Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft
File:                     24aQ9k5_gyrPw6am6EIdQXfIlPY.mft (raw, json)
Hash identifier:          qa+6mLADbDLkyUCjR3QLwrDHS17eOegPCMioxdbkZYU=
Subject key identifier:   C5:AC:77:EF:53:D6:15:2B:47:FD:90:A7:C2:8F:7A:53:12:CB:B0:4C
Authority key identifier: DB:86:90:F6:4E:7F:83:2A:CF:C3:A6:A6:E8:42:1D:41:77:C8:94:F6
Certificate issuer:       /CN=A91F0FAA/serialNumber=DB8690F64E7F832ACFC3A6A6E8421D4177C894F6
Certificate serial:       0278
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/24aQ9k5_gyrPw6am6EIdQXfIlPY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft
Manifest number:          0273
Signing time:             Mon 21 Sep 2026 02:02:21 +0000
Manifest this update:     Mon 21 Sep 2026 02:02:21 +0000
Manifest next update:     Mon 28 Sep 2026 02:02:21 +0000
Files and hashes:         1: 24aQ9k5_gyrPw6am6EIdQXfIlPY.crl (hash: Jy5dCPvt5ixj/B/rJJAgT9agRjeSa/xYWWv92sCH1QY=)
                          2: 6B5723D8F89F11ED8F29921CC4F9AE02.roa (hash: oThRjVHDmoFWRnFR0NxIEVr1V8eRjzhqrwR3MFXCY2U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.crl
                          rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/24aQ9k5_gyrPw6am6EIdQXfIlPY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 02:02:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 632 (0x278)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0FAA, serialNumber=DB8690F64E7F832ACFC3A6A6E8421D4177C894F6
        Validity
            Not Before: Sep 21 02:02:21 2026 GMT
            Not After : Sep 28 02:02:21 2026 GMT
        Subject: CN=6ab0902d-1736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:14:1e:38:b5:44:94:ab:4a:28:05:1a:33:4e:
                    91:1b:55:31:c7:e8:a6:a0:1a:66:71:7b:4d:af:8e:
                    96:d6:8f:78:c8:f3:8a:2e:be:9a:e5:ef:13:6d:8e:
                    89:6b:7d:85:8b:e6:fd:f0:7f:5b:08:5a:46:75:df:
                    8f:97:a1:c3:00:a9:77:11:b2:92:72:53:81:9f:18:
                    f7:44:fc:d7:4e:ef:61:7d:f0:a4:df:78:bc:2b:27:
                    fb:80:e5:13:18:d7:7e:8b:7f:26:a6:f2:9e:5a:ea:
                    9f:05:40:6a:29:a6:e9:7a:34:ef:30:9d:f0:b1:59:
                    eb:e7:e5:d3:5c:01:4f:b1:37:26:29:ba:2c:50:3f:
                    44:cc:cd:7f:33:df:94:ac:cc:53:db:db:15:06:e7:
                    6f:35:6c:02:2a:50:ca:c6:e0:cc:51:6c:69:c1:2a:
                    01:eb:6a:f3:25:d4:b2:f0:99:67:a1:f5:1f:e7:d9:
                    ab:a7:36:03:98:91:9a:39:86:95:e0:a8:99:88:ef:
                    54:29:0d:87:cc:b9:26:7f:93:91:1e:9e:c8:17:c9:
                    20:dd:8b:1b:f2:f6:01:05:e4:ec:b5:5a:7d:8f:48:
                    4a:74:8e:ad:55:12:fb:d7:43:26:58:c4:e9:bf:80:
                    77:12:79:1e:78:4b:52:a4:79:0a:f3:37:48:f0:19:
                    97:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:AC:77:EF:53:D6:15:2B:47:FD:90:A7:C2:8F:7A:53:12:CB:B0:4C
            X509v3 Authority Key Identifier:
                keyid:DB:86:90:F6:4E:7F:83:2A:CF:C3:A6:A6:E8:42:1D:41:77:C8:94:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/24aQ9k5_gyrPw6am6EIdQXfIlPY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:fa:aa:cb:0f:62:3b:82:ad:5c:fe:f4:a5:2f:e7:df:5c:80:
         8b:a2:6c:db:6c:fa:fd:04:5e:19:65:ac:e2:f9:53:b5:ce:a6:
         64:b6:05:08:04:25:08:49:e4:13:ee:a0:27:e5:93:7c:77:0c:
         ef:a4:8e:47:77:50:9c:0f:82:8b:93:69:b7:4e:23:a4:db:67:
         10:1d:ca:58:b6:f1:9d:11:ad:ad:94:73:c4:3a:d5:86:64:c4:
         28:b0:47:e9:ee:50:00:f9:03:23:44:3a:33:f0:33:b1:f5:f4:
         99:fe:b9:4a:6d:eb:26:92:c7:dd:5f:5b:28:9b:f9:39:5d:f9:
         57:c6:2b:f1:b1:68:a1:d5:60:c2:d2:b7:79:ad:36:a7:47:09:
         9b:85:fa:a4:05:69:9b:c4:69:ae:38:47:d2:b8:5f:5c:b1:77:
         7c:d0:07:7e:38:01:1a:65:1d:39:6c:92:a4:f9:20:04:76:f5:
         ac:b4:a9:a2:24:f4:58:46:52:29:76:7c:b5:9d:fc:16:ef:cc:
         15:d6:9a:38:86:9e:2b:80:51:f1:0e:36:c5:d9:30:a6:44:ed:
         45:b2:a8:e6:dd:22:30:fd:22:7d:e2:a8:44:40:58:7b:86:cf:
         24:d2:79:89:b6:72:87:31:f3:17:43:97:fd:44:e6:81:0e:60:
         bb:0a:a0:47
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjBGQUExMTAvBgNVBAUTKERCODY5MEY2NEU3RjgzMkFDRkMzQTZBNkU4NDIxRDQx
NzdDODk0RjYwHhcNMjYwOTIxMDIwMjIxWhcNMjYwOTI4MDIwMjIxWjAYMRYwFAYD
VQQDEw02YWIwOTAyZC0xNzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmhQeOLVElKtKKAUaM06RG1Uxx+imoBpmcXtNr46W1o94yPOKLr6a5e8TbY6J
a32Fi+b98H9bCFpGdd+Pl6HDAKl3EbKSclOBnxj3RPzXTu9hffCk33i8Kyf7gOUT
GNd+i38mpvKeWuqfBUBqKabpejTvMJ3wsVnr5+XTXAFPsTcmKbosUD9EzM1/M9+U
rMxT29sVBudvNWwCKlDKxuDMUWxpwSoB62rzJdSy8JlnofUf59mrpzYDmJGaOYaV
4KiZiO9UKQ2HzLkmf5ORHp7IF8kg3Ysb8vYBBeTstVp9j0hKdI6tVRL710MmWMTp
v4B3EnkeeEtSpHkK8zdI8BmXewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMWsd+9T
1hUrR/2Qp8KPelMSy7BMMB8GA1UdIwQYMBaAFNuGkPZOf4Mqz8OmpuhCHUF3yJT2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEZBQS9GRTEwMUNDQ0Y4
OTgxMUVEODYyMzVGNjhDNEY5QUUwMi8yNGFROWs1X2d5clB3NmFtNkVJZFFYZkls
UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzI0YVE5azVfZ3lyUHc2YW02RUlkUVhmSWxQWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MEZBQS9GRTEwMUNDQ0Y4OTgxMUVEODYyMzVGNjhDNEY5QUUwMi8yNGFROWs1X2d5
clB3NmFtNkVJZFFYZklsUFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAovqqyw9iO4KtXP70pS/n31yAi6Js22z6/QReGWWs4vlTtc6mZLYFCAQlCEnk
E+6gJ+WTfHcM76SOR3dQnA+Ci5Npt04jpNtnEB3KWLbxnRGtrZRzxDrVhmTEKLBH
6e5QAPkDI0Q6M/AzsfX0mf65Sm3rJpLH3V9bKJv5OV35V8Yr8bFoodVgwtK3ea02
p0cJm4X6pAVpm8RprjhH0rhfXLF3fNAHfjgBGmUdOWySpPkgBHb1rLSpoiT0WEZS
KXZ8tZ38Fu/MFdaaOIaeK4BR8Q42xdkwpkTtRbKo5t0iMP0ifeKoREBYe4bPJNJ5
ibZyhzHzF0OX/UTmgQ5guwqgRw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 20:31:13 2026 by rpki-client