Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft
File:                     XS3RVLXc4h-3hsUm297xsEWSirg.mft (raw, json)
Hash identifier:          9NeqT2RpVmvoYEGA2m572gmbBx+oq1u4g1/0xwqTeiE=
Subject key identifier:   47:7E:9F:33:C4:67:2E:6E:C2:EC:EA:E4:6B:C2:E8:ED:C3:88:56:06
Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8
Certificate issuer:       /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
Certificate serial:       2879
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft
Manifest number:          25C2
Signing time:             Fri 06 Mar 2026 15:42:45 +0000
Manifest this update:     Fri 06 Mar 2026 15:42:44 +0000
Manifest next update:     Fri 13 Mar 2026 15:42:44 +0000
Files and hashes:         1: XS3RVLXc4h-3hsUm297xsEWSirg.crl (hash: HHnO7InMSuI240PPCy69WoK7hOnxN2/4JTbkceVYVnc=)
                          2: F55175EA8C5611E792848B4AC4F9AE02.roa (hash: mkkrpYAc62uJl+jjvWkmWkJGP/zvMOqOxQnQZpYQcSI=)
                          3: C82D6ACC969A11EB9BC1FA1BC4F9AE02.roa (hash: hdRZz4PYypmi6oZKRc7Dq31CNga1n58N64naKfC7sA4=)
                          4: F1475E928C5611E792848B4AC4F9AE02.roa (hash: ihcECGfuT0+8ivFOorKnocXRziH0FCu5p7ykCay0JwY=)
                          5: B61774A4D9DF11EFB722C742C4F9AE02.roa (hash: K/m2a9ngKa6moyBMKEpXRF5zdMnYdabzk/Bqhdzc11M=)
                          6: F47B5B188C5611E792848B4AC4F9AE02.roa (hash: rBEsPqz/eejMO1DeLbNWYxAxiZKOWGMoUhEr7szctWA=)
                          7: 5366509AC63511EAAC843455C4F9AE02.roa (hash: LDxg+AB2TirUVMScrJxflfGfwGCZPaKZqe8lg8qNz4A=)
                          8: CAC3390AD30E11EB98AEFF45C4F9AE02.roa (hash: rKjjHee6JIYauM+6orDTrmCs5dwV2vCzo13l1rP7xP8=)
                          9: F15AD0CE544E11ED9C5E2F3AC4F9AE02.roa (hash: 0P6zp99JvOKnEDRYbUmkJjgXkbLRxd0vYlDdUw3m04k=)
                          10: 543386248C5811E782F42951C4F9AE02.roa (hash: VXbaNAWvoJ+rU4BxeUcqpfRS7xG8p7um2aWWgzOxJa0=)
                          11: BE5DA1A0E3BE11EEAEC5E061C4F9AE02.roa (hash: GKLAv7r6GFsHVcACckOngetZZX1ncOPPVJbbepufrm4=)
                          12: 6DBD2412C9EB11EC886A6D51C4F9AE02.roa (hash: BisWLGErVCTv5Qa0nGnq8ztgTMqrwHUCEdPIhyradOY=)
                          13: E0CC1C58235911ECAB7C7661C4F9AE02.roa (hash: hl2rDKwh9bOpzCWqWF6tDDGVTzib9DwDXvZWv4JCJo8=)
                          14: A293EE844BFB11EAADB0780AC4F9AE02.roa (hash: ZkAhjY5zuPxc/VH6m5qHh2ghC+SKS4DvYMz9KSrCHJ0=)
                          15: F688FE388C5611E792848B4AC4F9AE02.roa (hash: JLpjFQM8x6HCIL2rwRfohxKcFe1oyJ992vBWZ+ItaHQ=)
                          16: B4C0B17CC94E11EDB5018458C4F9AE02.roa (hash: JJBxhoqci9cxFp2jWn+LeaikdLK+S7mtJq7CSj8Yovw=)
                          17: EFBF37208C5611E792848B4AC4F9AE02.roa (hash: 6YytcINZZVnRPu2rbB3XDoSjreHTn1uu1/H+rGbv5Z8=)
                          18: DB3E929E199611EF9EBFBF4AC4F9AE02.roa (hash: +vR+Qf874FzaB8J72tdgK88qeTknxNOTf4HTIhy1Brs=)
                          19: 19A3CD9E4B7011EC8E9FCB48C4F9AE02.roa (hash: ejrbn1cXQIOSDIP8FAmGTsCzRd86mlRV6HJ14LG2j6E=)
                          20: EDA1B0D8A1CE11EDA692F359C4F9AE02.roa (hash: 1kSu8z1hzSifiJE3S6lbLqYfJxwXIC8W9/8I944dCzE=)
                          21: 27A84B00A1CC11ED8DDB785DC4F9AE02.roa (hash: SfS3vnYd6UdQ/1y75gwTCWPjMYiNZ5ebmcTK/cgakv8=)
                          22: B6D7E1547EEE11EF8B38A43BC4F9AE02.roa (hash: cJEHBjaWoZAYCAIuSskRztc/35ypdzkq1zp55zUeLck=)
                          23: 7271CAB217D711EA90BA7F4EC4F9AE02.roa (hash: FQJxl3qailGJWSGWxgaRIe9FV0K2xswkQ2Iukjo/NzQ=)
                          24: F04860C28C5611E792848B4AC4F9AE02.roa (hash: OgWe7bBGar3bCQa6Jnjwzs5biYdG0XSpCqXLzHl7I3U=)
                          25: 7BFDDDB8D42E11EB8E13801EC4F9AE02.roa (hash: bnkg+VZiiym47n5YofK4MQC7UGQT8ZSBirCZbhmR8wY=)
                          26: F1C092BC8C5611E792848B4AC4F9AE02.roa (hash: TurE4bOXkkunPMoZt2yibGFXJ26tpZyckbjTcrfmDFo=)
                          27: EEBDFBB88C5611E792848B4AC4F9AE02.roa (hash: RuJ8/CJ+f/mvLhzK25ICG0nUWf9Q9yyLvCoDe7PdE8k=)
                          28: EF3B21E28C5611E792848B4AC4F9AE02.roa (hash: gPbn3ZlxkJOB2EvSUd7Qu5VCMxsl3O+APXI6TCulcQ0=)
                          29: 3EBDB08806F911F1AFB1D0741F3D8C67.roa (hash: aSUSGWuA1SFVq9paDYEX2N4a9fSQlt9Kp0EfXO0DAMw=)
                          30: F721F6B08C5611E792848B4AC4F9AE02.roa (hash: PXTnWXXMq7/r7irTs3x8Iooef5ROsI6ZyonWBN94pTc=)
                          31: F3DC1FD08C5611E792848B4AC4F9AE02.roa (hash: gZZzBzDD+TICCubVSPx80rr0Kl1zCE8jx3bcXra60KQ=)
                          32: 14E0C65A4BFD11EAAB81FE0DC4F9AE02.roa (hash: JR0lf9Tz8IbMxdEKbfKHP0TINFSDMM0kEkaesNKxFow=)
                          33: F5F86ADA8C5611E792848B4AC4F9AE02.roa (hash: Q+2z8wZLFlDkKJOMBjZqn7jgkCCpibh/fHlvEkrBWSk=)
                          34: 62F6493EE3BE11EE933A0461C4F9AE02.roa (hash: 6ez40T/kWsOD42AMvkDdOjlfAfmn6uYbyfNAHmlFN9w=)
                          35: 743ABB72997011EAB50D6934C4F9AE02.roa (hash: ArgsxP2sLySElCV6E9319sOSOpXMuLb9HOsFnGtKI6U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl
                          rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 15:42:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10361 (0x2879)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFB70, serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
        Validity
            Not Before: Mar  6 15:42:44 2026 GMT
            Not After : Mar 13 15:42:44 2026 GMT
        Subject: CN=69aaf5f5-0a01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:00:d2:0b:42:b3:fc:33:39:d3:e8:ad:98:64:
                    18:14:58:9b:13:c9:92:30:fe:80:b6:40:b7:e5:02:
                    f6:f8:39:88:3b:66:58:4e:bc:33:f7:3b:85:06:f9:
                    ee:e0:e9:4a:5f:45:98:3e:4b:6b:ff:26:f7:70:82:
                    da:18:d3:d0:a1:c1:84:62:7f:96:2b:15:ce:f4:4f:
                    ae:37:6c:ee:1a:a5:5b:ba:31:c5:96:87:ab:d0:fa:
                    9e:cc:9c:c3:d3:c3:d1:0a:e8:ee:23:2a:17:a0:c0:
                    d4:bf:22:44:b7:08:8f:32:6b:fa:d2:44:5b:2c:40:
                    cb:b0:f5:51:18:6a:1c:f2:5d:f9:0f:bc:51:92:88:
                    2a:84:f7:90:05:f1:3b:87:5e:b7:7e:19:d7:9e:b1:
                    2f:44:9c:4b:fb:2a:e0:5f:ef:c1:51:71:06:ac:e0:
                    91:45:f6:41:8f:18:39:a5:53:d7:03:62:16:24:76:
                    25:90:f6:74:a5:9d:73:8d:bd:39:45:c2:e2:f2:8d:
                    77:43:f4:5d:9a:88:98:a8:33:81:4d:ef:3d:78:61:
                    c9:c9:18:4c:f6:59:a1:53:59:80:7e:a8:b8:2f:b0:
                    81:19:32:11:28:9b:ed:5b:6d:c6:f6:c7:1d:80:e0:
                    67:8d:e7:ab:ff:f6:cb:3e:02:23:cb:a3:70:69:7c:
                    37:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:7E:9F:33:C4:67:2E:6E:C2:EC:EA:E4:6B:C2:E8:ED:C3:88:56:06
            X509v3 Authority Key Identifier:
                keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:b5:55:a8:82:0f:a2:6a:df:61:03:cd:c3:06:77:8d:ca:5d:
         35:41:2b:33:6a:a2:e6:8c:b3:37:9c:9b:ae:05:1a:e0:84:98:
         66:de:af:ce:58:1a:d6:99:fd:33:91:f9:f3:f5:d9:89:92:95:
         1c:ee:78:4a:6e:27:15:20:e6:ed:da:89:09:40:6b:77:39:27:
         c1:20:cc:a6:d0:e2:ff:23:7d:30:73:d8:5b:f5:c3:99:50:66:
         21:6e:89:94:9f:fe:bd:43:15:0b:7c:11:52:07:9e:13:07:6f:
         38:0c:2d:3e:84:64:e8:7b:18:57:18:a9:5a:71:e7:15:30:50:
         2f:13:91:31:7c:d3:fb:fb:04:ab:62:d2:dd:a2:ac:d4:40:f8:
         e8:38:b9:28:da:a2:49:1d:fa:b4:22:5a:87:b7:34:ef:ec:f4:
         8e:df:25:fb:3f:e7:17:c2:c9:a9:ad:e8:b1:42:27:fc:c5:e8:
         7c:72:a9:0b:f9:ae:98:7a:dc:aa:41:ef:6e:45:33:90:5f:70:
         04:c4:a2:1f:43:ba:d1:c9:b8:9e:a8:95:8d:28:eb:7b:b0:4e:
         24:07:bb:f5:7e:a4:0c:d6:4a:d3:69:55:bf:1e:ac:e8:47:3a:
         d6:9b:41:07:78:e8:e9:30:ab:18:08:e6:4c:53:84:e7:16:20:
         5a:2e:8a:84
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICKHkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REZCNzAxMTAvBgNVBAUTKDVEMkREMTU0QjVEQ0UyMUZCNzg2QzUyNkRCREVGMUIw
NDU5MjhBQjgwHhcNMjYwMzA2MTU0MjQ0WhcNMjYwMzEzMTU0MjQ0WjAYMRYwFAYD
VQQDEw02OWFhZjVmNS0wYTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6gDSC0Kz/DM50+itmGQYFFibE8mSMP6AtkC35QL2+DmIO2ZYTrwz9zuFBvnu
4OlKX0WYPktr/yb3cILaGNPQocGEYn+WKxXO9E+uN2zuGqVbujHFloer0PqezJzD
08PRCujuIyoXoMDUvyJEtwiPMmv60kRbLEDLsPVRGGoc8l35D7xRkogqhPeQBfE7
h163fhnXnrEvRJxL+yrgX+/BUXEGrOCRRfZBjxg5pVPXA2IWJHYlkPZ0pZ1zjb05
RcLi8o13Q/RdmoiYqDOBTe89eGHJyRhM9lmhU1mAfqi4L7CBGTIRKJvtW23G9scd
gOBnjeer//bLPgIjy6NwaXw3awIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEd+nzPE
Zy5uwuzq5GvC6O3DiFYGMB8GA1UdIwQYMBaAFF0t0VS13OIft4bFJtve8bBFkoq4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkI3MC8yOTgzNjQ3Qzgz
OEYxMUU1ODZGQzU4MTJDNEY5QUUwMi9YUzNSVkxYYzRoLTNoc1VtMjk3eHNFV1Np
cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hTM1JWTFhjNGgtM2hzVW0yOTd4c0VXU2lyZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RkI3MC8yOTgzNjQ3QzgzOEYxMUU1ODZGQzU4MTJDNEY5QUUwMi9YUzNSVkxYYzRo
LTNoc1VtMjk3eHNFV1NpcmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAILVVqIIPomrfYQPNwwZ3jcpdNUErM2qi5oyzN5ybrgUa4ISYZt6vzlga1pn9
M5H58/XZiZKVHO54Sm4nFSDm7dqJCUBrdzknwSDMptDi/yN9MHPYW/XDmVBmIW6J
lJ/+vUMVC3wRUgeeEwdvOAwtPoRk6HsYVxipWnHnFTBQLxORMXzT+/sEq2LS3aKs
1ED46Di5KNqiSR36tCJah7c07+z0jt8l+z/nF8LJqa3osUIn/MXofHKpC/mumHrc
qkHvbkUzkF9wBMSiH0O60cm4nqiVjSjre7BOJAe79X6kDNZK02lVvx6s6Ec61ptB
B3jo6TCrGAjmTFOE5xYgWi6KhA==
-----END CERTIFICATE-----
Generated at Sun Mar 8 01:35:32 2026 by rpki-client