Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft
File:                     24aQ9k5_gyrPw6am6EIdQXfIlPY.mft (raw, json)
Hash identifier:          N1oHCKYTwmQ2PaHeqHRTYjVRQcjijfIOCSfp5Xrwq74=
Subject key identifier:   AE:53:7E:A3:51:0F:97:9F:D0:F0:C5:F2:7D:9A:FD:17:ED:FF:9B:1C
Authority key identifier: DB:86:90:F6:4E:7F:83:2A:CF:C3:A6:A6:E8:42:1D:41:77:C8:94:F6
Certificate issuer:       /CN=A91F0FAA/serialNumber=DB8690F64E7F832ACFC3A6A6E8421D4177C894F6
Certificate serial:       0235
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/24aQ9k5_gyrPw6am6EIdQXfIlPY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft
Manifest number:          0230
Signing time:             Mon 11 May 2026 02:39:52 +0000
Manifest this update:     Mon 11 May 2026 02:39:51 +0000
Manifest next update:     Mon 18 May 2026 02:39:51 +0000
Files and hashes:         1: 24aQ9k5_gyrPw6am6EIdQXfIlPY.crl (hash: 60NozGaPg9XybHIHd8RiURxYxKAhckFgZF1bTOm/COc=)
                          2: 6B5723D8F89F11ED8F29921CC4F9AE02.roa (hash: oThRjVHDmoFWRnFR0NxIEVr1V8eRjzhqrwR3MFXCY2U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.crl
                          rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/24aQ9k5_gyrPw6am6EIdQXfIlPY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 02:39:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 565 (0x235)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0FAA, serialNumber=DB8690F64E7F832ACFC3A6A6E8421D4177C894F6
        Validity
            Not Before: May 11 02:39:51 2026 GMT
            Not After : May 18 02:39:51 2026 GMT
        Subject: CN=6a014178-aaa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7a:cb:1f:d7:2e:3a:cc:48:6c:08:8d:fc:58:
                    6d:30:c9:3f:19:04:a6:87:b3:d8:b4:85:d3:6c:f5:
                    b9:53:97:f8:0a:86:75:6b:b1:c9:0f:d5:d3:d2:83:
                    52:86:6d:a0:db:55:16:68:51:c7:91:70:7b:05:2c:
                    3b:06:a1:6e:d1:0a:24:d8:6d:43:ab:67:0c:19:ac:
                    90:0c:4d:4a:25:4a:84:7b:61:a1:d1:6c:be:73:79:
                    88:81:cf:ae:5a:00:e7:a7:83:0c:ea:af:52:9a:02:
                    dc:2b:c8:3d:42:83:e6:95:aa:81:c6:74:9b:a3:67:
                    12:99:76:84:40:b7:79:9f:be:2b:6f:55:23:0f:7a:
                    f0:6e:75:57:2e:8d:0b:ab:7d:38:93:36:94:59:33:
                    89:23:d7:6d:53:87:e0:9a:eb:39:52:98:7a:af:52:
                    d5:b9:22:10:77:04:15:cb:6c:e9:d3:cf:87:3d:46:
                    9d:1a:c0:35:dc:6b:6b:af:b8:a6:64:45:9e:7b:ab:
                    5e:d2:d9:eb:ed:60:69:a8:e4:a5:c5:9b:d1:7c:56:
                    b4:41:48:a8:cc:ff:dc:b3:32:36:e6:64:6c:5d:59:
                    f0:ca:ef:52:3e:5a:97:f1:c6:76:5f:90:64:b4:ce:
                    6d:c9:34:f2:d2:e2:6c:c5:55:be:c7:38:7a:88:69:
                    5e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:53:7E:A3:51:0F:97:9F:D0:F0:C5:F2:7D:9A:FD:17:ED:FF:9B:1C
            X509v3 Authority Key Identifier:
                keyid:DB:86:90:F6:4E:7F:83:2A:CF:C3:A6:A6:E8:42:1D:41:77:C8:94:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/24aQ9k5_gyrPw6am6EIdQXfIlPY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:13:e6:db:28:55:55:44:9a:ed:2d:8d:85:3e:90:14:f3:13:
         57:40:18:3b:62:48:ac:4a:78:bd:ee:5f:d4:67:22:2e:c0:e8:
         b9:6f:70:e5:75:f6:16:51:f8:a7:46:76:95:cd:8c:a5:0c:f9:
         33:d1:08:93:c6:21:1f:41:49:1a:ed:28:91:77:e2:80:4f:66:
         18:bc:e1:7f:88:d4:da:ee:4d:fd:ee:6d:f6:49:38:4b:7b:9c:
         af:87:78:de:7c:71:26:50:f1:ec:98:85:ca:7d:18:9c:49:94:
         4e:30:a1:36:90:4e:93:ab:55:0f:65:8b:34:e4:ac:4e:ad:d5:
         b0:ec:de:a0:2f:10:2d:f0:9f:57:18:b9:be:26:f0:57:45:df:
         2d:17:fb:1f:26:fa:5d:a0:4c:70:53:33:c9:d7:ed:32:67:b3:
         3a:7c:f0:51:fe:db:4c:47:80:2d:27:bb:be:dd:ce:1f:da:4d:
         d4:96:3d:10:cf:6c:77:94:0f:9d:79:1c:4a:5a:fd:76:d6:a4:
         6b:70:10:36:ae:45:f3:cd:41:82:a8:64:a2:f0:a6:0b:6b:5a:
         66:6b:af:06:07:a9:b4:ac:71:46:80:c8:c6:6c:e8:5b:10:93:
         10:45:87:de:9c:b0:72:1d:c6:49:d1:48:60:90:89:9f:12:6c:
         99:46:34:f6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjBGQUExMTAvBgNVBAUTKERCODY5MEY2NEU3RjgzMkFDRkMzQTZBNkU4NDIxRDQx
NzdDODk0RjYwHhcNMjYwNTExMDIzOTUxWhcNMjYwNTE4MDIzOTUxWjAYMRYwFAYD
VQQDEw02YTAxNDE3OC1hYWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0HrLH9cuOsxIbAiN/FhtMMk/GQSmh7PYtIXTbPW5U5f4CoZ1a7HJD9XT0oNS
hm2g21UWaFHHkXB7BSw7BqFu0Qok2G1Dq2cMGayQDE1KJUqEe2Gh0Wy+c3mIgc+u
WgDnp4MM6q9SmgLcK8g9QoPmlaqBxnSbo2cSmXaEQLd5n74rb1UjD3rwbnVXLo0L
q304kzaUWTOJI9dtU4fgmus5Uph6r1LVuSIQdwQVy2zp08+HPUadGsA13Gtrr7im
ZEWee6te0tnr7WBpqOSlxZvRfFa0QUiozP/cszI25mRsXVnwyu9SPlqX8cZ2X5Bk
tM5tyTTy0uJsxVW+xzh6iGlebQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK5TfqNR
D5ef0PDF8n2a/Rft/5scMB8GA1UdIwQYMBaAFNuGkPZOf4Mqz8OmpuhCHUF3yJT2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEZBQS9GRTEwMUNDQ0Y4
OTgxMUVEODYyMzVGNjhDNEY5QUUwMi8yNGFROWs1X2d5clB3NmFtNkVJZFFYZkls
UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzI0YVE5azVfZ3lyUHc2YW02RUlkUVhmSWxQWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MEZBQS9GRTEwMUNDQ0Y4OTgxMUVEODYyMzVGNjhDNEY5QUUwMi8yNGFROWs1X2d5
clB3NmFtNkVJZFFYZklsUFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKBPm2yhVVUSa7S2NhT6QFPMTV0AYO2JIrEp4ve5f1GciLsDouW9w5XX2FlH4
p0Z2lc2MpQz5M9EIk8YhH0FJGu0okXfigE9mGLzhf4jU2u5N/e5t9kk4S3ucr4d4
3nxxJlDx7JiFyn0YnEmUTjChNpBOk6tVD2WLNOSsTq3VsOzeoC8QLfCfVxi5vibw
V0XfLRf7Hyb6XaBMcFMzydftMmezOnzwUf7bTEeALSe7vt3OH9pN1JY9EM9sd5QP
nXkcSlr9dtaka3AQNq5F881BgqhkovCmC2taZmuvBgeptKxxRoDIxmzoWxCTEEWH
3pywch3GSdFIYJCJnxJsmUY09g==
-----END CERTIFICATE-----
Generated at Wed May 13 05:17:19 2026 by rpki-client