Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.mft
File:                     5QaTyhhbtl2Syvsw43b1G5Wa0tg.mft (raw, json)
Hash identifier:          IkIFTPAWbs1gm67cqYO0608qxasfsb/RFpOXUu7smeE=
Subject key identifier:   24:B7:06:13:C9:DA:6E:5A:68:17:8E:A3:36:E1:6B:27:40:E9:DF:23
Authority key identifier: E5:06:93:CA:18:5B:B6:5D:92:CA:FB:30:E3:76:F5:1B:95:9A:D2:D8
Certificate issuer:       /CN=A9115122/serialNumber=E50693CA185BB65D92CAFB30E376F51B959AD2D8
Certificate serial:       022E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QaTyhhbtl2Syvsw43b1G5Wa0tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.mft
Manifest number:          0229
Signing time:             Fri 17 Apr 2026 02:26:36 +0000
Manifest this update:     Fri 17 Apr 2026 02:26:36 +0000
Manifest next update:     Fri 24 Apr 2026 02:26:36 +0000
Files and hashes:         1: 5QaTyhhbtl2Syvsw43b1G5Wa0tg.crl (hash: oUDEVHEmWDAUjyBajmPdRRRZEFYAvGJ7GjaXysEnrtU=)
                          2: D4B97082EF2211EDB7EFE882C4F9AE02.roa (hash: QTvbuosrX5jsBzMxv5G1as9+EkdAYiScKyomhZlaqBU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.crl
                          rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QaTyhhbtl2Syvsw43b1G5Wa0tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:26:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 558 (0x22e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115122, serialNumber=E50693CA185BB65D92CAFB30E376F51B959AD2D8
        Validity
            Not Before: Apr 17 02:26:36 2026 GMT
            Not After : Apr 24 02:26:36 2026 GMT
        Subject: CN=69e19a5c-63af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:68:54:14:72:64:73:25:d9:fe:3d:68:74:03:
                    38:3b:91:68:9d:1a:c8:49:13:86:b2:b4:cb:48:1c:
                    a2:7e:56:c7:bc:b0:54:47:0d:32:a7:45:d6:39:57:
                    71:7c:32:57:cc:67:05:05:fb:6d:f7:9f:8e:7e:2a:
                    55:9b:29:fd:02:3b:7b:26:e1:fa:72:c7:14:dd:02:
                    45:9b:98:2b:e0:53:44:6c:d6:69:49:85:ba:42:61:
                    22:6b:06:8e:3c:2d:95:4b:f1:32:77:65:03:37:a0:
                    4e:46:69:be:24:e2:fe:72:f8:3a:d1:e6:bb:0f:76:
                    2c:38:4e:ab:40:a7:69:a8:2e:dd:e2:a4:a7:6a:47:
                    9d:40:c9:93:26:3f:28:07:07:35:ed:8c:8a:58:c0:
                    a3:b0:5d:82:31:35:2a:2f:ca:d6:37:88:ad:f5:c9:
                    51:11:c7:6b:2a:49:21:cb:d2:fc:8d:e9:95:1b:78:
                    97:a8:cd:50:4a:c8:bb:06:ff:42:17:2e:4d:9a:25:
                    be:29:3d:7a:2f:57:3b:21:94:79:56:5d:7a:82:8c:
                    cd:48:40:cc:6e:3f:db:a9:54:5e:95:19:97:8e:72:
                    17:30:bf:58:88:24:67:e3:d3:47:7c:04:34:ac:a7:
                    6a:84:fa:fa:1a:30:c5:37:75:99:bd:c1:b2:93:57:
                    e9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B7:06:13:C9:DA:6E:5A:68:17:8E:A3:36:E1:6B:27:40:E9:DF:23
            X509v3 Authority Key Identifier:
                keyid:E5:06:93:CA:18:5B:B6:5D:92:CA:FB:30:E3:76:F5:1B:95:9A:D2:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QaTyhhbtl2Syvsw43b1G5Wa0tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:60:58:52:42:93:f2:d1:4d:3b:0b:65:16:8f:94:f9:c7:c6:
         d0:d6:a9:d1:8c:3d:89:8e:88:b5:1b:93:8b:f2:2b:fe:0f:83:
         38:45:9e:c3:45:41:e0:0c:86:ce:bd:0c:a3:df:71:63:66:82:
         df:bc:cb:f6:34:8e:9b:e8:b0:3b:5e:66:02:b8:6b:72:a9:5e:
         c1:13:3c:f9:50:47:0e:47:17:27:22:7c:a4:3d:39:06:d0:66:
         08:f7:9a:0d:43:b6:68:3a:31:4f:55:93:06:3d:91:8c:89:45:
         6e:74:16:d3:fe:8d:a8:c9:d5:00:33:8e:f0:f2:e4:f5:bd:53:
         07:bc:ed:69:cc:6e:2f:e3:45:ec:c8:d3:ab:a6:bc:c9:cb:68:
         4b:67:a2:1f:03:64:4b:d4:99:39:ed:11:32:27:be:63:59:70:
         d6:43:03:02:f3:f4:ba:6a:b3:e9:b2:10:7c:d9:c1:a4:4a:2d:
         47:b2:d8:34:91:0a:26:c3:9e:9c:c8:8c:4e:6f:69:83:47:d5:
         b8:5d:21:2d:23:b9:e6:17:27:51:32:e6:63:d4:9e:af:b1:03:
         15:2d:89:1b:37:d8:70:2e:23:41:ed:2d:6d:10:74:86:1e:cd:
         16:56:f4:c7:74:97:44:17:26:55:1b:e3:f3:9e:40:46:c8:f0:
         49:d2:0e:54
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTUxMjIxMTAvBgNVBAUTKEU1MDY5M0NBMTg1QkI2NUQ5MkNBRkIzMEUzNzZGNTFC
OTU5QUQyRDgwHhcNMjYwNDE3MDIyNjM2WhcNMjYwNDI0MDIyNjM2WjAYMRYwFAYD
VQQDEw02OWUxOWE1Yy02M2FmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyWhUFHJkcyXZ/j1odAM4O5FonRrISROGsrTLSByiflbHvLBURw0yp0XWOVdx
fDJXzGcFBftt95+OfipVmyn9Ajt7JuH6cscU3QJFm5gr4FNEbNZpSYW6QmEiawaO
PC2VS/Eyd2UDN6BORmm+JOL+cvg60ea7D3YsOE6rQKdpqC7d4qSnakedQMmTJj8o
Bwc17YyKWMCjsF2CMTUqL8rWN4it9clREcdrKkkhy9L8jemVG3iXqM1QSsi7Bv9C
Fy5NmiW+KT16L1c7IZR5Vl16gozNSEDMbj/bqVRelRmXjnIXML9YiCRn49NHfAQ0
rKdqhPr6GjDFN3WZvcGyk1fpRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCS3BhPJ
2m5aaBeOozbhaydA6d8jMB8GA1UdIwQYMBaAFOUGk8oYW7Zdksr7MON29RuVmtLY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTEyMi8zMEM3QTM4RUVG
MUYxMUVEQkY3MUNDODBDNEY5QUUwMi81UWFUeWhoYnRsMlN5dnN3NDNiMUc1V2Ew
dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVRYVR5aGhidGwyU3l2c3c0M2IxRzVXYTB0Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NTEyMi8zMEM3QTM4RUVGMUYxMUVEQkY3MUNDODBDNEY5QUUwMi81UWFUeWhoYnRs
MlN5dnN3NDNiMUc1V2EwdGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAf2BYUkKT8tFNOwtlFo+U+cfG0Nap0Yw9iY6ItRuTi/Ir/g+DOEWew0VB4AyG
zr0Mo99xY2aC37zL9jSOm+iwO15mArhrcqlewRM8+VBHDkcXJyJ8pD05BtBmCPea
DUO2aDoxT1WTBj2RjIlFbnQW0/6NqMnVADOO8PLk9b1TB7ztacxuL+NF7MjTq6a8
yctoS2eiHwNkS9SZOe0RMie+Y1lw1kMDAvP0umqz6bIQfNnBpEotR7LYNJEKJsOe
nMiMTm9pg0fVuF0hLSO55hcnUTLmY9Ser7EDFS2JGzfYcC4jQe0tbRB0hh7NFlb0
x3SXRBcmVRvj855ARsjwSdIOVA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:11:47 2026 by rpki-client