Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/5t-XYLzRoVlmUSzUe3KUwGwC7s8.mft
File:                     5t-XYLzRoVlmUSzUe3KUwGwC7s8.mft (raw, json)
Hash identifier:          CgkoX8abYsf7U0hUkOZRdi0xBdbUWeGALORJh0RDwUw=
Subject key identifier:   F2:FC:C0:E7:32:B1:B5:CB:75:57:09:BF:C8:E2:30:D7:5F:E5:57:B7
Authority key identifier: E6:DF:97:60:BC:D1:A1:59:66:51:2C:D4:7B:72:94:C0:6C:02:EE:CF
Certificate issuer:       /CN=A9173B07/serialNumber=E6DF9760BCD1A15966512CD47B7294C06C02EECF
Certificate serial:       08C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5t-XYLzRoVlmUSzUe3KUwGwC7s8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/5t-XYLzRoVlmUSzUe3KUwGwC7s8.mft
Manifest number:          08A8
Signing time:             Thu 24 Sep 2026 20:33:18 +0000
Manifest this update:     Thu 24 Sep 2026 20:33:17 +0000
Manifest next update:     Thu 01 Oct 2026 20:33:17 +0000
Files and hashes:         1: 5t-XYLzRoVlmUSzUe3KUwGwC7s8.crl (hash: MwL3oFHsEFoQoz/5IhZ9yqWV3B7MyIA47Tun3fWioLM=)
                          2: CB3F39368F9711EE927E086FC4F9AE02.roa (hash: I3no8jZBWGF0B/3NwaIAfa0xz/HnjGJbm3/3i5Bkr8M=)
                          3: 493468827C1A11EBABA86F44C4F9AE02.roa (hash: gQGxx4gihy9zKWGv8z0Mu143u5DoEGyfqqJKAVo1rfc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/5t-XYLzRoVlmUSzUe3KUwGwC7s8.crl
                          rsync://rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/5t-XYLzRoVlmUSzUe3KUwGwC7s8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5t-XYLzRoVlmUSzUe3KUwGwC7s8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 20:33:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2240 (0x8c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173B07, serialNumber=E6DF9760BCD1A15966512CD47B7294C06C02EECF
        Validity
            Not Before: Sep 24 20:33:17 2026 GMT
            Not After : Oct  1 20:33:17 2026 GMT
        Subject: CN=6ab5890e-ba04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3a:fd:56:63:94:95:3a:70:96:33:af:4b:3c:
                    b6:65:4b:77:0e:8e:ce:8f:6b:ad:df:fe:05:2a:86:
                    1b:33:04:f5:65:96:00:fc:24:19:1e:1b:6f:69:a2:
                    0a:38:13:22:9f:ef:77:5f:53:1c:f4:60:00:11:4b:
                    ac:00:ff:c8:4c:8d:45:2d:c0:c2:3c:9d:cf:a9:82:
                    18:de:1b:54:0d:61:73:94:08:98:b1:7b:48:cb:25:
                    1e:9f:0e:09:8d:05:29:33:93:88:e7:c5:8e:01:9a:
                    2c:2a:c6:3b:e8:15:9c:74:16:8d:fb:b6:29:cd:84:
                    f7:3c:03:08:98:4f:ef:12:f2:34:15:14:85:ce:4b:
                    ea:df:ee:da:b8:59:85:41:52:55:fc:76:c7:8b:0e:
                    08:af:10:a1:f8:e1:ed:5d:93:83:59:fb:a9:85:7c:
                    0f:e6:51:63:b6:3a:d4:85:29:b7:0e:04:ae:f6:da:
                    ff:f3:41:15:d4:75:9b:b3:77:01:e3:64:67:78:ee:
                    f2:7e:90:2c:93:43:13:91:f7:c4:70:3c:4a:01:06:
                    57:35:5a:eb:1b:04:1c:91:05:0d:74:31:0c:bd:9e:
                    73:14:4f:f8:ea:e5:35:95:0e:4d:1f:fa:be:24:76:
                    5b:a7:84:06:93:0c:dd:a1:87:35:e7:b3:e2:28:8e:
                    f5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:FC:C0:E7:32:B1:B5:CB:75:57:09:BF:C8:E2:30:D7:5F:E5:57:B7
            X509v3 Authority Key Identifier:
                keyid:E6:DF:97:60:BC:D1:A1:59:66:51:2C:D4:7B:72:94:C0:6C:02:EE:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/5t-XYLzRoVlmUSzUe3KUwGwC7s8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5t-XYLzRoVlmUSzUe3KUwGwC7s8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/5t-XYLzRoVlmUSzUe3KUwGwC7s8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:5b:09:56:4d:8c:cf:9b:cb:18:b6:46:95:01:ac:6b:b7:f3:
         93:31:bc:53:31:a4:85:f1:5e:a8:da:e8:22:f6:a7:7a:46:69:
         68:15:29:ec:1b:0e:16:05:52:66:e5:37:f1:28:a9:4b:a0:f5:
         d0:bf:6b:2d:97:ba:1f:26:02:98:b6:52:38:93:64:a2:9e:97:
         a3:24:3f:bc:92:df:bd:0f:06:5a:a0:d3:89:31:46:b7:c1:61:
         85:5b:b1:be:13:60:e0:9f:ac:71:7a:40:53:80:e5:5a:53:19:
         0a:f0:94:2f:fb:47:da:92:49:60:21:2b:63:5a:ef:95:a8:11:
         1f:f6:e2:37:35:58:b1:dc:5e:2c:8f:3b:35:fe:2b:3d:d6:0b:
         18:50:1e:0f:c8:f8:ec:7a:13:0a:a2:5a:39:8c:d7:6d:97:8d:
         b4:49:49:3c:69:b5:c0:99:9f:cb:98:57:f4:07:d3:5d:87:dc:
         e9:ff:4a:d3:5a:65:10:5b:ae:64:bc:37:44:14:b9:a2:bd:9b:
         bd:63:3d:10:52:7b:b2:c9:7b:41:8d:81:9e:cd:ae:50:f1:19:
         84:45:37:f5:36:7b:bf:ba:7d:fb:c1:63:96:45:d9:4e:e5:eb:
         ab:5a:ea:e8:bc:16:51:da:20:5f:0e:5a:3e:6b:b0:94:98:6b:
         29:22:60:bf
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzNCMDcxMTAvBgNVBAUTKEU2REY5NzYwQkNEMUExNTk2NjUxMkNENDdCNzI5NEMw
NkMwMkVFQ0YwHhcNMjYwOTI0MjAzMzE3WhcNMjYxMDAxMjAzMzE3WjAYMRYwFAYD
VQQDEw02YWI1ODkwZS1iYTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuTr9VmOUlTpwljOvSzy2ZUt3Do7Oj2ut3/4FKoYbMwT1ZZYA/CQZHhtvaaIK
OBMin+93X1Mc9GAAEUusAP/ITI1FLcDCPJ3PqYIY3htUDWFzlAiYsXtIyyUenw4J
jQUpM5OI58WOAZosKsY76BWcdBaN+7YpzYT3PAMImE/vEvI0FRSFzkvq3+7auFmF
QVJV/HbHiw4IrxCh+OHtXZODWfuphXwP5lFjtjrUhSm3DgSu9tr/80EV1HWbs3cB
42RneO7yfpAsk0MTkffEcDxKAQZXNVrrGwQckQUNdDEMvZ5zFE/46uU1lQ5NH/q+
JHZbp4QGkwzdoYc157PiKI71wQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPL8wOcy
sbXLdVcJv8jiMNdf5Ve3MB8GA1UdIwQYMBaAFObfl2C80aFZZlEs1HtylMBsAu7P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0IwNy9FRDlEM0RFODAy
RjUxMUVCQkNCOTEyMEJDNEY5QUUwMi81dC1YWUx6Um9WbG1VU3pVZTNLVXdHd0M3
czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzV0LVhZTHpSb1ZsbVVTelVlM0tVd0d3QzdzOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
M0IwNy9FRDlEM0RFODAyRjUxMUVCQkNCOTEyMEJDNEY5QUUwMi81dC1YWUx6Um9W
bG1VU3pVZTNLVXdHd0M3czgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZVsJVk2Mz5vLGLZGlQGsa7fzkzG8UzGkhfFeqNroIvanekZpaBUp7BsOFgVS
ZuU38SipS6D10L9rLZe6HyYCmLZSOJNkop6XoyQ/vJLfvQ8GWqDTiTFGt8FhhVux
vhNg4J+scXpAU4DlWlMZCvCUL/tH2pJJYCErY1rvlagRH/biNzVYsdxeLI87Nf4r
PdYLGFAeD8j47HoTCqJaOYzXbZeNtElJPGm1wJmfy5hX9AfTXYfc6f9K01plEFuu
ZLw3RBS5or2bvWM9EFJ7ssl7QY2Bns2uUPEZhEU39TZ7v7p9+8FjlkXZTuXrq1rq
6LwWUdogXw5aPmuwlJhrKSJgvw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 12:38:39 2026 by rpki-client