Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft
File:                     tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft (raw, json)
Hash identifier:          JzqFxlZ5kiaAfVvhMFfSNfeZbWwrHkgUVB7i2N/zdps=
Subject key identifier:   8A:F7:B1:62:B3:AC:D2:A8:F4:9F:3D:C6:B2:CE:C1:42:7D:4B:19:FD
Authority key identifier: B4:83:9F:4F:C3:F8:ED:FC:BD:22:DA:1A:79:9D:86:5A:CF:E0:32:5F
Certificate issuer:       /CN=A9131181/serialNumber=B4839F4FC3F8EDFCBD22DA1A799D865ACFE0325F
Certificate serial:       E9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIOfT8P47fy9ItoaeZ2GWs_gMl8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft
Manifest number:          E1
Signing time:             Mon 01 Jun 2026 07:24:03 +0000
Manifest this update:     Mon 01 Jun 2026 07:24:02 +0000
Manifest next update:     Mon 08 Jun 2026 07:24:02 +0000
Files and hashes:         1: tIOfT8P47fy9ItoaeZ2GWs_gMl8.crl (hash: +Au1+kwAo7e0Su353Rbbx/hHOwp+2eO56EW7ALvsSYU=)
                          2: AD57493E0B7B11F09EB3322EC4F9AE02.roa (hash: kJueAKUE3Sd3o6wDYoPNiGbGdW9zWY3YeQpVU6pBXdw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.crl
                          rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIOfT8P47fy9ItoaeZ2GWs_gMl8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 07:24:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 233 (0xe9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131181, serialNumber=B4839F4FC3F8EDFCBD22DA1A799D865ACFE0325F
        Validity
            Not Before: Jun  1 07:24:02 2026 GMT
            Not After : Jun  8 07:24:02 2026 GMT
        Subject: CN=6a1d3392-32cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6e:0b:c1:f4:e3:d9:21:2a:41:8a:1c:46:36:
                    2f:9c:53:8b:17:f3:2c:8a:10:0d:f1:02:c0:a5:e9:
                    15:e9:b3:43:85:3a:e9:59:88:e1:3d:87:93:19:20:
                    70:9d:cd:89:9e:c3:95:28:44:22:a2:7f:53:7c:3b:
                    5e:52:96:76:18:38:35:69:75:25:82:e6:60:7d:32:
                    ef:b4:55:64:0e:98:c9:20:38:d0:5d:1b:92:ad:67:
                    c4:4e:95:16:49:5e:74:1a:50:41:08:13:f4:42:0d:
                    f0:5f:c8:67:80:e4:50:d4:0d:20:a3:41:95:14:16:
                    df:e8:fe:53:da:d4:20:4a:1f:35:85:44:4f:80:68:
                    2c:3d:61:84:a9:7d:42:8c:42:ef:6c:83:9a:50:bf:
                    83:31:bf:1e:c9:77:09:d6:8a:b1:23:50:a2:f0:5b:
                    95:d7:ad:e6:34:ce:89:7f:5d:f0:fa:c4:0a:b9:12:
                    42:45:a9:5a:56:0e:f7:a1:a4:ae:2e:ec:7b:10:c1:
                    db:45:27:c0:6f:2d:d3:00:df:4d:03:8c:44:04:39:
                    1e:a1:67:b7:f5:cb:2e:16:88:9b:01:d8:dc:50:6f:
                    c9:e8:ea:9a:5e:11:11:19:04:53:e2:a7:77:fc:bd:
                    b4:80:3f:ee:64:18:f7:b4:71:d1:cd:74:38:94:83:
                    20:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:F7:B1:62:B3:AC:D2:A8:F4:9F:3D:C6:B2:CE:C1:42:7D:4B:19:FD
            X509v3 Authority Key Identifier:
                keyid:B4:83:9F:4F:C3:F8:ED:FC:BD:22:DA:1A:79:9D:86:5A:CF:E0:32:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIOfT8P47fy9ItoaeZ2GWs_gMl8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:90:c9:4e:43:fd:40:80:22:71:27:82:31:c4:db:92:e4:6d:
         01:d2:0e:eb:51:1d:5f:d6:58:c6:ce:d1:3c:d0:58:27:59:63:
         0d:fa:c5:9d:3a:ae:66:b4:c2:d1:53:c4:f6:2e:a7:0b:cb:7f:
         e8:11:61:bc:9d:aa:57:62:19:9e:a0:0d:89:1f:e7:ae:04:4e:
         94:7b:92:0a:9b:56:f3:10:f8:f9:d1:b2:d5:49:b5:15:1d:40:
         b0:55:24:e4:3d:cd:70:f7:1a:73:4b:15:5b:60:0f:90:6c:7d:
         85:92:0b:4f:35:f5:97:de:e1:c9:7f:21:65:04:52:b5:e0:5c:
         8d:a5:52:ac:e2:9b:a6:3f:ba:8c:4e:55:d6:7a:61:6c:32:bb:
         0a:ab:ac:6d:fd:e1:43:9c:da:05:99:52:e3:1d:ef:21:3e:9e:
         0c:b7:62:20:9f:22:05:b6:f4:f9:78:12:95:d5:50:d2:08:a5:
         fd:87:02:27:ca:0e:3d:61:ae:fd:fc:19:f4:bb:36:d1:68:e3:
         ef:0d:61:43:fe:a0:f2:d7:c4:6a:fc:2c:ce:6e:5a:f0:63:03:
         66:29:41:89:a4:74:0c:26:15:43:0b:aa:bd:e0:6e:24:ad:06:
         22:25:40:73:24:9d:2e:49:1f:98:12:64:2a:82:d2:50:36:aa:
         8d:5b:1d:86
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzExODExMTAvBgNVBAUTKEI0ODM5RjRGQzNGOEVERkNCRDIyREExQTc5OUQ4NjVB
Q0ZFMDMyNUYwHhcNMjYwNjAxMDcyNDAyWhcNMjYwNjA4MDcyNDAyWjAYMRYwFAYD
VQQDEw02YTFkMzM5Mi0zMmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsG4LwfTj2SEqQYocRjYvnFOLF/MsihAN8QLApekV6bNDhTrpWYjhPYeTGSBw
nc2JnsOVKEQion9TfDteUpZ2GDg1aXUlguZgfTLvtFVkDpjJIDjQXRuSrWfETpUW
SV50GlBBCBP0Qg3wX8hngORQ1A0go0GVFBbf6P5T2tQgSh81hURPgGgsPWGEqX1C
jELvbIOaUL+DMb8eyXcJ1oqxI1Ci8FuV163mNM6Jf13w+sQKuRJCRalaVg73oaSu
Lux7EMHbRSfAby3TAN9NA4xEBDkeoWe39csuFoibAdjcUG/J6OqaXhERGQRT4qd3
/L20gD/uZBj3tHHRzXQ4lIMgTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIr3sWKz
rNKo9J89xrLOwUJ9Sxn9MB8GA1UdIwQYMBaAFLSDn0/D+O38vSLaGnmdhlrP4DJf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTE4MS9BQTA4N0Y3QTBC
NzkxMUYwQkI5OUVENkFDNEY5QUUwMi90SU9mVDhQNDdmeTlJdG9hZVoyR1dzX2dN
bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3RJT2ZUOFA0N2Z5OUl0b2FlWjJHV3NfZ01sOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MTE4MS9BQTA4N0Y3QTBCNzkxMUYwQkI5OUVENkFDNEY5QUUwMi90SU9mVDhQNDdm
eTlJdG9hZVoyR1dzX2dNbDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnJDJTkP9QIAicSeCMcTbkuRtAdIO61EdX9ZYxs7RPNBYJ1ljDfrFnTquZrTC
0VPE9i6nC8t/6BFhvJ2qV2IZnqANiR/nrgROlHuSCptW8xD4+dGy1Um1FR1AsFUk
5D3NcPcac0sVW2APkGx9hZILTzX1l97hyX8hZQRSteBcjaVSrOKbpj+6jE5V1nph
bDK7Cqusbf3hQ5zaBZlS4x3vIT6eDLdiIJ8iBbb0+XgSldVQ0gil/YcCJ8oOPWGu
/fwZ9Ls20Wjj7w1hQ/6g8tfEavwszm5a8GMDZilBiaR0DCYVQwuqveBuJK0GIiVA
cySdLkkfmBJkKoLSUDaqjVsdhg==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:20:07 2026 by rpki-client