Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
File:                     xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft (raw, json)
Hash identifier:          cj50W2hUC6PZtAh5RYwWRUYC7BVgMKi7hXsQ0OqkgQA=
Subject key identifier:   4F:BE:BD:39:3D:B1:B2:9A:98:48:57:09:7C:39:CF:91:24:8F:46:99
Authority key identifier: C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39
Certificate issuer:       /CN=A91D51A0/serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539
Certificate serial:       055A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
Manifest number:          0511
Signing time:             Sat 24 Oct 2026 23:39:31 +0000
Manifest this update:     Sat 24 Oct 2026 23:39:30 +0000
Manifest next update:     Sat 31 Oct 2026 23:39:30 +0000
Files and hashes:         1: xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl (hash: dnK6SfsO427ahvH8KjzQzxb91X3RlzicJWKwNVEDEKY=)
                          2: D83192B0152B11EE85ED4B1DC4F9AE02.roa (hash: EMlA3Q/StxXuEEyaCIdkb3FX9P3Rrmoemgp7n81D5+4=)
                          3: 350FEB88D40611EDADEE3D1EC4F9AE02.roa (hash: D9z3NJUY8YNFb7cpJMaWfb8axb5uXCoUzET824J42QI=)
                          4: C5B45CA014F411F180EDEBBD193D8C67.roa (hash: 1jcExNuLyHWYrWjBJRhFw6fSw8L5FWvGvk7sIxrsGAg=)
                          5: 874B6EBC0F6E11F190C9BD30293D8C67.roa (hash: HqtrqO9wtp4Bw9to/IZBSTc+H4UcScxKGJWTDnLTim8=)
                          6: 5CA964A68AC111EC91D19A11C4F9AE02.roa (hash: gvK8maqGxYp4lJeyX+W8kif65fkOj90NEZevEg0iRXM=)
                          7: 6F8A81CCF30C11ED94750772C4F9AE02.roa (hash: +lysYAiE7tAFh6WIuGOmgLYRebmV1ikcUzBVaS8mik0=)
                          8: 86131D8AEA5D11ED80641166C4F9AE02.roa (hash: 4zgXlz4lhWhr5EJp9fYE8JRkFNuqjMzkEZkN69QI13A=)
                          9: F179A39E0F0011F1AA61A6530E3D8C67.roa (hash: z5YNw9oqROxQNw3poTnbGicNOXVgbGeLROsEVEcC0k8=)
                          10: C3261EF826DF11ED94E18118C4F9AE02.roa (hash: hTS0InVz4oILVGeujjlkHVbEAsw1NZRZHIk3vW8oIWw=)
                          11: D46B2C087F8711EC81E76A59C4F9AE02.roa (hash: hUayntDdKbP8YD8KFW+2g7hE9d13fe7KDzMZQmXs21I=)
                          12: 8FD0B12E400311EEBF5A8B52C4F9AE02.roa (hash: Fu109TGeOUOlOrI2XIFdihyRA7Fr+8/prz/x7VcBoCE=)
                          13: F0259B5AC4BF11F0B2402975C4F9AE02.roa (hash: Sro4OLk/DSMCZn4K0Wy038cX6/xvomXtZ3z40SAC7Vo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl
                          rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 23:39:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1370 (0x55a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D51A0, serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539
        Validity
            Not Before: Oct 24 23:39:30 2026 GMT
            Not After : Oct 31 23:39:30 2026 GMT
        Subject: CN=6add41b2-94df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:39:ac:b9:83:86:be:79:93:4f:f0:9c:4f:e2:
                    47:01:8e:75:f2:98:f3:e5:74:e7:71:21:6d:fc:0e:
                    74:d7:7b:07:f4:c7:7e:40:07:a5:c4:62:e9:32:1f:
                    d5:d4:cb:68:a0:2f:08:d5:39:b8:c5:24:e1:99:aa:
                    c3:af:47:98:d0:6d:c3:ef:8a:fe:dc:12:b0:0e:20:
                    f8:2a:44:fd:62:4f:34:60:23:87:1e:e2:c3:a0:ac:
                    b2:f0:a9:98:9a:63:0c:c4:1e:cf:b6:d0:28:39:0d:
                    59:b6:28:97:47:2c:4e:66:09:52:74:d3:12:bd:d1:
                    a6:69:e8:5d:02:cf:f1:d2:57:be:7e:ed:38:2a:c5:
                    3a:85:33:b6:37:35:66:03:a5:06:e9:d1:fe:19:6e:
                    7a:4d:45:f3:44:17:2d:a6:9f:d5:86:cb:c2:2b:35:
                    66:a1:95:2c:e1:47:d0:87:cd:be:c2:3d:d2:cf:54:
                    57:31:8c:85:93:98:cd:5d:71:c9:45:d6:25:a5:f8:
                    30:bb:ab:ba:66:1c:40:ab:37:33:2a:95:52:17:b8:
                    eb:da:b8:0d:36:e1:75:6d:97:95:aa:95:ab:e2:0d:
                    b5:0c:c0:e7:66:46:0c:9b:0f:14:fe:72:e1:d8:95:
                    ac:5f:10:f9:de:b5:69:42:33:aa:7d:0e:c5:7c:27:
                    f7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:BE:BD:39:3D:B1:B2:9A:98:48:57:09:7C:39:CF:91:24:8F:46:99
            X509v3 Authority Key Identifier:
                keyid:C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:7d:09:44:35:7e:e2:04:e5:69:8d:ee:6a:07:c1:4c:1d:83:
         b6:d0:9b:16:86:84:0a:21:31:a4:38:36:c8:7b:24:12:6f:c2:
         89:d5:bd:e6:97:23:44:1b:97:f3:2b:42:2e:97:5a:0a:e0:af:
         4f:04:c0:c6:59:27:b0:7f:54:a6:6c:f1:9d:f1:6b:7d:89:ea:
         2a:16:e9:d0:c9:71:d5:94:63:38:2f:c8:af:8d:74:7e:18:96:
         aa:86:74:32:9c:4e:ba:c6:fd:a8:e6:51:a6:c1:88:47:61:8e:
         a0:bb:46:b3:e0:ef:fd:cb:f4:4d:45:d5:27:d8:8d:ff:f5:f4:
         ca:a0:6d:2e:e1:c3:57:3b:2c:e6:bc:14:04:b4:21:6f:68:c7:
         58:52:66:20:43:82:49:dd:80:3a:6d:2a:75:d1:3f:65:38:06:
         d9:a4:61:86:b4:c7:29:ca:e7:76:6e:c7:c4:af:2a:20:11:ea:
         ba:91:ca:4d:a4:69:6f:b1:8b:c9:37:35:aa:65:69:5d:05:6c:
         d5:b3:3f:f7:ec:6a:2b:ed:e8:65:b2:91:16:48:24:6d:af:ea:
         c8:52:86:bd:73:45:08:6a:c0:43:f2:40:68:df:42:ae:22:ab:
         93:b8:5e:34:c2:f2:8b:20:e5:fe:79:33:32:4d:e4:43:53:13:
         23:eb:cc:8a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDUxQTAxMTAvBgNVBAUTKEM2RUFCRUI5M0UxRDA2RTJDMzJFMUM0Q0JFMTQ3Q0ZC
Mzk5OTI1MzkwHhcNMjYxMDI0MjMzOTMwWhcNMjYxMDMxMjMzOTMwWjAYMRYwFAYD
VQQDEw02YWRkNDFiMi05NGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsDmsuYOGvnmTT/CcT+JHAY518pjz5XTncSFt/A5013sH9Md+QAelxGLpMh/V
1MtooC8I1Tm4xSThmarDr0eY0G3D74r+3BKwDiD4KkT9Yk80YCOHHuLDoKyy8KmY
mmMMxB7PttAoOQ1ZtiiXRyxOZglSdNMSvdGmaehdAs/x0le+fu04KsU6hTO2NzVm
A6UG6dH+GW56TUXzRBctpp/VhsvCKzVmoZUs4UfQh82+wj3Sz1RXMYyFk5jNXXHJ
RdYlpfgwu6u6ZhxAqzczKpVSF7jr2rgNNuF1bZeVqpWr4g21DMDnZkYMmw8U/nLh
2JWsXxD53rVpQjOqfQ7FfCf3iQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE++vTk9
sbKamEhXCXw5z5Ekj0aZMB8GA1UdIwQYMBaAFMbqvrk+HQbiwy4cTL4UfPs5mSU5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTFBMC83QzUzOTEwQzdG
ODQxMUVDODA1MThFNTFDNEY5QUUwMi94dXEtdVQ0ZEJ1TERMaHhNdmhSOC16bVpK
VGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3h1cS11VDRkQnVMRExoeE12aFI4LXptWkpUay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NTFBMC83QzUzOTEwQzdGODQxMUVDODA1MThFNTFDNEY5QUUwMi94dXEtdVQ0ZEJ1
TERMaHhNdmhSOC16bVpKVGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATX0JRDV+4gTlaY3uagfBTB2DttCbFoaECiExpDg2yHskEm/CidW95pcjRBuX
8ytCLpdaCuCvTwTAxlknsH9UpmzxnfFrfYnqKhbp0Mlx1ZRjOC/Ir410fhiWqoZ0
MpxOusb9qOZRpsGIR2GOoLtGs+Dv/cv0TUXVJ9iN//X0yqBtLuHDVzss5rwUBLQh
b2jHWFJmIEOCSd2AOm0qddE/ZTgG2aRhhrTHKcrndm7HxK8qIBHqupHKTaRpb7GL
yTc1qmVpXQVs1bM/9+xqK+3oZbKRFkgkba/qyFKGvXNFCGrAQ/JAaN9CriKrk7he
NMLyiyDl/nkzMk3kQ1MTI+vMig==
-----END CERTIFICATE-----
Generated at Sun Oct 25 06:55:24 2026 by rpki-client