Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.mft
File:                     5HXUQnchUazw-uprObkBK9Ij05M.mft (raw, json)
Hash identifier:          /Pz30J1Iw+dAJ48N8iy0mMN77ykiw9AwoklZ6IZ5QXU=
Subject key identifier:   A6:11:FD:CB:C5:CC:D0:8C:7A:6A:0F:2B:2D:9E:3B:D1:2A:5C:4C:5B
Authority key identifier: E4:75:D4:42:77:21:51:AC:F0:FA:EA:6B:39:B9:01:2B:D2:23:D3:93
Certificate issuer:       /CN=A912809D/serialNumber=E475D442772151ACF0FAEA6B39B9012BD223D393
Certificate serial:       0225
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HXUQnchUazw-uprObkBK9Ij05M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.mft
Manifest number:          021F
Signing time:             Thu 01 Oct 2026 03:43:22 +0000
Manifest this update:     Thu 01 Oct 2026 03:43:21 +0000
Manifest next update:     Thu 08 Oct 2026 03:43:21 +0000
Files and hashes:         1: 5HXUQnchUazw-uprObkBK9Ij05M.crl (hash: k8mqSRGbFllRCERRlYECj13PLC7882tFFA84hlRHy9o=)
                          2: 2BBE96C284FC11EEAA5EAA5DC4F9AE02.roa (hash: PBDYtXzBKsX1NmPtB32fhdWOYzhQ9QZAE+Uffi18nz0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.crl
                          rsync://rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HXUQnchUazw-uprObkBK9Ij05M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Oct 2026 03:43:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 549 (0x225)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912809D, serialNumber=E475D442772151ACF0FAEA6B39B9012BD223D393
        Validity
            Not Before: Oct  1 03:43:21 2026 GMT
            Not After : Oct  8 03:43:21 2026 GMT
        Subject: CN=6abdd6da-9c46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f2:cf:7f:d5:b8:de:c6:56:9f:32:97:80:d6:
                    a4:5b:14:77:bb:90:a3:2b:17:77:d7:98:e4:cf:c2:
                    4a:eb:a3:13:1e:50:b7:c5:11:ab:4f:f3:d5:25:c5:
                    4b:55:92:77:05:78:27:04:13:b3:bb:40:40:d5:a9:
                    ce:46:85:c5:8a:f2:32:13:1c:d9:84:b4:b6:09:4d:
                    ad:2c:c5:e9:bb:e7:4c:67:0d:15:88:12:97:e6:75:
                    93:e7:17:39:3c:1b:89:30:63:3e:73:45:63:dd:ce:
                    21:fc:0e:bf:3a:23:44:08:ef:55:18:87:34:bd:73:
                    39:3b:0e:22:8d:9f:e6:84:53:a0:0a:cd:c6:7b:ea:
                    3a:ad:c3:2f:8c:49:ac:3e:bb:09:b9:17:b2:01:44:
                    93:f3:ea:ff:e7:9d:e2:3a:38:e0:d0:87:8c:a9:fd:
                    3a:9d:cc:74:7c:87:a8:ba:37:a2:f4:ce:dc:87:23:
                    59:45:4d:3f:cf:29:7c:27:e9:d9:61:9b:27:61:d1:
                    21:f9:08:35:be:65:86:c4:fb:f3:d4:fc:c8:f3:00:
                    f8:45:c8:57:27:81:0c:ff:05:81:41:ca:10:42:d4:
                    70:7a:fc:7e:41:44:05:fe:ea:a2:a3:43:7d:ac:fd:
                    b1:37:c7:eb:5f:20:ec:82:62:8a:9f:6a:90:d5:d3:
                    a7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:11:FD:CB:C5:CC:D0:8C:7A:6A:0F:2B:2D:9E:3B:D1:2A:5C:4C:5B
            X509v3 Authority Key Identifier:
                keyid:E4:75:D4:42:77:21:51:AC:F0:FA:EA:6B:39:B9:01:2B:D2:23:D3:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HXUQnchUazw-uprObkBK9Ij05M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:b6:a2:41:da:32:79:57:55:f7:fc:7d:94:21:39:b6:88:9c:
         39:ac:b3:3e:8c:d9:94:aa:5a:8a:e5:4e:20:74:2a:0a:ec:48:
         82:26:f4:6e:1b:fb:5f:d5:08:27:33:72:5d:ca:51:4e:03:2f:
         61:d0:9d:6b:c9:7d:ca:c4:8f:85:3d:0b:95:2f:eb:ab:17:5c:
         49:a8:7a:41:24:a7:77:71:c8:3c:3c:5b:6a:fc:d2:d3:2c:c7:
         2e:17:46:76:03:68:74:65:fc:56:09:28:c3:31:07:28:ea:6b:
         c8:e1:ee:aa:93:2d:a2:ee:13:4f:b6:7d:c2:3a:96:97:b3:25:
         f8:fe:f6:83:2a:ac:ee:3d:c7:53:d8:6a:bb:e8:1f:4c:68:a2:
         5f:b4:fc:c4:19:f6:f1:a5:13:4c:b9:93:ae:ba:2c:23:e9:15:
         99:f9:1e:07:41:5d:e9:bc:16:84:0c:b0:5e:41:66:57:71:b0:
         12:88:e1:f0:ce:60:91:35:c9:9f:11:f5:63:9b:b4:6f:75:4f:
         df:4d:28:50:06:08:74:18:13:b4:9f:30:b0:df:3e:de:42:c6:
         d3:9e:48:11:33:62:95:55:fc:44:77:c1:ba:40:14:b1:3a:32:
         28:24:4d:c4:3b:22:2d:db:be:44:13:3f:9b:7b:6f:3e:be:37:
         9d:f2:1f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 03:32:41 2026 by rpki-client