Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft
File:                     SI-waXxEaWD_2iZD5rybRLo9HKw.mft (raw, json)
Hash identifier:          cBiiX3ooj+HgCegE+UeAA7LW35vtYmXtySwVE2mdDjg=
Subject key identifier:   7B:16:48:30:BF:38:15:DD:1F:18:3C:8A:47:E6:8A:07:9D:24:5D:3D
Authority key identifier: 48:8F:B0:69:7C:44:69:60:FF:DA:26:43:E6:BC:9B:44:BA:3D:1C:AC
Certificate issuer:       /CN=A91CFA8E/serialNumber=488FB0697C446960FFDA2643E6BC9B44BA3D1CAC
Certificate serial:       A2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SI-waXxEaWD_2iZD5rybRLo9HKw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft
Manifest number:          9F
Signing time:             Wed 23 Sep 2026 01:51:32 +0000
Manifest this update:     Wed 23 Sep 2026 01:51:31 +0000
Manifest next update:     Wed 30 Sep 2026 01:51:31 +0000
Files and hashes:         1: SI-waXxEaWD_2iZD5rybRLo9HKw.crl (hash: zXJq1Xi34nLPqI6Zelo5rDL4/Sbs/y3Fz0RUWxLJyhc=)
                          2: 160AF8E8CE8D11F0BE6FB51EC4F9AE02.roa (hash: 3OV5G0MzOx3A7cffbPL2mxy1J9i86/E4uGYCDCcUs/I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.crl
                          rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SI-waXxEaWD_2iZD5rybRLo9HKw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 01:51:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162 (0xa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFA8E, serialNumber=488FB0697C446960FFDA2643E6BC9B44BA3D1CAC
        Validity
            Not Before: Sep 23 01:51:31 2026 GMT
            Not After : Sep 30 01:51:31 2026 GMT
        Subject: CN=6ab330a4-1516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9e:43:dc:03:d3:ad:79:be:b3:9b:af:a6:d3:
                    3e:32:01:25:ed:12:63:30:89:5e:08:c5:ab:74:bf:
                    38:bb:3f:92:f5:af:0c:03:81:83:ab:34:e8:89:c0:
                    23:d8:49:a7:e2:42:04:62:8f:f7:3e:72:92:d5:f3:
                    13:99:70:3d:bf:f1:42:95:fb:45:f9:0f:49:1c:8f:
                    c3:ab:19:1a:e8:15:3c:f1:86:8e:a6:8f:c6:e0:31:
                    d9:9e:a2:31:e3:93:2a:23:7e:3a:e7:28:f0:72:31:
                    7f:28:59:d4:53:18:4b:77:27:a3:49:52:3c:19:f2:
                    24:aa:7a:af:7a:b4:78:4a:00:0c:fe:ec:fd:c8:3d:
                    29:5e:68:46:98:49:4f:b8:fd:0e:bf:61:fe:11:c1:
                    06:f7:e1:de:5e:3a:98:84:4a:6f:f5:17:19:97:a0:
                    39:74:49:27:e4:1c:f2:10:e5:7f:66:7d:b8:fb:86:
                    36:b7:88:91:39:a7:88:00:37:80:a8:8e:fa:29:68:
                    e1:7a:97:72:3f:29:ad:4f:ca:fc:b5:e9:f5:12:59:
                    b3:18:ac:05:a5:7a:96:40:4e:6a:d3:4f:a9:04:79:
                    16:8b:d5:8b:9d:db:3a:72:fc:9f:83:14:11:80:b0:
                    3a:67:83:57:5f:93:8c:fb:28:f4:ab:dc:ee:86:fb:
                    d2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:16:48:30:BF:38:15:DD:1F:18:3C:8A:47:E6:8A:07:9D:24:5D:3D
            X509v3 Authority Key Identifier:
                keyid:48:8F:B0:69:7C:44:69:60:FF:DA:26:43:E6:BC:9B:44:BA:3D:1C:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SI-waXxEaWD_2iZD5rybRLo9HKw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/6B9A2338CE6F11F0A323DF55C4F9AE02/SI-waXxEaWD_2iZD5rybRLo9HKw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:d7:9d:dc:50:47:b6:a7:11:d1:22:74:d2:11:50:03:48:58:
         a4:4e:c2:17:54:84:39:d2:11:be:f0:8d:03:dc:ae:56:e8:48:
         f8:8d:7d:d4:13:ab:d6:91:df:0b:d8:cb:c4:5a:0f:36:09:f6:
         2d:35:af:80:3a:3c:8a:aa:c1:79:9d:fc:89:53:37:a7:2f:aa:
         cb:27:1b:33:af:e3:78:9f:e9:17:28:c8:44:ea:d0:23:8f:db:
         c1:84:14:60:a2:69:02:d2:d7:52:f9:b7:43:b0:44:f1:66:e7:
         45:42:1a:08:ac:46:fd:20:79:bf:7c:bc:4d:30:08:20:2d:87:
         c6:50:7c:2f:9c:db:75:8f:a1:d1:07:d1:ed:a1:39:5c:d1:93:
         c4:d6:ac:0a:d6:30:af:1b:84:30:a7:91:e5:70:fd:36:4f:2e:
         16:c7:54:13:ae:7b:1f:ac:dd:ac:cc:2c:c6:d4:d1:dc:8f:00:
         f0:d0:42:16:50:fd:85:53:35:8d:d9:26:69:21:fe:b2:15:ec:
         ae:27:f9:e5:1b:64:63:b1:b4:a2:bc:ca:23:27:53:91:83:f2:
         f1:c6:a5:9b:9c:42:6a:fd:3d:b0:c6:6c:57:c5:a4:26:7d:4e:
         76:17:53:ff:70:21:79:4f:78:0e:88:d6:ee:ef:9c:30:01:24:
         2e:c1:93:12
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0ZBOEUxMTAvBgNVBAUTKDQ4OEZCMDY5N0M0NDY5NjBGRkRBMjY0M0U2QkM5QjQ0
QkEzRDFDQUMwHhcNMjYwOTIzMDE1MTMxWhcNMjYwOTMwMDE1MTMxWjAYMRYwFAYD
VQQDEw02YWIzMzBhNC0xNTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp55D3APTrXm+s5uvptM+MgEl7RJjMIleCMWrdL84uz+S9a8MA4GDqzToicAj
2Emn4kIEYo/3PnKS1fMTmXA9v/FClftF+Q9JHI/Dqxka6BU88YaOpo/G4DHZnqIx
45MqI3465yjwcjF/KFnUUxhLdyejSVI8GfIkqnqverR4SgAM/uz9yD0pXmhGmElP
uP0Ov2H+EcEG9+HeXjqYhEpv9RcZl6A5dEkn5BzyEOV/Zn24+4Y2t4iROaeIADeA
qI76KWjhepdyPymtT8r8ten1ElmzGKwFpXqWQE5q00+pBHkWi9WLnds6cvyfgxQR
gLA6Z4NXX5OM+yj0q9zuhvvSUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHsWSDC/
OBXdHxg8ikfmigedJF09MB8GA1UdIwQYMBaAFEiPsGl8RGlg/9omQ+a8m0S6PRys
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkE4RS82QjlBMjMzOENF
NkYxMUYwQTMyM0RGNTVDNEY5QUUwMi9TSS13YVh4RWFXRF8yaVpENXJ5YlJMbzlI
S3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1NJLXdhWHhFYVdEXzJpWkQ1cnliUkxvOUhLdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RkE4RS82QjlBMjMzOENFNkYxMUYwQTMyM0RGNTVDNEY5QUUwMi9TSS13YVh4RWFX
RF8yaVpENXJ5YlJMbzlIS3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAe9ed3FBHtqcR0SJ00hFQA0hYpE7CF1SEOdIRvvCNA9yuVuhI+I191BOr1pHf
C9jLxFoPNgn2LTWvgDo8iqrBeZ38iVM3py+qyycbM6/jeJ/pFyjIROrQI4/bwYQU
YKJpAtLXUvm3Q7BE8WbnRUIaCKxG/SB5v3y8TTAIIC2HxlB8L5zbdY+h0QfR7aE5
XNGTxNasCtYwrxuEMKeR5XD9Nk8uFsdUE657H6zdrMwsxtTR3I8A8NBCFlD9hVM1
jdkmaSH+shXsrif55RtkY7G0orzKIydTkYPy8calm5xCav09sMZsV8WkJn1OdhdT
/3AheU94DojW7u+cMAEkLsGTEg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 19:42:04 2026 by rpki-client