Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft
File:                     xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft (raw, json)
Hash identifier:          bxFlmwiU1XQdZDr0sKFw1XhU8Yo/g4A5hUxvAbR365U=
Subject key identifier:   1B:26:B4:42:DE:96:2C:A2:1D:67:8A:8C:17:46:68:17:74:A9:BD:A0
Authority key identifier: C5:45:25:E9:70:5B:D6:9D:61:42:4D:BE:E7:B0:49:3F:5F:D6:F0:A4
Certificate issuer:       /CN=A912D1D5/serialNumber=C54525E9705BD69D61424DBEE7B0493F5FD6F0A4
Certificate serial:       0262
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUUl6XBb1p1hQk2-57BJP1_W8KQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft
Manifest number:          0256
Signing time:             Wed 13 May 2026 02:27:00 +0000
Manifest this update:     Wed 13 May 2026 02:27:00 +0000
Manifest next update:     Wed 20 May 2026 02:27:00 +0000
Files and hashes:         1: xUUl6XBb1p1hQk2-57BJP1_W8KQ.crl (hash: 8RmLyDc7pGiKnQpmq2RcsTZeFcytLNEW/urdYl88Hcc=)
                          2: 19E19DA0E5CE11EDB697BC74C4F9AE02.roa (hash: 41mYeLJTrr6m5wB9HGw37UApRa2JZ2ZaJVCcumD/aT0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.crl
                          rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUUl6XBb1p1hQk2-57BJP1_W8KQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:26:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 610 (0x262)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D1D5, serialNumber=C54525E9705BD69D61424DBEE7B0493F5FD6F0A4
        Validity
            Not Before: May 13 02:27:00 2026 GMT
            Not After : May 20 02:27:00 2026 GMT
        Subject: CN=6a03e174-0ba9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:77:81:b4:5d:a9:77:98:ad:4c:fa:bb:de:5e:
                    77:71:4c:8e:8c:45:40:ea:5f:6e:9b:39:88:a3:f9:
                    ea:29:a1:cb:4d:2c:1e:4b:67:dc:98:79:8e:82:62:
                    5b:aa:5f:6a:ef:41:ee:4b:6d:ea:43:02:ba:a2:09:
                    32:4b:a9:e4:01:8a:c6:3c:a7:77:d6:48:09:db:f8:
                    af:c9:82:0f:72:3c:d4:32:cc:c6:d8:74:a3:15:9d:
                    46:4f:db:aa:6f:2f:31:2a:be:53:2c:a0:d0:d3:bb:
                    d7:6f:3e:7e:d3:33:d6:2f:08:3a:f6:54:c2:c4:23:
                    89:a5:cb:b9:46:65:2c:4c:85:68:bb:9e:86:51:6c:
                    d4:cd:df:42:1b:b6:2f:a6:da:76:e0:0d:dd:a0:a9:
                    17:58:6c:46:b7:5e:56:dc:ed:5a:a9:72:d5:d7:e5:
                    30:59:0b:6c:8e:04:b0:6c:fe:7e:3c:1c:80:61:a3:
                    97:1c:9b:b7:9b:f9:6e:a9:8b:1d:64:fd:22:00:e6:
                    4b:98:3c:2c:0e:5b:16:7b:36:48:a4:2e:45:f6:6c:
                    a2:9a:47:21:29:67:ac:e9:49:a5:fb:ca:f9:69:7f:
                    1d:48:0f:1d:ed:fe:de:cd:aa:6a:98:ab:9b:89:bc:
                    1a:e5:b7:15:2a:bd:a9:78:25:e9:8c:ae:b3:3c:47:
                    66:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:26:B4:42:DE:96:2C:A2:1D:67:8A:8C:17:46:68:17:74:A9:BD:A0
            X509v3 Authority Key Identifier:
                keyid:C5:45:25:E9:70:5B:D6:9D:61:42:4D:BE:E7:B0:49:3F:5F:D6:F0:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUUl6XBb1p1hQk2-57BJP1_W8KQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:de:e8:90:60:fe:42:31:79:c6:07:d3:9c:1c:62:74:82:3e:
         2c:8f:f4:78:12:75:5a:80:9f:ec:b3:93:a0:a7:a2:bc:39:6c:
         6d:dd:d5:e3:19:30:df:2c:da:a7:d0:71:41:29:a6:96:40:74:
         87:20:5c:7b:45:d5:ff:67:3c:07:08:7c:f2:81:43:33:34:8d:
         49:39:69:7b:ce:61:62:0d:0e:b8:1e:37:d0:29:88:18:e8:0c:
         aa:a4:ac:c2:9e:c6:75:c7:8c:a7:3b:fd:dc:d4:da:0a:af:7d:
         80:63:a9:60:2b:79:55:26:7e:e1:98:1c:a9:b2:2c:f1:15:65:
         04:89:52:3d:cb:35:aa:e7:07:7d:39:c5:7a:a9:5b:ed:94:79:
         3a:99:a7:d1:cc:17:44:8f:44:bb:6f:8e:9d:66:bd:64:26:12:
         8b:36:b5:94:ac:fc:9a:65:ff:92:f2:de:e9:5f:4f:87:56:69:
         5c:40:47:7d:0b:8f:c6:d8:89:7a:8e:64:91:43:f9:e4:2a:20:
         43:c9:a5:9d:a0:e1:87:76:de:00:9a:4d:b0:17:15:80:f1:50:
         6d:51:9c:fd:5c:56:59:47:b1:cc:a5:59:9c:6c:99:0b:d4:7c:
         76:56:93:11:39:64:eb:fd:66:b8:95:09:56:e5:6a:32:67:f9:
         3d:20:fc:07
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkQxRDUxMTAvBgNVBAUTKEM1NDUyNUU5NzA1QkQ2OUQ2MTQyNERCRUU3QjA0OTNG
NUZENkYwQTQwHhcNMjYwNTEzMDIyNzAwWhcNMjYwNTIwMDIyNzAwWjAYMRYwFAYD
VQQDEw02YTAzZTE3NC0wYmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw3eBtF2pd5itTPq73l53cUyOjEVA6l9umzmIo/nqKaHLTSweS2fcmHmOgmJb
ql9q70HuS23qQwK6ogkyS6nkAYrGPKd31kgJ2/ivyYIPcjzUMszG2HSjFZ1GT9uq
by8xKr5TLKDQ07vXbz5+0zPWLwg69lTCxCOJpcu5RmUsTIVou56GUWzUzd9CG7Yv
ptp24A3doKkXWGxGt15W3O1aqXLV1+UwWQtsjgSwbP5+PByAYaOXHJu3m/luqYsd
ZP0iAOZLmDwsDlsWezZIpC5F9myimkchKWes6Uml+8r5aX8dSA8d7f7ezapqmKub
ibwa5bcVKr2peCXpjK6zPEdmgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBsmtELe
liyiHWeKjBdGaBd0qb2gMB8GA1UdIwQYMBaAFMVFJelwW9adYUJNvuewST9f1vCk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDFENS8zNDMzNjFFRUND
OEMxMUVEQTRDMUExNDNDNEY5QUUwMi94VVVsNlhCYjFwMWhRazItNTdCSlAxX1c4
S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hVVWw2WEJiMXAxaFFrMi01N0JKUDFfVzhLUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RDFENS8zNDMzNjFFRUNDOEMxMUVEQTRDMUExNDNDNEY5QUUwMi94VVVsNlhCYjFw
MWhRazItNTdCSlAxX1c4S1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMN7okGD+QjF5xgfTnBxidII+LI/0eBJ1WoCf7LOToKeivDlsbd3V4xkw3yza
p9BxQSmmlkB0hyBce0XV/2c8Bwh88oFDMzSNSTlpe85hYg0OuB430CmIGOgMqqSs
wp7GdceMpzv93NTaCq99gGOpYCt5VSZ+4ZgcqbIs8RVlBIlSPcs1qucHfTnFeqlb
7ZR5Opmn0cwXRI9Eu2+OnWa9ZCYSiza1lKz8mmX/kvLe6V9Ph1ZpXEBHfQuPxtiJ
eo5kkUP55CogQ8mlnaDhh3beAJpNsBcVgPFQbVGc/VxWWUexzKVZnGyZC9R8dlaT
ETlk6/1muJUJVuVqMmf5PSD8Bw==
-----END CERTIFICATE-----
Generated at Wed May 13 12:38:05 2026 by rpki-client