Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F3BA/FF20EBDC013D11EBA000126BC4F9AE02/5GI8_UQ-YjLybCPoH9-XWLJvOyw.mft
File:                     5GI8_UQ-YjLybCPoH9-XWLJvOyw.mft (raw, json)
Hash identifier:          q7QRAJ+/slHGnHm23/N632FJ7g/jV0sXJVcWaOPhRSI=
Subject key identifier:   24:51:6A:81:B1:33:33:00:61:CB:6D:F2:C4:4E:89:9B:29:11:16:01
Authority key identifier: E4:62:3C:FD:44:3E:62:32:F2:6C:23:E8:1F:DF:97:58:B2:6F:3B:2C
Certificate issuer:       /CN=A914F3BA/serialNumber=E4623CFD443E6232F26C23E81FDF9758B26F3B2C
Certificate serial:       0889
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GI8_UQ-YjLybCPoH9-XWLJvOyw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914F3BA/FF20EBDC013D11EBA000126BC4F9AE02/5GI8_UQ-YjLybCPoH9-XWLJvOyw.mft
Manifest number:          0883
Signing time:             Wed 22 Jul 2026 21:10:37 +0000
Manifest this update:     Wed 22 Jul 2026 21:10:36 +0000
Manifest next update:     Wed 29 Jul 2026 21:10:36 +0000
Files and hashes:         1: 5GI8_UQ-YjLybCPoH9-XWLJvOyw.crl (hash: Ak2NUtrV1QUZHgmB70QILkgcYCMfIqNYkN5s/oaOz0g=)
                          2: D0D7EE48343211EFBF2C280DC4F9AE02.roa (hash: rOOLtipm7iwZ1G3DRtj3Ie/BnVh8OmZXs4JyGI1GLtk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914F3BA/FF20EBDC013D11EBA000126BC4F9AE02/5GI8_UQ-YjLybCPoH9-XWLJvOyw.crl
                          rsync://rpki.apnic.net/member_repository/A914F3BA/FF20EBDC013D11EBA000126BC4F9AE02/5GI8_UQ-YjLybCPoH9-XWLJvOyw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GI8_UQ-YjLybCPoH9-XWLJvOyw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:10:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2185 (0x889)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914F3BA, serialNumber=E4623CFD443E6232F26C23E81FDF9758B26F3B2C
        Validity
            Not Before: Jul 22 21:10:36 2026 GMT
            Not After : Jul 29 21:10:36 2026 GMT
        Subject: CN=6a6131cc-738d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:01:ff:38:c0:b4:cc:fa:63:fe:69:61:ab:af:
                    98:55:71:2b:fa:54:3d:45:6b:d4:90:f1:34:ea:94:
                    b8:04:4c:e7:19:c1:49:ec:47:fe:22:7d:16:c0:80:
                    5b:c8:6e:af:85:3e:35:b2:6a:00:f3:09:00:e4:43:
                    51:9d:82:eb:4b:8c:e8:78:f9:c2:7a:02:3b:f0:20:
                    81:9e:50:df:ed:46:11:d3:29:4d:be:a5:a2:4f:db:
                    1a:68:d6:76:05:aa:00:3b:39:76:eb:ba:d1:9b:06:
                    a1:28:28:5a:f9:89:21:0a:ee:bd:39:a5:ea:72:14:
                    2f:42:3a:23:1d:ab:29:70:96:c0:66:22:88:41:bd:
                    fc:7a:ea:39:d3:77:81:12:3c:fd:fe:7e:2e:00:ef:
                    6b:99:54:d8:87:a2:cc:d6:25:20:21:40:3a:69:bd:
                    b9:c3:01:94:34:0d:84:7e:82:98:d9:8f:a1:37:5f:
                    72:a5:df:a4:39:b0:51:c8:4b:ce:97:f0:b9:60:27:
                    f2:3d:ee:13:b5:49:3e:22:a1:f4:b2:8f:38:4e:68:
                    5d:d1:ec:a2:9b:20:fa:0d:7d:78:4a:c7:5c:f7:55:
                    ff:94:35:73:96:68:16:08:61:40:34:b0:74:6b:0b:
                    0b:c2:5d:f0:cc:f5:86:fb:16:ba:81:3a:c4:02:14:
                    ea:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:51:6A:81:B1:33:33:00:61:CB:6D:F2:C4:4E:89:9B:29:11:16:01
            X509v3 Authority Key Identifier:
                keyid:E4:62:3C:FD:44:3E:62:32:F2:6C:23:E8:1F:DF:97:58:B2:6F:3B:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914F3BA/FF20EBDC013D11EBA000126BC4F9AE02/5GI8_UQ-YjLybCPoH9-XWLJvOyw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GI8_UQ-YjLybCPoH9-XWLJvOyw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F3BA/FF20EBDC013D11EBA000126BC4F9AE02/5GI8_UQ-YjLybCPoH9-XWLJvOyw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:f5:47:86:da:6d:cd:ab:d4:be:09:7d:e2:c6:26:16:b9:35:
         76:a3:8c:b2:b3:d8:4a:7d:c3:f8:24:b6:e3:64:f9:7d:d6:ae:
         ea:47:4a:d5:ba:7a:06:ba:8d:66:80:87:d8:01:d6:88:62:4c:
         64:37:af:2f:40:04:6a:d4:1a:74:a7:9a:d0:fe:4b:6d:ac:8c:
         4f:e2:ff:a8:46:69:1f:ed:b1:59:c6:51:5c:e1:45:47:51:35:
         42:3f:ae:df:71:22:b0:f8:bc:07:6e:a5:58:ca:84:db:64:2a:
         cc:4e:75:19:ce:ae:7e:0f:9f:8f:31:89:ec:75:41:fe:a2:e8:
         16:cf:b1:f6:75:ec:7b:57:5f:25:ca:07:af:81:75:78:b1:e1:
         38:d1:93:f0:dc:54:89:c1:6e:18:ba:b5:42:87:c1:70:7e:ac:
         ff:30:20:c2:ec:06:12:6c:21:9a:a0:b5:f4:17:b2:4d:af:ac:
         80:fa:75:4e:3d:4a:0b:9d:cb:ef:6e:b1:2e:de:9d:d4:c1:ed:
         23:d5:c5:f1:1a:53:3e:42:82:3b:0b:02:d8:ee:8b:f5:aa:a3:
         6e:b0:34:b4:96:58:0a:fd:6b:65:0b:ff:4c:09:df:9d:3e:7e:
         02:31:89:5f:b9:6a:e6:84:81:7a:b7:90:ba:f0:85:32:a8:43:
         cb:8b:18:87
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEYzQkExMTAvBgNVBAUTKEU0NjIzQ0ZENDQzRTYyMzJGMjZDMjNFODFGREY5NzU4
QjI2RjNCMkMwHhcNMjYwNzIyMjExMDM2WhcNMjYwNzI5MjExMDM2WjAYMRYwFAYD
VQQDEw02YTYxMzFjYy03MzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkgH/OMC0zPpj/mlhq6+YVXEr+lQ9RWvUkPE06pS4BEznGcFJ7Ef+In0WwIBb
yG6vhT41smoA8wkA5ENRnYLrS4zoePnCegI78CCBnlDf7UYR0ylNvqWiT9saaNZ2
BaoAOzl267rRmwahKCha+YkhCu69OaXqchQvQjojHaspcJbAZiKIQb38euo503eB
Ejz9/n4uAO9rmVTYh6LM1iUgIUA6ab25wwGUNA2EfoKY2Y+hN19ypd+kObBRyEvO
l/C5YCfyPe4TtUk+IqH0so84Tmhd0eyimyD6DX14Ssdc91X/lDVzlmgWCGFANLB0
awsLwl3wzPWG+xa6gTrEAhTqHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCRRaoGx
MzMAYctt8sROiZspERYBMB8GA1UdIwQYMBaAFORiPP1EPmIy8mwj6B/fl1iybzss
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjNCQS9GRjIwRUJEQzAx
M0QxMUVCQTAwMDEyNkJDNEY5QUUwMi81R0k4X1VRLVlqTHliQ1BvSDktWFdMSnZP
eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVHSThfVVEtWWpMeWJDUG9IOS1YV0xKdk95dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RjNCQS9GRjIwRUJEQzAxM0QxMUVCQTAwMDEyNkJDNEY5QUUwMi81R0k4X1VRLVlq
THliQ1BvSDktWFdMSnZPeXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUPVHhtptzavUvgl94sYmFrk1dqOMsrPYSn3D+CS242T5fdau6kdK1bp6BrqN
ZoCH2AHWiGJMZDevL0AEatQadKea0P5LbayMT+L/qEZpH+2xWcZRXOFFR1E1Qj+u
33EisPi8B26lWMqE22QqzE51Gc6ufg+fjzGJ7HVB/qLoFs+x9nXse1dfJcoHr4F1
eLHhONGT8NxUicFuGLq1QofBcH6s/zAgwuwGEmwhmqC19BeyTa+sgPp1Tj1KC53L
726xLt6d1MHtI9XF8RpTPkKCOwsC2O6L9aqjbrA0tJZYCv1rZQv/TAnfnT5+AjGJ
X7lq5oSBereQuvCFMqhDy4sYhw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:06:50 2026 by rpki-client