Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F441/A58BE4683E0A11F19633AD1DA8833773/9XVLkqq8JoHf84hg3Om63UQAE5s.mft
File:                     9XVLkqq8JoHf84hg3Om63UQAE5s.mft (raw, json)
Hash identifier:          8aHW01xk/IoIh42Iv9klssgoFXX0CZRkPNzE5A9Sjl4=
Subject key identifier:   CF:D3:6B:82:68:88:B0:06:D4:77:93:DD:40:C9:EF:B5:A7:C7:5E:9F
Authority key identifier: F5:75:4B:92:AA:BC:26:81:DF:F3:88:60:DC:E9:BA:DD:44:00:13:9B
Certificate issuer:       /CN=A912F441/serialNumber=F5754B92AABC2681DFF38860DCE9BADD4400139B
Certificate serial:       12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9XVLkqq8JoHf84hg3Om63UQAE5s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F441/A58BE4683E0A11F19633AD1DA8833773/9XVLkqq8JoHf84hg3Om63UQAE5s.mft
Manifest number:          11
Signing time:             Tue 19 May 2026 08:56:07 +0000
Manifest this update:     Tue 19 May 2026 08:56:06 +0000
Manifest next update:     Tue 26 May 2026 08:56:06 +0000
Files and hashes:         1: 9XVLkqq8JoHf84hg3Om63UQAE5s.crl (hash: Q29XClT695HmMaNx9lny7PxOzwJUbObAfgiGfM1MH8g=)
                          2: 9019A36C3E1511F1A306071DB0833773.roa (hash: qFpaUvNcy06CyqhmCRJk7avcwKJJ8xKplcr6b79/BGk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F441/A58BE4683E0A11F19633AD1DA8833773/9XVLkqq8JoHf84hg3Om63UQAE5s.crl
                          rsync://rpki.apnic.net/member_repository/A912F441/A58BE4683E0A11F19633AD1DA8833773/9XVLkqq8JoHf84hg3Om63UQAE5s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9XVLkqq8JoHf84hg3Om63UQAE5s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 May 2026 08:56:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F441, serialNumber=F5754B92AABC2681DFF38860DCE9BADD4400139B
        Validity
            Not Before: May 19 08:56:06 2026 GMT
            Not After : May 26 08:56:06 2026 GMT
        Subject: CN=6a0c25a7-9688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f5:bd:74:b1:98:dd:2f:60:41:3d:d4:4f:dc:
                    24:ec:4c:51:00:24:db:6e:da:58:e6:61:e9:19:ec:
                    7e:47:a1:9e:a4:a3:71:79:b6:52:94:a3:1c:38:94:
                    2d:a4:92:96:72:df:e1:4f:d5:2a:d1:8b:48:58:de:
                    b4:53:89:50:cb:ab:75:f8:1c:cf:66:6c:61:43:9d:
                    94:a7:4c:b6:0a:48:89:b1:e6:04:4b:da:95:fb:75:
                    09:c4:fe:c7:df:84:be:90:3a:b2:49:db:d3:d0:6c:
                    c5:f1:e1:5e:79:9b:59:2a:fb:cf:e9:aa:ef:6c:44:
                    4c:9d:a8:08:7d:d8:82:b8:75:f5:37:34:fe:fd:a8:
                    39:2e:b6:37:0a:a7:0d:29:69:7f:0c:a0:91:17:cc:
                    68:23:40:07:6c:35:1a:70:92:be:59:1f:17:2f:d2:
                    98:b6:d0:b2:e4:29:fe:66:a7:a4:46:32:e8:e1:96:
                    da:f0:e2:99:16:8a:62:67:59:55:c5:03:e2:5c:91:
                    02:83:05:7b:ff:50:62:47:6a:0e:83:bf:54:3f:c8:
                    82:4b:c2:86:ca:87:42:b0:ac:cb:30:5b:fb:54:74:
                    4c:34:c1:c8:82:8d:5b:37:2d:f3:06:ea:32:29:31:
                    16:88:a6:3a:18:af:ef:7f:35:aa:2a:d0:1e:11:43:
                    b2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D3:6B:82:68:88:B0:06:D4:77:93:DD:40:C9:EF:B5:A7:C7:5E:9F
            X509v3 Authority Key Identifier:
                keyid:F5:75:4B:92:AA:BC:26:81:DF:F3:88:60:DC:E9:BA:DD:44:00:13:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F441/A58BE4683E0A11F19633AD1DA8833773/9XVLkqq8JoHf84hg3Om63UQAE5s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9XVLkqq8JoHf84hg3Om63UQAE5s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F441/A58BE4683E0A11F19633AD1DA8833773/9XVLkqq8JoHf84hg3Om63UQAE5s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:19:f2:92:27:e6:20:34:e4:f6:ae:66:81:f4:1d:b6:6a:50:
         b7:ed:1a:aa:03:28:aa:79:9a:14:55:b7:5e:8a:73:75:23:41:
         92:00:46:a6:c6:b2:dd:e0:39:aa:73:e7:ad:ee:07:db:58:1f:
         53:8a:8a:e3:71:ba:18:21:ad:51:a6:d7:92:27:a2:55:50:91:
         63:ce:fd:f5:4b:01:fa:81:81:25:bf:83:38:d5:ad:70:d2:49:
         d8:94:cc:78:f7:e2:db:7d:74:f0:73:91:6d:55:b1:9d:3f:1b:
         90:35:f9:88:30:ee:ea:a7:28:20:91:9e:83:c3:dc:77:ee:74:
         d0:fe:39:98:dc:91:ff:29:84:01:ac:87:dd:bc:59:dc:f7:f4:
         3d:92:79:5a:3a:6d:64:9e:ff:99:40:ea:4d:fe:fd:4d:d8:2a:
         08:33:56:3c:1a:cc:fa:d8:6d:5c:da:f9:78:2f:47:4f:60:16:
         29:f7:c4:36:aa:fa:17:6a:76:38:78:78:ea:8e:c8:de:2e:44:
         51:74:9b:dd:cb:23:bb:3e:23:1c:fc:ae:09:a2:ed:45:56:e1:
         37:ce:dd:3e:42:db:cb:22:f5:73:ff:ec:00:cc:d6:23:05:66:
         5b:65:83:91:a1:32:02:6c:9a:6b:d2:07:bd:fb:8d:0c:96:a5:
         aa:62:1e:97
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
RjQ0MTExMC8GA1UEBRMoRjU3NTRCOTJBQUJDMjY4MURGRjM4ODYwRENFOUJBREQ0
NDAwMTM5QjAeFw0yNjA1MTkwODU2MDZaFw0yNjA1MjYwODU2MDZaMBgxFjAUBgNV
BAMTDTZhMGMyNWE3LTk2ODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDA9b10sZjdL2BBPdRP3CTsTFEAJNtu2ljmYekZ7H5HoZ6ko3F5tlKUoxw4lC2k
kpZy3+FP1SrRi0hY3rRTiVDLq3X4HM9mbGFDnZSnTLYKSImx5gRL2pX7dQnE/sff
hL6QOrJJ29PQbMXx4V55m1kq+8/pqu9sREydqAh92IK4dfU3NP79qDkutjcKpw0p
aX8MoJEXzGgjQAdsNRpwkr5ZHxcv0pi20LLkKf5mp6RGMujhltrw4pkWimJnWVXF
A+JckQKDBXv/UGJHag6Dv1Q/yIJLwobKh0KwrMswW/tUdEw0wciCjVs3LfMG6jIp
MRaIpjoYr+9/Naoq0B4RQ7KZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUz9NrgmiI
sAbUd5PdQMnvtafHXp8wHwYDVR0jBBgwFoAU9XVLkqq8JoHf84hg3Om63UQAE5sw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGNDQxL0E1OEJFNDY4M0Uw
QTExRjE5NjMzQUQxREE4ODMzNzczLzlYVkxrcXE4Sm9IZjg0aGczT202M1VRQUU1
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvOVhWTGtxcThKb0hmODRoZzNPbTYzVVFBRTVzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJG
NDQxL0E1OEJFNDY4M0UwQTExRjE5NjMzQUQxREE4ODMzNzczLzlYVkxrcXE4Sm9I
Zjg0aGczT202M1VRQUU1cy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA4GfKSJ+YgNOT2rmaB9B22alC37RqqAyiqeZoUVbdeinN1I0GSAEamxrLd4Dmq
c+et7gfbWB9TiorjcboYIa1RpteSJ6JVUJFjzv31SwH6gYElv4M41a1w0knYlMx4
9+LbfXTwc5FtVbGdPxuQNfmIMO7qpyggkZ6Dw9x37nTQ/jmY3JH/KYQBrIfdvFnc
9/Q9knlaOm1knv+ZQOpN/v1N2CoIM1Y8Gsz62G1c2vl4L0dPYBYp98Q2qvoXanY4
eHjqjsjeLkRRdJvdyyO7PiMc/K4Jou1FVuE3zt0+QtvLIvVz/+wAzNYjBWZbZYOR
oTICbJpr0ge9+40MlqWqYh6X
-----END CERTIFICATE-----
Generated at Thu May 21 09:39:28 2026 by rpki-client