Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft
File:                     a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft (raw, json)
Hash identifier:          w0rvXhVApCVQJdQzhdXdXsYF3WUiJ0LVsoUksSM7WbY=
Subject key identifier:   72:03:A3:09:C5:8C:05:52:9B:BC:56:22:5D:71:48:87:C2:52:F1:1A
Authority key identifier: 6B:D1:45:EC:E4:2A:E4:FD:82:AD:67:CF:D1:A4:05:9A:9E:AB:3A:6D
Certificate issuer:       /CN=A9164655/serialNumber=6BD145ECE42AE4FD82AD67CFD1A4059A9EAB3A6D
Certificate serial:       05E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9FF7OQq5P2CrWfP0aQFmp6rOm0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft
Manifest number:          05E0
Signing time:             Sat 04 Apr 2026 22:44:36 +0000
Manifest this update:     Sat 04 Apr 2026 22:44:36 +0000
Manifest next update:     Sat 11 Apr 2026 22:44:36 +0000
Files and hashes:         1: a9FF7OQq5P2CrWfP0aQFmp6rOm0.crl (hash: LQY030VOcRogDZUHYYOrFv2bJlVNMxr9RWvEZ/9Hx7E=)
                          2: B2CB84D4F3E211EB9512E219C4F9AE02.roa (hash: y1fQwZPgOu336Lbyq8hEAWUDlZTJlYYK8G8/vltz1rM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.crl
                          rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9FF7OQq5P2CrWfP0aQFmp6rOm0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 22:44:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1511 (0x5e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164655, serialNumber=6BD145ECE42AE4FD82AD67CFD1A4059A9EAB3A6D
        Validity
            Not Before: Apr  4 22:44:36 2026 GMT
            Not After : Apr 11 22:44:36 2026 GMT
        Subject: CN=69d19454-7f1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ec:7f:79:00:a8:64:77:84:28:68:4b:2c:a7:
                    aa:c7:8e:a0:6f:d7:ca:4c:44:cb:a8:fe:13:56:b6:
                    27:5d:6c:1d:7a:2f:b0:4c:04:8b:7d:bd:e4:33:48:
                    7d:36:07:a9:2d:4b:ec:60:21:0a:46:3d:27:90:b3:
                    59:71:ca:b4:ae:2a:1a:ef:cc:a4:ea:c8:89:06:34:
                    d4:fe:33:4d:1e:d8:30:af:77:55:cc:15:34:fa:d8:
                    3a:1d:ca:95:13:0c:c0:c9:f6:c0:d0:65:d4:fc:cb:
                    62:30:6b:93:b5:ba:19:66:b0:ae:47:dc:f1:74:e6:
                    d3:44:56:1d:3c:01:92:75:d9:dc:38:c8:3e:a5:c0:
                    43:fa:a5:7a:10:65:bf:6f:9a:28:42:ed:20:e2:6c:
                    7e:23:52:cc:51:85:be:a7:fc:1d:fd:02:02:ea:d2:
                    0b:90:b2:ca:f2:27:ed:14:b9:20:25:86:6d:b0:35:
                    f0:5a:d8:6f:12:5f:07:5d:7d:c0:5f:2c:c3:d4:ec:
                    59:5d:28:f7:15:54:ca:70:27:40:2a:f5:e7:d0:c1:
                    62:60:4d:be:e0:70:bc:d6:a9:25:c4:61:87:12:aa:
                    05:3e:63:2b:93:ec:c0:1a:ce:49:2a:50:ce:16:33:
                    fa:ce:97:96:7b:53:56:79:f9:fc:23:88:b5:e2:25:
                    f2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:03:A3:09:C5:8C:05:52:9B:BC:56:22:5D:71:48:87:C2:52:F1:1A
            X509v3 Authority Key Identifier:
                keyid:6B:D1:45:EC:E4:2A:E4:FD:82:AD:67:CF:D1:A4:05:9A:9E:AB:3A:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9FF7OQq5P2CrWfP0aQFmp6rOm0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:90:81:70:df:b9:b7:f0:67:b4:95:24:39:af:7e:ac:18:dd:
         9f:8e:2c:21:49:b6:01:3b:00:36:87:02:a8:55:ee:96:d3:25:
         7e:f6:90:bd:07:6f:ed:6c:4f:54:71:00:bb:6c:bb:10:cf:3c:
         06:95:d7:82:66:e7:53:db:a2:ef:96:73:b1:fb:ea:85:7f:b1:
         32:68:ce:2f:ec:57:1e:73:a4:ab:a6:64:a0:a5:52:99:a5:6c:
         59:f4:29:ee:f6:ea:0a:0a:b7:1f:9b:5d:c0:7d:b7:f0:46:4c:
         32:95:e9:e9:cb:67:58:8f:f5:9f:7a:ab:00:5b:50:2b:42:e5:
         2f:6d:c0:ab:55:1b:0b:9b:cb:5a:9d:49:cb:ff:c1:3c:d4:ad:
         3d:70:34:f0:89:12:35:ce:16:f0:c4:ef:d0:c1:5a:5e:7f:43:
         27:23:b8:65:91:2a:8e:82:6c:f2:51:aa:02:7e:3c:b6:3f:57:
         85:02:e2:af:ca:93:6d:e6:28:2b:74:a2:2f:ab:a7:83:02:da:
         23:3e:22:42:a0:ca:48:65:e6:1a:53:84:a0:13:28:1e:db:b6:
         05:70:17:bb:a2:40:0d:09:ba:f1:ed:09:be:fa:0f:ea:e1:ba:
         6f:5a:70:22:16:e2:c2:34:92:03:81:5e:23:d2:aa:6c:16:21:
         9b:77:f9:b0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjQ2NTUxMTAvBgNVBAUTKDZCRDE0NUVDRTQyQUU0RkQ4MkFENjdDRkQxQTQwNTlB
OUVBQjNBNkQwHhcNMjYwNDA0MjI0NDM2WhcNMjYwNDExMjI0NDM2WjAYMRYwFAYD
VQQDEw02OWQxOTQ1NC03ZjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArOx/eQCoZHeEKGhLLKeqx46gb9fKTETLqP4TVrYnXWwdei+wTASLfb3kM0h9
NgepLUvsYCEKRj0nkLNZccq0rioa78yk6siJBjTU/jNNHtgwr3dVzBU0+tg6HcqV
EwzAyfbA0GXU/MtiMGuTtboZZrCuR9zxdObTRFYdPAGSddncOMg+pcBD+qV6EGW/
b5ooQu0g4mx+I1LMUYW+p/wd/QIC6tILkLLK8iftFLkgJYZtsDXwWthvEl8HXX3A
XyzD1OxZXSj3FVTKcCdAKvXn0MFiYE2+4HC81qklxGGHEqoFPmMrk+zAGs5JKlDO
FjP6zpeWe1NWefn8I4i14iXyywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHIDownF
jAVSm7xWIl1xSIfCUvEaMB8GA1UdIwQYMBaAFGvRRezkKuT9gq1nz9GkBZqeqzpt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDY1NS9EOEJCODQ5QUYz
REUxMUVCOUU1RUMwNkVDNEY5QUUwMi9hOUZGN09RcTVQMkNyV2ZQMGFRRm1wNnJP
bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2E5RkY3T1FxNVAyQ3JXZlAwYVFGbXA2ck9tMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NDY1NS9EOEJCODQ5QUYzREUxMUVCOUU1RUMwNkVDNEY5QUUwMi9hOUZGN09RcTVQ
MkNyV2ZQMGFRRm1wNnJPbTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYZCBcN+5t/BntJUkOa9+rBjdn44sIUm2ATsANocCqFXultMlfvaQvQdv7WxP
VHEAu2y7EM88BpXXgmbnU9ui75ZzsfvqhX+xMmjOL+xXHnOkq6ZkoKVSmaVsWfQp
7vbqCgq3H5tdwH238EZMMpXp6ctnWI/1n3qrAFtQK0LlL23Aq1UbC5vLWp1Jy//B
PNStPXA08IkSNc4W8MTv0MFaXn9DJyO4ZZEqjoJs8lGqAn48tj9XhQLir8qTbeYo
K3SiL6ungwLaIz4iQqDKSGXmGlOEoBMoHtu2BXAXu6JADQm68e0JvvoP6uG6b1pw
IhbiwjSSA4FeI9KqbBYhm3f5sA==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:29 2026 by rpki-client