Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft
File:                     MGSQ23RcleyGYUmf_IJkZnumf4o.mft (raw, json)
Hash identifier:          Y0QiDoCzJxwqd/ZBzWMYddDszsc+OAzLgXIDWDtA9EQ=
Subject key identifier:   98:FF:D2:76:2B:06:AF:0E:DE:54:DB:DC:FD:AC:1C:01:6F:1F:EE:6A
Authority key identifier: 30:64:90:DB:74:5C:95:EC:86:61:49:9F:FC:82:64:66:7B:A6:7F:8A
Certificate issuer:       /CN=A91CE7A4/serialNumber=306490DB745C95EC8661499FFC8264667BA67F8A
Certificate serial:       0105
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGSQ23RcleyGYUmf_IJkZnumf4o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft
Manifest number:          0101
Signing time:             Mon 11 May 2026 06:16:56 +0000
Manifest this update:     Mon 11 May 2026 06:16:56 +0000
Manifest next update:     Mon 18 May 2026 06:16:56 +0000
Files and hashes:         1: MGSQ23RcleyGYUmf_IJkZnumf4o.crl (hash: MFG2Ac8abXvCERQl5FeyHZFjw/iIqVKBigoGvzCGgho=)
                          2: 19C407C0CC1011EFBC7E0050C4F9AE02.roa (hash: utxItg9AZP9jPtUfaHZNYYZ2s+pDsbIze+rI9Pl7uws=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.crl
                          rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGSQ23RcleyGYUmf_IJkZnumf4o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 261 (0x105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE7A4, serialNumber=306490DB745C95EC8661499FFC8264667BA67F8A
        Validity
            Not Before: May 11 06:16:56 2026 GMT
            Not After : May 18 06:16:56 2026 GMT
        Subject: CN=6a017458-9c10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:37:e8:35:0e:a4:8d:be:4f:b9:8d:83:07:45:
                    3c:5b:b5:b9:73:f6:69:7f:47:3d:e9:90:64:90:43:
                    94:95:7e:8e:6e:b5:19:53:a1:87:f6:e1:48:7d:a8:
                    b5:3b:ed:ec:70:e1:4a:33:9f:bf:33:f1:6b:b8:c4:
                    a5:4d:9c:ad:57:00:bf:d6:e7:98:0d:b7:47:3e:6e:
                    1b:73:a8:b4:12:bf:69:37:9c:e2:6b:60:95:45:c4:
                    b2:39:26:40:eb:09:91:c1:28:4c:2c:5c:cc:a9:dc:
                    cd:44:a1:ff:a4:a0:7e:46:35:b9:b2:0b:b2:a6:26:
                    25:d2:60:db:8d:bd:9c:61:90:60:0f:46:dc:0d:2a:
                    d0:92:ad:18:5b:00:45:e9:58:11:1d:11:e8:66:23:
                    e4:9b:4d:ca:31:5a:12:44:ea:85:6a:b2:99:75:26:
                    46:31:cd:15:98:7f:44:f4:60:37:68:da:b8:02:be:
                    38:74:d5:ff:44:25:4d:0a:9e:6a:13:00:47:91:3f:
                    a5:24:78:2c:6a:91:e4:9f:d8:ba:3d:fa:53:3c:5d:
                    45:63:a4:75:9a:90:68:3c:8e:c3:17:ad:51:f4:c1:
                    19:0d:c3:90:08:12:47:1e:8e:09:b1:14:c3:99:28:
                    a4:d2:7a:54:26:6f:42:dd:03:60:f2:c0:08:ec:b2:
                    dd:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:FF:D2:76:2B:06:AF:0E:DE:54:DB:DC:FD:AC:1C:01:6F:1F:EE:6A
            X509v3 Authority Key Identifier:
                keyid:30:64:90:DB:74:5C:95:EC:86:61:49:9F:FC:82:64:66:7B:A6:7F:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGSQ23RcleyGYUmf_IJkZnumf4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE7A4/B890DFD2CC0F11EFA278FD4CC4F9AE02/MGSQ23RcleyGYUmf_IJkZnumf4o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:3c:ed:5d:99:6f:8e:20:f7:5a:33:df:a5:04:25:dd:d6:3e:
         19:33:f8:c3:01:88:f0:4f:74:9a:e1:bd:6f:1a:95:9c:76:bd:
         91:5a:f6:3e:b2:aa:6b:56:fb:60:c8:42:70:2d:08:2b:fe:1d:
         6b:de:4a:fb:9c:b4:7b:b1:6f:2e:03:db:6e:61:e8:4a:f4:20:
         bc:8e:03:6e:88:5d:89:67:ca:a1:8b:d4:46:61:68:80:d3:a1:
         f6:52:07:40:56:60:ed:db:7a:f0:1c:8b:3e:ae:f6:76:68:46:
         e5:52:e9:0e:f7:49:1c:02:50:07:0c:71:75:e1:a1:ab:24:0b:
         28:9c:3e:91:3c:22:19:b9:51:e8:8f:d2:1e:9f:b5:ef:62:e0:
         d9:03:ce:6b:47:24:9f:b2:bb:07:39:72:02:21:64:5b:3e:91:
         5a:65:dd:72:20:c0:7b:fc:bd:a2:b0:4f:98:11:cd:85:71:f8:
         c7:8b:d3:60:01:97:25:c6:f5:1a:a6:e3:d8:07:a4:d1:7b:af:
         68:11:9f:d4:44:52:f4:95:b4:e4:91:92:c8:07:a6:3c:e2:f4:
         6c:2f:94:eb:0e:c0:24:1d:bd:2d:6f:73:48:51:21:35:d5:3f:
         56:5a:39:2e:9b:45:87:9c:f3:b6:07:eb:39:2a:aa:e6:b2:aa:
         42:0c:d9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:41:39 2026 by rpki-client