Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
File:                     xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft (raw, json)
Hash identifier:          uKulxiOBK3UFbnDLtrYbWgepI4w5HHr6fIwl2sFXrBE=
Subject key identifier:   F1:CC:5F:DA:88:A8:EE:C0:23:9C:17:D1:AA:FB:C3:52:38:7B:DB:E9
Authority key identifier: C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39
Certificate issuer:       /CN=A91D51A0/serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539
Certificate serial:       054C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
Manifest number:          0503
Signing time:             Sat 26 Sep 2026 23:48:07 +0000
Manifest this update:     Sat 26 Sep 2026 23:48:07 +0000
Manifest next update:     Sat 03 Oct 2026 23:48:07 +0000
Files and hashes:         1: xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl (hash: W6XR1pdNHY1hsv5LVflWQySjUaxn4toxWn7qE0qWWR8=)
                          2: C3261EF826DF11ED94E18118C4F9AE02.roa (hash: hTS0InVz4oILVGeujjlkHVbEAsw1NZRZHIk3vW8oIWw=)
                          3: D46B2C087F8711EC81E76A59C4F9AE02.roa (hash: hUayntDdKbP8YD8KFW+2g7hE9d13fe7KDzMZQmXs21I=)
                          4: F0259B5AC4BF11F0B2402975C4F9AE02.roa (hash: Sro4OLk/DSMCZn4K0Wy038cX6/xvomXtZ3z40SAC7Vo=)
                          5: 8FD0B12E400311EEBF5A8B52C4F9AE02.roa (hash: Fu109TGeOUOlOrI2XIFdihyRA7Fr+8/prz/x7VcBoCE=)
                          6: 350FEB88D40611EDADEE3D1EC4F9AE02.roa (hash: D9z3NJUY8YNFb7cpJMaWfb8axb5uXCoUzET824J42QI=)
                          7: D83192B0152B11EE85ED4B1DC4F9AE02.roa (hash: EMlA3Q/StxXuEEyaCIdkb3FX9P3Rrmoemgp7n81D5+4=)
                          8: 874B6EBC0F6E11F190C9BD30293D8C67.roa (hash: HqtrqO9wtp4Bw9to/IZBSTc+H4UcScxKGJWTDnLTim8=)
                          9: 6F8A81CCF30C11ED94750772C4F9AE02.roa (hash: +lysYAiE7tAFh6WIuGOmgLYRebmV1ikcUzBVaS8mik0=)
                          10: 86131D8AEA5D11ED80641166C4F9AE02.roa (hash: 4zgXlz4lhWhr5EJp9fYE8JRkFNuqjMzkEZkN69QI13A=)
                          11: 5CA964A68AC111EC91D19A11C4F9AE02.roa (hash: gvK8maqGxYp4lJeyX+W8kif65fkOj90NEZevEg0iRXM=)
                          12: C5B45CA014F411F180EDEBBD193D8C67.roa (hash: 1jcExNuLyHWYrWjBJRhFw6fSw8L5FWvGvk7sIxrsGAg=)
                          13: F179A39E0F0011F1AA61A6530E3D8C67.roa (hash: z5YNw9oqROxQNw3poTnbGicNOXVgbGeLROsEVEcC0k8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl
                          rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 23:48:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1356 (0x54c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D51A0, serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539
        Validity
            Not Before: Sep 26 23:48:07 2026 GMT
            Not After : Oct  3 23:48:07 2026 GMT
        Subject: CN=6ab859b7-b388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:41:86:2c:75:49:b5:f5:45:78:3a:8b:0b:b3:
                    4b:3d:02:e9:3b:9c:fc:d2:00:fb:0e:40:81:98:a4:
                    4b:a2:32:65:e9:9a:e7:11:52:b0:dd:0e:d4:eb:6e:
                    a2:84:d0:13:33:ce:90:eb:73:a9:51:97:7d:8e:ad:
                    d0:39:36:cb:2d:54:3e:56:9d:57:5a:3a:3f:dd:2f:
                    11:26:21:db:d2:cb:3c:bb:0e:33:06:58:45:30:27:
                    65:bc:3a:ef:b8:98:28:be:8c:81:3b:61:b2:35:4c:
                    d7:07:2d:aa:88:86:ef:a4:d9:22:1f:82:8e:bc:85:
                    09:22:96:a5:c7:b8:ae:88:79:6e:12:24:36:c4:61:
                    c6:f5:c9:17:f1:1b:83:42:5d:65:0a:4c:68:93:79:
                    3e:3a:6c:c9:92:42:45:8c:d6:95:9a:50:4f:b7:9d:
                    d2:98:55:6a:83:1c:21:b2:b2:f0:cf:1a:17:af:a6:
                    9a:7d:5e:ff:96:51:3e:1c:75:15:dc:b0:08:c2:77:
                    8b:47:86:95:2c:10:79:f4:e5:99:43:27:91:46:1a:
                    6e:94:a9:ed:b6:96:73:4d:fe:00:76:87:dc:3c:b3:
                    12:db:9b:c5:92:40:4b:e1:f2:fd:74:fa:30:9d:6b:
                    bb:dc:c8:a6:f4:43:03:d4:c7:1a:98:2c:c5:73:d8:
                    05:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:CC:5F:DA:88:A8:EE:C0:23:9C:17:D1:AA:FB:C3:52:38:7B:DB:E9
            X509v3 Authority Key Identifier:
                keyid:C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:1c:2b:c3:a0:77:75:7a:98:05:73:32:3b:24:31:e8:b5:2e:
         f0:58:99:09:7a:81:6b:ca:52:83:0f:05:0a:9d:4d:32:85:d4:
         f6:21:1d:c0:ed:c6:f0:1e:ba:19:2e:ef:96:6e:4a:84:70:f0:
         5c:d7:1d:27:ea:36:df:25:03:10:c9:41:d9:42:25:d8:c8:a3:
         26:40:30:cd:e7:db:e4:74:3c:ef:78:e2:55:c6:81:5b:1a:01:
         b7:37:e6:4c:6e:1d:60:cb:ea:51:5f:2f:1c:0e:de:bb:1f:04:
         1d:a2:c0:7d:dd:ab:42:2e:1f:9b:91:96:6c:69:36:cd:75:ca:
         e5:50:c4:01:d2:0d:ec:c3:dc:77:63:f0:c0:d5:d9:70:12:c5:
         a8:ac:03:66:79:24:98:67:2d:1f:0d:ee:28:8e:66:5c:a8:4a:
         5d:99:d7:35:35:d4:f5:a3:19:6b:d0:07:1d:1a:25:80:08:2a:
         6c:4e:c2:02:ea:82:8c:df:4a:e7:0f:27:3f:82:94:19:16:09:
         2a:b1:03:1c:8f:ec:41:b8:c7:d4:c2:88:b1:6f:c1:ea:5d:01:
         ce:ad:f6:92:16:c0:5c:46:48:8d:16:fe:6e:36:01:35:bb:30:
         18:28:44:f0:41:69:c0:cc:6e:93:0f:1b:bb:be:0a:cb:cb:a1:
         5d:ee:0d:ae
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDUxQTAxMTAvBgNVBAUTKEM2RUFCRUI5M0UxRDA2RTJDMzJFMUM0Q0JFMTQ3Q0ZC
Mzk5OTI1MzkwHhcNMjYwOTI2MjM0ODA3WhcNMjYxMDAzMjM0ODA3WjAYMRYwFAYD
VQQDEw02YWI4NTliNy1iMzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsEGGLHVJtfVFeDqLC7NLPQLpO5z80gD7DkCBmKRLojJl6ZrnEVKw3Q7U626i
hNATM86Q63OpUZd9jq3QOTbLLVQ+Vp1XWjo/3S8RJiHb0ss8uw4zBlhFMCdlvDrv
uJgovoyBO2GyNUzXBy2qiIbvpNkiH4KOvIUJIpalx7iuiHluEiQ2xGHG9ckX8RuD
Ql1lCkxok3k+OmzJkkJFjNaVmlBPt53SmFVqgxwhsrLwzxoXr6aafV7/llE+HHUV
3LAIwneLR4aVLBB59OWZQyeRRhpulKnttpZzTf4AdofcPLMS25vFkkBL4fL9dPow
nWu73Mim9EMD1McamCzFc9gF/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPHMX9qI
qO7AI5wX0ar7w1I4e9vpMB8GA1UdIwQYMBaAFMbqvrk+HQbiwy4cTL4UfPs5mSU5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTFBMC83QzUzOTEwQzdG
ODQxMUVDODA1MThFNTFDNEY5QUUwMi94dXEtdVQ0ZEJ1TERMaHhNdmhSOC16bVpK
VGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3h1cS11VDRkQnVMRExoeE12aFI4LXptWkpUay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NTFBMC83QzUzOTEwQzdGODQxMUVDODA1MThFNTFDNEY5QUUwMi94dXEtdVQ0ZEJ1
TERMaHhNdmhSOC16bVpKVGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJBwrw6B3dXqYBXMyOyQx6LUu8FiZCXqBa8pSgw8FCp1NMoXU9iEdwO3G8B66
GS7vlm5KhHDwXNcdJ+o23yUDEMlB2UIl2MijJkAwzefb5HQ873jiVcaBWxoBtzfm
TG4dYMvqUV8vHA7eux8EHaLAfd2rQi4fm5GWbGk2zXXK5VDEAdIN7MPcd2PwwNXZ
cBLFqKwDZnkkmGctHw3uKI5mXKhKXZnXNTXU9aMZa9AHHRolgAgqbE7CAuqCjN9K
5w8nP4KUGRYJKrEDHI/sQbjH1MKIsW/B6l0Bzq32khbAXEZIjRb+bjYBNbswGChE
8EFpwMxukw8bu74Ky8uhXe4Nrg==
-----END CERTIFICATE-----
Generated at Mon Sep 28 20:59:06 2026 by rpki-client