Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.mft
File:                     R9Br1-qN8hl_cScLdclkx5q58Mw.mft (raw, json)
Hash identifier:          j6NtnreGC9UqYVdRvROTratThK5mt9I7jJW0SwceRvs=
Subject key identifier:   34:FC:46:E9:67:5E:D4:A9:F7:04:57:30:D9:AB:AF:9E:B4:BC:F9:7A
Authority key identifier: 47:D0:6B:D7:EA:8D:F2:19:7F:71:27:0B:75:C9:64:C7:9A:B9:F0:CC
Certificate issuer:       /CN=A9144354/serialNumber=47D06BD7EA8DF2197F71270B75C964C79AB9F0CC
Certificate serial:       1228
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R9Br1-qN8hl_cScLdclkx5q58Mw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.mft
Manifest number:          1213
Signing time:             Sat 16 May 2026 17:06:54 +0000
Manifest this update:     Sat 16 May 2026 17:06:54 +0000
Manifest next update:     Sat 23 May 2026 17:06:54 +0000
Files and hashes:         1: R9Br1-qN8hl_cScLdclkx5q58Mw.crl (hash: W0VE9F6M2o0tOtyJij9l+2/2bvOIj2/6Z9EG2L5taTQ=)
                          2: 1C6ADB02525311EA939E4652C4F9AE02.roa (hash: QDOv/k1/6QwFO3v9/oK9m5KqC6iM+gtzDTOnLCwkAkg=)
                          3: 1B3EC39C525311EA939E4652C4F9AE02.roa (hash: OlyIY7R0t7UmXYws0QWQQU3lNAFUrjDepPqWUn8CEMM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.crl
                          rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R9Br1-qN8hl_cScLdclkx5q58Mw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 May 2026 14:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4648 (0x1228)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144354, serialNumber=47D06BD7EA8DF2197F71270B75C964C79AB9F0CC
        Validity
            Not Before: May 16 17:06:54 2026 GMT
            Not After : May 23 17:06:54 2026 GMT
        Subject: CN=6a08a42e-fa4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:bb:e3:1d:75:a4:07:38:65:fa:b8:c5:51:a3:
                    32:3f:10:1d:43:32:26:59:c3:80:ba:cf:be:0a:e1:
                    8e:07:21:f9:19:f0:da:5d:65:1f:96:76:11:1b:df:
                    51:64:5b:b5:c9:99:f4:cc:2f:0f:29:a3:12:6d:e9:
                    ad:65:03:5c:4b:85:61:97:62:cb:01:5a:3a:66:36:
                    c3:ab:7a:bb:93:b0:fa:66:06:2e:95:e7:bc:52:18:
                    6b:0d:d7:8f:8d:07:5f:92:6d:e3:63:7e:40:a1:c9:
                    95:17:ff:38:67:14:4d:e0:bc:76:72:c8:38:de:d7:
                    e8:04:44:ee:a7:bd:37:00:92:82:f9:4b:2d:54:4b:
                    7b:8c:c5:1e:21:ff:55:d2:86:00:33:11:53:9d:83:
                    e8:f7:9c:c4:2a:5f:cf:b7:df:48:46:0c:44:44:ff:
                    61:59:68:05:35:02:f6:58:66:e9:77:e9:f3:e2:45:
                    98:66:0e:d2:b8:38:85:68:5b:92:89:31:0e:40:15:
                    3e:f4:69:64:08:7f:52:3e:ac:45:86:75:97:b4:94:
                    53:b7:e3:e2:b6:b6:4c:7c:20:e5:a2:ff:55:48:eb:
                    f4:94:75:ce:5d:79:5a:91:fa:50:cf:6f:58:72:91:
                    ad:d6:7f:b2:04:9f:11:84:01:03:d2:81:fb:fc:45:
                    5a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:FC:46:E9:67:5E:D4:A9:F7:04:57:30:D9:AB:AF:9E:B4:BC:F9:7A
            X509v3 Authority Key Identifier:
                keyid:47:D0:6B:D7:EA:8D:F2:19:7F:71:27:0B:75:C9:64:C7:9A:B9:F0:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R9Br1-qN8hl_cScLdclkx5q58Mw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:20:08:57:2f:9d:f0:02:e6:84:1a:65:02:4b:e1:59:77:c2:
         93:b5:4a:fa:74:57:8e:61:eb:b3:c2:d2:d9:94:70:b5:23:96:
         7b:0d:37:1a:ce:83:8a:37:e8:60:4f:01:8a:2e:36:41:e9:03:
         b1:09:ee:2b:f9:af:be:15:4a:38:93:0d:cd:e4:82:3b:86:b6:
         12:8d:20:e2:bd:f8:ed:58:e3:0d:23:14:3a:90:16:21:98:7d:
         17:10:e6:3d:6a:31:f4:c8:b4:ab:04:7b:18:ad:3e:06:2b:75:
         8e:62:72:64:12:84:4b:3c:c2:ca:78:62:8c:fe:02:b1:a4:4b:
         1d:ff:f7:53:f5:fb:d0:f3:18:97:fd:7e:31:61:69:51:98:aa:
         c9:ca:3e:a4:aa:ee:fc:15:48:5e:ec:b0:da:6e:b8:18:7e:7c:
         07:9b:92:e1:0e:6d:2d:2c:88:ac:33:56:63:08:1a:45:60:32:
         28:2f:35:24:35:59:6a:b2:39:25:83:5d:31:c9:94:8f:62:01:
         6a:c6:a6:2b:99:6b:ae:8a:4a:c2:99:c0:ce:29:55:b1:69:8b:
         21:a3:9d:c2:a6:e2:fd:88:90:19:cd:7a:69:0b:b0:a7:27:6c:
         5a:13:bf:10:ea:3d:3d:cb:aa:71:85:27:e3:5d:b0:66:f3:46:
         fe:69:4c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 23:31:42 2026 by rpki-client