Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
File:                     xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft (raw, json)
Hash identifier:          5w978myLiVzcnlktQKZizhEMEIIjhOjPTNLzq5EyAhI=
Subject key identifier:   50:AF:46:0E:44:CB:EE:49:D6:23:80:73:D2:38:7D:60:1D:7A:A5:0C
Authority key identifier: C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39
Certificate issuer:       /CN=A91D51A0/serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539
Certificate serial:       04EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
Manifest number:          04A5
Signing time:             Thu 26 Mar 2026 23:49:55 +0000
Manifest this update:     Thu 26 Mar 2026 23:49:55 +0000
Manifest next update:     Thu 02 Apr 2026 23:49:55 +0000
Files and hashes:         1: xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl (hash: Upb743sf7yZ6wvN/3xSOGz+a3b1kvWDwFwrXwkhSNJA=)
                          2: F179A39E0F0011F1AA61A6530E3D8C67.roa (hash: z5YNw9oqROxQNw3poTnbGicNOXVgbGeLROsEVEcC0k8=)
                          3: F0259B5AC4BF11F0B2402975C4F9AE02.roa (hash: Sro4OLk/DSMCZn4K0Wy038cX6/xvomXtZ3z40SAC7Vo=)
                          4: 8FD0B12E400311EEBF5A8B52C4F9AE02.roa (hash: Fu109TGeOUOlOrI2XIFdihyRA7Fr+8/prz/x7VcBoCE=)
                          5: 350FEB88D40611EDADEE3D1EC4F9AE02.roa (hash: D9z3NJUY8YNFb7cpJMaWfb8axb5uXCoUzET824J42QI=)
                          6: 6F8A81CCF30C11ED94750772C4F9AE02.roa (hash: +lysYAiE7tAFh6WIuGOmgLYRebmV1ikcUzBVaS8mik0=)
                          7: D83192B0152B11EE85ED4B1DC4F9AE02.roa (hash: EMlA3Q/StxXuEEyaCIdkb3FX9P3Rrmoemgp7n81D5+4=)
                          8: D46B2C087F8711EC81E76A59C4F9AE02.roa (hash: hUayntDdKbP8YD8KFW+2g7hE9d13fe7KDzMZQmXs21I=)
                          9: C3261EF826DF11ED94E18118C4F9AE02.roa (hash: hTS0InVz4oILVGeujjlkHVbEAsw1NZRZHIk3vW8oIWw=)
                          10: 86131D8AEA5D11ED80641166C4F9AE02.roa (hash: 4zgXlz4lhWhr5EJp9fYE8JRkFNuqjMzkEZkN69QI13A=)
                          11: 5CA964A68AC111EC91D19A11C4F9AE02.roa (hash: gvK8maqGxYp4lJeyX+W8kif65fkOj90NEZevEg0iRXM=)
                          12: 874B6EBC0F6E11F190C9BD30293D8C67.roa (hash: HqtrqO9wtp4Bw9to/IZBSTc+H4UcScxKGJWTDnLTim8=)
                          13: C5B45CA014F411F180EDEBBD193D8C67.roa (hash: 1jcExNuLyHWYrWjBJRhFw6fSw8L5FWvGvk7sIxrsGAg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl
                          rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 23:49:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1262 (0x4ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D51A0, serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539
        Validity
            Not Before: Mar 26 23:49:55 2026 GMT
            Not After : Apr  2 23:49:55 2026 GMT
        Subject: CN=69c5c623-1927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ae:c9:39:15:85:00:52:1f:bc:7b:11:d7:2b:
                    6a:9b:65:6d:51:63:21:dc:56:7a:46:23:f6:99:6c:
                    bf:95:be:a2:79:9b:bb:65:99:11:eb:80:49:42:06:
                    07:c8:f8:d9:18:8d:9c:c5:4d:da:7f:48:41:9f:d7:
                    3a:be:29:fb:ee:ba:57:dd:31:c2:9a:23:c3:c6:38:
                    de:e6:9a:41:a4:29:81:cc:49:c3:b4:84:0e:b3:05:
                    39:ae:87:1f:24:92:46:41:5f:7a:aa:1e:45:38:1d:
                    1c:d3:65:3f:1d:6d:35:25:46:0a:12:d8:98:21:30:
                    97:0e:98:bb:ad:30:e4:a0:76:0c:2b:ab:2a:65:7e:
                    18:b8:e6:b1:da:b8:f4:cf:58:c9:d3:e6:5c:c9:d8:
                    88:0a:f2:ba:e4:7b:cc:2f:ee:24:cd:38:49:77:da:
                    b8:18:3e:14:7b:8b:62:04:0b:4e:a7:c1:5a:54:be:
                    97:88:66:9f:ed:30:fd:83:c9:1f:25:6f:25:5c:56:
                    b4:86:e5:15:c2:7e:f0:2a:40:9f:0f:43:a9:9d:af:
                    84:28:c1:45:4e:9c:e0:70:2d:c9:3d:d9:13:9b:84:
                    90:15:e0:7b:a5:a7:2e:11:58:be:7a:36:85:ba:fa:
                    9e:83:98:ab:ca:92:35:03:67:b3:3f:cd:bf:12:08:
                    9a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:AF:46:0E:44:CB:EE:49:D6:23:80:73:D2:38:7D:60:1D:7A:A5:0C
            X509v3 Authority Key Identifier:
                keyid:C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:3c:b7:4f:09:cf:f4:e6:c5:72:64:cb:ac:c8:0e:86:ad:d2:
         cf:31:1e:69:34:ae:e1:91:b6:48:f5:0b:ea:2c:4a:c2:7c:f0:
         7a:db:e1:31:91:39:bc:5a:48:6c:29:2b:a0:86:af:0a:b6:f7:
         79:e7:60:ab:f9:db:62:1b:0b:f8:a1:7f:7a:cb:5a:7b:b1:82:
         07:7c:87:70:22:30:25:c4:c2:7e:02:63:98:ba:14:fb:51:fc:
         af:93:ad:db:78:6c:bf:9f:d0:36:de:5b:78:0b:9e:d2:b9:7e:
         0a:d2:09:f9:f1:ac:36:09:0b:df:80:9c:a1:dc:f1:36:0c:15:
         b3:e7:62:77:f3:e3:c9:fa:78:5e:05:e4:fd:27:d2:86:af:3c:
         25:16:0e:4e:1a:34:14:49:8b:6c:64:82:58:31:7b:86:c5:6d:
         a6:c7:ac:e7:25:a2:a3:fd:ef:59:6e:71:7f:4b:53:31:77:fa:
         f3:0e:8e:1c:e9:f8:2d:25:2f:b2:26:b8:d2:b7:08:d5:ed:d2:
         98:66:32:34:4e:1f:5e:6c:23:f4:22:6a:01:01:32:8d:c5:37:
         c6:1f:c5:79:20:fe:d2:e2:db:c7:af:3c:09:fd:8a:b4:16:30:
         b1:0a:92:69:5a:50:d5:49:3f:49:d3:eb:e3:2b:60:c8:90:1f:
         88:95:5d:05
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDUxQTAxMTAvBgNVBAUTKEM2RUFCRUI5M0UxRDA2RTJDMzJFMUM0Q0JFMTQ3Q0ZC
Mzk5OTI1MzkwHhcNMjYwMzI2MjM0OTU1WhcNMjYwNDAyMjM0OTU1WjAYMRYwFAYD
VQQDEw02OWM1YzYyMy0xOTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAua7JORWFAFIfvHsR1ytqm2VtUWMh3FZ6RiP2mWy/lb6ieZu7ZZkR64BJQgYH
yPjZGI2cxU3af0hBn9c6vin77rpX3THCmiPDxjje5ppBpCmBzEnDtIQOswU5rocf
JJJGQV96qh5FOB0c02U/HW01JUYKEtiYITCXDpi7rTDkoHYMK6sqZX4YuOax2rj0
z1jJ0+ZcydiICvK65HvML+4kzThJd9q4GD4Ue4tiBAtOp8FaVL6XiGaf7TD9g8kf
JW8lXFa0huUVwn7wKkCfD0Opna+EKMFFTpzgcC3JPdkTm4SQFeB7pacuEVi+ejaF
uvqeg5irypI1A2ezP82/EgiafwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFCvRg5E
y+5J1iOAc9I4fWAdeqUMMB8GA1UdIwQYMBaAFMbqvrk+HQbiwy4cTL4UfPs5mSU5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTFBMC83QzUzOTEwQzdG
ODQxMUVDODA1MThFNTFDNEY5QUUwMi94dXEtdVQ0ZEJ1TERMaHhNdmhSOC16bVpK
VGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3h1cS11VDRkQnVMRExoeE12aFI4LXptWkpUay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NTFBMC83QzUzOTEwQzdGODQxMUVDODA1MThFNTFDNEY5QUUwMi94dXEtdVQ0ZEJ1
TERMaHhNdmhSOC16bVpKVGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfjy3TwnP9ObFcmTLrMgOhq3SzzEeaTSu4ZG2SPUL6ixKwnzwetvhMZE5vFpI
bCkroIavCrb3eedgq/nbYhsL+KF/estae7GCB3yHcCIwJcTCfgJjmLoU+1H8r5Ot
23hsv5/QNt5beAue0rl+CtIJ+fGsNgkL34CcodzxNgwVs+did/Pjyfp4XgXk/SfS
hq88JRYOTho0FEmLbGSCWDF7hsVtpses5yWio/3vWW5xf0tTMXf68w6OHOn4LSUv
sia40rcI1e3SmGYyNE4fXmwj9CJqAQEyjcU3xh/FeSD+0uLbx688Cf2KtBYwsQqS
aVpQ1Uk/SdPr4ytgyJAfiJVdBQ==
-----END CERTIFICATE-----
Generated at Fri Mar 27 03:07:11 2026 by rpki-client