Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft
File:                     MtNTdDyP4vCOl7IuW2CavBTM_js.mft (raw, json)
Hash identifier:          W8ewpSsYEq67X87HLonp2/uW5omnm/8feB4bQ14L4JQ=
Subject key identifier:   9D:5C:45:AF:77:69:E4:36:23:30:03:6B:49:50:8E:7B:21:11:24:A9
Authority key identifier: 32:D3:53:74:3C:8F:E2:F0:8E:97:B2:2E:5B:60:9A:BC:14:CC:FE:3B
Certificate issuer:       /CN=A9179F64/serialNumber=32D353743C8FE2F08E97B22E5B609ABC14CCFE3B
Certificate serial:       0175
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft
Manifest number:          0159
Signing time:             Mon 11 May 2026 05:23:35 +0000
Manifest this update:     Mon 11 May 2026 05:23:34 +0000
Manifest next update:     Mon 18 May 2026 05:23:34 +0000
Files and hashes:         1: MtNTdDyP4vCOl7IuW2CavBTM_js.crl (hash: e9LXabGkAghjkx133SWPdI9eahzt2u86CKyhPCIBu9s=)
                          2: 144D9AA823F011F0B0D6F263C4F9AE02.roa (hash: 9HNmZVsE8qMY9qG/jp14H0D4amK1SUgdtWzVlZ7OP6Q=)
                          3: F0CEC2E2663811F089040A3DC4F9AE02.roa (hash: zSJXhjcxuRoRMZAMSvVxgLmiPMxSJBBZzT41UMv2hwY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.crl
                          rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 05:23:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 373 (0x175)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179F64, serialNumber=32D353743C8FE2F08E97B22E5B609ABC14CCFE3B
        Validity
            Not Before: May 11 05:23:34 2026 GMT
            Not After : May 18 05:23:34 2026 GMT
        Subject: CN=6a0167d7-c98a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:37:09:2b:5e:a3:55:91:48:74:ec:4b:26:96:
                    4e:47:68:13:64:03:3a:3d:2c:c0:09:46:50:20:06:
                    c9:84:c4:cd:40:7d:bf:ce:3f:b4:ae:30:06:02:19:
                    96:a5:a0:6b:9b:11:20:8b:cd:b2:72:b7:9b:69:fb:
                    80:d3:81:a1:ba:d7:11:1d:5e:3b:ae:32:7c:71:33:
                    29:1f:ff:28:71:5c:54:4f:a5:91:6a:47:9a:d4:84:
                    81:bf:fa:b0:09:c3:46:d5:1a:38:27:e8:44:a3:5b:
                    2b:44:64:c3:d4:80:78:d4:93:e5:7d:84:b7:d1:d7:
                    cb:f3:9c:1f:a2:cc:74:9d:7c:16:b3:d9:0c:14:c1:
                    6b:11:75:d1:d1:51:0f:4e:90:8d:1c:ce:24:db:7d:
                    8d:d1:6e:7f:f7:5a:74:ae:fb:c5:15:db:ed:02:aa:
                    a7:16:47:52:67:31:eb:de:70:ba:32:56:b0:1b:42:
                    71:19:09:21:7b:cc:d8:5e:c4:1e:90:16:ba:e6:66:
                    ef:fa:51:08:0c:f9:ef:66:ee:11:e2:11:5d:93:c4:
                    96:70:6d:f4:7f:b4:d8:13:9c:07:fc:f6:e8:84:c4:
                    57:b9:06:94:7e:97:41:17:f0:1c:1a:92:3e:c9:2d:
                    24:d7:b1:fc:ed:1d:f3:29:64:0a:3f:5c:5e:4c:79:
                    f6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:5C:45:AF:77:69:E4:36:23:30:03:6B:49:50:8E:7B:21:11:24:A9
            X509v3 Authority Key Identifier:
                keyid:32:D3:53:74:3C:8F:E2:F0:8E:97:B2:2E:5B:60:9A:BC:14:CC:FE:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:44:1c:d0:91:a5:62:5b:f2:99:ba:d2:cb:cb:5a:6a:8b:17:
         cb:12:0e:b1:bc:08:fa:da:cb:3b:bd:1c:76:3e:d7:b2:c4:17:
         84:e7:77:30:f5:dc:57:c0:b6:00:9b:b0:83:a5:e3:d0:8a:82:
         f4:77:89:46:d1:5a:d1:09:aa:37:4b:16:ab:67:17:e7:bd:28:
         3e:9a:04:fc:3e:0a:33:fb:72:3c:fe:ce:3a:ef:d4:3f:59:90:
         8f:b2:f2:ba:a4:e0:45:f4:0c:ec:3c:e1:88:85:e4:7a:af:be:
         96:8c:3e:18:06:0d:18:35:fd:61:0e:47:2a:6f:e7:51:42:8a:
         df:de:ea:5a:8c:67:50:e4:45:5b:91:29:fb:75:83:a7:35:e2:
         6f:da:19:60:61:02:f9:78:e6:e5:7a:f7:2f:5e:af:ff:bd:9d:
         8a:17:d8:06:e2:cd:59:f2:6a:bd:96:67:2d:01:a9:ef:df:5d:
         4d:09:10:8c:62:80:eb:ae:9b:10:a3:c9:f9:7e:1a:4e:65:8f:
         b3:3d:ca:5d:0b:4c:9c:f8:1b:e7:0f:50:94:cb:f7:01:84:6a:
         ec:38:b7:1e:44:bc:70:07:28:c8:2c:1d:3a:7e:89:45:29:74:
         f7:5e:49:e1:be:b6:79:ce:92:74:42:8d:f5:3a:aa:3d:89:df:
         d4:01:2d:f5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzlGNjQxMTAvBgNVBAUTKDMyRDM1Mzc0M0M4RkUyRjA4RTk3QjIyRTVCNjA5QUJD
MTRDQ0ZFM0IwHhcNMjYwNTExMDUyMzM0WhcNMjYwNTE4MDUyMzM0WjAYMRYwFAYD
VQQDEw02YTAxNjdkNy1jOThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwDcJK16jVZFIdOxLJpZOR2gTZAM6PSzACUZQIAbJhMTNQH2/zj+0rjAGAhmW
paBrmxEgi82ycrebafuA04GhutcRHV47rjJ8cTMpH/8ocVxUT6WRakea1ISBv/qw
CcNG1Ro4J+hEo1srRGTD1IB41JPlfYS30dfL85wfosx0nXwWs9kMFMFrEXXR0VEP
TpCNHM4k232N0W5/91p0rvvFFdvtAqqnFkdSZzHr3nC6MlawG0JxGQkhe8zYXsQe
kBa65mbv+lEIDPnvZu4R4hFdk8SWcG30f7TYE5wH/PbohMRXuQaUfpdBF/AcGpI+
yS0k17H87R3zKWQKP1xeTHn2KQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ1cRa93
aeQ2IzADa0lQjnshESSpMB8GA1UdIwQYMBaAFDLTU3Q8j+LwjpeyLltgmrwUzP47
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUY2NC83N0JGMDE5MjYy
NEIxMUVGQUIxMjBGNEZDNEY5QUUwMi9NdE5UZER5UDR2Q09sN0l1VzJDYXZCVE1f
anMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL010TlRkRHlQNHZDT2w3SXVXMkNhdkJUTV9qcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OUY2NC83N0JGMDE5MjYyNEIxMUVGQUIxMjBGNEZDNEY5QUUwMi9NdE5UZER5UDR2
Q09sN0l1VzJDYXZCVE1fanMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANEQc0JGlYlvymbrSy8taaosXyxIOsbwI+trLO70cdj7XssQXhOd3MPXcV8C2
AJuwg6Xj0IqC9HeJRtFa0QmqN0sWq2cX570oPpoE/D4KM/tyPP7OOu/UP1mQj7Ly
uqTgRfQM7DzhiIXkeq++low+GAYNGDX9YQ5HKm/nUUKK397qWoxnUORFW5Ep+3WD
pzXib9oZYGEC+Xjm5Xr3L16v/72dihfYBuLNWfJqvZZnLQGp799dTQkQjGKA666b
EKPJ+X4aTmWPsz3KXQtMnPgb5w9QlMv3AYRq7Di3HkS8cAcoyCwdOn6JRSl0915J
4b62ec6SdEKN9TqqPYnf1AEt9Q==
-----END CERTIFICATE-----
Generated at Wed May 13 03:54:17 2026 by rpki-client