Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft
File:                     024QQmH4GdaND3C7Ka3-jvRjsu0.mft (raw, json)
Hash identifier:          PJ5QtE37HoY3CEpYhTzIox19+lclgo8BKUBSRX32d/E=
Subject key identifier:   BE:B4:BE:7C:50:04:59:3A:96:B9:84:CE:EC:74:DC:F1:4C:97:B9:EE
Authority key identifier: D3:6E:10:42:61:F8:19:D6:8D:0F:70:BB:29:AD:FE:8E:F4:63:B2:ED
Certificate issuer:       /CN=A91B15DC/serialNumber=D36E104261F819D68D0F70BB29ADFE8EF463B2ED
Certificate serial:       0104
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/024QQmH4GdaND3C7Ka3-jvRjsu0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft
Manifest number:          FC
Signing time:             Mon 11 May 2026 06:18:36 +0000
Manifest this update:     Mon 11 May 2026 06:18:36 +0000
Manifest next update:     Mon 18 May 2026 06:18:36 +0000
Files and hashes:         1: 024QQmH4GdaND3C7Ka3-jvRjsu0.crl (hash: y92MkIX/0KNxvAgq0VrrtjGoDrYQY0ZJQckDnRZntJQ=)
                          2: 0A65ADB6CEEE11EFAA2CA812C4F9AE02.roa (hash: dAZeh4PaNuXAEzd+0dD77Ah6jCF4zKP6Ulvpy6g/WpI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.crl
                          rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/024QQmH4GdaND3C7Ka3-jvRjsu0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:18:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 260 (0x104)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B15DC, serialNumber=D36E104261F819D68D0F70BB29ADFE8EF463B2ED
        Validity
            Not Before: May 11 06:18:36 2026 GMT
            Not After : May 18 06:18:36 2026 GMT
        Subject: CN=6a0174bc-1e12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:72:8c:cd:e4:bd:fc:0e:1a:0d:00:95:f8:27:
                    9e:80:7f:cb:06:93:64:1d:f2:6f:24:20:fb:93:0a:
                    9a:0f:1a:4e:96:cc:59:fb:f9:d4:dc:61:f1:9b:38:
                    3a:dc:d4:74:09:1a:ec:9f:e6:f2:8a:12:92:b5:5e:
                    4f:fd:18:70:19:e5:4a:b9:ec:7b:91:cc:d1:b6:07:
                    66:67:6d:06:6b:20:ee:65:b1:8a:bc:78:12:ef:51:
                    ad:30:1d:4d:e6:84:8a:17:5a:2b:0e:96:ba:27:11:
                    6f:1f:05:db:b9:9b:08:3d:c9:b0:e0:df:56:20:ca:
                    3f:ad:90:98:08:c9:19:3c:9e:b4:db:3e:94:8e:86:
                    02:4e:b0:3d:42:f1:99:36:8e:67:72:01:17:19:a7:
                    0e:ee:35:a3:47:33:39:d5:ef:d0:30:3f:53:3a:3d:
                    82:31:b0:74:58:26:d0:71:ce:75:bc:20:25:51:84:
                    64:ae:0e:e9:29:19:3f:7a:aa:09:77:20:a7:53:15:
                    20:c1:76:16:58:d4:e1:b2:2d:7f:77:17:53:b9:32:
                    37:dd:1c:82:09:86:23:6a:20:e7:73:14:8f:7e:1c:
                    5f:56:12:9f:f2:a6:4a:77:90:9d:e5:8b:e6:00:f3:
                    84:13:ca:3c:19:7d:e0:c9:a7:ca:29:81:59:92:a1:
                    c9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B4:BE:7C:50:04:59:3A:96:B9:84:CE:EC:74:DC:F1:4C:97:B9:EE
            X509v3 Authority Key Identifier:
                keyid:D3:6E:10:42:61:F8:19:D6:8D:0F:70:BB:29:AD:FE:8E:F4:63:B2:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/024QQmH4GdaND3C7Ka3-jvRjsu0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:27:49:fb:3a:84:b8:c0:ad:8b:be:f7:75:ce:c3:aa:9e:ef:
         a7:5b:a9:80:f6:20:0a:81:35:b1:15:4f:7d:47:79:b7:aa:aa:
         cf:f7:ee:5a:dc:68:b8:15:76:ff:46:19:6d:c0:33:a3:f8:4c:
         f5:73:28:59:d2:29:2d:1f:ac:a6:8d:7a:92:a5:bf:ce:21:6d:
         6e:6b:18:ed:72:5e:d7:12:1e:14:dd:a5:21:47:6b:2b:4c:08:
         55:19:7f:72:36:38:f8:27:1a:b5:dd:4a:1a:1d:43:d0:68:73:
         e3:29:db:59:64:65:70:77:49:64:bb:f6:fa:ef:88:11:79:24:
         96:3f:97:88:11:ad:28:3d:4c:60:ee:7f:d2:d6:62:8e:d8:33:
         5e:cd:1e:14:46:c3:bf:6f:b5:17:8d:df:59:45:76:c1:df:8c:
         2c:79:0f:71:ae:f2:57:39:50:b1:71:7a:84:e9:6a:0d:bd:07:
         61:3c:67:ef:93:49:ba:a9:89:2f:09:9b:53:56:71:2e:9c:9c:
         cc:a6:bc:ad:f0:f3:da:e6:4f:e1:0f:fb:5c:d9:86:fb:74:4a:
         e4:0f:a0:bd:f3:3d:7b:fc:46:e9:83:a7:2a:ff:26:e0:85:86:
         ca:4e:85:b8:90:7b:c4:60:ac:c7:d8:09:f3:61:02:98:45:22:
         b0:f3:70:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:57:09 2026 by rpki-client