Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.mft
File:                     imIbx3o91BcMuRA_-HiLyQkAgtE.mft (raw, json)
Hash identifier:          tqT7Ugul6XLs/2J9M1oSytfwT5HZa8oUziVuYV3FBGI=
Subject key identifier:   96:D8:9C:81:56:7C:56:C5:0E:EB:AD:15:A1:73:C6:08:C9:54:C0:15
Authority key identifier: 8A:62:1B:C7:7A:3D:D4:17:0C:B9:10:3F:F8:78:8B:C9:09:00:82:D1
Certificate issuer:       /CN=A91C24C5/serialNumber=8A621BC77A3DD4170CB9103FF8788BC9090082D1
Certificate serial:       01DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imIbx3o91BcMuRA_-HiLyQkAgtE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.mft
Manifest number:          01D4
Signing time:             Mon 11 May 2026 03:38:08 +0000
Manifest this update:     Mon 11 May 2026 03:38:07 +0000
Manifest next update:     Mon 18 May 2026 03:38:07 +0000
Files and hashes:         1: imIbx3o91BcMuRA_-HiLyQkAgtE.crl (hash: O86NYvj0K+iY3Bf1FhJcIbC0x6t5FOZx5AwbQWYyBVo=)
                          2: 872F5E22835A11EE9FFEC146C4F9AE02.roa (hash: c/jawI9sVhPShnKjCf1i13c+sicTCdQqYFc31eax07o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.crl
                          rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imIbx3o91BcMuRA_-HiLyQkAgtE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 03:38:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 474 (0x1da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C24C5, serialNumber=8A621BC77A3DD4170CB9103FF8788BC9090082D1
        Validity
            Not Before: May 11 03:38:07 2026 GMT
            Not After : May 18 03:38:07 2026 GMT
        Subject: CN=6a014f20-29ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:93:87:64:d7:9a:bc:8c:a3:5e:0b:32:46:33:
                    4c:43:6d:a6:27:7e:ea:f9:d3:bc:51:63:96:3c:6f:
                    35:82:02:03:c4:16:f8:3d:63:4b:67:02:e3:a7:a3:
                    b2:b9:90:13:dc:c1:18:74:1a:40:92:3c:6e:6e:4c:
                    e1:98:7e:6e:c5:e9:97:7a:15:01:43:ac:b3:06:39:
                    52:c3:a8:fd:ac:03:30:d0:5e:91:ec:51:20:fb:1b:
                    4d:14:b2:13:9e:0d:2a:ce:f5:4f:f1:83:bd:cb:bd:
                    cb:2e:dd:04:e2:45:e2:84:cc:90:e0:8e:c8:7a:6c:
                    eb:4a:9b:37:a3:62:23:e5:63:e0:93:ff:65:83:f0:
                    8e:b5:53:46:47:15:2a:45:98:f5:8c:23:4b:38:8f:
                    66:58:c6:a2:b7:1e:1c:d3:b6:33:32:3a:a8:e0:22:
                    14:97:78:66:7b:9d:c9:08:8b:35:fc:e6:fb:3d:84:
                    fb:50:03:26:91:26:2f:c4:55:b0:48:12:c7:e0:91:
                    f8:12:48:8a:72:cd:a7:09:f9:fb:bb:98:17:48:0b:
                    0a:f9:4d:2d:83:60:85:48:81:83:7c:27:c5:bb:ef:
                    1f:23:17:5c:44:80:bb:f3:b4:28:8c:3c:0f:d6:3a:
                    37:85:a2:5e:7e:e7:a2:30:67:e6:bb:e2:a5:3d:d8:
                    5e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D8:9C:81:56:7C:56:C5:0E:EB:AD:15:A1:73:C6:08:C9:54:C0:15
            X509v3 Authority Key Identifier:
                keyid:8A:62:1B:C7:7A:3D:D4:17:0C:B9:10:3F:F8:78:8B:C9:09:00:82:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imIbx3o91BcMuRA_-HiLyQkAgtE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:e1:89:73:20:38:53:81:4a:5a:c7:b4:91:ca:29:00:73:fd:
         cf:64:24:ef:fc:20:e0:37:84:33:f2:7c:a2:0c:4a:cf:a4:6c:
         db:ff:9e:02:32:91:61:3c:ff:ce:72:cc:9b:93:f0:3b:6b:d3:
         43:fe:df:10:f2:97:a2:9b:9a:57:18:55:c4:fc:75:5b:bf:d9:
         31:49:5e:8d:32:80:51:db:2f:8d:d2:ee:f6:da:1f:a5:e6:8a:
         0b:b1:28:76:99:35:21:88:a5:b2:98:6f:75:8e:00:82:9a:16:
         99:d1:09:d6:c2:ac:93:13:a8:58:a6:60:33:f0:17:84:30:db:
         03:39:1a:a9:1a:b2:e3:05:6c:b8:a0:6e:38:84:4f:85:f6:63:
         04:14:af:fd:a1:dc:ca:84:fe:c6:f2:29:e7:2b:9a:2e:1a:be:
         36:11:80:df:bb:8f:c9:f1:42:e3:81:10:3a:fc:d0:f8:af:d1:
         7f:a2:74:d1:89:69:ed:ba:cc:e1:ec:75:8d:27:ec:cf:9d:f1:
         23:73:0d:bf:03:50:87:e1:9e:0d:16:6d:70:f6:2f:7d:f9:8e:
         75:65:fc:f1:28:de:76:d3:49:d4:64:06:68:da:a8:a6:1d:56:
         bb:70:36:2f:a6:56:4f:68:2e:29:a6:de:50:43:0b:9e:f8:69:
         f8:4d:45:ea
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzI0QzUxMTAvBgNVBAUTKDhBNjIxQkM3N0EzREQ0MTcwQ0I5MTAzRkY4Nzg4QkM5
MDkwMDgyRDEwHhcNMjYwNTExMDMzODA3WhcNMjYwNTE4MDMzODA3WjAYMRYwFAYD
VQQDEw02YTAxNGYyMC0yOWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwJOHZNeavIyjXgsyRjNMQ22mJ37q+dO8UWOWPG81ggIDxBb4PWNLZwLjp6Oy
uZAT3MEYdBpAkjxubkzhmH5uxemXehUBQ6yzBjlSw6j9rAMw0F6R7FEg+xtNFLIT
ng0qzvVP8YO9y73LLt0E4kXihMyQ4I7IemzrSps3o2Ij5WPgk/9lg/COtVNGRxUq
RZj1jCNLOI9mWMaitx4c07YzMjqo4CIUl3hme53JCIs1/Ob7PYT7UAMmkSYvxFWw
SBLH4JH4EkiKcs2nCfn7u5gXSAsK+U0tg2CFSIGDfCfFu+8fIxdcRIC787QojDwP
1jo3haJefueiMGfmu+KlPdheAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJbYnIFW
fFbFDuutFaFzxgjJVMAVMB8GA1UdIwQYMBaAFIpiG8d6PdQXDLkQP/h4i8kJAILR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjRDNS9EMUUyRDk2ODgz
NTkxMUVFQjI1Q0YxNDRDNEY5QUUwMi9pbUlieDNvOTFCY011UkFfLUhpTHlRa0Fn
dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ltSWJ4M285MUJjTXVSQV8tSGlMeVFrQWd0RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MjRDNS9EMUUyRDk2ODgzNTkxMUVFQjI1Q0YxNDRDNEY5QUUwMi9pbUlieDNvOTFC
Y011UkFfLUhpTHlRa0FndEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFOGJcyA4U4FKWse0kcopAHP9z2Qk7/wg4DeEM/J8ogxKz6Rs2/+eAjKRYTz/
znLMm5PwO2vTQ/7fEPKXopuaVxhVxPx1W7/ZMUlejTKAUdsvjdLu9tofpeaKC7Eo
dpk1IYilsphvdY4AgpoWmdEJ1sKskxOoWKZgM/AXhDDbAzkaqRqy4wVsuKBuOIRP
hfZjBBSv/aHcyoT+xvIp5yuaLhq+NhGA37uPyfFC44EQOvzQ+K/Rf6J00Ylp7brM
4ex1jSfsz53xI3MNvwNQh+GeDRZtcPYvffmOdWX88SjedtNJ1GQGaNqoph1Wu3A2
L6ZWT2guKabeUEMLnvhp+E1F6g==
-----END CERTIFICATE-----
Generated at Wed May 13 05:23:39 2026 by rpki-client