Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.mft
File:                     AWZvx92HXf-g4ZvHPLrajs-aWCc.mft (raw, json)
Hash identifier:          JmKgLVzurXc0vzzomP4paUykz8F0xjjugBweQ1AykvM=
Subject key identifier:   28:AC:0F:08:55:3E:63:ED:1D:EC:AB:EB:7D:A6:AE:8D:3F:A5:31:35
Authority key identifier: 01:66:6F:C7:DD:87:5D:FF:A0:E1:9B:C7:3C:BA:DA:8E:CF:9A:58:27
Certificate issuer:       /CN=A9129969/serialNumber=01666FC7DD875DFFA0E19BC73CBADA8ECF9A5827
Certificate serial:       0240
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWZvx92HXf-g4ZvHPLrajs-aWCc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.mft
Manifest number:          021F
Signing time:             Sun 05 Apr 2026 02:35:39 +0000
Manifest this update:     Sun 05 Apr 2026 02:35:39 +0000
Manifest next update:     Sun 12 Apr 2026 02:35:39 +0000
Files and hashes:         1: AWZvx92HXf-g4ZvHPLrajs-aWCc.crl (hash: o+hH4bKPgszebNqLYlORf7asbKW4v1PYAW9y5Bdv4hI=)
                          2: A5D7263C1ECB11EE8FEFEE18C4F9AE02.roa (hash: ir+ohPjIccF3vHpqVtefjBEm+cD7sV1/e2b1iEqR4BI=)
                          3: 36E93942D6C511EEB512CC7FC4F9AE02.roa (hash: CJlRP/VDSjivJDg1KUXNqi92MzCGV7Ydo4BmSJUkkAY=)
                          4: 37649AB0D6C511EEB512CC7FC4F9AE02.roa (hash: akuOHZWMxhdBgYqE6Ifrb7JtsIz0NQwxFPmVS9VWAZI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.crl
                          rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWZvx92HXf-g4ZvHPLrajs-aWCc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 02:35:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 576 (0x240)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129969, serialNumber=01666FC7DD875DFFA0E19BC73CBADA8ECF9A5827
        Validity
            Not Before: Apr  5 02:35:39 2026 GMT
            Not After : Apr 12 02:35:39 2026 GMT
        Subject: CN=69d1ca7b-a9d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d6:b7:67:c2:aa:09:cc:8b:0c:8f:d7:ce:f3:
                    65:af:4c:f8:a8:d2:cd:94:21:ce:25:7b:e8:42:eb:
                    09:48:10:fe:46:e7:22:7d:e6:d8:f5:ef:d9:7a:f4:
                    38:eb:bd:94:09:97:2d:f5:5d:45:a3:d6:b2:8e:d7:
                    41:d1:36:1f:d4:9b:1a:3a:16:61:8c:f0:53:3e:e1:
                    3c:f5:7c:ee:8b:72:52:77:14:2e:87:4a:39:aa:fa:
                    be:44:a3:f5:a4:37:5f:c1:ce:8a:51:db:38:10:f6:
                    80:0b:59:96:a1:58:45:d3:48:d8:0d:d9:c6:a9:9b:
                    a2:92:b3:df:d0:01:44:c9:56:0d:a8:1e:ee:ff:96:
                    a1:a2:c3:4d:8c:9f:a2:02:10:2b:75:d3:30:85:f3:
                    d6:95:b6:9a:0d:12:6d:88:55:b1:66:39:2f:e3:45:
                    31:d4:82:9f:b0:a1:f3:2f:58:ce:67:9f:8c:33:55:
                    15:dd:bb:3c:1a:07:2d:37:74:22:b6:e4:f8:44:b9:
                    a4:45:16:6a:44:9a:52:2a:a7:1b:94:67:c7:49:cc:
                    af:b8:73:d0:5e:da:c9:d1:70:57:96:87:61:23:9a:
                    1f:0d:7b:d1:7d:c8:32:14:40:f0:ed:52:6e:6c:e5:
                    50:1b:42:71:4a:22:e2:a3:97:47:73:a9:3f:a4:66:
                    23:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:AC:0F:08:55:3E:63:ED:1D:EC:AB:EB:7D:A6:AE:8D:3F:A5:31:35
            X509v3 Authority Key Identifier:
                keyid:01:66:6F:C7:DD:87:5D:FF:A0:E1:9B:C7:3C:BA:DA:8E:CF:9A:58:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWZvx92HXf-g4ZvHPLrajs-aWCc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:81:c2:09:e9:88:75:e2:8e:7e:88:55:50:66:81:52:25:be:
         9c:d4:f0:c3:48:8c:ae:1e:f8:2d:c6:24:79:f4:35:7e:c4:59:
         d2:66:92:32:61:63:21:18:42:dd:02:d1:cd:99:49:ed:52:5e:
         bc:d1:44:07:3c:30:2b:81:97:1f:b8:1b:e2:28:d3:5b:cc:4d:
         72:1c:79:c1:d3:87:c7:a3:6a:d3:da:20:c7:b2:f9:4e:b8:f7:
         ed:0f:f5:d0:b6:4b:a3:7a:ad:57:ab:54:5e:41:a6:0d:09:4b:
         ec:ec:e9:71:77:56:93:44:15:0b:d3:39:01:2e:09:74:01:13:
         7b:dc:1b:fe:b1:86:39:35:09:c7:be:12:5d:e8:e5:43:f4:7f:
         c7:7e:3b:7e:56:5c:bb:96:2a:67:60:d9:59:ca:36:80:86:0d:
         5c:85:45:8f:d7:c8:e6:42:a7:94:14:a2:76:db:3a:90:27:86:
         9b:50:34:c3:a7:7b:ca:95:35:0e:68:de:2f:31:d7:c0:e5:85:
         28:6b:f2:2f:7a:cd:bd:54:ed:a9:74:f5:f0:17:02:fa:21:87:
         4b:fb:fb:4b:f2:19:20:74:4b:09:a2:d2:91:2e:ae:c9:df:5e:
         a0:c1:1e:11:cf:84:4c:50:f5:93:7b:52:bd:88:55:dc:9e:2a:
         9d:3b:63:01
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjk5NjkxMTAvBgNVBAUTKDAxNjY2RkM3REQ4NzVERkZBMEUxOUJDNzNDQkFEQThF
Q0Y5QTU4MjcwHhcNMjYwNDA1MDIzNTM5WhcNMjYwNDEyMDIzNTM5WjAYMRYwFAYD
VQQDEw02OWQxY2E3Yi1hOWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2da3Z8KqCcyLDI/XzvNlr0z4qNLNlCHOJXvoQusJSBD+RucifebY9e/ZevQ4
672UCZct9V1Fo9ayjtdB0TYf1JsaOhZhjPBTPuE89Xzui3JSdxQuh0o5qvq+RKP1
pDdfwc6KUds4EPaAC1mWoVhF00jYDdnGqZuikrPf0AFEyVYNqB7u/5ahosNNjJ+i
AhArddMwhfPWlbaaDRJtiFWxZjkv40Ux1IKfsKHzL1jOZ5+MM1UV3bs8GgctN3Qi
tuT4RLmkRRZqRJpSKqcblGfHScyvuHPQXtrJ0XBXlodhI5ofDXvRfcgyFEDw7VJu
bOVQG0JxSiLio5dHc6k/pGYjGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCisDwhV
PmPtHeyr632mro0/pTE1MB8GA1UdIwQYMBaAFAFmb8fdh13/oOGbxzy62o7Pmlgn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTk2OS9DRjM5NUMzODFD
NkExMUVFQkY2MkFDMERDNEY5QUUwMi9BV1p2eDkySFhmLWc0WnZIUExyYWpzLWFX
Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FXWnZ4OTJIWGYtZzRadkhQTHJhanMtYVdDYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
OTk2OS9DRjM5NUMzODFDNkExMUVFQkY2MkFDMERDNEY5QUUwMi9BV1p2eDkySFhm
LWc0WnZIUExyYWpzLWFXQ2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhoHCCemIdeKOfohVUGaBUiW+nNTww0iMrh74LcYkefQ1fsRZ0maSMmFjIRhC
3QLRzZlJ7VJevNFEBzwwK4GXH7gb4ijTW8xNchx5wdOHx6Nq09ogx7L5Trj37Q/1
0LZLo3qtV6tUXkGmDQlL7OzpcXdWk0QVC9M5AS4JdAETe9wb/rGGOTUJx74SXejl
Q/R/x347flZcu5YqZ2DZWco2gIYNXIVFj9fI5kKnlBSidts6kCeGm1A0w6d7ypU1
DmjeLzHXwOWFKGvyL3rNvVTtqXT18BcC+iGHS/v7S/IZIHRLCaLSkS6uyd9eoMEe
Ec+ETFD1k3tSvYhV3J4qnTtjAQ==
-----END CERTIFICATE-----
Generated at Sun Apr 5 19:38:34 2026 by rpki-client