Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft
File:                     XS3RVLXc4h-3hsUm297xsEWSirg.mft (raw, json)
Hash identifier:          CqSOUwR1YDH4cfvH8c8/mZBpvwHrANdvRyj2vzYVmVw=
Subject key identifier:   01:E8:AE:BD:94:93:3C:F5:CB:64:34:4D:BA:0B:AE:8F:60:E6:C7:F8
Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8
Certificate issuer:       /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
Certificate serial:       28B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft
Manifest number:          25DD
Signing time:             Thu 16 Apr 2026 15:46:03 +0000
Manifest this update:     Thu 16 Apr 2026 15:46:03 +0000
Manifest next update:     Thu 23 Apr 2026 15:46:03 +0000
Files and hashes:         1: XS3RVLXc4h-3hsUm297xsEWSirg.crl (hash: LHFGdIt3YPVkswnWcK+BsWTOoMfkKSyK/Txs3Mh8d68=)
                          2: EF3B21E28C5611E792848B4AC4F9AE02.roa (hash: sL6rlhwT2LpkTZEnGwa+sTT6+sRP4qeJqtLHhVBZMAA=)
                          3: 743ABB72997011EAB50D6934C4F9AE02.roa (hash: TgloTHCWPURsO/1k0p40DWKdaGHNBtdJOfoMLcQC4gA=)
                          4: F55175EA8C5611E792848B4AC4F9AE02.roa (hash: kFQioVNwia+/qizEhlyCPhiOpzPpIkRHCfZvLOC7QmI=)
                          5: 5366509AC63511EAAC843455C4F9AE02.roa (hash: 2dGdHKeMcuIvSTX7iFjfVdensV8pnXlc8bJBe8kDDVc=)
                          6: 6DBD2412C9EB11EC886A6D51C4F9AE02.roa (hash: X4W8KPzkD6jrY8LiA2LHjxX8s0fpYowcQUXXGe2/Dfo=)
                          7: BE5DA1A0E3BE11EEAEC5E061C4F9AE02.roa (hash: VJCnaf5Klg6jmYuqx2mGsqpPv1Kkhc3IprBxsydE49k=)
                          8: 7271CAB217D711EA90BA7F4EC4F9AE02.roa (hash: yO9FNu/9OHp6I+wCsbe7slCX+CdTGzP0ftlr5EH77RY=)
                          9: F1475E928C5611E792848B4AC4F9AE02.roa (hash: 31VZpJVWKNF5mab4XZ5JTLuEycfyZELw3YTbEtHVoIE=)
                          10: F1C092BC8C5611E792848B4AC4F9AE02.roa (hash: qRXk9dzH9yzccBqYsDfVw2E8u5nyXXCoXpdl1ASSh24=)
                          11: 62F6493EE3BE11EE933A0461C4F9AE02.roa (hash: 5ldMM2cJXLvn3rFlQhmNWhHj8IBemlnHR9gxFxzEiLw=)
                          12: F15AD0CE544E11ED9C5E2F3AC4F9AE02.roa (hash: V0Bxe9pvCdmpHFNAup44+kDyfw/tamlGcA2MYQmUsO0=)
                          13: DB3E929E199611EF9EBFBF4AC4F9AE02.roa (hash: aplTQ1mZqk0IhWSBqPegZKupecSP2f1cOieGPzwg1+U=)
                          14: 543386248C5811E782F42951C4F9AE02.roa (hash: n3uqup7GQBgv1FQz4tcE6zqiYYLPHwkPhVC8sJy/BDw=)
                          15: B4C0B17CC94E11EDB5018458C4F9AE02.roa (hash: v18fC46MYs+2IjS6va5v9tqHDD2ALPl/gY1gvz9Tbm0=)
                          16: B6D7E1547EEE11EF8B38A43BC4F9AE02.roa (hash: aRK8QB1JQ1E7tEOryxg9vqmCGo1+++BBG/tSU9uGFOQ=)
                          17: E0CC1C58235911ECAB7C7661C4F9AE02.roa (hash: tYH203EuDB6n9E6nUVPwIVfHVAXXBv2Io3OA+Ey8sS8=)
                          18: EDA1B0D8A1CE11EDA692F359C4F9AE02.roa (hash: f0nSJ61GA5QPVsLKjddcC0wfT/tT/FK1nC1PrxX8MeQ=)
                          19: C82D6ACC969A11EB9BC1FA1BC4F9AE02.roa (hash: 8hJseycbUR3zK2+zXkoIB6I2ViNeMkJgkdW6VsK7qO0=)
                          20: EEBDFBB88C5611E792848B4AC4F9AE02.roa (hash: 38VxGKNTIqjI7WmYVTAs2Vk4XEsvNHdC+sfnVA/u1Zk=)
                          21: 7BFDDDB8D42E11EB8E13801EC4F9AE02.roa (hash: VtV1xShyMh9sjenS152zbiOl5v/xr19d8+vqjj03D0M=)
                          22: F688FE388C5611E792848B4AC4F9AE02.roa (hash: t6f1Kosop/CbP7AwXXw0yAnoWx86X0b95L/+s+Yi+WE=)
                          23: CAC3390AD30E11EB98AEFF45C4F9AE02.roa (hash: sgw4Va5xBAbvxEnA80g+uDGNNw3JilHTbxgmChJswfI=)
                          24: F5F86ADA8C5611E792848B4AC4F9AE02.roa (hash: wnYTp3fsOW2HQITJ5FlOwfrkiKlWT5LLwinFPfnjQu0=)
                          25: F3DC1FD08C5611E792848B4AC4F9AE02.roa (hash: j51cLfGITBXR/xee14Rv6rfJpCWZzT3Rfl0VvL2R5/I=)
                          26: F721F6B08C5611E792848B4AC4F9AE02.roa (hash: 9gIlVUVnVNmYm0bLzGl5b38yoqx/v/vATXeAALoSuAs=)
                          27: EFBF37208C5611E792848B4AC4F9AE02.roa (hash: QMEMNFl/Jl1WfdjUzvj9WgadU2H5AGalIKmrTUa6R+g=)
                          28: 27A84B00A1CC11ED8DDB785DC4F9AE02.roa (hash: lerl+S1eIB/OLEq2WHdkhDzv2oYfCjPkouNJFGcdWfk=)
                          29: A293EE844BFB11EAADB0780AC4F9AE02.roa (hash: Bf1VexJZ8ePZKh8sXCKZqIgTsDNhulqFPVDnqdnEaj0=)
                          30: F04860C28C5611E792848B4AC4F9AE02.roa (hash: t1OURYtTlAtfNdWLrnHxkvZF4FFX+C17Jb19CIwfihg=)
                          31: 19A3CD9E4B7011EC8E9FCB48C4F9AE02.roa (hash: +ezEBpxkY8f4PY2reVhjPmzVyzhmj21Jd5Qr+MbJDt0=)
                          32: F47B5B188C5611E792848B4AC4F9AE02.roa (hash: 9rwvDynWMk6qsy3E/KYOqtc0csn9No217jDY1XnUZzc=)
                          33: AECA24CE28B411F1A1EBFFBAB8833773.roa (hash: ZkTNy9M6XrICndWkm9K4bhstylJOG59JUc2d6uSYBM8=)
                          34: B61774A4D9DF11EFB722C742C4F9AE02.roa (hash: UrzW/ghTReXDIIXXuUNwm0r5S8hfMJ1iOmM4g5cXqO0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl
                          rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10423 (0x28b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFB70, serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
        Validity
            Not Before: Apr 16 15:46:03 2026 GMT
            Not After : Apr 23 15:46:03 2026 GMT
        Subject: CN=69e1043b-e039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:86:37:47:4e:e5:84:55:3f:c0:d0:06:6f:ec:
                    e1:cd:ed:d5:7e:54:7e:58:ab:37:8a:55:35:48:39:
                    4e:c7:46:35:c6:52:b6:b4:e5:68:71:75:aa:18:38:
                    07:f2:2a:02:73:e0:9b:d9:cd:b9:cd:ad:14:4c:9e:
                    2a:40:67:e4:f4:a7:0b:fd:54:6b:72:cc:8e:9e:84:
                    e0:d1:39:c4:f1:e3:fa:6e:e5:b5:a8:54:aa:22:e9:
                    f1:7f:61:a0:e0:4b:15:22:a5:35:32:39:d0:84:26:
                    65:7e:5a:32:9f:0f:ed:2d:f8:f8:b8:bf:11:2b:c1:
                    77:1d:f4:f8:41:99:ee:7d:2e:5a:34:20:c6:6f:9d:
                    0e:e0:16:93:b3:88:df:5c:db:85:c7:a6:bc:57:66:
                    b6:67:f3:d0:32:f0:aa:0a:b6:d7:1d:15:05:ed:79:
                    5a:bb:99:85:f9:d3:90:64:03:98:5e:2e:78:87:75:
                    7a:9d:84:ce:65:9a:10:f8:92:af:8c:49:41:9e:bb:
                    0f:d0:96:60:bc:a1:52:f5:c8:48:be:c0:05:cc:ab:
                    57:0a:9a:63:cf:e5:11:b5:98:ca:7e:75:7b:57:eb:
                    b7:a9:d4:a0:f2:b8:5c:d9:f6:6c:9e:e2:66:56:3b:
                    ff:30:c6:7b:2a:83:3e:be:43:bb:0f:de:0a:a2:5c:
                    f0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E8:AE:BD:94:93:3C:F5:CB:64:34:4D:BA:0B:AE:8F:60:E6:C7:F8
            X509v3 Authority Key Identifier:
                keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:97:ed:30:aa:26:7b:4d:80:39:9c:66:01:bd:78:41:5c:97:
         8b:f3:88:8c:d8:ad:26:a8:16:bc:42:0a:ca:94:00:92:6f:91:
         ec:88:cb:e3:4e:4d:bf:14:aa:5b:6d:23:6a:90:6d:ef:16:15:
         28:29:fc:6d:bb:9f:76:0f:54:86:09:e2:22:d4:db:96:f2:d3:
         28:81:41:fc:67:f2:c1:46:40:ce:26:c3:dc:af:e7:93:03:58:
         96:d5:54:83:d1:28:83:0b:3c:16:da:b9:8c:51:b7:09:6e:e2:
         0e:7a:99:b6:ea:ba:f1:15:5b:c6:49:9f:c5:d5:b4:e0:d2:36:
         46:4f:6a:d1:8d:07:32:c3:cc:aa:8a:d5:e2:c1:14:ef:aa:9a:
         c0:2f:00:16:d0:24:d8:a4:d4:e2:27:32:3e:f0:83:10:46:e5:
         85:ed:91:bf:d5:59:66:51:67:b6:09:f0:3b:2f:d6:6c:1a:48:
         d1:1d:47:77:b2:63:ef:ae:3b:cb:7e:e0:dc:ac:e0:9b:47:8f:
         a8:f7:a6:48:29:e6:89:58:9b:2c:32:95:d6:7c:5e:16:c2:67:
         f6:6b:3f:26:88:11:60:23:d4:43:75:57:58:53:58:6e:d8:18:
         6e:af:03:0e:b0:d9:52:08:cc:04:22:c6:9b:0f:66:00:9d:7e:
         f0:17:ca:43
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICKLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REZCNzAxMTAvBgNVBAUTKDVEMkREMTU0QjVEQ0UyMUZCNzg2QzUyNkRCREVGMUIw
NDU5MjhBQjgwHhcNMjYwNDE2MTU0NjAzWhcNMjYwNDIzMTU0NjAzWjAYMRYwFAYD
VQQDEw02OWUxMDQzYi1lMDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxYY3R07lhFU/wNAGb+zhze3VflR+WKs3ilU1SDlOx0Y1xlK2tOVocXWqGDgH
8ioCc+Cb2c25za0UTJ4qQGfk9KcL/VRrcsyOnoTg0TnE8eP6buW1qFSqIunxf2Gg
4EsVIqU1MjnQhCZlfloynw/tLfj4uL8RK8F3HfT4QZnufS5aNCDGb50O4BaTs4jf
XNuFx6a8V2a2Z/PQMvCqCrbXHRUF7Xlau5mF+dOQZAOYXi54h3V6nYTOZZoQ+JKv
jElBnrsP0JZgvKFS9chIvsAFzKtXCppjz+URtZjKfnV7V+u3qdSg8rhc2fZsnuJm
Vjv/MMZ7KoM+vkO7D94Kolzw4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAHorr2U
kzz1y2Q0TboLro9g5sf4MB8GA1UdIwQYMBaAFF0t0VS13OIft4bFJtve8bBFkoq4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkI3MC8yOTgzNjQ3Qzgz
OEYxMUU1ODZGQzU4MTJDNEY5QUUwMi9YUzNSVkxYYzRoLTNoc1VtMjk3eHNFV1Np
cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hTM1JWTFhjNGgtM2hzVW0yOTd4c0VXU2lyZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RkI3MC8yOTgzNjQ3QzgzOEYxMUU1ODZGQzU4MTJDNEY5QUUwMi9YUzNSVkxYYzRo
LTNoc1VtMjk3eHNFV1NpcmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeJftMKome02AOZxmAb14QVyXi/OIjNitJqgWvEIKypQAkm+R7IjL405NvxSq
W20japBt7xYVKCn8bbufdg9UhgniItTblvLTKIFB/GfywUZAzibD3K/nkwNYltVU
g9Eogws8Ftq5jFG3CW7iDnqZtuq68RVbxkmfxdW04NI2Rk9q0Y0HMsPMqorV4sEU
76qawC8AFtAk2KTU4icyPvCDEEblhe2Rv9VZZlFntgnwOy/WbBpI0R1Hd7Jj7647
y37g3Kzgm0ePqPemSCnmiVibLDKV1nxeFsJn9ms/JogRYCPUQ3VXWFNYbtgYbq8D
DrDZUgjMBCLGmw9mAJ1+8BfKQw==
-----END CERTIFICATE-----