Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft
File:                     mPTtHqVu_jfKE0-HapZfKsb6N0g.mft (raw, json)
Hash identifier:          mejLa5Kt+CAw+s0/3lAxTMRbVNdu/oIkEYvpC1esd1s=
Subject key identifier:   0F:BE:2C:DD:E3:FC:A9:12:A9:5D:AD:E0:F4:85:CA:BE:35:32:EE:F6
Authority key identifier: 98:F4:ED:1E:A5:6E:FE:37:CA:13:4F:87:6A:96:5F:2A:C6:FA:37:48
Certificate issuer:       /CN=A9190EF5/serialNumber=98F4ED1EA56EFE37CA134F876A965F2AC6FA3748
Certificate serial:       01F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPTtHqVu_jfKE0-HapZfKsb6N0g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft
Manifest number:          01F4
Signing time:             Thu 21 May 2026 03:16:44 +0000
Manifest this update:     Thu 21 May 2026 03:16:43 +0000
Manifest next update:     Thu 28 May 2026 03:16:43 +0000
Files and hashes:         1: mPTtHqVu_jfKE0-HapZfKsb6N0g.crl (hash: 2jYFnB7IjVlmruI0PO/MoOjCvfSYCC+RKaoml4whAS8=)
                          2: 688DBA84577911EE8A10F47BC4F9AE02.roa (hash: SCwmxfDWW09S/YLmleV15ds27OPWcfPLn9LjAT3VnRE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.crl
                          rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPTtHqVu_jfKE0-HapZfKsb6N0g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 03:16:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 505 (0x1f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190EF5, serialNumber=98F4ED1EA56EFE37CA134F876A965F2AC6FA3748
        Validity
            Not Before: May 21 03:16:43 2026 GMT
            Not After : May 28 03:16:43 2026 GMT
        Subject: CN=6a0e791b-ec41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:74:75:85:44:bc:73:ed:1e:a6:85:78:f7:00:
                    eb:d5:6f:dd:d4:e0:38:4e:54:4d:20:1a:1b:f3:b5:
                    12:2a:82:5b:bc:3e:09:cc:61:91:03:c2:d5:bc:6f:
                    ec:c0:7c:8f:ad:fa:1b:0d:11:2d:3f:b2:93:e0:ff:
                    0f:e5:65:42:48:96:e9:2b:ca:77:d8:53:77:b2:9b:
                    7b:44:3e:e7:8e:1b:7e:31:2d:da:44:6e:bf:d5:a4:
                    9d:fb:9d:8c:5c:32:25:88:0d:09:f9:60:23:75:88:
                    fb:e3:a9:d6:f5:98:f7:8f:ab:fe:6e:4a:2c:04:5f:
                    61:8d:d5:79:62:19:29:49:6b:f7:eb:c3:c1:7f:c2:
                    49:29:84:3e:cb:81:24:71:a2:65:99:f7:37:86:b6:
                    6f:a2:dc:37:58:d9:34:b2:b7:fe:6a:89:cc:46:c2:
                    50:c7:ae:d4:a3:aa:8a:61:06:34:ca:c1:96:fd:00:
                    fd:18:68:92:19:b2:aa:26:ee:e8:f4:60:a6:22:ae:
                    a0:f6:5d:ff:7e:9e:71:16:ea:92:03:47:5d:fb:f3:
                    58:50:35:a5:0c:b6:2c:dd:47:fb:8e:74:43:d8:46:
                    34:47:f3:82:66:7f:d3:48:3e:bb:3a:84:e0:f3:dd:
                    3b:e8:9e:4a:56:17:40:b1:95:d7:20:d8:32:56:e9:
                    eb:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:BE:2C:DD:E3:FC:A9:12:A9:5D:AD:E0:F4:85:CA:BE:35:32:EE:F6
            X509v3 Authority Key Identifier:
                keyid:98:F4:ED:1E:A5:6E:FE:37:CA:13:4F:87:6A:96:5F:2A:C6:FA:37:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPTtHqVu_jfKE0-HapZfKsb6N0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:d0:5a:4e:ec:00:7b:8f:40:bb:ab:e1:26:a6:b6:3d:43:2c:
         a5:3a:46:11:e6:8f:0c:7b:fd:eb:09:1e:e1:4d:aa:92:71:d2:
         20:06:26:9c:97:88:28:93:2c:7d:f3:75:4e:74:cf:67:e5:01:
         9c:e8:13:7d:4c:4a:30:29:6e:9f:bf:52:46:d5:f5:4b:6b:9c:
         ce:8b:86:b9:72:59:9f:05:98:b1:6f:c2:6f:53:c8:e5:c4:70:
         bf:2b:55:67:90:f4:ff:62:1d:a2:6c:9a:e3:e6:41:92:7c:1b:
         f6:df:b9:f3:8a:de:70:93:2d:dd:9d:f6:97:a5:b8:c4:88:e4:
         83:ca:b4:e6:e8:8c:de:89:92:92:48:ea:8c:d1:3a:a4:a7:f6:
         91:c5:19:bd:1b:bb:df:dd:2e:3a:53:5b:9c:12:ba:15:19:f4:
         40:7a:4e:97:6b:b9:a0:55:78:f2:df:af:42:9c:a6:dd:35:4a:
         c3:26:8d:ac:44:16:5e:96:3f:6e:88:8a:77:82:0e:6d:95:e8:
         49:9a:f3:a7:2a:5c:6d:4e:19:13:a3:0d:74:25:5c:c9:4b:31:
         6c:6d:47:00:64:c3:f0:2a:b5:a1:b5:49:5a:82:11:36:67:f2:
         21:23:98:14:d2:df:f5:37:55:86:0c:8a:ca:8b:d9:85:2b:0e:
         41:33:39:d3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTBFRjUxMTAvBgNVBAUTKDk4RjRFRDFFQTU2RUZFMzdDQTEzNEY4NzZBOTY1RjJB
QzZGQTM3NDgwHhcNMjYwNTIxMDMxNjQzWhcNMjYwNTI4MDMxNjQzWjAYMRYwFAYD
VQQDEw02YTBlNzkxYi1lYzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvXR1hUS8c+0epoV49wDr1W/d1OA4TlRNIBob87USKoJbvD4JzGGRA8LVvG/s
wHyPrfobDREtP7KT4P8P5WVCSJbpK8p32FN3spt7RD7njht+MS3aRG6/1aSd+52M
XDIliA0J+WAjdYj746nW9Zj3j6v+bkosBF9hjdV5YhkpSWv368PBf8JJKYQ+y4Ek
caJlmfc3hrZvotw3WNk0srf+aonMRsJQx67Uo6qKYQY0ysGW/QD9GGiSGbKqJu7o
9GCmIq6g9l3/fp5xFuqSA0dd+/NYUDWlDLYs3Uf7jnRD2EY0R/OCZn/TSD67OoTg
89076J5KVhdAsZXXINgyVunr7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA++LN3j
/KkSqV2t4PSFyr41Mu72MB8GA1UdIwQYMBaAFJj07R6lbv43yhNPh2qWXyrG+jdI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEVGNS85NDA2NjI4RTU3
NzgxMUVFOENERjg1N0FDNEY5QUUwMi9tUFR0SHFWdV9qZktFMC1IYXBaZktzYjZO
MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21QVHRIcVZ1X2pmS0UwLUhhcFpmS3NiNk4wZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MEVGNS85NDA2NjI4RTU3NzgxMUVFOENERjg1N0FDNEY5QUUwMi9tUFR0SHFWdV9q
ZktFMC1IYXBaZktzYjZOMGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbdBaTuwAe49Au6vhJqa2PUMspTpGEeaPDHv96wke4U2qknHSIAYmnJeIKJMs
ffN1TnTPZ+UBnOgTfUxKMClun79SRtX1S2uczouGuXJZnwWYsW/Cb1PI5cRwvytV
Z5D0/2Idomya4+ZBknwb9t+584recJMt3Z32l6W4xIjkg8q05uiM3omSkkjqjNE6
pKf2kcUZvRu7390uOlNbnBK6FRn0QHpOl2u5oFV48t+vQpym3TVKwyaNrEQWXpY/
boiKd4IObZXoSZrzpypcbU4ZE6MNdCVcyUsxbG1HAGTD8Cq1obVJWoIRNmfyISOY
FNLf9TdVhgyKyovZhSsOQTM50w==
-----END CERTIFICATE-----
Generated at Thu May 21 10:37:36 2026 by rpki-client