Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft
File:                     XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft (raw, json)
Hash identifier:          QTDwAc96+6+8edG5lyjKkheXeKYmBy49Tc1HDETBqks=
Subject key identifier:   35:4C:18:E3:1A:89:BF:19:13:5B:43:B6:3D:A4:90:9A:38:31:00:5F
Authority key identifier: 5E:E7:CF:43:9A:42:23:23:29:82:A2:CB:4D:E5:4F:37:C7:20:5A:A9
Certificate issuer:       /CN=A913AE78/serialNumber=5EE7CF439A4223232982A2CB4DE54F37C7205AA9
Certificate serial:       0836
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XufPQ5pCIyMpgqLLTeVPN8cgWqk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft
Manifest number:          082D
Signing time:             Tue 18 Aug 2026 21:25:53 +0000
Manifest this update:     Tue 18 Aug 2026 21:25:53 +0000
Manifest next update:     Tue 25 Aug 2026 21:25:53 +0000
Files and hashes:         1: XufPQ5pCIyMpgqLLTeVPN8cgWqk.crl (hash: OtfjXdNyyCb4Xw1HxjoXD5Uy+CYlAkRmj+84iTD7HZA=)
                          2: D6138A3C292A11EB9CEDCC26C4F9AE02.roa (hash: A+lqHHILRck/15Y7Xtw67As0ESAMbuZbfeWoqwALbWQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.crl
                          rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XufPQ5pCIyMpgqLLTeVPN8cgWqk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 21:25:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2102 (0x836)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913AE78, serialNumber=5EE7CF439A4223232982A2CB4DE54F37C7205AA9
        Validity
            Not Before: Aug 18 21:25:53 2026 GMT
            Not After : Aug 25 21:25:53 2026 GMT
        Subject: CN=6a84cde1-8d3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c0:16:32:a8:b4:2a:e3:bd:9c:9f:63:eb:8e:
                    26:78:fd:23:82:b9:99:3c:7d:5d:8c:ae:8c:bf:7e:
                    c5:53:69:28:05:5e:32:fe:32:dc:f9:bb:c5:fb:e2:
                    f0:bd:82:93:4b:46:01:a3:73:e8:02:a9:19:d0:10:
                    56:b8:dc:94:00:d9:47:76:18:ff:53:7a:54:e3:85:
                    cb:28:ff:e8:6a:34:76:6c:0c:0d:99:81:85:b9:9c:
                    cb:c0:f8:dd:c7:82:13:be:65:c5:08:9f:1e:63:68:
                    62:90:d3:67:44:98:72:ce:f4:89:e3:1c:e1:4e:61:
                    2b:e1:a3:8e:2f:35:8b:63:20:39:74:20:e5:3b:31:
                    44:2a:63:29:a6:c3:66:a2:05:20:79:1a:7d:06:2b:
                    66:da:3f:80:45:01:22:cb:d5:bc:51:c3:76:5e:76:
                    17:55:78:b6:9c:da:70:9b:56:46:70:ec:85:95:98:
                    34:a7:cb:82:7c:48:dc:9d:99:e0:aa:b4:45:3d:7e:
                    90:9c:00:a6:89:c1:f9:dd:25:1e:09:fd:0d:2a:33:
                    71:40:42:f6:0c:cb:ef:b9:fa:03:4b:05:e5:bb:58:
                    80:a6:43:f9:0f:a8:75:c0:68:d0:03:bc:33:30:8f:
                    41:f8:67:bc:c9:4f:2b:38:04:a2:2e:15:e2:9e:a5:
                    74:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:4C:18:E3:1A:89:BF:19:13:5B:43:B6:3D:A4:90:9A:38:31:00:5F
            X509v3 Authority Key Identifier:
                keyid:5E:E7:CF:43:9A:42:23:23:29:82:A2:CB:4D:E5:4F:37:C7:20:5A:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XufPQ5pCIyMpgqLLTeVPN8cgWqk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:73:f0:3b:64:0f:11:ec:09:37:25:fb:82:5a:50:fd:02:84:
         03:7a:a5:75:03:bb:1d:45:e5:31:ed:a0:72:a1:c3:7b:53:79:
         4a:b0:8e:f4:24:31:fe:7d:99:8f:7b:bf:e5:f8:d4:d6:d3:1d:
         18:7f:5a:46:39:2f:fb:8b:db:b1:58:2f:ce:b1:32:31:bf:84:
         5a:0b:10:bb:0c:2d:14:b1:b0:e2:a0:e8:d3:f1:88:28:19:d4:
         34:73:34:06:74:c8:73:d9:a3:a4:f7:2b:80:7c:2d:3a:16:4d:
         5d:61:00:c1:58:a9:5c:9f:27:71:26:77:9b:7f:d8:da:2a:93:
         88:16:80:c5:a5:10:35:68:d7:16:19:13:4f:7c:af:8a:da:09:
         b9:76:ec:a4:d1:af:3a:3f:a3:c4:d6:49:45:8b:ff:6a:2e:0f:
         75:5a:90:ef:1d:25:87:48:64:1b:f4:c7:bb:fe:1b:ff:b2:0d:
         ad:7c:94:ea:7f:59:19:51:ba:5f:f7:90:f2:3c:67:c4:94:70:
         a3:56:2e:d3:52:4d:fa:33:92:6c:b2:99:2c:63:f5:6c:1c:94:
         11:a5:20:f1:fa:21:b1:36:f7:4d:18:a9:45:7e:66:fe:f3:f6:
         a8:cb:16:4d:c9:6c:36:80:9b:e6:9d:c9:9e:0c:a8:c5:c6:cf:
         16:f0:99:55
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCDYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0FFNzgxMTAvBgNVBAUTKDVFRTdDRjQzOUE0MjIzMjMyOTgyQTJDQjRERTU0RjM3
QzcyMDVBQTkwHhcNMjYwODE4MjEyNTUzWhcNMjYwODI1MjEyNTUzWjAYMRYwFAYD
VQQDEw02YTg0Y2RlMS04ZDNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtcAWMqi0KuO9nJ9j644meP0jgrmZPH1djK6Mv37FU2koBV4y/jLc+bvF++Lw
vYKTS0YBo3PoAqkZ0BBWuNyUANlHdhj/U3pU44XLKP/oajR2bAwNmYGFuZzLwPjd
x4ITvmXFCJ8eY2hikNNnRJhyzvSJ4xzhTmEr4aOOLzWLYyA5dCDlOzFEKmMppsNm
ogUgeRp9Bitm2j+ARQEiy9W8UcN2XnYXVXi2nNpwm1ZGcOyFlZg0p8uCfEjcnZng
qrRFPX6QnACmicH53SUeCf0NKjNxQEL2DMvvufoDSwXlu1iApkP5D6h1wGjQA7wz
MI9B+Ge8yU8rOASiLhXinqV0bwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDVMGOMa
ib8ZE1tDtj2kkJo4MQBfMB8GA1UdIwQYMBaAFF7nz0OaQiMjKYKiy03lTzfHIFqp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUU3OC9GMUY0RDNDRTI5
MjkxMUVCOTRFMzhEMjZDNEY5QUUwMi9YdWZQUTVwQ0l5TXBncUxMVGVWUE44Y2dX
cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1h1ZlBRNXBDSXlNcGdxTExUZVZQTjhjZ1dxay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QUU3OC9GMUY0RDNDRTI5MjkxMUVCOTRFMzhEMjZDNEY5QUUwMi9YdWZQUTVwQ0l5
TXBncUxMVGVWUE44Y2dXcWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcnPwO2QPEewJNyX7glpQ/QKEA3qldQO7HUXlMe2gcqHDe1N5SrCO9CQx/n2Z
j3u/5fjU1tMdGH9aRjkv+4vbsVgvzrEyMb+EWgsQuwwtFLGw4qDo0/GIKBnUNHM0
BnTIc9mjpPcrgHwtOhZNXWEAwVipXJ8ncSZ3m3/Y2iqTiBaAxaUQNWjXFhkTT3yv
itoJuXbspNGvOj+jxNZJRYv/ai4PdVqQ7x0lh0hkG/THu/4b/7INrXyU6n9ZGVG6
X/eQ8jxnxJRwo1Yu01JN+jOSbLKZLGP1bByUEaUg8fohsTb3TRipRX5m/vP2qMsW
TclsNoCb5p3JngyoxcbPFvCZVQ==
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:44:02 2026 by rpki-client