Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.mft
File:                     xl_8-yz82bzWja6waX0xbPNbI_A.mft (raw, json)
Hash identifier:          KurVPnbJPWMRIXqzQ4m9s/Lif2r3B6CXAh/n/kR6r9A=
Subject key identifier:   82:0E:09:FF:B4:48:5E:76:7B:82:EE:8F:BA:C2:17:8A:00:C4:F8:B1
Authority key identifier: C6:5F:FC:FB:2C:FC:D9:BC:D6:8D:AE:B0:69:7D:31:6C:F3:5B:23:F0
Certificate issuer:       /CN=A91472E2/serialNumber=C65FFCFB2CFCD9BCD68DAEB0697D316CF35B23F0
Certificate serial:       0390
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xl_8-yz82bzWja6waX0xbPNbI_A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.mft
Manifest number:          0381
Signing time:             Sun 27 Sep 2026 00:51:52 +0000
Manifest this update:     Sun 27 Sep 2026 00:51:52 +0000
Manifest next update:     Sun 04 Oct 2026 00:51:52 +0000
Files and hashes:         1: xl_8-yz82bzWja6waX0xbPNbI_A.crl (hash: GpPrTGIj3lkznTK9OZbqZx1JieId1FCiwX6oJ+8oOTE=)
                          2: 216EE802F87A11EDAAE56C0DC4F9AE02.roa (hash: irQw+aFcmVSPBIfolj9woj/L2mmaCgcdWKwM8y5LFZY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.crl
                          rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xl_8-yz82bzWja6waX0xbPNbI_A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 00:51:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 912 (0x390)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91472E2, serialNumber=C65FFCFB2CFCD9BCD68DAEB0697D316CF35B23F0
        Validity
            Not Before: Sep 27 00:51:52 2026 GMT
            Not After : Oct  4 00:51:52 2026 GMT
        Subject: CN=6ab868a8-292f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:72:f9:88:51:6c:90:c1:5b:72:ed:55:a0:4d:
                    b2:3e:f1:bf:e8:c3:b5:79:22:0f:e1:86:01:a3:88:
                    ab:e7:b0:26:d9:80:42:07:de:a7:af:9a:59:f9:5f:
                    48:fb:39:fa:b0:4d:42:2e:47:e6:69:ab:9e:66:c2:
                    0c:1f:1d:54:59:48:df:97:77:91:f5:f7:eb:80:12:
                    8f:61:d7:96:c6:f7:88:4b:c2:25:9e:39:d7:09:6d:
                    92:ab:5c:cd:68:1b:76:d2:37:07:d7:00:e6:bf:24:
                    42:dc:fb:06:e3:82:47:ea:6b:9a:bb:df:b2:27:0d:
                    75:6a:07:fe:04:08:5b:06:09:08:58:82:3e:93:87:
                    ed:69:d0:9a:03:c4:0f:66:0f:54:0c:b4:11:8d:cc:
                    b5:46:41:1b:57:92:1d:e1:c5:68:d9:fd:fa:36:be:
                    6d:c8:da:8e:99:e1:1b:3a:ff:a3:4c:1b:3b:b2:db:
                    a5:4f:6f:f7:bd:67:6d:ea:cb:e5:d0:a2:ed:97:6c:
                    62:26:b2:62:32:72:15:ec:a8:5f:58:d6:97:32:79:
                    32:43:21:b5:2d:30:95:f0:76:ba:30:29:70:a2:7f:
                    a8:68:d9:f9:00:0d:7b:be:be:cf:57:b4:7a:33:67:
                    46:fd:25:06:29:99:49:49:38:b8:57:e0:50:77:ff:
                    91:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:0E:09:FF:B4:48:5E:76:7B:82:EE:8F:BA:C2:17:8A:00:C4:F8:B1
            X509v3 Authority Key Identifier:
                keyid:C6:5F:FC:FB:2C:FC:D9:BC:D6:8D:AE:B0:69:7D:31:6C:F3:5B:23:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xl_8-yz82bzWja6waX0xbPNbI_A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:ef:22:a8:8a:5a:f6:48:e2:8d:07:66:67:aa:24:e4:10:28:
         e3:57:39:eb:4d:41:ba:bc:c7:de:4e:8a:42:16:fd:82:4d:c9:
         8c:b8:c0:c7:58:9f:d0:f5:d0:52:90:3b:18:4f:2b:a8:e2:4b:
         6a:61:e7:b7:ce:03:ff:67:9d:d0:46:bc:eb:e6:b9:fd:60:1c:
         86:1a:ef:bd:bd:7f:cc:6b:69:f7:a9:f6:e5:87:61:40:d2:a2:
         6d:44:a4:1a:f2:aa:c7:6e:e6:88:2c:b0:79:ca:11:ed:3c:3f:
         1e:2a:fa:c4:70:7a:f2:9e:07:2c:9a:54:40:58:a0:af:92:63:
         54:6c:86:f9:4a:63:b6:e6:88:9f:07:c1:fd:57:b5:71:61:b3:
         5f:b3:ef:16:1c:8b:25:8e:81:73:64:01:dc:cd:0e:aa:f4:41:
         29:0f:98:d8:ff:f8:7c:7b:b2:51:78:2c:49:9d:f2:38:da:f9:
         df:e6:85:56:9f:22:20:42:b7:73:6b:b3:60:67:cb:4b:79:62:
         7b:8d:b3:3b:0d:9a:db:31:37:02:3f:b6:c5:8b:36:2c:79:7b:
         f5:bd:9d:73:52:cb:29:2a:52:20:74:a5:61:13:f8:59:b8:3b:
         fe:1d:2f:94:aa:e0:4a:76:25:cf:4f:2d:7b:51:09:5e:c4:0f:
         a7:4e:c8:93
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA5AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDcyRTIxMTAvBgNVBAUTKEM2NUZGQ0ZCMkNGQ0Q5QkNENjhEQUVCMDY5N0QzMTZD
RjM1QjIzRjAwHhcNMjYwOTI3MDA1MTUyWhcNMjYxMDA0MDA1MTUyWjAYMRYwFAYD
VQQDEw02YWI4NjhhOC0yOTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw3L5iFFskMFbcu1VoE2yPvG/6MO1eSIP4YYBo4ir57Am2YBCB96nr5pZ+V9I
+zn6sE1CLkfmaaueZsIMHx1UWUjfl3eR9ffrgBKPYdeWxveIS8IlnjnXCW2Sq1zN
aBt20jcH1wDmvyRC3PsG44JH6muau9+yJw11agf+BAhbBgkIWII+k4ftadCaA8QP
Zg9UDLQRjcy1RkEbV5Id4cVo2f36Nr5tyNqOmeEbOv+jTBs7stulT2/3vWdt6svl
0KLtl2xiJrJiMnIV7KhfWNaXMnkyQyG1LTCV8Ha6MClwon+oaNn5AA17vr7PV7R6
M2dG/SUGKZlJSTi4V+BQd/+RBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIIOCf+0
SF52e4Luj7rCF4oAxPixMB8GA1UdIwQYMBaAFMZf/Pss/Nm81o2usGl9MWzzWyPw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzJFMi8yRjE5NTM1QzBD
QjIxMUVEOTVDRUM5NUNDNEY5QUUwMi94bF84LXl6ODJieldqYTZ3YVgweGJQTmJJ
X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hsXzgteXo4MmJ6V2phNndhWDB4YlBOYklfQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NzJFMi8yRjE5NTM1QzBDQjIxMUVEOTVDRUM5NUNDNEY5QUUwMi94bF84LXl6ODJi
eldqYTZ3YVgweGJQTmJJX0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhO8iqIpa9kjijQdmZ6ok5BAo41c5601BurzH3k6KQhb9gk3JjLjAx1if0PXQ
UpA7GE8rqOJLamHnt84D/2ed0Ea86+a5/WAchhrvvb1/zGtp96n25YdhQNKibUSk
GvKqx27miCywecoR7Tw/Hir6xHB68p4HLJpUQFigr5JjVGyG+UpjtuaInwfB/Ve1
cWGzX7PvFhyLJY6Bc2QB3M0OqvRBKQ+Y2P/4fHuyUXgsSZ3yONr53+aFVp8iIEK3
c2uzYGfLS3lie42zOw2a2zE3Aj+2xYs2LHl79b2dc1LLKSpSIHSlYRP4Wbg7/h0v
lKrgSnYlz08te1EJXsQPp07Ikw==
-----END CERTIFICATE-----
Generated at Sun Sep 27 07:27:30 2026 by rpki-client