Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.mft
File:                     8a29DnE5HfIQ3jRh52V4tHoBYko.mft (raw, json)
Hash identifier:          hUr5WAxWAWXzzV7KPSG6B5ePlBHngRur/MKvCGh05OY=
Subject key identifier:   0D:23:63:CD:E1:40:52:C8:BB:AA:82:24:3A:78:63:EF:1F:B3:9D:90
Authority key identifier: F1:AD:BD:0E:71:39:1D:F2:10:DE:34:61:E7:65:78:B4:7A:01:62:4A
Certificate issuer:       /CN=A9131711/serialNumber=F1ADBD0E71391DF210DE3461E76578B47A01624A
Certificate serial:       0199
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8a29DnE5HfIQ3jRh52V4tHoBYko.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.mft
Manifest number:          0194
Signing time:             Sun 05 Apr 2026 03:49:09 +0000
Manifest this update:     Sun 05 Apr 2026 03:49:08 +0000
Manifest next update:     Sun 12 Apr 2026 03:49:08 +0000
Files and hashes:         1: 8a29DnE5HfIQ3jRh52V4tHoBYko.crl (hash: PERL1VJI/WNERKi7PXEQyudNK3naHpu4U7jW2EHnOb0=)
                          2: 1D63B4248BB011F0A730E413C4F9AE02.roa (hash: Klyy/dVtwsbFsvWmxb8UIFOVeT5tKXYuBYTRi8r0Nuo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.crl
                          rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8a29DnE5HfIQ3jRh52V4tHoBYko.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 03:49:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 409 (0x199)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131711, serialNumber=F1ADBD0E71391DF210DE3461E76578B47A01624A
        Validity
            Not Before: Apr  5 03:49:08 2026 GMT
            Not After : Apr 12 03:49:08 2026 GMT
        Subject: CN=69d1dbb5-cbad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f3:f2:53:37:78:2d:a3:fc:74:46:df:fe:1d:
                    a6:24:bd:eb:1e:43:3c:43:59:cb:cb:40:43:90:d7:
                    de:96:49:a9:72:f5:5d:83:6e:63:2d:fa:1b:94:dd:
                    92:86:5a:e7:fd:7f:4d:79:77:37:b1:99:61:78:20:
                    b9:55:d6:ac:03:43:50:09:b1:fb:bf:f7:35:a9:31:
                    37:61:9b:ff:14:72:36:42:3d:2b:14:48:dd:05:12:
                    59:ed:06:ae:44:aa:b9:62:97:06:78:27:d4:35:09:
                    ec:d5:f4:3b:46:ba:19:b5:8a:4c:92:6c:c3:4c:e9:
                    f2:27:52:97:2f:aa:73:a6:e0:10:5f:d9:28:0a:23:
                    3e:a2:e7:9a:16:b4:4c:1d:21:8f:5f:f4:17:d3:ee:
                    bc:2d:94:82:08:54:dc:e9:c3:24:c7:31:1b:70:47:
                    86:1a:96:4c:83:41:37:f4:b3:19:2f:38:43:f1:1f:
                    91:22:9d:8c:e6:1b:cc:dc:87:c3:e7:6b:f5:5e:2d:
                    9d:99:bf:6a:31:17:b3:7f:9a:7d:2a:f3:31:15:99:
                    d7:cf:3e:1b:06:0f:4f:5f:f6:5d:6b:99:db:d1:f6:
                    eb:38:c5:03:d4:58:72:2f:ce:9f:70:1a:63:e6:64:
                    3e:2a:51:be:ea:0f:a4:3e:d3:28:f7:0f:2d:e0:f7:
                    8c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:23:63:CD:E1:40:52:C8:BB:AA:82:24:3A:78:63:EF:1F:B3:9D:90
            X509v3 Authority Key Identifier:
                keyid:F1:AD:BD:0E:71:39:1D:F2:10:DE:34:61:E7:65:78:B4:7A:01:62:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8a29DnE5HfIQ3jRh52V4tHoBYko.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:c0:bc:37:2d:dd:5e:12:8b:74:a2:b0:00:51:17:29:37:4a:
         f3:19:4d:e2:79:0e:f2:63:0a:b9:18:aa:9e:3d:1e:84:2a:4b:
         1e:d1:67:a0:b1:82:7e:58:5b:c5:d3:91:9d:d7:91:19:d2:b2:
         37:63:71:8b:c5:0c:eb:71:eb:6d:82:5e:8e:d7:48:d2:24:c7:
         3f:46:6d:62:e9:18:82:7e:74:a5:08:d6:41:41:5d:b0:df:87:
         6c:bc:6f:55:37:34:d2:97:5a:f6:71:cd:32:2f:8b:d6:24:c6:
         02:51:8a:fe:c2:3b:0c:8f:76:ce:c8:cf:03:19:1d:0e:10:ca:
         34:c6:65:82:74:5a:7d:f8:c0:6e:7b:c3:74:6c:85:01:0f:eb:
         29:c2:d4:9d:8d:fd:45:ae:22:af:ff:bc:35:4f:60:f2:d1:be:
         c0:65:06:b7:af:11:f5:24:14:1d:55:f8:ce:9b:92:43:84:af:
         24:81:ae:8b:ee:a7:51:fa:ef:05:89:0d:c8:a5:f6:a9:12:ea:
         6c:d4:bf:c8:e3:ad:3c:37:52:12:64:89:b1:83:37:c1:a1:95:
         52:4e:1e:6a:bf:8e:2e:c0:7b:55:2a:14:29:8d:23:69:1e:01:
         5f:dc:ce:7a:fd:53:db:f7:c9:cd:bd:9b:3f:6a:95:10:da:ae:
         f8:dd:48:4a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzE3MTExMTAvBgNVBAUTKEYxQURCRDBFNzEzOTFERjIxMERFMzQ2MUU3NjU3OEI0
N0EwMTYyNEEwHhcNMjYwNDA1MDM0OTA4WhcNMjYwNDEyMDM0OTA4WjAYMRYwFAYD
VQQDEw02OWQxZGJiNS1jYmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuPPyUzd4LaP8dEbf/h2mJL3rHkM8Q1nLy0BDkNfelkmpcvVdg25jLfoblN2S
hlrn/X9NeXc3sZlheCC5VdasA0NQCbH7v/c1qTE3YZv/FHI2Qj0rFEjdBRJZ7Qau
RKq5YpcGeCfUNQns1fQ7RroZtYpMkmzDTOnyJ1KXL6pzpuAQX9koCiM+oueaFrRM
HSGPX/QX0+68LZSCCFTc6cMkxzEbcEeGGpZMg0E39LMZLzhD8R+RIp2M5hvM3IfD
52v1Xi2dmb9qMRezf5p9KvMxFZnXzz4bBg9PX/Zda5nb0fbrOMUD1FhyL86fcBpj
5mQ+KlG+6g+kPtMo9w8t4PeMZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA0jY83h
QFLIu6qCJDp4Y+8fs52QMB8GA1UdIwQYMBaAFPGtvQ5xOR3yEN40YedleLR6AWJK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTcxMS9BOTUwREZEQUM5
OTExMUVFODkxQkE0MTlDNEY5QUUwMi84YTI5RG5FNUhmSVEzalJoNTJWNHRIb0JZ
a28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhhMjlEbkU1SGZJUTNqUmg1MlY0dEhvQllrby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MTcxMS9BOTUwREZEQUM5OTExMUVFODkxQkE0MTlDNEY5QUUwMi84YTI5RG5FNUhm
SVEzalJoNTJWNHRIb0JZa28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApMC8Ny3dXhKLdKKwAFEXKTdK8xlN4nkO8mMKuRiqnj0ehCpLHtFnoLGCflhb
xdORndeRGdKyN2Nxi8UM63HrbYJejtdI0iTHP0ZtYukYgn50pQjWQUFdsN+HbLxv
VTc00pda9nHNMi+L1iTGAlGK/sI7DI92zsjPAxkdDhDKNMZlgnRaffjAbnvDdGyF
AQ/rKcLUnY39Ra4ir/+8NU9g8tG+wGUGt68R9SQUHVX4zpuSQ4SvJIGui+6nUfrv
BYkNyKX2qRLqbNS/yOOtPDdSEmSJsYM3waGVUk4ear+OLsB7VSoUKY0jaR4BX9zO
ev1T2/fJzb2bP2qVENqu+N1ISg==
-----END CERTIFICATE-----
Generated at Sun Apr 5 19:41:15 2026 by rpki-client