Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/5t-XYLzRoVlmUSzUe3KUwGwC7s8.mft
File:                     5t-XYLzRoVlmUSzUe3KUwGwC7s8.mft (raw, json)
Hash identifier:          Z98hx6JCCCrMvXvrZxOTW+R9+/wo7NNp0WNgX0JA/1Q=
Subject key identifier:   C6:A3:55:EA:19:65:BC:AA:EC:7D:E3:63:52:1B:06:1A:22:22:22:8E
Authority key identifier: E6:DF:97:60:BC:D1:A1:59:66:51:2C:D4:7B:72:94:C0:6C:02:EE:CF
Certificate issuer:       /CN=A9173B07/serialNumber=E6DF9760BCD1A15966512CD47B7294C06C02EECF
Certificate serial:       08C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5t-XYLzRoVlmUSzUe3KUwGwC7s8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/5t-XYLzRoVlmUSzUe3KUwGwC7s8.mft
Manifest number:          08AD
Signing time:             Sun 04 Oct 2026 20:40:13 +0000
Manifest this update:     Sun 04 Oct 2026 20:40:12 +0000
Manifest next update:     Sun 11 Oct 2026 20:40:12 +0000
Files and hashes:         1: 5t-XYLzRoVlmUSzUe3KUwGwC7s8.crl (hash: Xn+VxQL7ZVcok10l0qhgiSzuGWM+mZZ0P8O4npdDHLw=)
                          2: 493468827C1A11EBABA86F44C4F9AE02.roa (hash: gQGxx4gihy9zKWGv8z0Mu143u5DoEGyfqqJKAVo1rfc=)
                          3: CB3F39368F9711EE927E086FC4F9AE02.roa (hash: I3no8jZBWGF0B/3NwaIAfa0xz/HnjGJbm3/3i5Bkr8M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/5t-XYLzRoVlmUSzUe3KUwGwC7s8.crl
                          rsync://rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/5t-XYLzRoVlmUSzUe3KUwGwC7s8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5t-XYLzRoVlmUSzUe3KUwGwC7s8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 20:40:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2245 (0x8c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173B07, serialNumber=E6DF9760BCD1A15966512CD47B7294C06C02EECF
        Validity
            Not Before: Oct  4 20:40:12 2026 GMT
            Not After : Oct 11 20:40:12 2026 GMT
        Subject: CN=6ac2b9ad-9616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2b:86:8e:cd:ba:ab:34:57:8b:dd:c0:5f:84:
                    18:3f:51:06:48:e8:09:1d:27:34:d9:ac:5e:3d:9b:
                    fb:da:ce:41:1a:8d:98:f5:22:79:ed:37:b0:e4:18:
                    69:84:91:76:8c:39:d3:90:89:4e:0a:16:24:61:a1:
                    51:76:fe:a7:cd:a8:12:d2:a4:8f:57:c9:09:42:2e:
                    46:5b:70:74:41:cc:da:b8:67:d2:51:18:1d:c5:f8:
                    7c:bc:e0:70:f2:a7:d7:45:7d:ca:a1:6b:9c:1f:f1:
                    4d:f4:b2:4c:9a:cc:e2:a0:8a:4c:68:a8:cd:ac:a1:
                    18:4c:94:eb:f0:87:52:18:a1:84:d5:82:b7:d7:0c:
                    cc:da:62:49:0f:aa:fc:dc:2a:44:58:34:e1:65:cc:
                    68:2d:88:c2:4e:66:84:d1:19:4c:f2:3e:5a:dd:87:
                    ee:41:6e:f9:c3:72:5f:4b:ee:eb:7c:a0:c8:e6:31:
                    66:35:70:34:0e:0f:ff:50:29:40:61:56:cf:b1:70:
                    7f:47:74:98:a7:99:a9:00:ea:3d:d0:99:a6:2a:23:
                    69:cf:fb:5d:97:ae:3d:f4:74:2b:00:1a:4e:60:d5:
                    0c:00:9f:20:71:97:aa:73:11:0e:de:fe:50:d7:0f:
                    96:71:54:9a:98:4c:89:bd:12:1b:a4:11:d6:0d:8a:
                    4e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A3:55:EA:19:65:BC:AA:EC:7D:E3:63:52:1B:06:1A:22:22:22:8E
            X509v3 Authority Key Identifier:
                keyid:E6:DF:97:60:BC:D1:A1:59:66:51:2C:D4:7B:72:94:C0:6C:02:EE:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/5t-XYLzRoVlmUSzUe3KUwGwC7s8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5t-XYLzRoVlmUSzUe3KUwGwC7s8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/5t-XYLzRoVlmUSzUe3KUwGwC7s8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:0a:cb:d8:3f:02:d4:24:87:99:a8:0a:b0:19:74:cd:2e:a7:
         a9:b9:05:ab:c6:43:92:52:21:4c:2f:00:d7:a3:16:c3:d9:16:
         7b:05:48:59:f4:05:cb:f0:bf:ef:24:93:fe:38:52:4d:d7:b1:
         6e:3f:e8:1d:5f:c4:40:c9:e5:ce:76:a1:10:ea:4e:ea:79:d6:
         1d:14:54:b5:1a:1a:f6:bb:7e:6b:5a:cf:d0:14:6b:52:40:ec:
         6a:2b:60:c0:f0:4a:38:fe:c7:7e:df:10:bd:a9:06:63:fa:20:
         f2:55:43:9e:f7:fb:e3:3c:a6:57:e5:41:be:26:1b:e6:79:c2:
         d0:78:ad:70:eb:09:19:f2:73:d5:62:44:a7:e6:62:d1:33:e2:
         2a:5b:49:a3:90:4e:5b:14:4a:05:10:5c:d6:6a:83:33:f7:6b:
         ac:7b:6b:05:d5:bf:5f:e4:19:38:63:f5:e6:ed:58:e8:bb:23:
         4c:73:28:8a:32:1f:bc:18:e6:1e:2a:3a:bf:e1:ef:7e:e6:fd:
         f1:13:9e:f6:a7:2a:5e:e5:4a:07:8d:6d:8a:01:68:49:c7:62:
         4c:5f:ad:d1:3f:bc:da:7b:f4:b9:4b:1c:11:a9:68:de:e6:79:
         7c:5e:02:5a:47:40:81:11:dd:eb:da:e6:0f:65:b4:81:10:21:
         51:de:ce:6c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzNCMDcxMTAvBgNVBAUTKEU2REY5NzYwQkNEMUExNTk2NjUxMkNENDdCNzI5NEMw
NkMwMkVFQ0YwHhcNMjYxMDA0MjA0MDEyWhcNMjYxMDExMjA0MDEyWjAYMRYwFAYD
VQQDEw02YWMyYjlhZC05NjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvyuGjs26qzRXi93AX4QYP1EGSOgJHSc02axePZv72s5BGo2Y9SJ57Tew5Bhp
hJF2jDnTkIlOChYkYaFRdv6nzagS0qSPV8kJQi5GW3B0QczauGfSURgdxfh8vOBw
8qfXRX3KoWucH/FN9LJMmszioIpMaKjNrKEYTJTr8IdSGKGE1YK31wzM2mJJD6r8
3CpEWDThZcxoLYjCTmaE0RlM8j5a3YfuQW75w3JfS+7rfKDI5jFmNXA0Dg//UClA
YVbPsXB/R3SYp5mpAOo90JmmKiNpz/tdl6499HQrABpOYNUMAJ8gcZeqcxEO3v5Q
1w+WcVSamEyJvRIbpBHWDYpOqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMajVeoZ
Zbyq7H3jY1IbBhoiIiKOMB8GA1UdIwQYMBaAFObfl2C80aFZZlEs1HtylMBsAu7P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0IwNy9FRDlEM0RFODAy
RjUxMUVCQkNCOTEyMEJDNEY5QUUwMi81dC1YWUx6Um9WbG1VU3pVZTNLVXdHd0M3
czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzV0LVhZTHpSb1ZsbVVTelVlM0tVd0d3QzdzOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
M0IwNy9FRDlEM0RFODAyRjUxMUVCQkNCOTEyMEJDNEY5QUUwMi81dC1YWUx6Um9W
bG1VU3pVZTNLVXdHd0M3czgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlQrL2D8C1CSHmagKsBl0zS6nqbkFq8ZDklIhTC8A16MWw9kWewVIWfQFy/C/
7yST/jhSTdexbj/oHV/EQMnlznahEOpO6nnWHRRUtRoa9rt+a1rP0BRrUkDsaitg
wPBKOP7Hft8QvakGY/og8lVDnvf74zymV+VBviYb5nnC0HitcOsJGfJz1WJEp+Zi
0TPiKltJo5BOWxRKBRBc1mqDM/drrHtrBdW/X+QZOGP15u1Y6LsjTHMoijIfvBjm
Hio6v+Hvfub98ROe9qcqXuVKB41tigFoScdiTF+t0T+82nv0uUscEalo3uZ5fF4C
WkdAgRHd69rmD2W0gRAhUd7ObA==
-----END CERTIFICATE-----
Generated at Mon Oct 5 14:40:51 2026 by rpki-client