Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft
File:                     9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft (raw, json)
Hash identifier:          +P3ovtEeaeLlC31jygagT2bybt7c+DkBuxV0oDyh33E=
Subject key identifier:   51:ED:0C:AD:8D:F8:47:66:09:DC:C9:5A:8F:ED:70:45:C5:FD:0E:DE
Authority key identifier: F6:69:64:F9:9B:C8:8D:37:76:1D:38:98:15:D3:C9:E9:D0:A1:7A:4D
Certificate issuer:       /CN=A91852BA/serialNumber=F66964F99BC88D37761D389815D3C9E9D0A17A4D
Certificate serial:       05C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mlk-ZvIjTd2HTiYFdPJ6dChek0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft
Manifest number:          05BC
Signing time:             Sun 10 May 2026 23:09:55 +0000
Manifest this update:     Sun 10 May 2026 23:09:54 +0000
Manifest next update:     Sun 17 May 2026 23:09:54 +0000
Files and hashes:         1: 9mlk-ZvIjTd2HTiYFdPJ6dChek0.crl (hash: WcapI+BHEI0lDwGwK1zn3nOLG2jj8WdumOitBbv6Ias=)
                          2: 17679A100BCE11EC85811A0DC4F9AE02.roa (hash: eSZTCVmtVODIa8LqXf1+TpmSShdpmD0QiKQVkQhAeZE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.crl
                          rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mlk-ZvIjTd2HTiYFdPJ6dChek0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 17 May 2026 23:09:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1476 (0x5c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91852BA, serialNumber=F66964F99BC88D37761D389815D3C9E9D0A17A4D
        Validity
            Not Before: May 10 23:09:54 2026 GMT
            Not After : May 17 23:09:54 2026 GMT
        Subject: CN=6a011043-03c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:dd:25:01:8d:23:ac:d2:15:00:0a:00:7d:a5:
                    d2:0c:64:12:24:8f:3c:b7:6e:36:3b:15:25:41:de:
                    93:31:d9:c9:cd:09:d3:d1:b0:ad:59:1f:dc:49:7b:
                    04:5c:47:33:3a:0a:0e:07:5e:e6:b7:30:d3:3f:dc:
                    e2:4c:60:6f:3b:ed:21:bc:c6:4c:e1:56:5d:a9:00:
                    03:2b:56:57:83:d0:6b:bf:b9:25:70:c9:cd:36:67:
                    1e:b5:1a:ec:a9:e0:96:6f:6d:75:f8:1e:8a:6c:62:
                    ef:9e:2b:97:b3:80:3a:4a:32:49:ed:6d:14:69:68:
                    de:1f:06:b0:b7:ec:70:ce:18:bf:72:09:8d:58:ba:
                    a3:f4:36:8e:66:2c:26:2d:61:92:e9:a2:46:4a:12:
                    5d:c7:64:c1:df:b7:25:e9:47:62:a7:f6:93:09:fb:
                    b4:be:f4:ce:78:52:16:7d:ac:a1:b0:db:fd:f9:07:
                    c2:59:a4:ee:30:92:3f:ba:2b:47:27:79:05:6d:8d:
                    bc:c7:03:b4:df:5f:21:1d:f5:0f:be:8f:2c:56:ec:
                    f3:db:3e:f9:6d:f6:1d:ce:22:80:de:85:bd:80:88:
                    45:cc:8a:b2:d6:ff:d8:b1:c8:bd:82:6a:31:2f:f8:
                    9c:0e:85:ea:94:39:d6:1c:ea:39:2f:1c:94:37:65:
                    e8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:ED:0C:AD:8D:F8:47:66:09:DC:C9:5A:8F:ED:70:45:C5:FD:0E:DE
            X509v3 Authority Key Identifier:
                keyid:F6:69:64:F9:9B:C8:8D:37:76:1D:38:98:15:D3:C9:E9:D0:A1:7A:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mlk-ZvIjTd2HTiYFdPJ6dChek0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:72:39:1e:4f:78:2b:46:34:84:bd:91:29:b2:75:b2:19:97:
         40:7d:8b:3e:95:e5:42:ea:cf:7c:92:a0:ba:33:6a:10:90:5f:
         a7:60:14:45:ad:c1:14:4e:8f:96:46:0d:e1:f0:30:22:c0:27:
         f4:2c:4f:64:30:ea:46:69:6b:c6:98:e7:ac:be:38:49:2c:f1:
         03:e8:6a:15:81:9d:22:7d:08:b2:b5:43:4a:3d:84:0f:92:9a:
         42:2e:b9:4f:5c:39:dc:df:46:7b:e3:21:75:89:52:71:ea:f1:
         40:8a:49:77:8f:bd:05:f7:1f:bf:3d:be:ad:b7:54:d4:95:4d:
         28:6b:de:0f:a0:8b:89:44:18:ba:35:bb:f0:51:2c:90:20:39:
         07:2b:26:64:95:be:67:6a:a5:8a:7e:f4:3d:f3:f7:77:52:ac:
         ae:0d:bf:87:51:b1:4b:a9:75:9e:ed:23:96:2a:a2:e2:ae:2c:
         93:12:ed:8a:a0:78:bf:f0:c1:30:4e:07:26:88:2b:a3:68:70:
         c6:74:4c:6a:76:17:f6:ca:2f:c8:1d:f3:3b:c0:55:e7:3c:c8:
         f0:9d:ed:0b:af:5d:b3:9f:04:de:74:3d:de:73:e1:33:b1:ef:
         d0:31:ed:cd:54:d3:dc:41:30:1c:64:09:71:0e:4b:4d:90:d3:
         5a:cc:3f:b8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODUyQkExMTAvBgNVBAUTKEY2Njk2NEY5OUJDODhEMzc3NjFEMzg5ODE1RDNDOUU5
RDBBMTdBNEQwHhcNMjYwNTEwMjMwOTU0WhcNMjYwNTE3MjMwOTU0WjAYMRYwFAYD
VQQDEw02YTAxMTA0My0wM2MzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxt0lAY0jrNIVAAoAfaXSDGQSJI88t242OxUlQd6TMdnJzQnT0bCtWR/cSXsE
XEczOgoOB17mtzDTP9ziTGBvO+0hvMZM4VZdqQADK1ZXg9Brv7klcMnNNmcetRrs
qeCWb211+B6KbGLvniuXs4A6SjJJ7W0UaWjeHwawt+xwzhi/cgmNWLqj9DaOZiwm
LWGS6aJGShJdx2TB37cl6Udip/aTCfu0vvTOeFIWfayhsNv9+QfCWaTuMJI/uitH
J3kFbY28xwO0318hHfUPvo8sVuzz2z75bfYdziKA3oW9gIhFzIqy1v/Ysci9gmox
L/icDoXqlDnWHOo5LxyUN2Xo5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFHtDK2N
+EdmCdzJWo/tcEXF/Q7eMB8GA1UdIwQYMBaAFPZpZPmbyI03dh04mBXTyenQoXpN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTJCQS84NTY1MTdDMDBC
Q0IxMUVDQkQ5QzIwMEJDNEY5QUUwMi85bWxrLVp2SWpUZDJIVGlZRmRQSjZkQ2hl
azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzltbGstWnZJalRkMkhUaVlGZFBKNmRDaGVrMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NTJCQS84NTY1MTdDMDBCQ0IxMUVDQkQ5QzIwMEJDNEY5QUUwMi85bWxrLVp2SWpU
ZDJIVGlZRmRQSjZkQ2hlazAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhHI5Hk94K0Y0hL2RKbJ1shmXQH2LPpXlQurPfJKgujNqEJBfp2AURa3BFE6P
lkYN4fAwIsAn9CxPZDDqRmlrxpjnrL44SSzxA+hqFYGdIn0IsrVDSj2ED5KaQi65
T1w53N9Ge+MhdYlScerxQIpJd4+9Bfcfvz2+rbdU1JVNKGveD6CLiUQYujW78FEs
kCA5BysmZJW+Z2qlin70PfP3d1Ksrg2/h1GxS6l1nu0jliqi4q4skxLtiqB4v/DB
ME4HJogro2hwxnRManYX9sovyB3zO8BV5zzI8J3tC69ds58E3nQ93nPhM7Hv0DHt
zVTT3EEwHGQJcQ5LTZDTWsw/uA==
-----END CERTIFICATE-----
Generated at Wed May 13 01:25:17 2026 by rpki-client