Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.mft
File:                     5HXUQnchUazw-uprObkBK9Ij05M.mft (raw, json)
Hash identifier:          Ss8rKzegGl0d6KL/obv6IGbX+5ksyZ2O6+GQa/NfX7M=
Subject key identifier:   33:CB:9F:37:C2:23:04:B2:F7:22:51:88:34:FE:3D:2B:07:49:9E:C3
Authority key identifier: E4:75:D4:42:77:21:51:AC:F0:FA:EA:6B:39:B9:01:2B:D2:23:D3:93
Certificate issuer:       /CN=A912809D/serialNumber=E475D442772151ACF0FAEA6B39B9012BD223D393
Certificate serial:       0227
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HXUQnchUazw-uprObkBK9Ij05M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.mft
Manifest number:          0221
Signing time:             Mon 05 Oct 2026 03:11:34 +0000
Manifest this update:     Mon 05 Oct 2026 03:11:33 +0000
Manifest next update:     Mon 12 Oct 2026 03:11:33 +0000
Files and hashes:         1: 5HXUQnchUazw-uprObkBK9Ij05M.crl (hash: 3RFyD53EHqZxZGamUhO9PVRFw6mvt3jibcijT+j5lEo=)
                          2: 2BBE96C284FC11EEAA5EAA5DC4F9AE02.roa (hash: PBDYtXzBKsX1NmPtB32fhdWOYzhQ9QZAE+Uffi18nz0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.crl
                          rsync://rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HXUQnchUazw-uprObkBK9Ij05M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 03:11:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 551 (0x227)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912809D, serialNumber=E475D442772151ACF0FAEA6B39B9012BD223D393
        Validity
            Not Before: Oct  5 03:11:33 2026 GMT
            Not After : Oct 12 03:11:33 2026 GMT
        Subject: CN=6ac31566-7201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fb:92:ad:cf:4e:83:bf:69:be:74:90:18:bf:
                    e4:8e:f5:b7:9b:78:fa:57:bc:f7:37:cd:22:f4:fe:
                    c3:9b:67:a8:ba:3d:0b:6f:b6:e0:52:57:5b:ec:9e:
                    f6:fd:91:ab:fb:d7:b0:b5:5c:45:bd:9e:2e:31:41:
                    c9:32:c8:ee:eb:40:67:f7:ec:fd:ce:e8:bd:7a:a8:
                    47:48:74:d4:af:60:92:e5:79:51:8a:3d:f3:af:c1:
                    d4:28:86:37:20:b1:5c:7e:f3:fb:1e:76:56:73:61:
                    f7:03:d3:29:5c:2f:ba:03:82:21:dc:c2:57:63:b2:
                    2f:f3:6c:34:cd:09:71:78:b1:91:c6:fc:44:1d:e7:
                    9c:b6:e8:f2:ed:5d:0b:4f:be:7b:07:2d:52:46:e3:
                    a8:04:25:ea:27:2b:3c:85:ab:7b:0e:db:c3:32:5a:
                    3e:50:3c:5c:5c:ab:6c:21:22:23:35:4c:e2:62:85:
                    ba:35:d5:0b:c2:e6:28:df:4f:6b:ed:cb:17:72:44:
                    77:15:90:49:ee:57:a6:51:54:c0:6c:b6:36:19:b6:
                    91:e5:94:77:1c:fe:bb:72:24:0d:58:13:23:c2:74:
                    92:74:0e:d7:bf:51:e2:f6:05:70:ff:b5:b6:46:1a:
                    01:99:16:a7:50:e1:d8:fd:65:81:be:e3:7d:05:a2:
                    1c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:CB:9F:37:C2:23:04:B2:F7:22:51:88:34:FE:3D:2B:07:49:9E:C3
            X509v3 Authority Key Identifier:
                keyid:E4:75:D4:42:77:21:51:AC:F0:FA:EA:6B:39:B9:01:2B:D2:23:D3:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HXUQnchUazw-uprObkBK9Ij05M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:d4:52:01:22:b6:bb:da:7c:85:64:55:48:87:6d:a1:c6:4c:
         ff:41:ac:0a:a5:9d:b0:d3:d4:cc:ab:c7:17:8d:65:e6:19:52:
         42:06:b0:b4:92:59:7b:71:f1:47:fc:a8:9c:3d:7f:c2:47:99:
         fb:a6:98:46:b4:d0:8e:d1:f3:3c:8c:f8:f2:da:c7:65:f0:6a:
         3f:ca:da:4f:e7:3e:d0:c9:79:22:13:b2:da:eb:a2:12:f9:cd:
         da:7a:c2:f6:63:10:16:b5:d1:b7:35:a2:0a:10:f0:3b:c7:a8:
         6e:71:08:0c:32:92:92:f9:25:ae:cd:cc:05:d2:32:e0:2e:b5:
         87:c3:64:20:9f:b0:08:6e:aa:ef:c9:a1:ad:9d:0f:67:08:dd:
         06:2f:60:18:12:c3:79:3a:d1:52:d4:fa:ca:15:5f:58:0c:3f:
         1b:7e:fb:fc:62:e8:b7:ce:3a:0f:bc:82:91:67:db:5a:c7:28:
         50:cb:05:92:fe:a6:0b:37:c6:08:fe:e4:3e:d8:95:6b:80:ef:
         3d:2a:b4:23:57:94:30:e6:c6:15:c1:02:7c:d4:89:cd:2f:52:
         23:e7:2f:2c:f0:4f:23:c7:ec:5e:7b:fe:0f:49:78:99:77:c8:
         66:b6:13:9a:ed:6e:d9:40:de:79:98:fb:b2:96:45:34:f5:4c:
         05:84:21:aa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjgwOUQxMTAvBgNVBAUTKEU0NzVENDQyNzcyMTUxQUNGMEZBRUE2QjM5QjkwMTJC
RDIyM0QzOTMwHhcNMjYxMDA1MDMxMTMzWhcNMjYxMDEyMDMxMTMzWjAYMRYwFAYD
VQQDEw02YWMzMTU2Ni03MjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArvuSrc9Og79pvnSQGL/kjvW3m3j6V7z3N80i9P7Dm2eouj0Lb7bgUldb7J72
/ZGr+9ewtVxFvZ4uMUHJMsju60Bn9+z9zui9eqhHSHTUr2CS5XlRij3zr8HUKIY3
ILFcfvP7HnZWc2H3A9MpXC+6A4Ih3MJXY7Iv82w0zQlxeLGRxvxEHeectujy7V0L
T757By1SRuOoBCXqJys8hat7DtvDMlo+UDxcXKtsISIjNUziYoW6NdULwuYo309r
7csXckR3FZBJ7lemUVTAbLY2GbaR5ZR3HP67ciQNWBMjwnSSdA7Xv1Hi9gVw/7W2
RhoBmRanUOHY/WWBvuN9BaIcdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDPLnzfC
IwSy9yJRiDT+PSsHSZ7DMB8GA1UdIwQYMBaAFOR11EJ3IVGs8Prqazm5ASvSI9OT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODA5RC8wMUZBQzk4QTg0
RjkxMUVFQTc1QzJGMzlDNEY5QUUwMi81SFhVUW5jaFVhenctdXByT2JrQks5SWow
NU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVIWFVRbmNoVWF6dy11cHJPYmtCSzlJajA1TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
ODA5RC8wMUZBQzk4QTg0RjkxMUVFQTc1QzJGMzlDNEY5QUUwMi81SFhVUW5jaFVh
enctdXByT2JrQks5SWowNU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAItRSASK2u9p8hWRVSIdtocZM/0GsCqWdsNPUzKvHF41l5hlSQgawtJJZe3Hx
R/yonD1/wkeZ+6aYRrTQjtHzPIz48trHZfBqP8raT+c+0Ml5IhOy2uuiEvnN2nrC
9mMQFrXRtzWiChDwO8eobnEIDDKSkvklrs3MBdIy4C61h8NkIJ+wCG6q78mhrZ0P
ZwjdBi9gGBLDeTrRUtT6yhVfWAw/G377/GLot846D7yCkWfbWscoUMsFkv6mCzfG
CP7kPtiVa4DvPSq0I1eUMObGFcECfNSJzS9SI+cvLPBPI8fsXnv+D0l4mXfIZrYT
mu1u2UDeeZj7spZFNPVMBYQhqg==
-----END CERTIFICATE-----
Generated at Wed Oct 7 05:13:09 2026 by rpki-client