Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft
File:                     XlEJvjS4HAy74OQ1mneBpGJLn80.mft (raw, json)
Hash identifier:          Q/xmpJXEvM17AKniAhLYmmjUh5x/DYxRz6YjA071ddM=
Subject key identifier:   4A:05:C2:D9:C7:6B:09:06:4D:1B:5C:6C:11:56:AC:99:01:D4:6F:95
Authority key identifier: 5E:51:09:BE:34:B8:1C:0C:BB:E0:E4:35:9A:77:81:A4:62:4B:9F:CD
Certificate issuer:       /CN=A91E5D61/serialNumber=5E5109BE34B81C0CBBE0E4359A7781A4624B9FCD
Certificate serial:       13E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft
Manifest number:          49A1
Signing time:             Sat 26 Sep 2026 14:21:19 +0000
Manifest this update:     Sat 26 Sep 2026 14:21:19 +0000
Manifest next update:     Sat 03 Oct 2026 14:21:19 +0000
Files and hashes:         1: XlEJvjS4HAy74OQ1mneBpGJLn80.crl (hash: 8MU4qwuMkYHKnkIamCi+fsbUDlNMmZHu7RT95A8Vjs4=)
                          2: 12300E80ECD911EEB21F7B7FC4F9AE02.roa (hash: o4HBq1xgFGnSG/Ii6CzGWaOkXzqOYR+uaeJex6SII34=)
                          3: 792023A8E0DD11EE86DB926AC4F9AE02.roa (hash: 4gjKi2/J4gdMF9qCPU0QoCnTz/IPP0XSqH8g8egd1HI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.crl
                          rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 14:21:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5093 (0x13e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D61, serialNumber=5E5109BE34B81C0CBBE0E4359A7781A4624B9FCD
        Validity
            Not Before: Sep 26 14:21:19 2026 GMT
            Not After : Oct  3 14:21:19 2026 GMT
        Subject: CN=6ab7d4df-ddf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d6:c2:18:8c:01:e1:bf:57:6a:d2:75:a2:ab:
                    6d:dc:27:fd:88:dc:39:75:73:3e:31:ca:9a:0f:dd:
                    4a:60:08:3c:18:c6:75:69:6a:dc:d7:65:36:5d:37:
                    2e:3b:f0:96:6e:de:90:a1:b1:83:fb:06:39:f6:d9:
                    50:79:d5:b0:de:7c:70:7d:c3:ba:a8:58:ba:38:7e:
                    f7:46:3a:ea:3c:75:a0:a0:2d:0f:44:7d:5e:42:fa:
                    1c:21:45:21:e1:2b:9d:03:94:32:8e:59:06:c2:1c:
                    da:ca:1e:40:0a:59:a2:77:58:22:69:dc:41:99:c1:
                    00:30:81:f2:61:65:00:f3:3f:12:3c:85:48:05:e5:
                    19:9c:d4:dc:b3:91:40:88:ad:d6:f3:f1:0f:ae:47:
                    ed:62:4f:e3:ec:bf:b4:2c:fe:b1:71:aa:cf:5e:b3:
                    72:93:92:5a:82:2b:53:63:24:b0:e1:2b:95:17:2e:
                    1f:42:ae:c3:86:7b:05:6d:eb:42:bb:51:3d:8a:56:
                    e6:7a:3f:2d:c0:fa:09:f8:b5:34:06:5e:94:00:5c:
                    01:87:42:06:9d:8e:d0:0a:da:3d:21:61:ca:22:bd:
                    11:11:90:08:86:44:b9:ca:c8:b9:b6:7b:29:d2:97:
                    d1:95:c5:f7:f8:1b:83:06:89:e4:c6:7b:ce:11:aa:
                    3f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:05:C2:D9:C7:6B:09:06:4D:1B:5C:6C:11:56:AC:99:01:D4:6F:95
            X509v3 Authority Key Identifier:
                keyid:5E:51:09:BE:34:B8:1C:0C:BB:E0:E4:35:9A:77:81:A4:62:4B:9F:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:b6:7d:0f:f5:74:b5:fe:7b:61:c9:09:b3:26:da:8b:70:9e:
         e5:3a:cd:8f:4b:be:21:3c:75:33:2a:66:d4:59:d3:5a:6d:97:
         65:a9:42:f6:36:51:87:2e:e7:66:43:c8:79:7e:2c:9b:6d:eb:
         01:4a:84:d4:dc:76:83:af:ca:c2:0c:28:fb:2b:01:4a:1d:85:
         15:ad:2b:92:53:e8:6d:b8:1c:65:ed:7d:cf:09:cd:b6:a6:9a:
         81:3a:c1:14:43:ea:c3:51:41:12:38:17:ed:4a:1e:8b:36:ee:
         01:82:52:26:5b:03:0d:a6:de:fd:91:e1:8c:e4:da:3a:44:40:
         5b:88:4f:8f:ec:2a:5f:00:40:6d:7a:e2:3f:9f:ed:6f:9e:30:
         79:77:6e:0e:83:89:56:19:f2:15:0f:ff:0a:a2:55:8a:59:34:
         87:03:28:01:48:e1:db:c2:83:95:53:11:31:73:bd:c6:c1:8f:
         78:ac:87:75:81:99:57:f0:2d:b9:fd:45:79:86:8c:76:5f:b6:
         d1:88:9e:69:57:73:62:6b:09:7a:20:67:01:15:f1:5b:3f:9b:
         30:38:70:46:1b:1b:25:02:e7:ed:cc:2c:9e:2d:b5:a1:d2:fc:
         0c:ab:51:bc:e2:e8:9a:46:ae:77:b1:21:7e:16:f2:6e:75:7c:
         11:e4:2f:84
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICE+UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTVENjExMTAvBgNVBAUTKDVFNTEwOUJFMzRCODFDMENCQkUwRTQzNTlBNzc4MUE0
NjI0QjlGQ0QwHhcNMjYwOTI2MTQyMTE5WhcNMjYxMDAzMTQyMTE5WjAYMRYwFAYD
VQQDEw02YWI3ZDRkZi1kZGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0NbCGIwB4b9XatJ1oqtt3Cf9iNw5dXM+McqaD91KYAg8GMZ1aWrc12U2XTcu
O/CWbt6QobGD+wY59tlQedWw3nxwfcO6qFi6OH73RjrqPHWgoC0PRH1eQvocIUUh
4SudA5QyjlkGwhzayh5AClmid1giadxBmcEAMIHyYWUA8z8SPIVIBeUZnNTcs5FA
iK3W8/EPrkftYk/j7L+0LP6xcarPXrNyk5JagitTYySw4SuVFy4fQq7DhnsFbetC
u1E9ilbmej8twPoJ+LU0Bl6UAFwBh0IGnY7QCto9IWHKIr0REZAIhkS5ysi5tnsp
0pfRlcX3+BuDBonkxnvOEao/CQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEoFwtnH
awkGTRtcbBFWrJkB1G+VMB8GA1UdIwQYMBaAFF5RCb40uBwMu+DkNZp3gaRiS5/N
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS8wQzZBMEM5RTFE
NzkxMUUyODc5RTM4QzUwOEIwMkNEMi9YbEVKdmpTNEhBeTc0T1ExbW5lQnBHSkxu
ODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hsRUp2alM0SEF5NzRPUTFtbmVCcEdKTG44MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NUQ2MS8wQzZBMEM5RTFENzkxMUUyODc5RTM4QzUwOEIwMkNEMi9YbEVKdmpTNEhB
eTc0T1ExbW5lQnBHSkxuODAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAebZ9D/V0tf57YckJsybai3Ce5TrNj0u+ITx1Mypm1FnTWm2XZalC9jZRhy7n
ZkPIeX4sm23rAUqE1Nx2g6/Kwgwo+ysBSh2FFa0rklPobbgcZe19zwnNtqaagTrB
FEPqw1FBEjgX7UoeizbuAYJSJlsDDabe/ZHhjOTaOkRAW4hPj+wqXwBAbXriP5/t
b54weXduDoOJVhnyFQ//CqJVilk0hwMoAUjh28KDlVMRMXO9xsGPeKyHdYGZV/At
uf1FeYaMdl+20YieaVdzYmsJeiBnARXxWz+bMDhwRhsbJQLn7cwsni21odL8DKtR
vOLomkaud7EhfhbybnV8EeQvhA==
-----END CERTIFICATE-----
Generated at Mon Sep 28 06:22:48 2026 by rpki-client