Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft
File:                     xjugMQfBPRiceeDnSox7hHpcdHE.mft (raw, json)
Hash identifier:          5l1MNDrTdphYL0+PSmkz3X9Ntb6MC7ugIEMso0eTR5s=
Subject key identifier:   F6:14:86:2C:35:92:A4:F0:A9:C1:EE:69:64:27:52:F1:B8:89:AF:7F
Authority key identifier: C6:3B:A0:31:07:C1:3D:18:9C:79:E0:E7:4A:8C:7B:84:7A:5C:74:71
Certificate issuer:       /CN=A9154EC0/serialNumber=C63BA03107C13D189C79E0E74A8C7B847A5C7471
Certificate serial:       02D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft
Manifest number:          02CE
Signing time:             Wed 23 Sep 2026 01:10:09 +0000
Manifest this update:     Wed 23 Sep 2026 01:10:08 +0000
Manifest next update:     Wed 30 Sep 2026 01:10:08 +0000
Files and hashes:         1: xjugMQfBPRiceeDnSox7hHpcdHE.crl (hash: cX3LJau4cgb2nhqawgeQJEelQShnFIXAiO64qsOx3Lk=)
                          2: 16DFC2548D6C11EDBB1B1C4FC4F9AE02.roa (hash: JzIeNUelrcBSaSYEzJUiPtXr7HS7Gw0/GJK//93BhoM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.crl
                          rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 01:10:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 729 (0x2d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154EC0, serialNumber=C63BA03107C13D189C79E0E74A8C7B847A5C7471
        Validity
            Not Before: Sep 23 01:10:08 2026 GMT
            Not After : Sep 30 01:10:08 2026 GMT
        Subject: CN=6ab326f1-c9b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3c:ae:e2:a6:b5:63:ac:2e:8b:79:89:41:9b:
                    56:f2:24:c8:34:b4:b7:56:6f:74:65:ce:52:eb:97:
                    41:1f:e5:67:40:9e:9e:50:37:c8:f0:42:ae:d9:2f:
                    3f:76:5d:6f:ad:2a:60:34:7d:ca:0b:c4:a4:e2:3b:
                    45:ce:7f:5c:1f:cb:1a:d6:c6:88:8e:8a:4e:74:76:
                    d5:4d:fe:1f:7f:85:26:99:da:86:90:5c:3b:ca:76:
                    60:9c:04:2c:49:d0:55:76:1d:ca:18:59:76:90:0d:
                    54:e2:e8:c6:c8:11:b7:bb:4c:81:cc:a9:d5:7b:2f:
                    0f:50:d9:a4:54:6d:38:1c:64:71:f1:6f:5e:5f:4d:
                    1a:62:5e:d1:70:33:50:81:61:a4:1b:1f:ed:f7:f3:
                    a0:cd:df:b6:ed:e3:c5:f5:c1:52:ec:81:a9:53:29:
                    70:52:d0:17:c8:7f:e6:15:61:31:88:7b:ac:cb:a0:
                    15:a8:39:75:f2:5d:a5:5f:4c:61:27:55:bf:14:0b:
                    92:78:13:88:26:5d:b2:66:c9:85:06:10:a9:87:9f:
                    88:08:2e:6f:75:c4:b1:37:3b:85:7c:4b:e5:3f:25:
                    bd:6f:41:e7:da:96:64:40:da:53:e8:a2:c3:e0:cf:
                    70:62:b2:96:d2:38:5d:34:c4:68:b8:71:13:da:78:
                    6f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:14:86:2C:35:92:A4:F0:A9:C1:EE:69:64:27:52:F1:B8:89:AF:7F
            X509v3 Authority Key Identifier:
                keyid:C6:3B:A0:31:07:C1:3D:18:9C:79:E0:E7:4A:8C:7B:84:7A:5C:74:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:32:23:3d:9e:66:a8:53:1f:40:25:59:ed:a3:59:c0:d3:92:
         aa:c2:41:32:33:be:51:1e:4b:b9:32:9a:58:29:c2:25:f2:be:
         48:5b:db:65:52:e8:ce:f9:16:3c:f5:12:fd:6e:a2:a7:91:b7:
         21:bd:35:0b:30:8d:e9:a3:8b:0e:9a:33:bc:4e:ee:af:13:f4:
         56:67:4e:f2:06:55:c3:a7:96:96:78:49:a4:db:45:60:32:ae:
         79:63:58:ff:6f:80:8b:58:c4:20:a9:f5:e2:fd:1b:74:1c:0e:
         d6:8e:46:17:eb:09:46:46:29:63:78:6f:95:c1:c3:e0:ca:47:
         1b:9d:52:d3:b1:66:ec:5a:58:88:52:1c:13:4e:f0:1a:3b:66:
         13:3b:1c:da:80:62:b9:40:53:8a:20:df:32:ed:61:fc:d1:77:
         c8:e7:b5:57:f4:e5:22:8d:ec:50:8d:5c:a3:bf:3d:9f:2d:54:
         d0:bd:80:e9:df:70:06:78:8e:d1:3a:ba:53:6a:f6:b1:1a:9c:
         7e:ae:bf:20:95:4a:48:ec:23:5a:22:75:c9:81:63:aa:86:25:
         5d:21:40:dd:e3:22:01:eb:b7:42:21:6a:be:d6:60:d2:bd:63:
         f3:ed:9b:ba:40:bf:ad:32:03:06:71:ea:b7:b3:6b:5d:c7:8b:
         c0:5e:40:d1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTRFQzAxMTAvBgNVBAUTKEM2M0JBMDMxMDdDMTNEMTg5Qzc5RTBFNzRBOEM3Qjg0
N0E1Qzc0NzEwHhcNMjYwOTIzMDExMDA4WhcNMjYwOTMwMDExMDA4WjAYMRYwFAYD
VQQDEw02YWIzMjZmMS1jOWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyjyu4qa1Y6wui3mJQZtW8iTINLS3Vm90Zc5S65dBH+VnQJ6eUDfI8EKu2S8/
dl1vrSpgNH3KC8Sk4jtFzn9cH8sa1saIjopOdHbVTf4ff4UmmdqGkFw7ynZgnAQs
SdBVdh3KGFl2kA1U4ujGyBG3u0yBzKnVey8PUNmkVG04HGRx8W9eX00aYl7RcDNQ
gWGkGx/t9/Ogzd+27ePF9cFS7IGpUylwUtAXyH/mFWExiHusy6AVqDl18l2lX0xh
J1W/FAuSeBOIJl2yZsmFBhCph5+ICC5vdcSxNzuFfEvlPyW9b0Hn2pZkQNpT6KLD
4M9wYrKW0jhdNMRouHET2nhvzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPYUhiw1
kqTwqcHuaWQnUvG4ia9/MB8GA1UdIwQYMBaAFMY7oDEHwT0YnHng50qMe4R6XHRx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEVDMC9EQUU2NzQwQzdG
M0IxMUVEQTdBM0VDNjhDNEY5QUUwMi94anVnTVFmQlBSaWNlZURuU294N2hIcGNk
SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hqdWdNUWZCUFJpY2VlRG5Tb3g3aEhwY2RIRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NEVDMC9EQUU2NzQwQzdGM0IxMUVEQTdBM0VDNjhDNEY5QUUwMi94anVnTVFmQlBS
aWNlZURuU294N2hIcGNkSEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgzIjPZ5mqFMfQCVZ7aNZwNOSqsJBMjO+UR5LuTKaWCnCJfK+SFvbZVLozvkW
PPUS/W6ip5G3Ib01CzCN6aOLDpozvE7urxP0VmdO8gZVw6eWlnhJpNtFYDKueWNY
/2+Ai1jEIKn14v0bdBwO1o5GF+sJRkYpY3hvlcHD4MpHG51S07Fm7FpYiFIcE07w
GjtmEzsc2oBiuUBTiiDfMu1h/NF3yOe1V/TlIo3sUI1co789ny1U0L2A6d9wBniO
0Tq6U2r2sRqcfq6/IJVKSOwjWiJ1yYFjqoYlXSFA3eMiAeu3QiFqvtZg0r1j8+2b
ukC/rTIDBnHqt7NrXceLwF5A0Q==
-----END CERTIFICATE-----
Generated at Wed Sep 23 07:18:10 2026 by rpki-client