Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.mft
File:                     xPuRgT57oJnZHpxIFyCUuZBcDxE.mft (raw, json)
Hash identifier:          2kMByNsvUNYowf/5wOlDe8suQwfJWHz3a/VKsMgEZbo=
Subject key identifier:   8B:08:BA:EE:4B:FC:2D:BB:67:D2:4F:F1:58:81:D2:7E:9B:8B:67:87
Authority key identifier: C4:FB:91:81:3E:7B:A0:99:D9:1E:9C:48:17:20:94:B9:90:5C:0F:11
Certificate issuer:       /CN=A919B3BC/serialNumber=C4FB91813E7BA099D91E9C48172094B9905C0F11
Certificate serial:       1F2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPuRgT57oJnZHpxIFyCUuZBcDxE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.mft
Manifest number:          1F0E
Signing time:             Fri 02 Oct 2026 16:09:11 +0000
Manifest this update:     Fri 02 Oct 2026 16:09:10 +0000
Manifest next update:     Fri 09 Oct 2026 16:09:10 +0000
Files and hashes:         1: xPuRgT57oJnZHpxIFyCUuZBcDxE.crl (hash: 1281zLeV+cCM4US4g7MImHKDgLMvXIllyXZH5e9OH/8=)
                          2: 6553E9461A0611F08E7AD42AC4F9AE02.roa (hash: HxzSJQ72nx6phfJVkbYAuQ4gq7ZAkIN3NRVxvU93nY0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.crl
                          rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPuRgT57oJnZHpxIFyCUuZBcDxE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 16:09:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7983 (0x1f2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B3BC, serialNumber=C4FB91813E7BA099D91E9C48172094B9905C0F11
        Validity
            Not Before: Oct  2 16:09:10 2026 GMT
            Not After : Oct  9 16:09:10 2026 GMT
        Subject: CN=6abfd726-64ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a2:0e:f5:6e:dc:8f:40:be:91:64:5e:43:27:
                    26:b1:93:3b:53:d1:88:3c:9c:ec:9e:1e:5d:f5:85:
                    71:4c:46:70:da:8c:ad:47:1b:04:73:7b:59:c5:96:
                    9d:50:d9:9a:94:53:42:01:15:c8:db:9c:69:f5:ff:
                    75:24:71:20:30:28:a9:51:bb:4c:90:c4:54:b5:44:
                    b4:57:55:d2:d8:87:3c:cf:ed:c6:aa:34:9f:03:26:
                    17:39:bb:f7:32:cc:54:41:50:96:84:fa:1b:9d:92:
                    d7:7b:b6:4b:ea:9b:b5:d0:cc:f0:ae:de:1c:e9:39:
                    9e:a1:35:53:04:f8:dc:03:b1:04:af:7a:31:d0:04:
                    40:13:0f:1e:19:73:81:72:a8:d6:7b:08:09:01:29:
                    a5:ff:66:a8:e3:5a:83:1f:e0:0d:cf:55:b8:09:90:
                    3a:22:ef:2a:05:1a:64:9f:f2:b7:b5:ae:37:cd:ed:
                    55:ff:c3:a5:9b:23:c6:7b:3b:86:75:45:72:00:31:
                    5d:e7:72:95:cf:5a:1e:29:3e:1f:83:f5:b9:ca:1b:
                    0a:d5:aa:c8:56:bb:16:eb:6d:9d:71:d5:9e:90:33:
                    38:e0:f7:e4:70:2b:18:7a:d8:8a:3b:85:3e:cf:89:
                    60:0a:25:b4:a9:3c:b8:8f:54:54:d9:01:71:44:7d:
                    68:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:08:BA:EE:4B:FC:2D:BB:67:D2:4F:F1:58:81:D2:7E:9B:8B:67:87
            X509v3 Authority Key Identifier:
                keyid:C4:FB:91:81:3E:7B:A0:99:D9:1E:9C:48:17:20:94:B9:90:5C:0F:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPuRgT57oJnZHpxIFyCUuZBcDxE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:f7:8c:ca:28:80:dc:5b:d8:2f:8d:81:1f:d7:64:1e:22:b1:
         d5:b7:b3:18:24:0d:36:88:5d:5f:22:f8:af:30:08:76:14:08:
         a8:32:b0:35:ee:ea:a4:d1:8f:75:6e:1d:27:52:ee:05:d3:7a:
         ee:45:53:d0:b9:52:9a:be:ea:2e:30:9f:c9:d3:0a:6e:0a:f6:
         89:4b:4e:80:6d:95:bd:58:44:af:e4:4a:96:bb:54:33:b2:45:
         4a:48:71:0e:3f:5d:19:78:4b:21:81:9b:c9:52:21:88:be:31:
         a7:91:89:87:ff:99:2d:de:d9:08:66:f6:ea:0c:f9:ed:fa:21:
         cf:8f:6e:8d:1d:9d:50:0c:df:90:4e:a3:b7:fa:2d:1c:d5:7f:
         39:52:c1:22:f8:a0:8c:47:c9:0e:b1:48:23:1c:1b:ff:d9:52:
         f3:ad:39:19:07:6f:c3:88:47:c4:27:12:f7:b7:35:83:40:14:
         d8:77:80:84:05:53:68:06:28:5c:a9:4b:6d:b5:8a:00:33:07:
         3f:30:9f:0a:b2:9f:8a:0d:ce:b0:c6:43:6c:98:60:42:b8:df:
         4c:ea:89:1f:36:01:a4:9d:33:47:71:da:43:4a:78:14:15:4f:
         b2:e9:64:5e:38:0e:e0:96:69:3b:b8:a6:3c:b2:3a:bc:fd:4e:
         78:ba:bf:7b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHy8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUIzQkMxMTAvBgNVBAUTKEM0RkI5MTgxM0U3QkEwOTlEOTFFOUM0ODE3MjA5NEI5
OTA1QzBGMTEwHhcNMjYxMDAyMTYwOTEwWhcNMjYxMDA5MTYwOTEwWjAYMRYwFAYD
VQQDEw02YWJmZDcyNi02NGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqaIO9W7cj0C+kWReQycmsZM7U9GIPJzsnh5d9YVxTEZw2oytRxsEc3tZxZad
UNmalFNCARXI25xp9f91JHEgMCipUbtMkMRUtUS0V1XS2Ic8z+3GqjSfAyYXObv3
MsxUQVCWhPobnZLXe7ZL6pu10Mzwrt4c6TmeoTVTBPjcA7EEr3ox0ARAEw8eGXOB
cqjWewgJASml/2ao41qDH+ANz1W4CZA6Iu8qBRpkn/K3ta43ze1V/8OlmyPGezuG
dUVyADFd53KVz1oeKT4fg/W5yhsK1arIVrsW622dcdWekDM44PfkcCsYetiKO4U+
z4lgCiW0qTy4j1RU2QFxRH1oUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIsIuu5L
/C27Z9JP8ViB0n6bi2eHMB8GA1UdIwQYMBaAFMT7kYE+e6CZ2R6cSBcglLmQXA8R
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjNCQy8zODEyNDRGRThG
OUIxMUU2QkVDNUNCMjVDNEY5QUUwMi94UHVSZ1Q1N29KblpIcHhJRnlDVXVaQmNE
eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hQdVJnVDU3b0puWkhweElGeUNVdVpCY0R4RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QjNCQy8zODEyNDRGRThGOUIxMUU2QkVDNUNCMjVDNEY5QUUwMi94UHVSZ1Q1N29K
blpIcHhJRnlDVXVaQmNEeEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABPeMyiiA3FvYL42BH9dkHiKx1bezGCQNNohdXyL4rzAIdhQIqDKwNe7qpNGP
dW4dJ1LuBdN67kVT0LlSmr7qLjCfydMKbgr2iUtOgG2VvVhEr+RKlrtUM7JFSkhx
Dj9dGXhLIYGbyVIhiL4xp5GJh/+ZLd7ZCGb26gz57fohz49ujR2dUAzfkE6jt/ot
HNV/OVLBIvigjEfJDrFIIxwb/9lS8605GQdvw4hHxCcS97c1g0AU2HeAhAVTaAYo
XKlLbbWKADMHPzCfCrKfig3OsMZDbJhgQrjfTOqJHzYBpJ0zR3HaQ0p4FBVPsulk
XjgO4JZpO7imPLI6vP1OeLq/ew==
-----END CERTIFICATE-----
Generated at Sat Oct 3 15:41:55 2026 by rpki-client