Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft
File:                     Ol4QKeZcY2gSMttn2AU90vaU5h8.mft (raw, json)
Hash identifier:          NS2zX1rmK8kyl3SZNw5Ocxk4EndxDCbZP+CR6aGjYpo=
Subject key identifier:   1B:B6:09:E8:F7:E3:CB:0E:C2:1D:A7:C0:E0:B7:24:C7:56:93:6A:21
Authority key identifier: 3A:5E:10:29:E6:5C:63:68:12:32:DB:67:D8:05:3D:D2:F6:94:E6:1F
Certificate issuer:       /CN=A9174EC5/serialNumber=3A5E1029E65C63681232DB67D8053DD2F694E61F
Certificate serial:       FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ol4QKeZcY2gSMttn2AU90vaU5h8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft
Manifest number:          F9
Signing time:             Wed 13 May 2026 06:26:27 +0000
Manifest this update:     Wed 13 May 2026 06:26:26 +0000
Manifest next update:     Wed 20 May 2026 06:26:26 +0000
Files and hashes:         1: Ol4QKeZcY2gSMttn2AU90vaU5h8.crl (hash: p5WaLpSeudCKcvYOxRqq3w8RO9N6alg7z1PmYasLhfs=)
                          2: 3154E9E8993A11F0837A6E45C4F9AE02.roa (hash: v41aBlF3leOW8tter1KV8agjab7xR5AdoEi5mvmK3SE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.crl
                          rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ol4QKeZcY2gSMttn2AU90vaU5h8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 06:26:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 254 (0xfe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174EC5, serialNumber=3A5E1029E65C63681232DB67D8053DD2F694E61F
        Validity
            Not Before: May 13 06:26:26 2026 GMT
            Not After : May 20 06:26:26 2026 GMT
        Subject: CN=6a041992-eda7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f3:24:e7:e4:c6:b0:a8:f1:a5:cd:7c:03:eb:
                    38:5a:d6:e8:bb:3c:b5:14:4a:63:54:3b:17:61:0d:
                    9d:25:5c:ff:80:62:71:83:ae:f2:e2:b6:d9:e1:12:
                    b1:cd:77:53:a3:3a:37:bc:48:3b:63:93:d5:0b:26:
                    85:cf:f2:e7:4c:43:18:d5:33:08:41:e4:e2:c3:c9:
                    dc:88:76:f9:9c:35:f1:e2:c7:2e:65:a1:86:8f:d3:
                    ca:5f:74:e8:f7:0f:29:05:fd:ed:e5:38:2b:42:f2:
                    82:8a:b2:2f:4a:62:39:04:8f:44:e4:78:38:f3:57:
                    66:1d:de:c7:ea:02:5f:70:3d:66:90:ed:90:15:ec:
                    74:4f:72:ed:82:43:f8:e3:a1:9f:42:d4:ce:f9:a4:
                    f2:52:af:aa:7c:b3:68:cf:ec:27:ef:ad:fd:f3:34:
                    d4:c1:3a:90:03:d5:ee:61:0c:f1:02:14:ce:9d:95:
                    81:51:7f:46:2e:21:4a:15:0f:23:c7:50:2f:1b:fa:
                    92:93:cf:9a:61:a5:8b:34:c0:a1:d1:bd:b7:09:9a:
                    ab:13:01:7a:80:34:90:2b:7e:ab:b1:89:7c:fa:8a:
                    ab:d0:f1:ce:20:28:d6:be:8f:02:32:b6:ad:df:2d:
                    91:ea:eb:9e:2c:14:f9:4c:76:30:e6:e5:46:c9:aa:
                    08:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B6:09:E8:F7:E3:CB:0E:C2:1D:A7:C0:E0:B7:24:C7:56:93:6A:21
            X509v3 Authority Key Identifier:
                keyid:3A:5E:10:29:E6:5C:63:68:12:32:DB:67:D8:05:3D:D2:F6:94:E6:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ol4QKeZcY2gSMttn2AU90vaU5h8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174EC5/82335A20D95A11EFA02FB46FC4F9AE02/Ol4QKeZcY2gSMttn2AU90vaU5h8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:10:c5:36:b8:4b:d3:cb:c3:b8:98:cd:55:90:8b:40:67:e3:
         50:f4:6f:53:f9:c7:e5:fd:88:3f:db:e9:7b:99:40:dc:ce:82:
         56:ff:28:01:49:94:83:08:1e:a6:f2:41:28:6a:b3:ae:bb:15:
         86:64:49:70:7f:f5:54:0b:fc:d1:3b:6e:95:02:af:3b:97:c4:
         98:b7:13:25:82:b2:74:32:d7:ff:f4:df:17:b2:70:86:59:9e:
         b1:f9:22:a1:13:4a:7c:b9:12:4c:db:94:c6:c7:2d:be:eb:e8:
         57:28:7e:9b:f2:35:33:9d:a1:b3:29:fc:da:a9:4c:2d:7c:8b:
         ea:60:88:29:f6:56:a3:74:fb:e5:53:b4:23:42:bb:2c:29:86:
         9b:4b:49:0d:1a:5e:8b:d5:2e:6f:67:93:57:45:18:8a:a6:ed:
         41:8a:90:95:d8:65:33:c7:0a:b4:28:72:ec:37:72:5f:87:de:
         1f:5a:22:19:cb:b8:f6:0f:fc:55:03:36:84:a9:fb:4f:94:dc:
         06:5c:36:bf:fe:96:76:58:b2:cf:82:7b:68:50:c7:44:9b:cc:
         61:48:34:a8:67:2f:0c:39:2d:17:8a:92:83:05:97:00:ce:6b:
         3b:7e:54:cf:de:62:69:ff:ab:b8:fc:69:ec:ec:15:a0:b0:63:
         ea:5a:86:f7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzRFQzUxMTAvBgNVBAUTKDNBNUUxMDI5RTY1QzYzNjgxMjMyREI2N0Q4MDUzREQy
RjY5NEU2MUYwHhcNMjYwNTEzMDYyNjI2WhcNMjYwNTIwMDYyNjI2WjAYMRYwFAYD
VQQDEw02YTA0MTk5Mi1lZGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy/Mk5+TGsKjxpc18A+s4Wtbouzy1FEpjVDsXYQ2dJVz/gGJxg67y4rbZ4RKx
zXdTozo3vEg7Y5PVCyaFz/LnTEMY1TMIQeTiw8nciHb5nDXx4scuZaGGj9PKX3To
9w8pBf3t5TgrQvKCirIvSmI5BI9E5Hg481dmHd7H6gJfcD1mkO2QFex0T3LtgkP4
46GfQtTO+aTyUq+qfLNoz+wn76398zTUwTqQA9XuYQzxAhTOnZWBUX9GLiFKFQ8j
x1AvG/qSk8+aYaWLNMCh0b23CZqrEwF6gDSQK36rsYl8+oqr0PHOICjWvo8CMrat
3y2R6uueLBT5THYw5uVGyaoIlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBu2Cej3
48sOwh2nwOC3JMdWk2ohMB8GA1UdIwQYMBaAFDpeECnmXGNoEjLbZ9gFPdL2lOYf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEVDNS84MjMzNUEyMEQ5
NUExMUVGQTAyRkI0NkZDNEY5QUUwMi9PbDRRS2VaY1kyZ1NNdHRuMkFVOTB2YVU1
aDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09sNFFLZVpjWTJnU010dG4yQVU5MHZhVTVoOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NEVDNS84MjMzNUEyMEQ5NUExMUVGQTAyRkI0NkZDNEY5QUUwMi9PbDRRS2VaY1ky
Z1NNdHRuMkFVOTB2YVU1aDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqRDFNrhL08vDuJjNVZCLQGfjUPRvU/nH5f2IP9vpe5lA3M6CVv8oAUmUgwge
pvJBKGqzrrsVhmRJcH/1VAv80TtulQKvO5fEmLcTJYKydDLX//TfF7Jwhlmesfki
oRNKfLkSTNuUxsctvuvoVyh+m/I1M52hsyn82qlMLXyL6mCIKfZWo3T75VO0I0K7
LCmGm0tJDRpei9Uub2eTV0UYiqbtQYqQldhlM8cKtChy7DdyX4feH1oiGcu49g/8
VQM2hKn7T5TcBlw2v/6Wdliyz4J7aFDHRJvMYUg0qGcvDDktF4qSgwWXAM5rO35U
z95iaf+ruPxp7OwVoLBj6lqG9w==
-----END CERTIFICATE-----
Generated at Wed May 13 11:28:38 2026 by rpki-client