Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.mft
File:                     i9h5ncunV8W0WNZuOcYMnKP3mms.mft (raw, json)
Hash identifier:          5bJ6JTNjriFqfg4edx9JueNg8E/TSE3IFKMd0Lva0ao=
Subject key identifier:   8B:82:37:9C:A0:C5:97:7D:D1:21:B7:31:50:EC:79:4A:79:1C:BB:AE
Authority key identifier: 8B:D8:79:9D:CB:A7:57:C5:B4:58:D6:6E:39:C6:0C:9C:A3:F7:9A:6B
Certificate issuer:       /CN=A912BCCF/serialNumber=8BD8799DCBA757C5B458D66E39C60C9CA3F79A6B
Certificate serial:       081E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9h5ncunV8W0WNZuOcYMnKP3mms.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.mft
Manifest number:          0811
Signing time:             Sat 04 Apr 2026 20:54:44 +0000
Manifest this update:     Sat 04 Apr 2026 20:54:44 +0000
Manifest next update:     Sat 11 Apr 2026 20:54:44 +0000
Files and hashes:         1: i9h5ncunV8W0WNZuOcYMnKP3mms.crl (hash: o8OUEQt4yzWohXDTPkR9vMxa9HB2zz95utASpYdpRys=)
                          2: 2EEE5DDCB88011EB9C88057CC4F9AE02.roa (hash: yOuFWEMRjDuMVm01IbqIe3i9wqxDvbb8W9g8zqSmMx0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.crl
                          rsync://rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9h5ncunV8W0WNZuOcYMnKP3mms.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 20:54:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2078 (0x81e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BCCF, serialNumber=8BD8799DCBA757C5B458D66E39C60C9CA3F79A6B
        Validity
            Not Before: Apr  4 20:54:44 2026 GMT
            Not After : Apr 11 20:54:44 2026 GMT
        Subject: CN=69d17a94-270d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:96:b9:ec:e3:d0:e9:67:1e:c6:37:7a:21:04:
                    20:9a:28:5b:2b:e1:75:88:37:30:cd:01:e0:52:80:
                    c9:e3:69:97:01:41:59:a7:ad:3a:11:58:65:28:30:
                    c7:62:0b:3b:f4:4c:e7:ef:ce:3c:ae:05:9a:fe:e2:
                    75:16:c3:40:36:94:7e:fb:2a:b6:d3:ee:f4:d7:8b:
                    ba:15:78:d3:65:16:89:31:40:94:20:0f:53:d7:44:
                    b4:f8:37:1c:49:81:2d:d5:63:4e:0a:e0:3f:cb:69:
                    0e:37:82:2a:ba:82:6d:e6:4e:96:cf:9b:c9:99:e7:
                    1b:f1:c2:a9:40:45:37:6c:d3:64:3c:7c:08:ae:56:
                    c0:0a:6b:4d:d5:58:c0:b5:ba:46:d6:df:57:4b:a2:
                    e0:94:e0:68:12:1e:d4:12:d9:3a:e1:42:ec:df:53:
                    e5:fb:68:47:df:a1:37:dc:e6:9d:49:ed:06:a3:9d:
                    21:e6:ec:1c:a5:6f:1f:74:fc:af:fa:f2:bc:ce:eb:
                    c6:e1:79:58:03:ea:23:02:38:a0:42:b6:f4:90:c0:
                    c6:22:6e:70:8b:c9:86:1a:44:ba:fd:ab:a7:57:b3:
                    40:e1:ef:6d:f7:62:77:60:89:7e:06:cd:ed:cb:78:
                    53:82:99:7b:6f:52:1e:08:b9:cd:55:d5:cf:bd:80:
                    5d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:82:37:9C:A0:C5:97:7D:D1:21:B7:31:50:EC:79:4A:79:1C:BB:AE
            X509v3 Authority Key Identifier:
                keyid:8B:D8:79:9D:CB:A7:57:C5:B4:58:D6:6E:39:C6:0C:9C:A3:F7:9A:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9h5ncunV8W0WNZuOcYMnKP3mms.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:f8:34:61:36:76:02:94:26:f4:1a:77:69:5e:b5:df:cc:34:
         d9:e1:ee:92:11:b1:dc:d6:fa:5e:30:52:07:1c:84:9b:4a:cb:
         96:56:f6:36:c8:1a:3f:10:cb:97:43:fe:ad:3c:f9:40:5b:f8:
         15:37:0d:d4:14:da:bc:cb:bc:1b:12:aa:c3:48:6f:09:02:e8:
         38:4c:b0:d8:cf:b7:b0:5e:de:3d:4b:bd:a6:c5:9f:95:bd:d6:
         c3:19:a8:75:98:72:7a:2c:92:4c:2e:67:21:9d:53:a1:58:61:
         4a:ad:06:e7:52:56:12:d7:26:b3:ea:31:e1:3d:f8:9b:6b:1e:
         d3:ae:8b:05:41:62:41:18:d1:77:e1:eb:b1:38:f7:16:e5:e8:
         02:75:b1:97:a9:d1:52:f6:6c:f9:40:be:35:2a:f1:65:f8:71:
         1d:e9:7a:f3:f1:bd:10:32:5d:35:db:20:16:fb:d9:e1:da:9e:
         ad:16:27:4b:e0:d9:4a:b2:bb:2a:3b:d0:4f:c1:f7:a5:cd:b0:
         c5:44:d2:dc:c1:2d:dd:6b:57:78:84:65:39:9e:d5:54:36:f4:
         11:08:07:d3:f1:17:41:66:14:5f:a4:95:8f:d8:6a:46:8e:fd:
         51:13:0f:cf:e4:b5:0a:8f:8a:9f:0a:46:52:33:db:67:b5:f6:
         8f:c3:c9:76
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCB4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkJDQ0YxMTAvBgNVBAUTKDhCRDg3OTlEQ0JBNzU3QzVCNDU4RDY2RTM5QzYwQzlD
QTNGNzlBNkIwHhcNMjYwNDA0MjA1NDQ0WhcNMjYwNDExMjA1NDQ0WjAYMRYwFAYD
VQQDEw02OWQxN2E5NC0yNzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4Ja57OPQ6Wcexjd6IQQgmihbK+F1iDcwzQHgUoDJ42mXAUFZp606EVhlKDDH
Ygs79Ezn7848rgWa/uJ1FsNANpR++yq20+7014u6FXjTZRaJMUCUIA9T10S0+Dcc
SYEt1WNOCuA/y2kON4IquoJt5k6Wz5vJmecb8cKpQEU3bNNkPHwIrlbACmtN1VjA
tbpG1t9XS6LglOBoEh7UEtk64ULs31Pl+2hH36E33OadSe0Go50h5uwcpW8fdPyv
+vK8zuvG4XlYA+ojAjigQrb0kMDGIm5wi8mGGkS6/aunV7NA4e9t92J3YIl+Bs3t
y3hTgpl7b1IeCLnNVdXPvYBdMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIuCN5yg
xZd90SG3MVDseUp5HLuuMB8GA1UdIwQYMBaAFIvYeZ3Lp1fFtFjWbjnGDJyj95pr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkNDRi82NDI0RTE2MDE5
MDcxMUVCQUY0NjhEMkJDNEY5QUUwMi9pOWg1bmN1blY4VzBXTlp1T2NZTW5LUDNt
bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2k5aDVuY3VuVjhXMFdOWnVPY1lNbktQM21tcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QkNDRi82NDI0RTE2MDE5MDcxMUVCQUY0NjhEMkJDNEY5QUUwMi9pOWg1bmN1blY4
VzBXTlp1T2NZTW5LUDNtbXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAufg0YTZ2ApQm9Bp3aV6138w02eHukhGx3Nb6XjBSBxyEm0rLllb2NsgaPxDL
l0P+rTz5QFv4FTcN1BTavMu8GxKqw0hvCQLoOEyw2M+3sF7ePUu9psWflb3Wwxmo
dZhyeiySTC5nIZ1ToVhhSq0G51JWEtcms+ox4T34m2se066LBUFiQRjRd+HrsTj3
FuXoAnWxl6nRUvZs+UC+NSrxZfhxHel68/G9EDJdNdsgFvvZ4dqerRYnS+DZSrK7
KjvQT8H3pc2wxUTS3MEt3WtXeIRlOZ7VVDb0EQgH0/EXQWYUX6SVj9hqRo79URMP
z+S1Co+KnwpGUjPbZ7X2j8PJdg==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:33:34 2026 by rpki-client