Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.mft
File:                     r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.mft (raw, json)
Hash identifier:          eoNnbjLSANiu6kPqDa7gBGLaLTNyU1i5CPtAxmJR57E=
Subject key identifier:   F1:F5:C9:D0:EE:76:0B:FC:1B:A4:79:2E:99:29:8B:36:0B:1E:B9:8F
Authority key identifier: AF:D9:43:E4:B1:42:76:36:59:E0:8F:8D:BF:6C:E7:E6:D8:0C:C5:17
Certificate issuer:       /CN=A913BA97/serialNumber=AFD943E4B142763659E08F8DBF6CE7E6D80CC517
Certificate serial:       029A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.mft
Manifest number:          0280
Signing time:             Thu 21 May 2026 02:09:38 +0000
Manifest this update:     Thu 21 May 2026 02:09:37 +0000
Manifest next update:     Thu 28 May 2026 02:09:37 +0000
Files and hashes:         1: r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.crl (hash: ue2oZV6ubbo5HZFHanFVt6+dIuU+NwrdH944gWjY3l8=)
                          2: 6B4DE806568411EF8FE2C24EC4F9AE02.roa (hash: zL+0GILNq3N6RlaPpOmQcCTITpel7i2coFIgiZ3nFug=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.crl
                          rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 02:09:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 666 (0x29a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913BA97, serialNumber=AFD943E4B142763659E08F8DBF6CE7E6D80CC517
        Validity
            Not Before: May 21 02:09:37 2026 GMT
            Not After : May 28 02:09:37 2026 GMT
        Subject: CN=6a0e6962-4c8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:51:d6:48:38:cb:e6:cf:9d:85:20:ee:4a:c0:
                    5e:87:e6:9d:1d:44:ab:92:f0:82:db:a9:60:2f:8b:
                    c1:03:97:64:79:28:27:c4:50:6a:d0:0f:e4:cc:bd:
                    05:0d:d0:4d:68:64:a8:c8:e8:dd:d0:54:6c:52:5a:
                    bf:c0:b6:88:68:32:ef:db:b4:8b:32:d9:14:c7:42:
                    a9:04:29:0e:f5:51:2c:56:37:b7:b5:46:a9:57:6f:
                    2f:fc:28:33:47:4e:ae:ac:a9:c8:43:6c:7e:e5:ed:
                    99:16:34:02:8e:84:b8:68:b5:8f:44:b6:fa:d7:03:
                    f5:84:5c:bd:a9:c0:f6:b0:87:eb:d1:ed:2c:ce:31:
                    cc:f2:21:70:a0:f6:68:c5:7e:f9:83:29:e7:6f:75:
                    0f:50:38:34:e8:a8:2d:f3:9a:4f:bc:fc:83:2c:ee:
                    14:b3:24:2b:2d:c7:5d:c1:7e:ce:66:f7:63:ef:5f:
                    da:fa:03:4d:77:43:70:58:2f:ba:63:32:85:d7:9f:
                    19:ee:5c:a3:79:8b:7b:e6:0f:ab:79:1a:6d:cf:b2:
                    76:ff:e5:2a:97:04:c0:9f:73:cc:fb:c3:c2:64:79:
                    0c:ad:f4:9e:6a:df:a6:4b:4b:54:03:39:d5:b3:fc:
                    e6:26:b1:32:04:ac:47:10:17:de:c2:32:a7:5c:2e:
                    52:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F5:C9:D0:EE:76:0B:FC:1B:A4:79:2E:99:29:8B:36:0B:1E:B9:8F
            X509v3 Authority Key Identifier:
                keyid:AF:D9:43:E4:B1:42:76:36:59:E0:8F:8D:BF:6C:E7:E6:D8:0C:C5:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:a6:c7:2f:66:88:8a:99:74:5a:2c:94:46:1c:43:7d:d8:9f:
         c7:1d:5a:2e:91:99:f6:ac:63:72:e3:c0:2d:8f:94:f1:63:71:
         32:e1:9f:9a:ef:ca:ae:71:14:1b:d1:c4:34:86:3b:1c:dd:75:
         76:2d:b5:be:46:29:98:77:ae:86:26:24:2d:8a:05:bc:12:cb:
         d6:17:39:f9:c5:83:77:f5:04:50:f4:b8:0a:5b:f3:bf:03:bd:
         49:24:09:53:68:e4:4e:2f:0f:3e:4a:9f:bf:dc:aa:be:be:34:
         65:7a:2b:55:1f:11:e4:71:5b:60:2b:1f:05:9d:74:c4:de:dc:
         35:6e:2b:d6:dd:d6:dc:bb:3d:34:85:22:95:33:5d:d5:f8:73:
         f9:cb:be:2e:bc:a0:2b:4c:4a:b2:e0:06:de:c5:7e:50:06:b8:
         3d:5e:06:7e:71:68:27:78:23:60:5f:bf:46:2b:85:0c:61:f3:
         ac:e9:0e:df:a3:c5:b6:fd:77:6a:74:bd:e2:75:f8:c9:55:4f:
         ef:95:5a:ff:45:14:2f:c9:74:fa:5b:02:af:78:b8:07:2c:63:
         5b:c5:95:f6:bd:9a:92:99:7f:ba:6e:0d:53:f2:d8:70:8b:cc:
         c0:05:34:20:1d:c0:ac:04:b7:b7:4e:52:5d:28:78:09:b8:0d:
         fa:c3:16:5c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICApowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0JBOTcxMTAvBgNVBAUTKEFGRDk0M0U0QjE0Mjc2MzY1OUUwOEY4REJGNkNFN0U2
RDgwQ0M1MTcwHhcNMjYwNTIxMDIwOTM3WhcNMjYwNTI4MDIwOTM3WjAYMRYwFAYD
VQQDEw02YTBlNjk2Mi00YzhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv1HWSDjL5s+dhSDuSsBeh+adHUSrkvCC26lgL4vBA5dkeSgnxFBq0A/kzL0F
DdBNaGSoyOjd0FRsUlq/wLaIaDLv27SLMtkUx0KpBCkO9VEsVje3tUapV28v/Cgz
R06urKnIQ2x+5e2ZFjQCjoS4aLWPRLb61wP1hFy9qcD2sIfr0e0szjHM8iFwoPZo
xX75gynnb3UPUDg06Kgt85pPvPyDLO4UsyQrLcddwX7OZvdj71/a+gNNd0NwWC+6
YzKF158Z7lyjeYt75g+reRptz7J2/+UqlwTAn3PM+8PCZHkMrfSeat+mS0tUAznV
s/zmJrEyBKxHEBfewjKnXC5SawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPH1ydDu
dgv8G6R5LpkpizYLHrmPMB8GA1UdIwQYMBaAFK/ZQ+SxQnY2WeCPjb9s5+bYDMUX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkE5Ny9GMUZFQjFGRUFD
NEExMUVEQTdGMUIwNDRDNEY5QUUwMi9yOWxENUxGQ2RqWlo0SS1OdjJ6bjV0Z014
UmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3I5bEQ1TEZDZGpaWjRJLU52MnpuNXRnTXhSYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QkE5Ny9GMUZFQjFGRUFDNEExMUVEQTdGMUIwNDRDNEY5QUUwMi9yOWxENUxGQ2Rq
Wlo0SS1OdjJ6bjV0Z014UmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHabHL2aIipl0WiyURhxDfdifxx1aLpGZ9qxjcuPALY+U8WNxMuGfmu/KrnEU
G9HENIY7HN11di21vkYpmHeuhiYkLYoFvBLL1hc5+cWDd/UEUPS4ClvzvwO9SSQJ
U2jkTi8PPkqfv9yqvr40ZXorVR8R5HFbYCsfBZ10xN7cNW4r1t3W3Ls9NIUilTNd
1fhz+cu+LrygK0xKsuAG3sV+UAa4PV4GfnFoJ3gjYF+/RiuFDGHzrOkO36PFtv13
anS94nX4yVVP75Va/0UUL8l0+lsCr3i4ByxjW8WV9r2akpl/um4NU/LYcIvMwAU0
IB3ArAS3t05SXSh4CbgN+sMWXA==
-----END CERTIFICATE-----
Generated at Thu May 21 09:37:35 2026 by rpki-client