Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft
File:                     CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft (raw, json)
Hash identifier:          bMlVWqtXCvglrkbdjUD7dFmjMWhrvAoDsgPS31nrTVs=
Subject key identifier:   93:22:54:06:7F:D5:92:75:CF:CA:E1:1E:F5:18:5C:21:5D:5E:13:96
Authority key identifier: 08:2C:67:C9:AE:C7:DD:1A:A9:D8:55:D8:A0:FC:C0:79:66:EF:C8:C7
Certificate issuer:       /CN=A9151050/serialNumber=082C67C9AEC7DD1AA9D855D8A0FCC07966EFC8C7
Certificate serial:       08FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CCxnya7H3Rqp2FXYoPzAeWbvyMc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft
Manifest number:          08F5
Signing time:             Sat 04 Apr 2026 20:07:23 +0000
Manifest this update:     Sat 04 Apr 2026 20:07:23 +0000
Manifest next update:     Sat 11 Apr 2026 20:07:23 +0000
Files and hashes:         1: CCxnya7H3Rqp2FXYoPzAeWbvyMc.crl (hash: BAlcSC8XLjCMsKLagJ5uxe82STVO+R47MOW251NyJek=)
                          2: 4D0E00D6470A11EE84127B66C4F9AE02.roa (hash: Z2QNPzHw5Ee7FsMiXK3KEIBE/uAyk1VrZxpoDjQMDc4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.crl
                          rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CCxnya7H3Rqp2FXYoPzAeWbvyMc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 20:07:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2300 (0x8fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151050, serialNumber=082C67C9AEC7DD1AA9D855D8A0FCC07966EFC8C7
        Validity
            Not Before: Apr  4 20:07:23 2026 GMT
            Not After : Apr 11 20:07:23 2026 GMT
        Subject: CN=69d16f7b-8d3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:cd:ce:5d:0d:3d:1e:d5:82:39:9f:f5:ac:55:
                    91:3e:9f:98:7f:84:d0:6a:2e:be:bd:88:8d:e6:bb:
                    96:66:84:06:1f:8a:48:b3:c3:c2:eb:4a:7d:61:77:
                    17:ee:89:ec:95:5e:21:3c:2f:55:f1:cd:54:c9:73:
                    df:c5:55:f0:30:8b:4b:cb:e1:cc:e4:b4:b1:1e:8c:
                    fe:7e:90:4d:7c:d7:07:8d:b7:3f:90:49:e5:51:13:
                    aa:2e:57:d9:c9:33:f8:2e:33:bf:8d:72:91:9f:1c:
                    05:a9:56:4c:58:b0:98:c5:ab:d3:3f:67:2c:01:1f:
                    15:55:b0:ae:e4:90:26:cc:ab:43:45:1f:7b:96:b2:
                    c7:d9:74:4d:fc:2d:fd:33:47:b0:4b:7c:1c:e7:96:
                    45:b2:15:f6:98:e0:c2:80:37:ff:6a:7d:42:cb:7c:
                    30:a5:05:30:d6:ce:37:b0:06:40:65:a9:ac:7a:7e:
                    14:2e:ad:ec:3f:98:cc:aa:34:de:75:aa:ab:bc:e7:
                    6b:c7:86:6b:8f:2a:e1:0f:5b:8a:fe:33:37:ea:2c:
                    10:9e:80:19:ad:26:0d:19:d9:6b:aa:91:bd:52:cb:
                    c9:1e:eb:68:a9:ad:14:0e:e3:09:c5:59:30:6a:27:
                    83:55:dc:6b:0a:b7:37:ea:b4:c3:f6:07:62:98:19:
                    5a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:22:54:06:7F:D5:92:75:CF:CA:E1:1E:F5:18:5C:21:5D:5E:13:96
            X509v3 Authority Key Identifier:
                keyid:08:2C:67:C9:AE:C7:DD:1A:A9:D8:55:D8:A0:FC:C0:79:66:EF:C8:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CCxnya7H3Rqp2FXYoPzAeWbvyMc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:fb:76:e2:a2:e3:c0:85:0d:f3:9a:c6:eb:dc:b6:e8:d5:0c:
         2e:25:54:c2:8a:8b:de:1d:8e:2b:48:22:e4:e8:65:a5:68:11:
         39:34:22:21:3f:76:13:1a:7d:4b:65:91:91:80:c4:18:7b:c7:
         e0:7d:fb:65:32:21:e2:1f:d8:d8:56:cb:f3:64:32:3c:bd:77:
         c5:de:c7:e8:af:bb:27:cf:45:7e:c3:68:2c:f8:e7:8b:f1:d1:
         fd:24:9e:d9:c1:f9:cc:f6:48:f3:a4:8c:7b:ee:38:19:a9:40:
         78:9c:bf:ce:2b:42:aa:41:7d:f0:a2:99:58:fb:a9:61:1d:21:
         51:c1:9b:97:0a:2c:ba:a9:ae:02:d6:4d:c6:5d:e7:49:a0:e3:
         72:e2:ca:54:1e:6c:7d:77:6b:c2:00:5b:be:2e:33:f2:e8:4f:
         70:fc:ab:ec:10:ea:b2:ef:71:d9:2a:55:23:86:f7:e0:69:a6:
         6e:8b:6c:fe:e5:fe:3d:1d:80:0f:72:80:3b:c5:6d:95:52:5e:
         44:64:04:bc:1c:6a:e8:20:0d:bd:a0:f6:d3:85:38:82:0b:df:
         13:63:25:b4:e0:c0:f2:a4:c8:5d:b3:cd:31:2b:ab:2d:1a:4c:
         27:3b:26:37:52:d4:fd:dd:0e:cc:24:90:cd:1d:61:a0:f7:94:
         87:86:98:c1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTEwNTAxMTAvBgNVBAUTKDA4MkM2N0M5QUVDN0REMUFBOUQ4NTVEOEEwRkNDMDc5
NjZFRkM4QzcwHhcNMjYwNDA0MjAwNzIzWhcNMjYwNDExMjAwNzIzWjAYMRYwFAYD
VQQDEw02OWQxNmY3Yi04ZDNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7s3OXQ09HtWCOZ/1rFWRPp+Yf4TQai6+vYiN5ruWZoQGH4pIs8PC60p9YXcX
7onslV4hPC9V8c1UyXPfxVXwMItLy+HM5LSxHoz+fpBNfNcHjbc/kEnlUROqLlfZ
yTP4LjO/jXKRnxwFqVZMWLCYxavTP2csAR8VVbCu5JAmzKtDRR97lrLH2XRN/C39
M0ewS3wc55ZFshX2mODCgDf/an1Cy3wwpQUw1s43sAZAZamsen4ULq3sP5jMqjTe
daqrvOdrx4ZrjyrhD1uK/jM36iwQnoAZrSYNGdlrqpG9UsvJHutoqa0UDuMJxVkw
aieDVdxrCrc36rTD9gdimBla+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJMiVAZ/
1ZJ1z8rhHvUYXCFdXhOWMB8GA1UdIwQYMBaAFAgsZ8mux90aqdhV2KD8wHlm78jH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTA1MC80NkE5QzQ0MEM5
NDExMUVBOEJFRkVFNjdDNEY5QUUwMi9DQ3hueWE3SDNScXAyRlhZb1B6QWVXYnZ5
TWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NDeG55YTdIM1JxcDJGWFlvUHpBZVdidnlNYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MTA1MC80NkE5QzQ0MEM5NDExMUVBOEJFRkVFNjdDNEY5QUUwMi9DQ3hueWE3SDNS
cXAyRlhZb1B6QWVXYnZ5TWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAX/t24qLjwIUN85rG69y26NUMLiVUwoqL3h2OK0gi5OhlpWgROTQiIT92Exp9
S2WRkYDEGHvH4H37ZTIh4h/Y2FbL82QyPL13xd7H6K+7J89FfsNoLPjni/HR/SSe
2cH5zPZI86SMe+44GalAeJy/zitCqkF98KKZWPupYR0hUcGblwosuqmuAtZNxl3n
SaDjcuLKVB5sfXdrwgBbvi4z8uhPcPyr7BDqsu9x2SpVI4b34Gmmbots/uX+PR2A
D3KAO8VtlVJeRGQEvBxq6CANvaD204U4ggvfE2MltODA8qTIXbPNMSurLRpMJzsm
N1LU/d0OzCSQzR1hoPeUh4aYwQ==
-----END CERTIFICATE-----
Generated at Mon Apr 6 09:55:28 2026 by rpki-client