Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft
File:                     o9XPQ95bPYucND7UScFpDr40Fw4.mft (raw, json)
Hash identifier:          Vj6o7wATeULEuEUKOvc5/29aHMTaxvaYzzwbdO1A4Ew=
Subject key identifier:   F7:03:B4:2A:A9:F4:03:DE:65:B6:07:01:21:D1:4E:7E:24:0F:A9:12
Authority key identifier: A3:D5:CF:43:DE:5B:3D:8B:9C:34:3E:D4:49:C1:69:0E:BE:34:17:0E
Certificate issuer:       /CN=A914CCD1/serialNumber=A3D5CF43DE5B3D8B9C343ED449C1690EBE34170E
Certificate serial:       06B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9XPQ95bPYucND7UScFpDr40Fw4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft
Manifest number:          0683
Signing time:             Sat 04 Apr 2026 22:29:55 +0000
Manifest this update:     Sat 04 Apr 2026 22:29:54 +0000
Manifest next update:     Sat 11 Apr 2026 22:29:54 +0000
Files and hashes:         1: o9XPQ95bPYucND7UScFpDr40Fw4.crl (hash: GhZsLPwn/qwTOMKFfjrFYZphBj6/R0klPeyxVnZAHn8=)
                          2: 05646F7C268211F19B4B306BB2833773.roa (hash: HZzicft3bos6w7OuWhMV24pkNyMhlarAtyII9OEKTS0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.crl
                          rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9XPQ95bPYucND7UScFpDr40Fw4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 22:29:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1714 (0x6b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CCD1, serialNumber=A3D5CF43DE5B3D8B9C343ED449C1690EBE34170E
        Validity
            Not Before: Apr  4 22:29:54 2026 GMT
            Not After : Apr 11 22:29:54 2026 GMT
        Subject: CN=69d190e3-96ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:99:62:a2:9e:b9:9d:99:5a:2f:c1:f3:09:22:
                    bc:b9:3d:b0:2c:b9:d0:64:3e:ca:a3:f8:5b:d3:ab:
                    2f:fc:7f:51:d7:d0:e1:da:51:78:f5:eb:b1:1c:09:
                    e1:6a:5a:cf:39:b0:e6:40:44:0f:ad:79:87:0f:c4:
                    60:f2:5c:00:7a:ee:d0:37:0c:ed:e8:09:84:a6:c2:
                    0d:63:5b:34:98:2c:5f:47:80:b0:83:8d:59:69:33:
                    09:db:51:b9:f6:30:1a:eb:0d:23:5d:ae:ca:f9:fb:
                    4c:7e:ae:89:60:87:5a:d2:7c:b8:fa:18:d8:0d:b2:
                    cb:2d:26:4a:2c:98:83:51:5c:6b:26:ce:f0:99:16:
                    5d:50:f6:2a:4c:41:f0:f0:4e:0a:8a:cc:4b:54:83:
                    5f:9c:eb:15:b7:37:b5:b9:74:f0:04:cf:51:07:7f:
                    5f:9d:f8:05:36:f1:52:d9:dd:1d:8f:84:7e:58:ec:
                    df:14:cb:fc:c4:b1:a5:c3:9d:f2:d3:b8:4d:ce:56:
                    eb:b6:95:97:48:7b:68:8b:c4:ef:4d:e4:5a:76:bf:
                    ee:af:f0:fe:d6:d9:64:11:b6:ec:bb:61:f2:9d:ad:
                    c3:42:38:54:96:de:82:93:fa:fb:76:40:ce:e3:39:
                    41:95:31:3d:cd:a1:b3:76:7e:bb:64:b7:59:42:8a:
                    15:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:03:B4:2A:A9:F4:03:DE:65:B6:07:01:21:D1:4E:7E:24:0F:A9:12
            X509v3 Authority Key Identifier:
                keyid:A3:D5:CF:43:DE:5B:3D:8B:9C:34:3E:D4:49:C1:69:0E:BE:34:17:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9XPQ95bPYucND7UScFpDr40Fw4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:2f:b3:af:cf:b7:09:26:e9:36:73:67:d9:c5:68:06:3d:e0:
         d2:e8:08:dc:d4:6e:66:29:8f:ae:f5:09:aa:d3:1b:ef:d3:b0:
         75:ba:da:d3:6b:1a:ce:a6:e2:c4:2b:4f:57:81:83:88:09:c8:
         25:65:2b:93:33:76:b4:fe:50:7a:9e:43:53:4b:98:a2:ee:ba:
         4d:cf:7f:65:16:50:b6:3d:6e:c0:46:29:11:ba:da:32:43:95:
         38:d4:e4:fd:36:c0:98:99:9c:95:0b:90:6d:53:7a:a1:75:d7:
         2a:35:82:ec:21:ac:04:16:e1:aa:14:c5:df:7f:76:e9:70:0a:
         16:66:e2:45:79:63:24:8c:7a:37:21:07:3c:b9:0f:1d:98:78:
         78:7a:78:f6:f7:25:ca:a7:47:39:de:16:4c:1c:34:12:be:43:
         96:74:a3:e0:12:96:36:92:48:9e:06:e5:46:f3:98:aa:9f:2b:
         b7:5e:75:72:58:e9:04:44:80:ac:00:36:7b:f3:74:cf:2f:a5:
         48:e7:6f:8d:17:4f:51:74:58:1d:20:ff:4b:13:3d:bf:a0:10:
         28:08:4d:ad:b1:69:13:82:60:55:2c:97:ce:94:22:16:e5:6b:
         14:ac:3f:cd:00:23:a3:bd:9d:24:87:90:03:70:5c:e6:fb:97:
         e3:ff:fb:95
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBrIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NENDRDExMTAvBgNVBAUTKEEzRDVDRjQzREU1QjNEOEI5QzM0M0VENDQ5QzE2OTBF
QkUzNDE3MEUwHhcNMjYwNDA0MjIyOTU0WhcNMjYwNDExMjIyOTU0WjAYMRYwFAYD
VQQDEw02OWQxOTBlMy05NmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyZliop65nZlaL8HzCSK8uT2wLLnQZD7Ko/hb06sv/H9R19Dh2lF49euxHAnh
alrPObDmQEQPrXmHD8Rg8lwAeu7QNwzt6AmEpsINY1s0mCxfR4Cwg41ZaTMJ21G5
9jAa6w0jXa7K+ftMfq6JYIda0ny4+hjYDbLLLSZKLJiDUVxrJs7wmRZdUPYqTEHw
8E4KisxLVINfnOsVtze1uXTwBM9RB39fnfgFNvFS2d0dj4R+WOzfFMv8xLGlw53y
07hNzlbrtpWXSHtoi8TvTeRadr/ur/D+1tlkEbbsu2Hyna3DQjhUlt6Ck/r7dkDO
4zlBlTE9zaGzdn67ZLdZQooVVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPcDtCqp
9APeZbYHASHRTn4kD6kSMB8GA1UdIwQYMBaAFKPVz0PeWz2LnDQ+1EnBaQ6+NBcO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0NEMS9BRDdGNDVBNENE
QzQxMUVCQjVGNDgzNTVDNEY5QUUwMi9vOVhQUTk1YlBZdWNORDdVU2NGcERyNDBG
dzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL285WFBROTViUFl1Y05EN1VTY0ZwRHI0MEZ3NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
Q0NEMS9BRDdGNDVBNENEQzQxMUVCQjVGNDgzNTVDNEY5QUUwMi9vOVhQUTk1YlBZ
dWNORDdVU2NGcERyNDBGdzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANS+zr8+3CSbpNnNn2cVoBj3g0ugI3NRuZimPrvUJqtMb79Owdbra02sazqbi
xCtPV4GDiAnIJWUrkzN2tP5Qep5DU0uYou66Tc9/ZRZQtj1uwEYpEbraMkOVONTk
/TbAmJmclQuQbVN6oXXXKjWC7CGsBBbhqhTF33926XAKFmbiRXljJIx6NyEHPLkP
HZh4eHp49vclyqdHOd4WTBw0Er5DlnSj4BKWNpJIngblRvOYqp8rt151cljpBESA
rAA2e/N0zy+lSOdvjRdPUXRYHSD/SxM9v6AQKAhNrbFpE4JgVSyXzpQiFuVrFKw/
zQAjo72dJIeQA3Bc5vuX4//7lQ==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:27:54 2026 by rpki-client