ce:77:09:89:bd:41:b3:1b:1e:a8:
                    c0:2f:e8:d3:49:80:f0:65:76:9f:19:72:36:da:9e:
                    14:4e:fc:d9:10:2d:9e:12:f6:d6:86:91:53:e8:9a:
                    fe:b6:4d:2d:32:25:00:68:1e:92:9c:61:e2:fc:59:
                    92:7c:93:64:2a:12:df:21:a0:35:29:66:42:e9:cd:
                    ff:d9:ac:4e:7b:da:dc:c9:5d:4a:60:13:d0:80:3d:
                    b9:19:39:3a:5e:a5:2d:da:52:88:05:0e:eb:47:19:
                    58:30:af:ee:a4:b7:3f:13:09:51:bd:e8:d4:17:12:
                    ea:71:e3:cd:e8:4f:2a:39:26:55:99:2d:d3:38:e4:
                    e7:c8:05:cf:51:20:d9:38:a8:69:75:30:0e:18:61:
                    da:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:2A:57:2E:C9:C9:DA:77:EC:17:44:85:1F:AC:92:08:0B:C5:7D:9C
            X509v3 Authority Key Identifier:
                keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:4b:96:87:b5:28:e8:5a:85:46:66:9b:5b:56:02:40:1c:5f:
         d8:f7:2e:d3:4f:53:19:4d:de:93:1e:6e:d7:9d:b8:22:3c:f4:
         94:c1:82:44:b4:39:aa:30:e4:29:7d:d3:a4:ba:c5:06:5a:30:
         a4:d2:4c:6f:f8:8a:12:49:84:24:a6:94:f8:fd:4e:17:14:ac:
         8c:eb:aa:e8:a2:6c:5e:96:a4:6c:0e:fc:b0:2b:a2:5d:01:7e:
         5d:fa:fe:5f:d7:0a:11:01:e4:f7:c0:8d:72:34:4e:f2:ff:57:
         10:51:88:97:3d:fa:ae:44:3a:1f:20:73:db:15:78:ff:08:49:
         4a:7b:c8:84:96:67:aa:6a:2f:d1:ec:aa:64:33:88:9c:10:38:
         b7:95:0b:f4:b9:a2:c6:b4:56:ba:00:8d:d0:10:72:d5:db:91:
         58:f2:e7:93:da:29:29:7f:d6:67:31:00:6b:35:0b:24:7f:69:
         04:45:ac:5f:88:f2:17:10:3d:b4:33:a2:a8:5a:de:ba:e1:6f:
         06:cf:a0:ec:24:41:d9:93:af:2c:1b:db:37:64:4d:fe:09:b8:
         99:f8:88:ce:63:32:ef:e8:22:f7:4f:07:a8:2d:6f:c6:6a:6d:
         ac:15:7d:a6:c3:39:2f:14:2e:95:0d:7a:5a:2c:9f:f3:b6:94:
         88:68:86:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:37:08 2026 by rpki-client